last executing test programs:

2m27.138700587s ago: executing program 2 (id=1633):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0x4, 0x170bd2b, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'erspan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r9 = socket(0x26, 0x80000, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0x9, &(0x7f0000000080)=0x181, 0x4)
r11 = socket$netlink(0x10, 0x3, 0x4)
write(r11, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x40)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

2m26.705752744s ago: executing program 2 (id=1634):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x16a002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
chdir(&(0x7f0000000000)='./cgroup\x00')
read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
inotify_init()
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010042"], 0x3c}}, 0x40000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000340)={@mcast2, 0x32})
r7 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r11, 0xaea2, 0x40000007a11e)

2m24.255378682s ago: executing program 2 (id=1645):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1}])
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x34)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302070300"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800008700000000000000000000000018feff00", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x0, 0x7, 0x0, 0x10, 0x1, 0x1, '\x00', 0x0, r1, 0x0, 0x5, 0x1}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)
fcntl$lock(r4, 0x7, &(0x7f0000000240)={0x3, 0x0, 0x200000002, 0xfffffffffffffff8})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000000040))

2m22.209733921s ago: executing program 2 (id=1650):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')
keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}})
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2f4, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x2, 0xe, 0x0, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "2c6b91245b350807b26f92b339c6b22f23065f066b37a51d5f0ca09bed852428c5998bc261080c4c1b775a31e5be9a46734d60f854101c3333d071182000208aff328af237ce66ab019005b79efd1d6697f7edc8c0c438dbfbde24901cddd0709b6761c17f507a17fdbc957995941aab28c0b6819ae86b425aabd3daa700ce841808abf258e2b403e874277c1fef0019ffa1f3effc58108ae5c51e0e7a24ac4d68e80bc00251b8f6cb4ad0946ed60335217a301e82db1a0d83197064fce8c7e990969902a3be285b8732b377490ccd81a5b5b5da5d24ae4c079973d6731914a31253a33f1c08c2de0f17c8664a2b0b120197e9cd8a91146730d647a61191b35b"}]}}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0xe, 0xb, 0x1, 0xb2, 0xfffffffc, 0x9}}, {0x16, 0x2, [0x7c2, 0xff80, 0x0, 0xffff, 0x200, 0x7, 0x7, 0x3, 0xfffa]}}, {{0x1c, 0x1, {0x5, 0x16, 0xb5, 0x1, 0x1, 0x7fff, 0x800, 0x3}}, {0xa, 0x2, [0x1c7, 0xfffd, 0xb8b]}}, {{0x1c, 0x1, {0x3, 0x1, 0x5d55, 0x3, 0x0, 0x9793, 0x9, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0x3, 0x100, 0x9, 0x1, 0xff]}}, {{0x1c, 0x1, {0x2, 0x81, 0x800, 0x5, 0x2, 0x9, 0x6, 0x9}}, {0x16, 0x2, [0x3, 0x0, 0x5, 0xe, 0x400, 0x9, 0x3, 0x4, 0xfffa]}}, {{0x1c, 0x1, {0x9, 0x8, 0x5, 0x3, 0x2, 0xffffa998, 0xc1b1, 0x1}}, {0x6, 0x2, [0x7f]}}, {{0x1c, 0x1, {0x7, 0xda, 0xd61c, 0x3, 0x1, 0x8001, 0xe1d, 0x5}}, {0xe, 0x2, [0x7f, 0xa20, 0x8006, 0x3, 0x100]}}, {{0x1c, 0x1, {0x0, 0xd4, 0x81, 0x5, 0x1, 0x7, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0x9, 0x0, 0xa, 0x4, 0x2]}}]}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0x9, 0x41, 0x40}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9f0}]}, 0x2f4}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

2m19.420703329s ago: executing program 2 (id=1658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r1 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
r2 = fcntl$dupfd(r1, 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x14, 0x0, 0x0, &(0x7f0000000280)=@chain)
write(r2, &(0x7f00000002c0)="0eda551f54cb67363842c4906f81dd2aa677b29388e9f0a4ccf933947fe4b770be1a7197f9efcc99393545c41d04", 0x2e)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x101, 0x0, 0x8}}}}, 0x30}}, 0x4009004)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0, 0x27}], 0x4b, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100))
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000080)=0x200020)

2m19.092047176s ago: executing program 2 (id=1661):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48)
r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100))
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
fstat(r5, &(0x7f0000004f80))
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000180)=@req={0x0, &(0x7f00000001c0)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000100)="9261db2f896dac1a8cf70e26d58d57696fb3415251dba2fae338cab927da6f7d"}})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2a, &(0x7f00000023c0)=ANY=[@ANYBLOB="18000000fdffffff00000000c30000001870cf3b9d110900", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185300000e0000000000000000000000186100000300000000000000000000009d1506000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b708000072ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001837000005000000000000000000000085000000010000009500000000000000bf91000000000000b70200000100000085000000809f8c70b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x17, &(0x7f0000000300)=""/23, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0xa, 0x8, 0xdb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x6, 0x6, 0x9}, {0x5, 0x5, 0x5, 0x7}, {0x2, 0x3, 0x7, 0xc}, {0x2, 0x4, 0x9, 0x9}], 0x10, 0x9}, 0x94)
close_range(r1, r7, 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01010000000000000000010000000900030073797a32000000000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000ada4b42d514133e912fbce199a06313d9a0eed82fe42f71a91b87fcd1e4458b17ba80313e515799fca77fb16af5505a90fbe206f75467d3d288744186cdc00808914e76bb82a6530867d054b9810ff1d8541ff07599b733abdebdda3f8081fe94d547244b3dd5ef44f1dbc7c719bf30a5598dedf2e5c31eb19a70a6f028dc5c9a0a7e5fc53b069222ecd6d77d331767e62d63b263b2e8c44d05ab4190bea705a92b733cee57eaef017c732d72932aec9d03fc5917bee089dbbfeaddae2b68f78c182639f77d62ec767f52"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m18.584206435s ago: executing program 32 (id=1661):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48)
r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100))
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
fstat(r5, &(0x7f0000004f80))
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000180)=@req={0x0, &(0x7f00000001c0)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000100)="9261db2f896dac1a8cf70e26d58d57696fb3415251dba2fae338cab927da6f7d"}})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2a, &(0x7f00000023c0)=ANY=[@ANYBLOB="18000000fdffffff00000000c30000001870cf3b9d110900", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185300000e0000000000000000000000186100000300000000000000000000009d1506000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b708000072ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001837000005000000000000000000000085000000010000009500000000000000bf91000000000000b70200000100000085000000809f8c70b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x17, &(0x7f0000000300)=""/23, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0xa, 0x8, 0xdb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x6, 0x6, 0x9}, {0x5, 0x5, 0x5, 0x7}, {0x2, 0x3, 0x7, 0xc}, {0x2, 0x4, 0x9, 0x9}], 0x10, 0x9}, 0x94)
close_range(r1, r7, 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

9.458603161s ago: executing program 0 (id=2178):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340))
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x80000000, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]})
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "83"}, @global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a0000000000bf050100000001009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfffc, 0xfffe, 0x6}, 0x8)
sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e28, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
recvmmsg(r11, &(0x7f0000000180), 0x1, 0x1000400100de, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYRES64=r2, @ANYRES16=r0, @ANYBLOB="08000600"], 0x24}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)

7.378009562s ago: executing program 4 (id=2184):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a4, 0x4000, 0x1, 0xc0})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x2, 0x3}, [@NDA_LLADDR={0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7f}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x40c0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x18, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)
unshare(0x2040400)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
r9 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$printer(r9, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x20000000)
write$char_usb(r10, &(0x7f0000000080)="a935b2cb07b538cd7577c6ea12c4f09859c127d6e8b2fa8cf9a1401ca6d6768af02435a5156b469de0c4a5c123573797e7eaf2afdd2f2d42539e90706a21b84913b66f90ee6c4853a174540c32e9a78126bd89a859657b35574ff5b7235884df81a0f1758630e9b197b4a79abdb1a4eb356856f096694f0c98fa", 0x7a)

7.229441056s ago: executing program 0 (id=2185):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x10800000000}, {0xfffffffffffffffc, 0x3, 0x6}], 0x2, 0xbff, 0x0, 0x0, 0x48, 0x40})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000840)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)={0x20, 0x1b}, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

5.611924205s ago: executing program 4 (id=2197):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000001a00)=ANY=[@ANYBLOB="91fc794c04b9aaaaaaaaaabb86dd60c6dd0000000000000001ff020100000000000000000000000001ab009078000600040000000000000007"], 0x0)

5.474948939s ago: executing program 5 (id=2198):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)

5.378625678s ago: executing program 4 (id=2199):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtaction={0x100, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0xec, 0x1, [@m_ipt={0x90, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x31, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x58, 0x3, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x5, 'mangle\x00', 0x8, 0xe3b}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x100}}, 0x40c1)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}], 0x2}, 0xb}], 0x2, 0x10, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x480040, 0x0)
sync_file_range(r8, 0x5, 0x1, 0x6)
socket(0xa, 0x3, 0x87)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)

5.281437577s ago: executing program 5 (id=2200):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_ep_read(r1, 0xc, 0xd5, &(0x7f00000001c0)=""/213)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40818000000000061106700000000000600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000500)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x7, 0x8000000000000001}, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0xc000)
read(r5, &(0x7f0000000640)=""/4096, 0x1000)

4.753068562s ago: executing program 1 (id=2202):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x7, 0x50323234, 0x1, @stepwise={0x9, 0x5, 0x9, 0x6, 0x8, 0x5}}) (fail_nth: 2)

4.199454584s ago: executing program 1 (id=2203):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0xfffffffffffffdcd, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

3.419716393s ago: executing program 1 (id=2204):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4008000)
fallocate(0xffffffffffffffff, 0x6, 0x1, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)

3.416449487s ago: executing program 3 (id=2205):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x151240)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1})
syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8000)
eventfd2(0x0, 0x80800)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000005c0)={0x2, 0x0, &(0x7f0000000580)=[0x0, <r3=>0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000600)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r3})
syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/104, 0x68}], 0x1, 0x0, 0x9c1c)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="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")
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6, 0x0, 0x0, 0xfffff24e}, 0x2e)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/52, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f00000001c0)=""/71, 0x2a3c8004})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

3.292376725s ago: executing program 5 (id=2206):
r0 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

3.095272438s ago: executing program 0 (id=2207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8)

3.093709602s ago: executing program 1 (id=2208):
socket$kcm(0x10, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071106e00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000006ac0)=[{&(0x7f0000000380)=""/165, 0x4f}], 0x1)
r1 = socket(0xa, 0x3, 0x87)
sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='R', 0x1}], 0x2}, 0x4040010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xfffffffffffffcfe, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50b10, 0x51b23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
write(r3, &(0x7f0000000280)="73a3901297b394457d9ec9b395c0de25e4ce3095c6869d8db0a86077d284a3c1058bb47a260cc5b4fc0a93c0f8faf42ced54b1c510a286c65bf70edfe4f647e08b0b24df001000", 0x47)
r4 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}}, 0x20044000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x1, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@broadcast, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000190002"], 0x50}}, 0x0)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

2.915051861s ago: executing program 0 (id=2209):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x82002, 0x105)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x5, 0x9, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19, 0x2}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x7, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x40, 0xfa, 0x80, 0x7, 0xe, 0x40}, {0x0, 0xeeee0000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x100000, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x2, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x6, 0x18, 0x7, 0x3, 0x7, 0x9}, {0xb000, 0x2a}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xa, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x5, 0x0, 0xe3]}}, 0x5c)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000002030500000000000000000000000001080070400000001c080003400000000c08000100010000280800054000000032e6e6cbfd4955360a86b22bf9eb8d77b0c4d5ef1ea600a769fabfd9f8797a2dd9347318"], 0x34}, 0x1, 0x0, 0x0, 0x40088d5}, 0x4)
syz_usb_connect$uac1(0xc465ee9aff117ea6, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xbb7d145fe5634b7d}}]}}, 0x0)

2.901388098s ago: executing program 1 (id=2210):
gettid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000240))
sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20008040, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x2000009}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.765099036s ago: executing program 1 (id=2211):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002b80))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x999, 0x1}, &(0x7f0000000140)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703cb69b204a084d9205c000008000000b704000000000000e2bb8b6610b3cadd017c58c553013dba9eadffa147497cded22cea75986fdcd02ce3f72fddee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '-', 0x3a, '\xc8rF\xcf$,%\x9f7M\xef,', 0x3a, './cgroup', 0x3a, [0x46, 0x46]}, 0x37)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8000, 0x7, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}}}}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r8, 0x400454cd, 0x20)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00')
pread64(r9, &(0x7f0000003b00)=""/195, 0xc3, 0x591f)
r10 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, r9})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

2.512428941s ago: executing program 3 (id=2212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = epoll_create1(0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = dup3(r6, r5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085}, 0x94)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000080)=[r7], 0x1)
r9 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x4d092, r9, 0x0)
ftruncate(r9, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x3, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0)

2.454361398s ago: executing program 4 (id=2213):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fallocate(r7, 0x6, 0x1, 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='osf\x00', &(0x7f0000000300)='-)/\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)

2.055075272s ago: executing program 0 (id=2214):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x2}, {}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000))

1.927303053s ago: executing program 3 (id=2215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000000ff47a2b78a000000000000000000001012000000200002000a00000000000000fe8000000000000000000000000000bb000000030d0001007564703a73"], 0x6c}}, 0x0)

1.917411511s ago: executing program 4 (id=2216):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_ep_read(r1, 0xc, 0xd5, &(0x7f00000001c0)=""/213)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40818000000000061106700000000000600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000500)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x7, 0x8000000000000001}, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0xc000)
read(r5, &(0x7f0000000640)=""/4096, 0x1000)

1.757602845s ago: executing program 0 (id=2217):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4a003, 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4, 0x0, 0x13, "00176a0000fcf7ffffa6e85d3608f30b9a7deb"})
r1 = syz_open_pts(r0, 0x8582)
r2 = dup3(r1, r0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005)
io_uring_setup(0x64e, &(0x7f0000000040)={0x0, 0x8835c, 0x4100, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0x3}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1b, 0xa8, @random="533b468502b7cd7b86810273306c101e6ce0fdc902666e"}]}, 0x78}}, 0x32000005)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000090a010400000000000000000a000004400000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010e4fe1aa3dd31610000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TCFLSH(r1, 0x540b, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x10d080, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x8f)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r7 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0)
syz_usb_control_io$uac2(r7, 0x0, 0x0)
syz_usb_control_io$uac2(r7, 0x0, 0x0)

1.603085232s ago: executing program 3 (id=2218):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4008000)
fallocate(0xffffffffffffffff, 0x6, 0x1, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)

1.574772369s ago: executing program 5 (id=2219):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b000000000100405700000006", 0x40}], 0x1}, 0x4000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000001200000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700060008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}}, 0x0)

1.382432779s ago: executing program 3 (id=2220):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_connect$uac3(0x1, 0xda, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xeb, 0x20, 0x80, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0xd1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x2a, 0x7}, [@feature_unit={0x15, 0x24, 0x7, 0x6, 0x6, [0xff, 0x1, 0x8, 0xb]}, @multiply_unit={0xb, 0x24, 0xd, 0x0, 0x11, 0x4, 0x8ad}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfff5, 0x2, 0x12, "f120a018d0ff7c7c32"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x4, 0x4, {0xa, 0x25, 0x25, 0x9, 0x4f, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xf, 0x5e, 0x8f}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0xd30}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0xb2, 0x58, "4fd8", "7d04"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0xfb, 0x35}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb4, 0x78, 0xf, {0xa, 0x25, 0x25, 0x7f, 0x10, 0x5}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0xc5, 0x7, 0x21, 0x10, 0x5}, 0x25, &(0x7f00000005c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x7, 0x0, 0x6, [0x0, 0xff00c0, 0x3f00, 0xc000, 0xc000]}]}, 0x3, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}, {0x33, &(0x7f0000000900)=ANY=[@ANYBLOB="330375faaab47255e0d4cb838d53fa1052417ac922d465acb4bdc3243e616bbc1ab9eddff4326bdc2c034aa84d94009afafed979954110eb1ff8e32b835d0e7e56f8a4e63e11783a8bd2394c424c2981d9587ac09201053fce74e9a3d91f8213a6cbf988ec7c245d3d2719f30406fb761f33b34d72b539f4b7ab656d0f6b254ed1a2d95d61c1378291141cc3852750e716600021053d4ddfc6ce8d6420c64589b19ed8ed1c2fc3813434b7660fa67ececc2865ff9a05ad4ec843000000000000000000003a0000000000000000000000000000647e96a4ce6e0a04881a2d0a396d1a768a9839b3464be19a383bdb3847236b2398c9b68a8fd811cfdeea2aad9299446e2b07268e26df6cfae32b851a3733c956aa3e97c06461ccdf590e8f51eefc15789189a32aa0d4223fb246c1351bbc65df9a"]}, {0xf3, &(0x7f00000006c0)=@string={0xf3, 0x3, "4fd2361ed9d7c9fff7c6c28e6486f115f37c469bb31f779206678182bc829b414552b11f050c4566b5a3e167d280886e560dd66137250d51408f8c46893f44c18526420a58aba12e60f8734d157fe1c1275656423508065193358d29baa5e270220826ad20b34053b72e7e6c56ffc10d1d3cf343a5924bb58a017214c430f01d33512cda26ad332c58b563b05587c526db1a4157e2eccb6b19d7b2579a0ca925cebb7544591e253597f52f4d4247af767e778ffd537ecb153e2c7e7f8663445018e00c2249bf015b755fc9e61072c99fdd71332dd993df5dc8c0da7c92bb046cd549d174d641d8752c93194db5f33c2e0c"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x8)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044800)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r5 = signalfd4(r2, &(0x7f0000000040)={[0x6]}, 0x8, 0x800)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000040)='GPL\x00', 0x9, 0xfff, &(0x7f0000001840)=""/4095, 0x40f00, 0x64}, 0x94)
ioctl$MON_IOCQ_URB_LEN(r5, 0x9201)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYBLOB="3af24d0f86afac05609a05f65de2cbf878984fdbebad7b139782271ad07b7c6b11615ec94ba89763475eec35e0f4556fc0f63f8d17820ce837b1bf50be5017b9c075dcd1e61851b3e0b063a00befd506732aa87beffcca43234df6cf6d4d675ef456ea47a760773ed0e1e1bde0a77d838897a86713db9bbfa04b5126e2d3b530514e72b8c60c73cc7bbffc24a9766fc3d81926cd096858a45715c622719fe1312314f9a23d60d71082a8fc206f8fd206388c7ebd8697f5a609d8000bf5845f386b09086b6a52", @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)={0x20, 0x1b}, 0x0, 0x0})
socketpair(0x1, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x2f, &(0x7f0000000400), 0xa5e)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0)

1.151225033s ago: executing program 5 (id=2221):
gettid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000240))
sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20008040, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x2000009}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

957.501813ms ago: executing program 5 (id=2222):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x151240)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1})
r3 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000026000/0x3000)=nil, 0x0, 0x0, r3}, 0x68)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000005c0)={0x2, 0x0, &(0x7f0000000580)=[0x0, <r4=>0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000600)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r4})
syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000040)=""/104, 0x68}], 0x1, 0x0, 0x9c1c)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="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")
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6, 0x0, 0x0, 0xfffff24e}, 0x2e)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/52, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f00000001c0)=""/71, 0x2a3c8004})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

182.242636ms ago: executing program 3 (id=2223):
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='syz_tun\x00', 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r3, 0x10000)
r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001740)={{0x2, 0x100, 0x8, 0x5, 0x7, 0x5}, 0x2cf, [0x5, 0xfd1, 0x0, 0xfffffffc, 0x3, 0x2, 0xd, 0x400000, 0x1ff, 0x6, 0xfff, 0x800, 0xa, 0x5, 0x2, 0x8, 0x7ff, 0x200, 0x8, 0x6, 0xbc10, 0x9, 0x3, 0x3, 0x1, 0x8d1, 0x4, 0x6, 0x0, 0xe9d4, 0x4, 0x0, 0x4, 0x63a, 0x2, 0xd, 0x8, 0x8a800, 0x80, 0x6, 0xa, 0x1b0, 0x0, 0x8, 0xfffff9b7, 0xff, 0x7, 0x2, 0xfa, 0x3, 0x5e2, 0xffffffff, 0x6, 0x2, 0xfffffffc, 0x6ee0, 0xf, 0x5, 0x16c9fc0a, 0x7, 0x27d38e92, 0x5, 0x2, 0x1, 0xf2, 0x4, 0x5, 0x7, 0x9, 0x6, 0xfc1, 0xe8, 0x0, 0x1, 0x2, 0x1, 0x1, 0x9, 0x1, 0xffffc56c, 0x6, 0x63, 0x6, 0x80, 0x3, 0x152, 0x52, 0x2, 0x3, 0xcf0, 0x1, 0x5f7d7f0b, 0x3, 0x4, 0x1, 0x1, 0x3b, 0x5, 0x5, 0x0, 0x5, 0x913, 0x4805d5d9, 0x3, 0x8000000, 0x58, 0x4, 0x1ff, 0x6, 0x5, 0x2, 0x2, 0x1, 0x6, 0x5, 0x400, 0x10001, 0x800, 0x200, 0x476b, 0xfffffc00, 0x7fff, 0xee, 0x8, 0x9, 0x8, 0x1, 0x9, 0x2, 0xffff0001, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x7, 0x5, 0x3, 0xb05, 0x9, 0x7, 0x8, 0x2, 0x7fff, 0x2, 0x0, 0x2, 0x5, 0x9, 0xc5e, 0xa8, 0xb, 0x4, 0x2fd4, 0x1, 0x10001, 0x6, 0x0, 0x7fff, 0x1, 0x8001, 0x5, 0x3a, 0x5, 0x2b, 0x4, 0x1, 0x10000, 0xca7a, 0x80000000, 0xb, 0x3, 0x1, 0xcb, 0x2, 0xfb59, 0x8001, 0x7e9, 0x8, 0x0, 0x7ff, 0x0, 0xd5, 0x3, 0xffff, 0x0, 0xffffff00, 0x2, 0x7, 0x8, 0x4, 0x432, 0x7, 0x9, 0x5, 0x1, 0xd, 0x2, 0x80000001, 0x6, 0x400, 0x5, 0x1, 0x6, 0xf6d3, 0x7, 0x4f, 0x2, 0x1, 0x10000, 0x43, 0x3b, 0xb1, 0x0, 0xff, 0x385, 0x800, 0x400, 0x0, 0x2, 0xe, 0x896, 0x7d, 0xe, 0x1, 0x80000001, 0x0, 0x1, 0x6, 0xffffffff, 0xc, 0x10000, 0xfffffe28, 0xfffffff5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x546b, 0x7, 0x7, 0x4236, 0xcd, 0x7fffffff, 0xffffff80, 0x5, 0x18, 0x0, 0x9, 0x9, 0x8, 0xfba4, 0x6, 0xd, 0x80000000, 0x9, 0x92, 0x4, 0xf, 0x2, 0xda, 0x1, 0x3, 0x7fff, 0x0, 0x131, 0x0, 0xfffffffa, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, 0x8, 0xff, 0x7, 0x7, 0x8, 0x1a5, 0x7, 0x80000000, 0xfffffff7, 0x4, 0x8f, 0x10000, 0x100, 0x80, 0x1, 0xb42, 0x795, 0x9, 0x2, 0x5, 0x69b8, 0x3, 0x401, 0x101, 0x7, 0x8, 0x6, 0x5, 0x5f, 0x9, 0x2, 0xd62, 0x1cb800, 0xaf8, 0xc65, 0x100, 0x5, 0x200, 0xffffffff, 0x3, 0x1, 0x6, 0x401, 0x3, 0x10001, 0x8, 0x6, 0x7, 0x2, 0x3, 0x389429be, 0x401, 0x1, 0x6, 0x4, 0x7, 0x4, 0xfff, 0xa, 0xcaaf, 0x5, 0x3, 0x8, 0x0, 0x3, 0x1, 0x8, 0x5, 0x5, 0x80000000, 0x0, 0x5, 0xa7f, 0xe, 0x7, 0x4, 0x80, 0x7, 0x3, 0x3, 0x7, 0x1ad, 0x2, 0x0, 0x5, 0x10, 0x6, 0x10, 0x4, 0xf6, 0x384, 0x9, 0x5, 0x4, 0x6, 0x10001, 0x0, 0x1ff, 0x1, 0x9, 0x200, 0x3247, 0x6, 0xfffffff9, 0x5, 0x1, 0xda5, 0x1, 0x2, 0x6, 0xd, 0x4, 0x61de, 0x8, 0x21b, 0x80000000, 0x8, 0x18a7, 0x1ff, 0x7, 0x0, 0x3, 0x400, 0x1, 0x1, 0xaa, 0xa, 0xc, 0x3, 0x5, 0x3ff, 0x6, 0xf, 0x7f, 0x8, 0x4, 0x3, 0x40, 0xfffffffd, 0x8, 0x7c, 0x9, 0x0, 0x8, 0x400, 0xee, 0xffffffff, 0x1, 0x6, 0x6, 0x0, 0x7, 0x8, 0x8, 0x6, 0x80, 0x9, 0x0, 0x2, 0x6, 0xe08, 0xa, 0x96d1, 0x5, 0x6, 0x3, 0xb, 0x3, 0x6, 0x8, 0x5, 0x7f, 0x101, 0x4b, 0xff, 0x0, 0x50f, 0x5b, 0x0, 0x6, 0x1e4, 0x2b7, 0x1, 0x0, 0x13, 0x101, 0xd, 0x8, 0x8, 0x9a, 0x8, 0x401, 0x100, 0x2, 0x9, 0x371f, 0x5, 0x1, 0x7, 0xa93, 0x1, 0x7, 0x8, 0x4, 0x6, 0x7, 0x1, 0x2, 0x3, 0x4, 0x101, 0x10001, 0x10, 0x7f, 0x9, 0x6, 0xd, 0x9, 0xb36, 0xf0, 0x5, 0x5, 0x2, 0x10, 0x8b7, 0x2, 0x9, 0xa, 0x5, 0x9, 0x2, 0x8, 0x4b, 0x4df4cf30, 0x7fffffff, 0x0, 0x5, 0xfffeffff, 0x5, 0x9, 0x591bce37, 0x0, 0x1ff00, 0x3285, 0x6, 0x4000000, 0x80000001, 0xfa7, 0xb8, 0x5f89a940, 0x20, 0xe59f, 0x46, 0x5, 0x1f, 0x1, 0x40, 0x80000000, 0x7, 0x1, 0x8, 0x3, 0xffff2cb8, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x3, 0x0, 0x6, 0x70000, 0x71e1, 0xffff, 0xc9e, 0x7fff, 0xd, 0x5, 0x1, 0x4e5, 0x7c5fdc4c, 0x5, 0x48d, 0x7, 0x4, 0xfffffffb, 0x700, 0x1, 0x4, 0xfffffffc, 0x4, 0x3, 0x9, 0x9, 0x7, 0x5, 0x7ff, 0x0, 0x7f, 0x4, 0x200, 0x4, 0xb, 0x3, 0x1, 0x4ab, 0xfff, 0x1, 0x4, 0x92dd, 0x0, 0x0, 0xffff, 0x0, 0xed60, 0x586, 0x4, 0x3000000, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2e8, 0xab7a, 0x7f, 0x3, 0x8, 0xf, 0x5f, 0x6, 0x4000, 0x1, 0x9, 0x1, 0x9, 0x1, 0x80000000, 0xa, 0x0, 0x101, 0x9, 0x7, 0x400, 0x10, 0xfffffffd, 0x2, 0x8, 0x6, 0x8, 0x1, 0x6, 0x9, 0xffffc000, 0xb54, 0x0, 0x2, 0x4, 0x608, 0x3, 0x8, 0x6, 0x3a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x3f7d3e9f, 0x5bca, 0x401, 0x10, 0x8, 0x1, 0x6, 0x9, 0x7, 0x2, 0x4e, 0x1000, 0xd419, 0x5, 0xc0, 0x1, 0x9, 0x4, 0x7f, 0x7, 0x6, 0x3, 0x7, 0x0, 0x12820a69, 0xff, 0x3, 0x10, 0xffff, 0x8000800, 0x7, 0x3, 0x2, 0x9, 0x9, 0x1, 0x10000, 0x2, 0x1, 0x0, 0xfffffffd, 0x101, 0x0, 0x9, 0x7c, 0x1, 0x7, 0x80000001, 0x2, 0x5bcb810c, 0x5, 0x1d65, 0x3, 0x6, 0x2, 0x2, 0x800, 0x2, 0x8, 0x2384, 0x400, 0x1, 0x6, 0x2ae, 0x7, 0x2, 0x8, 0x4, 0x8, 0xe, 0x80, 0x10000, 0x5, 0x6, 0x5, 0x40, 0x8, 0x5, 0x2, 0x4, 0x2, 0x9, 0x4, 0x4, 0xffffff9d, 0x400, 0x2, 0xffffffff, 0x7, 0x401, 0x7, 0x40, 0x9, 0x9, 0xffffff80, 0xe, 0x9, 0x9, 0x401, 0x99e, 0x3, 0x3, 0x81, 0x101, 0x80000001, 0x0, 0x7, 0xfff, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1, 0x0, 0xff, 0x6, 0xd, 0x3, 0x0, 0x6, 0x2, 0x7, 0x0, 0x7, 0x3, 0x6, 0x8, 0x9, 0x8, 0x8000, 0xf, 0xfe2, 0x6, 0x26b1, 0x0, 0x7, 0x4, 0x200, 0xb, 0xc8, 0x4, 0x7fffffff, 0x5, 0x5668, 0x6, 0x8001, 0xfffff466, 0x6, 0x1, 0x0, 0xb, 0x400, 0x200, 0x10001, 0x3a8, 0x8, 0x2, 0x8, 0x3, 0x9, 0x5, 0x3, 0x7ff, 0x79, 0x2, 0x80, 0x7, 0x80, 0x6, 0x10, 0x478, 0x8, 0x3, 0x80000000, 0x6, 0x3, 0x0, 0x6, 0x7, 0x881d, 0xf8, 0xebe6, 0x7f, 0x7fff, 0x7ff, 0x4, 0x7, 0x800, 0x17, 0x0, 0x3ff, 0xffff, 0x9, 0xfff, 0x10, 0x6, 0x1, 0xffff, 0x5d15f75e, 0x9, 0xfff, 0x4, 0x2, 0xfffffffd, 0x484, 0x400, 0x3, 0x7, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0x2, 0x8, 0x5, 0x1, 0x3, 0x1, 0x7fffffff, 0x6, 0x9000000, 0x200, 0x2, 0x1, 0x46c8, 0x6, 0x8000, 0x1, 0xf1e, 0xb416, 0xb6b, 0x7, 0x1, 0x5, 0x3, 0x8, 0xffff, 0x7, 0x6, 0x1, 0x9ec, 0xc, 0x81, 0xc81, 0x1, 0x2a4, 0x3, 0x8, 0x8, 0x0, 0x1, 0x9, 0x8dd6, 0x80000001, 0x0, 0xb50, 0x3, 0x200, 0x7, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9, 0x2, 0x9, 0x0, 0x4, 0x8, 0x7, 0x8, 0x2, 0x5598, 0xffff, 0xe57, 0xfffff016, 0xfff, 0x6d028a56, 0xff, 0x7, 0x6, 0x4, 0x6, 0x383e, 0x8, 0x1, 0x5, 0x7ff, 0x9, 0x1, 0xc0cd, 0x8, 0x10001, 0x4, 0x3, 0x7, 0x238, 0xf8f4, 0xd, 0x22, 0x3, 0x6, 0x400, 0x3, 0x7a4, 0x5, 0x3, 0x3, 0x4, 0x4, 0x0, 0x7b, 0x9, 0x5, 0x9, 0x8, 0x1, 0x3, 0xfff, 0x31a4, 0xfff, 0x3, 0x18, 0x7f, 0x8, 0xdf, 0x3, 0x9, 0x5, 0x79f, 0x7, 0x4, 0x4, 0xf5, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0x5, 0x200, 0x2, 0x1fc00, 0x2, 0x10001, 0xfffff800, 0xfffffffc, 0xe, 0x6, 0x101, 0x4, 0x9, 0x5, 0x8, 0x8000, 0x5, 0xc22, 0x31, 0x6, 0x5, 0x1000, 0x80000001, 0x9, 0x279, 0x6, 0x0, 0xfffffffa, 0x3, 0x0, 0x2, 0xa, 0xbab, 0x1, 0x8c16]})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="d13bbeccc2722b9c0facc14161c7b2c89cee4c1a55a96d272ac395e09ee5a27b35aea2d7c6e985ae507fd55c9f7b"], 0x0, 0x0})
sendfile(r1, r3, 0x0, 0x7ffff004)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x140f, 0x810, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040084}, 0x8000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003940)=""/4081, 0xff1}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/50, 0x32}], 0x4}, 0x40000100)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$midi(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200020008fd07010040000102030109022200010108100c090400000101d20030080800000040006401c007250103b06f"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x32, &(0x7f0000000000)=@string={0x32, 0x3, "5384d6d54a5ecca903a416d9880a0b569642ac8347078b6e792254a13ab77c827c8f2911f12b259ef516acba819dce98"}}, {0xaf, &(0x7f0000000100)=@string={0xaf, 0x3, "5ae50808c8cd6c37c7f96a95a66105dd878022a81e139aea58e36195a88114edbceb2d466284ff54fd192fb4898cb47b0eb0c34a473e488dcc9e284074785fae283315ddc3e2a65d01deae38a3eab9315cfd1b83183b5d6e4cdd62027b8a1a98013e915e618bc5cca44109afbfd1cbc45110b7d65df5164e1953197d93b000b8c3f4fa3c6bac8ca9c16560133cf4c6d96fbdc4c82d1de0c8d52c6f1bfa16463bf403e26c219f996c762d775331"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x411}}]})

0s ago: executing program 4 (id=2224):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
r1 = socket$inet6(0xa, 0x5, 0x40)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
pipe2(&(0x7f0000000000), 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x8000000) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) (async)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0) (async)
add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000700)="eee8844b6f41d7630cd7cee0bbc3fdf3d5c9ab12de86e0c385b085982cc91d5d7e0b2f51e55c40bf6f9907981e91a6c3fb3400795e425fa8e53311e36b69f721074eabce4f22010b2978269e", 0x4c, r4) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) (async)
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0)

kernel console output (not intermixed with test programs):

-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89
[  536.997355][ T5718] usb 5-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3
[  537.005615][ T5718] usb 5-1: Manufacturer: syz
[  537.010632][ T5718] usb 5-1: SerialNumber: syz
[  537.021899][ T5718] usb 5-1: config 0 descriptor??
[  537.047007][ T5718] usb 5-1: 0:2 : does not exist
[  537.093451][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.126165][ T5722] usb 6-1: device descriptor read/64, error -71
[  537.231306][    C1] raw-gadget.5 gadget.4: ignoring, device is not running
[  537.239256][    C1] raw-gadget.5 gadget.4: ignoring, device is not running
[  537.247034][ T5722] usb usb6-port1: attempt power cycle
[  537.254139][    C1] raw-gadget.5 gadget.4: ignoring, device is not running
[  537.281202][ T5718] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  537.301030][ T5718] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  537.360172][ T5718] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  537.413326][T20689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.421984][ T5718] usb 5-1: USB disconnect, device number 102
[  537.448364][T20689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.481235][ T7259] udevd[7259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.553310][T20689] netlink: 'syz.1.1839': attribute type 13 has an invalid length.
[  537.586099][ T5722] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  537.612695][T20707] netlink: 'syz.1.1839': attribute type 1 has an invalid length.
[  537.623100][ T5722] usb 6-1: device descriptor read/8, error -71
[  537.688292][T20689] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.698765][T20689] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.760881][T20712] x_tables: duplicate underflow at hook 1
[  537.832302][T20689] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.848909][T20713] use of bytesused == 0 is deprecated and will be removed in the future,
[  537.868163][T20713] use the actual size instead.
[  537.874745][ T5722] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  537.883459][T20689] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  537.908998][ T5722] usb 6-1: device descriptor read/8, error -71
[  538.003261][T20689] bridge4: port 3(veth5) entered disabled state
[  538.009941][T20689] bridge4: port 1(veth3) entered disabled state
[  538.026145][ T5722] usb usb6-port1: unable to enumerate USB device
[  538.197070][T20707] 8021q: adding VLAN 0 to HW filter on device bond9
[  538.249483][T20709] bond9: (slave veth35): Enslaving as an active interface with a down link
[  538.286044][  T807] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  538.294152][   T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.305368][   T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.331418][   T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.348031][   T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.451713][  T807] usb 5-1: unable to get BOS descriptor or descriptor too short
[  538.461628][  T807] usb 5-1: config index 0 descriptor too short (expected 2182, got 134)
[  538.471404][  T807] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  538.479774][  T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.490283][  T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  538.502266][  T807] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[  538.516697][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.524967][  T807] usb 5-1: Product: syz
[  538.529598][  T807] usb 5-1: Manufacturer: syz
[  538.534267][  T807] usb 5-1: SerialNumber: syz
[  538.548533][  T807] usb 5-1: config 0 descriptor??
[  538.755255][T20784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  538.784005][  T807] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  538.806854][  T807] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  538.896442][  T807] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  538.911631][  T807] usb 5-1: USB disconnect, device number 103
[  538.953775][ T7259] udevd[7259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  539.156670][ T5722] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  539.274621][T20823] fuse: Unknown parameter 'gp�����vO\x��_id'
[  539.331527][T20827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.347659][T20827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.646232][   T57] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  539.676176][T20847] binder: BINDER_SET_CONTEXT_MGR already set
[  539.702763][T20847] binder: 20845:20847 ioctl 4018620d 200000000000 returned -16
[  539.909089][T20865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.931979][T20865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.076377][ T5718] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  540.175931][ T2162] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  540.346292][ T2162] usb 5-1: Using ep0 maxpacket: 8
[  540.363546][ T2162] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  540.384420][ T2162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.403359][ T2162] usb 5-1: Product: syz
[  540.414958][ T2162] usb 5-1: Manufacturer: syz
[  540.427702][ T2162] usb 5-1: SerialNumber: syz
[  540.453080][T20876] xt_bpf: check failed: parse error
[  540.546138][ T5718] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  540.639475][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1858'.
[  540.701001][T20884] bridge1: port 1(veth3) entered blocking state
[  540.708472][ T5718] usb 1-1: Using ep0 maxpacket: 32
[  540.714146][T20884] bridge1: port 1(veth3) entered disabled state
[  540.724776][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  540.741356][T20884] veth3: entered allmulticast mode
[  540.758317][ T5718] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  540.778113][T20884] veth3: entered promiscuous mode
[  540.783245][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.792161][ T5718] usb 1-1: Product: syz
[  540.799551][ T5718] usb 1-1: Manufacturer: syz
[  540.808351][ T5718] usb 1-1: SerialNumber: syz
[  540.820688][ T5718] usb 1-1: config 0 descriptor??
[  540.834589][ T5718] usb 1-1: No union descriptors
[  540.841761][ T5718] usb 1-1: unsupported MDLM descriptors
[  540.858630][T20901] bridge1: port 2(veth5) entered blocking state
[  540.869382][T20901] bridge1: port 2(veth5) entered disabled state
[  540.878798][T20901] veth5: entered allmulticast mode
[  540.889607][T20901] veth5: entered promiscuous mode
[  540.899567][ T3372] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  540.913517][ T3372] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  540.929497][T20900] bridge1: port 3(veth0_to_bond) entered blocking state
[  540.937574][  T807] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  540.949426][T20900] bridge1: port 3(veth0_to_bond) entered disabled state
[  540.957131][T20900] veth0_to_bond: entered allmulticast mode
[  540.966214][T20900] veth0_to_bond: entered promiscuous mode
[  541.069012][ T2162] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  541.078697][ T2162] usb 5-1: clock source 0 is not valid, cannot use
[  541.088144][ T2162] usb 5-1: 1:1: cannot get freq (v2/v3): err -32
[  541.098316][ T2162] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  541.119631][ T2162] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  541.128783][ T2162] usb 5-1: clock source 0 is not valid, cannot use
[  541.138072][ T2162] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[  541.144976][ T2162] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  541.271458][ T2162] usb 5-1: USB disconnect, device number 104
[  541.310026][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  541.495900][ T5359] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  541.655968][ T5359] usb 6-1: Using ep0 maxpacket: 16
[  541.663427][ T5359] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.675149][ T5359] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.685663][ T5359] usb 6-1: config 0 interface 0 has no altsetting 0
[  541.694519][ T5359] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  541.704221][ T5359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.720040][ T5359] usb 6-1: config 0 descriptor??
[  542.045910][  T807] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  542.147454][T20932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.164077][T20932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.180602][ T5359] hid (null): unknown global tag 0x4f
[  542.191248][ T5359] hid (null): bogus close delimiter
[  542.197619][  T807] usb 5-1: Using ep0 maxpacket: 8
[  542.208664][  T807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  542.227854][  T807] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  542.244195][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  542.256531][  T807] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.268853][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  542.281505][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  542.293571][  T807] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  542.308530][  T807] usb 5-1: config 168 interface 0 has no altsetting 0
[  542.317045][  T807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  542.324786][  T807] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  542.336392][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  542.348750][  T807] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.361029][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  542.372971][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  542.398577][  T807] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  542.414190][ T5359] usb 6-1: USB disconnect, device number 13
[  542.428880][  T807] usb 5-1: config 168 interface 0 has no altsetting 0
[  542.445367][  T807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  542.456989][  T807] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  542.468850][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  542.484211][  T807] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.499094][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  542.511872][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  542.523980][  T807] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  542.539032][  T807] usb 5-1: config 168 interface 0 has no altsetting 0
[  542.549530][  T807] usb 5-1: string descriptor 0 read error: -22
[  542.557144][  T807] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  542.566802][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.593390][  T807] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  542.808604][ T2162] usb 5-1: USB disconnect, device number 105
[  542.873486][T20995] openvswitch: netlink: Key type 142 is out of range max 32
[  542.969704][   T30] kauditd_printk_skb: 127 callbacks suppressed
[  542.969725][   T30] audit: type=1400 audit(1778733446.185:880): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="veth0_macvtap" pid=20989 comm="syz.3.1862"
[  543.059289][T21001] netlink: 'syz.1.1864': attribute type 4 has an invalid length.
[  543.127030][T21010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.137644][T21010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.189562][T21015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.200339][T21015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.276677][T21018] vivid-001: disconnect
[  543.283183][T21018] vivid-001: reconnect
[  543.286451][ T2162] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  543.339492][ T5718] usb 1-1: USB disconnect, device number 107
[  543.446465][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'.
[  543.448725][ T2162] usb 6-1: Using ep0 maxpacket: 32
[  543.479501][ T2162] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  543.494803][ T2162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.509049][ T2162] usb 6-1: Product: syz
[  543.513308][ T2162] usb 6-1: Manufacturer: syz
[  543.518754][ T2162] usb 6-1: SerialNumber: syz
[  543.531249][ T2162] usb 6-1: config 0 descriptor??
[  543.547058][ T2162] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  543.554655][T21029] bridge15: port 1(veth27) entered blocking state
[  543.562215][T21029] bridge15: port 1(veth27) entered disabled state
[  543.570056][T21029] veth27: entered allmulticast mode
[  543.577742][T21029] veth27: entered promiscuous mode
[  543.586207][T21043] veth0_to_bond: left allmulticast mode
[  543.591902][T21043] veth0_to_bond: left promiscuous mode
[  543.598102][T21043] bridge14: port 2(veth0_to_bond) entered disabled state
[  543.609839][T21043] bridge15: port 2(veth0_to_bond) entered blocking state
[  543.618464][T21043] bridge15: port 2(veth0_to_bond) entered disabled state
[  543.626073][T21043] veth0_to_bond: entered allmulticast mode
[  543.634343][T21043] veth0_to_bond: entered promiscuous mode
[  543.674654][T21029] bridge15: port 3(veth29) entered blocking state
[  543.706051][T21029] bridge15: port 3(veth29) entered disabled state
[  543.726203][T21029] veth29: entered allmulticast mode
[  543.748471][T21029] veth29: entered promiscuous mode
[  543.769145][T21067] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  543.985868][ T5722] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  544.091236][T21090] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  544.172968][ T5722] usb 1-1: Using ep0 maxpacket: 8
[  544.187524][   T29] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  544.216513][ T5722] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  544.226040][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.234140][ T5722] usb 1-1: Product: syz
[  544.240050][ T5722] usb 1-1: Manufacturer: syz
[  544.244957][ T5722] usb 1-1: SerialNumber: syz
[  544.254085][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'.
[  544.270144][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'.
[  544.357140][   T29] usb 5-1: Using ep0 maxpacket: 8
[  544.365331][T21102] FAULT_INJECTION: forcing a failure.
[  544.365331][T21102] name failslab, interval 1, probability 0, space 0, times 0
[  544.380681][T21102] CPU: 1 UID: 0 PID: 21102 Comm: syz.1.1881 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  544.380707][T21102] Tainted: [L]=SOFTLOCKUP
[  544.380712][T21102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  544.380722][T21102] Call Trace:
[  544.380729][T21102]  <TASK>
[  544.380739][T21102]  dump_stack_lvl+0xe8/0x150
[  544.380762][T21102]  should_fail_ex+0x412/0x560
[  544.380787][T21102]  should_failslab+0xa8/0x100
[  544.380812][T21102]  ? __anon_vma_prepare+0x117/0x4a0
[  544.380833][T21102]  kmem_cache_alloc_noprof+0x87/0x650
[  544.380853][T21102]  ? __anon_vma_prepare+0xcb/0x4a0
[  544.380872][T21102]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  544.380895][T21102]  __anon_vma_prepare+0x117/0x4a0
[  544.380926][T21102]  do_pte_missing+0x2e7d/0x33f0
[  544.380961][T21102]  handle_mm_fault+0x1bd7/0x3170
[  544.380991][T21102]  ? handle_mm_fault+0xee/0x3170
[  544.381014][T21102]  ? __pfx_handle_mm_fault+0x10/0x10
[  544.381031][T21102]  ? lock_vma_under_rcu+0x45a/0x500
[  544.381071][T21102]  do_user_addr_fault+0xa73/0x1340
[  544.381096][T21102]  ? rcu_is_watching+0x15/0xb0
[  544.381116][T21102]  ? trace_page_fault_user+0x84/0x1e0
[  544.381134][T21102]  exc_page_fault+0x6a/0xc0
[  544.381158][T21102]  asm_exc_page_fault+0x26/0x30
[  544.381173][T21102] RIP: 0033:0x7f1e8c15ed82
[  544.381188][T21102] Code: 8d 15 1f 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41
[  544.381201][T21102] RSP: 002b:00007f1e8cfbed20 EFLAGS: 00010286
[  544.381216][T21102] RAX: ffffffffffffffff RBX: 00007f1e84000000 RCX: 00007f1e8c19cc57
[  544.381228][T21102] RDX: 00007f1e8c24f27d RSI: 0000000000021000 RDI: 00007f1e84000000
[  544.381238][T21102] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  544.381248][T21102] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000
[  544.381258][T21102] R13: 0000000000001000 R14: 00007f1e88000000 R15: 0000000001e00000
[  544.381281][T21102]  </TASK>
[  544.381975][T21102] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  544.597743][   T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  544.606978][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.615037][   T29] usb 5-1: Product: syz
[  544.627390][   T29] usb 5-1: Manufacturer: syz
[  544.655829][   T29] usb 5-1: SerialNumber: syz
[  544.732007][T21109] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  544.795905][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  544.928190][T21119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.939935][T21119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.007928][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.025985][ T5722] usb 1-1: clock source 0 is not valid, cannot use
[  545.035186][T21119] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (548 ns). Using initial count to start timer.
[  545.058088][ T5722] usb 1-1: 1:1: cannot get freq (v2/v3): err -32
[  545.183463][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.196901][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.212400][ T5722] usb 1-1: clock source 0 is not valid, cannot use
[  545.219613][ T5722] usb 1-1: 2:1: cannot get freq (v2/v3): err -71
[  545.227599][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.300558][ T5722] usb 1-1: USB disconnect, device number 108
[  545.436705][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.445656][   T29] usb 5-1: clock source 0 is not valid, cannot use
[  545.453222][   T29] usb 5-1: 1:1: cannot get freq (v2/v3): err -32
[  545.461570][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.492608][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.502698][   T29] usb 5-1: clock source 0 is not valid, cannot use
[  545.510335][   T29] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[  545.518041][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  545.571797][ T2162] gspca_ov534_9: reg_r err -32
[  545.589473][   T29] usb 5-1: USB disconnect, device number 106
[  545.784479][ T7258] udevd[7258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  545.839633][ T2162] gspca_ov534_9: Unknown sensor 0000
[  545.839720][ T2162] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  545.885082][T21192] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  546.136325][   T29] usb 1-1: new full-speed USB device number 109 using dummy_hcd
[  546.149358][T21210] hfs: unable to load iocharset "io#harset"
[  546.308863][   T29] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  546.319487][   T29] usb 1-1: config 0 has no interface number 0
[  546.327128][   T29] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  546.341690][   T29] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  546.354652][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.371359][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'.
[  546.404985][   T29] usb 1-1: Product: syz
[  546.421421][   T29] usb 1-1: Manufacturer: syz
[  546.436897][   T29] usb 1-1: SerialNumber: syz
[  546.457653][   T29] usb 1-1: config 0 descriptor??
[  546.466521][T21195] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  546.495912][ T5359] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  546.514934][   T29] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 82:5e:ca:5b:0f:9d
[  546.615081][   T29] usb 6-1: USB disconnect, device number 14
[  546.676640][ T5359] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  546.751550][ T5359] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  546.801378][ T5359] usb 5-1: config 220 interface 0 has no altsetting 0
[  546.834064][ T5359] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  546.855641][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.883112][ T5359] usb 5-1: Product: syz
[  546.895081][ T5359] usb 5-1: Manufacturer: syz
[  546.912107][ T5359] usb 5-1: SerialNumber: syz
[  547.076826][   T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  547.167518][T21220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.189273][T21220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.251782][   T29] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  547.263393][T21220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.281098][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.293013][T21220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.308914][   T29] usb 6-1: Product: syz
[  547.331420][   T29] usb 6-1: Manufacturer: syz
[  547.352023][ T5359] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22
[  547.373098][   T29] usb 6-1: SerialNumber: syz
[  547.410733][ T5359] usb 5-1: USB disconnect, device number 107
[  547.479424][   T29] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  547.705537][ T2162] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  548.198332][ T5359] usb 6-1: USB disconnect, device number 15
[  548.241150][T21283] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  548.757989][    T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  548.796166][ T2162] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  548.817687][ T2162] ath9k_htc: Failed to initialize the device
[  548.848614][ T5359] usb 6-1: ath9k_htc: USB layer deinitialized
[  548.891882][   T29] usb 1-1: USB disconnect, device number 109
[  548.929788][    T9] usb 5-1: Using ep0 maxpacket: 32
[  548.946736][   T29] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  548.976872][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.013889][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  549.051571][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  549.093801][    T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  549.114038][    T9] usb 5-1: Product: syz
[  549.134639][    T9] usb 5-1: Manufacturer: syz
[  549.164114][    T9] hub 5-1:4.0: USB hub found
[  549.371948][    T9] hub 5-1:4.0: 2 ports detected
[  549.836027][ T5359] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  550.029838][ T5359] usb 1-1: Using ep0 maxpacket: 32
[  550.037275][ T5359] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  550.056676][ T5359] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.071248][ T5359] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  550.080571][ T5359] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  550.089913][ T5359] usb 1-1: Product: syz
[  550.094314][ T5359] usb 1-1: Manufacturer: syz
[  550.117638][ T5359] hub 1-1:4.0: USB hub found
[  550.328656][ T5359] hub 1-1:4.0: 2 ports detected
[  550.590008][T21291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.628088][T21291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.024848][    T9] usb 5-1: USB disconnect, device number 108
[  551.480840][T21388] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  551.562021][T21341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.606465][T21341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.873272][T21408] trusted_key: encrypted_key: master key parameter 'defaul��user:sy0000000000004S89' is invalid
[  552.128056][ T5688] usb 1-1: USB disconnect, device number 110
[  552.190271][T21427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.212408][T21427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.595076][T21455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  552.925666][T21475] syzkaller1: entered promiscuous mode
[  552.946980][T21475] syzkaller1: entered allmulticast mode
[  552.975922][ T5359] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  552.983776][T21480] netlink: 'syz.3.1909': attribute type 1 has an invalid length.
[  553.147837][ T5359] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  553.173421][ T5359] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  553.192555][ T5359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.204585][ T5359] usb 6-1: Product: syz
[  553.209938][ T5359] usb 6-1: Manufacturer: syz
[  553.215364][ T5359] usb 6-1: SerialNumber: syz
[  553.229902][ T5359] usb 6-1: config 0 descriptor??
[  553.276045][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  553.336215][ T2162] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  553.364800][ T5359] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  553.426078][T21480] bond6: entered promiscuous mode
[  553.437020][T21480] 8021q: adding VLAN 0 to HW filter on device bond6
[  553.465037][ T7259] udevd[7259]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  553.499246][T21459] xt_TPROXY: Can be used only with -p tcp or -p udp
[  553.525914][ T2162] usb 1-1: Using ep0 maxpacket: 32
[  553.540163][T21459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.562204][ T2162] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.575372][ T2162] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.588099][T21459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.616585][ T2162] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  553.633592][ T2162] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  553.675190][ T2162] usb 1-1: Product: syz
[  553.685658][ T2162] usb 1-1: Manufacturer: syz
[  553.738004][ T2162] hub 1-1:4.0: USB hub found
[  553.781013][T21493] bond6: (slave bridge28): making interface the new active one
[  553.928145][T21493] bridge28: entered promiscuous mode
[  553.941665][ T2162] hub 1-1:4.0: 2 ports detected
[  554.100402][T21493] bond6: (slave bridge28): Enslaving as an active interface with an up link
[  555.157619][T21484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.186609][T21484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.577569][ T5359] usb 1-1: USB disconnect, device number 111
[  555.691238][ T2162] usb 6-1: USB disconnect, device number 16
[  555.710239][T21584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.769421][T21584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.110398][T21608] netlink: 'syz.4.1918': attribute type 10 has an invalid length.
[  556.330621][ T5359] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  556.482368][T21620] TCP: TCP_TX_DELAY enabled
[  556.492837][T21623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.515028][ T5359] usb 6-1: Using ep0 maxpacket: 8
[  556.522550][T21623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.536503][    T9] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  556.557265][ T5359] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  556.573874][ T5359] usb 6-1: config 0 has no interface number 0
[  556.594863][ T5359] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  556.613665][ T5359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.633576][ T5359] usb 6-1: Product: syz
[  556.643849][ T5359] usb 6-1: Manufacturer: syz
[  556.654224][ T5359] usb 6-1: SerialNumber: syz
[  556.668848][ T5359] usb 6-1: config 0 descriptor??
[  556.732684][    T9] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 528
[  556.750008][    T9] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 16
[  556.768343][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[  556.782139][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  556.791589][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.809598][    T9] usb 1-1: Product: Ѕ
[  556.813784][    T9] usb 1-1: Manufacturer: ᐌ
[  556.820019][    T9] usb 1-1: SerialNumber: ȴ粵緕憔茈턾஠ᨢ䕟꙾澡䞌䱳痟Ḩࡣ턤⦡ʯዲᶨ䲽臽쀢詙㦹깏㌨㹌ꀒꆌ㎢⁢嫒샻롲汸쐍⣯㯻⍰㟔៴뮁䉓㓪䋑樤輆磾쪶윌曬蘇ﻯѳ獺蒹⡓钧ቭ蠆藮ﮩ臐㙴怛奊哟노쁾ㅓ⪑핶풵虊볐ၒ㥃鴊꼞⌞⥰戊㭇嚅᛼
[  556.878497][T21614] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  556.898076][T21614] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  556.903664][ T5359] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  556.929208][ T5359] uvcvideo 6-1:0.31: Entity type for entity Output 32774 was not initialized!
[  556.939612][ T5359] uvcvideo 6-1:0.31: Failed to create links for entity 5
[  556.948436][ T5359] uvcvideo 6-1:0.31: Failed to register entities (-22).
[  556.993020][ T5359] usb 6-1: USB disconnect, device number 17
[  557.013508][T21642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.040093][T21642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.163479][    T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 255 proto 2 vid 0x0525 pid 0xA4A8
[  557.201156][    T9] usb 1-1: USB disconnect, device number 112
[  557.220017][    T9] usblp0: removed
[  557.385426][T21679] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  557.460756][T21684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.481563][T21682] binfmt_misc: register: failed to install interpreter file ./cgroup
[  557.489902][T21684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.566826][ T5359] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  557.618578][T21689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.646713][T21689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.727549][ T5359] usb 5-1: device descriptor read/64, error -71
[  557.793276][T21706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1930'.
[  557.858360][T21706] vlan2: entered allmulticast mode
[  557.871197][T21706] bridge2: entered allmulticast mode
[  557.890229][T21706] bridge2: port 1(erspan0) entered blocking state
[  557.906709][T21706] bridge2: port 1(erspan0) entered disabled state
[  557.930991][T21706] erspan0: entered allmulticast mode
[  557.948292][T21706] erspan0: entered promiscuous mode
[  557.958832][T21706] bridge2: port 1(erspan0) entered blocking state
[  557.965479][T21706] bridge2: port 1(erspan0) entered forwarding state
[  557.974449][T21713] xt_hashlimit: invalid interval
[  557.981390][ T5359] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  558.006331][T21713] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  558.135816][ T5359] usb 5-1: device descriptor read/64, error -71
[  558.256981][ T5359] usb usb5-port1: attempt power cycle
[  558.365155][T21729] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  558.605836][ T5359] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  558.647372][ T5359] usb 5-1: device descriptor read/8, error -71
[  558.735974][ T5722] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  558.885795][ T5722] usb 6-1: Using ep0 maxpacket: 16
[  558.901924][ T5722] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  558.913020][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.922080][ T5359] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  558.932815][ T5722] usb 6-1: Product: syz
[  558.941089][ T5722] usb 6-1: Manufacturer: syz
[  558.956705][ T5359] usb 5-1: device descriptor read/8, error -71
[  558.974519][ T5722] usb 6-1: SerialNumber: syz
[  558.996891][ T5722] usb 6-1: config 0 descriptor??
[  559.086284][ T5359] usb usb5-port1: unable to enumerate USB device
[  559.221271][T21741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.259697][T21725] netlink: 'syz.5.1935': attribute type 8 has an invalid length.
[  559.297308][T21741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.323999][ T5722] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  559.354327][ T5722] usb 6-1: USB disconnect, device number 18
[  559.921770][T21763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.977496][T21763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.387592][   T30] audit: type=1326 audit(1778733463.605:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  560.478659][   T30] audit: type=1326 audit(1778733463.635:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  560.542217][T21784] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0
[  560.599697][   T30] audit: type=1326 audit(1778733463.635:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  560.645114][T21789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1943'.
[  560.678866][   T30] audit: type=1326 audit(1778733463.635:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad7035d68e code=0x7ffc0000
[  560.782728][T21795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'.
[  560.814898][   T30] audit: type=1326 audit(1778733463.635:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  560.920402][T21792] bridge16: port 1(veth31) entered blocking state
[  560.949890][T21792] bridge16: port 1(veth31) entered disabled state
[  560.970245][T21792] veth31: entered allmulticast mode
[  560.996674][T21792] veth31: entered promiscuous mode
[  561.007497][   T30] audit: type=1326 audit(1778733463.635:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  561.045608][T21797] veth0_to_bond: left allmulticast mode
[  561.062061][T21797] veth0_to_bond: left promiscuous mode
[  561.069829][   T30] audit: type=1326 audit(1778733463.635:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  561.104860][T21797] bridge15: port 2(veth0_to_bond) entered disabled state
[  561.133039][T21797] bridge16: port 2(veth0_to_bond) entered blocking state
[  561.153657][   T30] audit: type=1326 audit(1778733463.635:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  561.156719][T21797] bridge16: port 2(veth0_to_bond) entered disabled state
[  561.222046][T21797] veth0_to_bond: entered allmulticast mode
[  561.242963][T21797] veth0_to_bond: entered promiscuous mode
[  561.259087][T21821] tipc: Failed to remove unknown binding: 66,1,1/0:1239380732/1239380734
[  561.293439][   T30] audit: type=1326 audit(1778733463.635:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  561.298695][T21821] tipc: Failed to remove unknown binding: 66,1,1/0:1239380732/1239380734
[  561.346495][T21803] vlan12: entered allmulticast mode
[  561.357282][T21803] bridge29: entered allmulticast mode
[  561.403501][   T30] audit: type=1326 audit(1778733463.635:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.0.1941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7039ce59 code=0x7ffc0000
[  561.452897][T21789] bridge16: port 3(veth33) entered blocking state
[  561.466271][T21789] bridge16: port 3(veth33) entered disabled state
[  561.474450][T21789] veth33: entered allmulticast mode
[  561.495031][T21789] veth33: entered promiscuous mode
[  561.518134][T21813] erspan0: left allmulticast mode
[  561.523315][T21813] erspan0: left promiscuous mode
[  561.528816][T21813] bridge25: port 1(erspan0) entered disabled state
[  561.545187][T21813] bridge29: port 1(erspan0) entered blocking state
[  561.571665][T21813] bridge29: port 1(erspan0) entered disabled state
[  561.618986][T21813] erspan0: entered allmulticast mode
[  561.648768][T21813] erspan0: entered promiscuous mode
[  561.670585][T21813] bridge29: port 1(erspan0) entered blocking state
[  561.677279][T21813] bridge29: port 1(erspan0) entered forwarding state
[  562.182198][T21885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.182705][T21885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.193826][T21885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.213943][T21885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.279440][T21891] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  562.566447][    T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  562.737011][    T9] usb 5-1: Using ep0 maxpacket: 8
[  562.757022][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  562.781886][    T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  562.824726][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  562.853081][    T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  562.884727][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  562.893298][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  562.908277][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  562.924324][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  562.940001][    T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  562.956768][    T9] usb 5-1: config 168 interface 0 has no altsetting 0
[  562.965666][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  562.974720][    T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  562.990280][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  563.002193][ T5688] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  563.010314][    T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  563.025204][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  563.047726][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  563.062299][    T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  563.076351][    T9] usb 5-1: config 168 interface 0 has no altsetting 0
[  563.086987][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  563.098070][    T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  563.124547][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  563.149122][    T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  563.178442][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  563.195227][ T5688] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00
[  563.211103][    T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  563.223217][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.234882][ T5688] usb 1-1: Product: syz
[  563.239670][    T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  563.255363][ T5688] usb 1-1: Manufacturer: syz
[  563.264083][ T5688] usb 1-1: SerialNumber: syz
[  563.283592][ T5688] usb 1-1: config 0 descriptor??
[  563.288885][    T9] usb 5-1: config 168 interface 0 has no altsetting 0
[  563.304221][ T5688] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  563.318351][    T9] usb 5-1: string descriptor 0 read error: -22
[  563.329975][    T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  563.340308][ T5688] usb 1-1: Detected FT232HP
[  563.355287][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.430005][    T9] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  563.443669][T21924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.484031][T21924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.504602][ T5688] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  565.260871][ T5722] usb 5-1: USB disconnect, device number 113
[  565.357619][   T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  565.469305][ T5688] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  565.509005][ T5688] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  565.527819][   T29] usb 6-1: device descriptor read/64, error -71
[  565.560882][ T5688] usb 1-1: USB disconnect, device number 113
[  565.593673][ T5688] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  565.632662][ T5688] ftdi_sio 1-1:0.0: device disconnected
[  565.785873][   T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  565.874382][T22003] netlink: 'syz.0.1963': attribute type 1 has an invalid length.
[  565.926802][   T29] usb 6-1: device descriptor read/64, error -71
[  566.052096][   T29] usb usb6-port1: attempt power cycle
[  566.120447][T22003] 8021q: adding VLAN 0 to HW filter on device bond8
[  566.143410][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.157991][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.214824][T22004] bond8: (slave geneve1): Enslaving as a backup interface with an up link
[  566.230219][   T48] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  566.377771][   T48] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  566.416092][   T29] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  566.466705][   T29] usb 6-1: device descriptor read/8, error -71
[  566.725964][   T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  566.756504][   T29] usb 6-1: device descriptor read/8, error -71
[  566.766126][ T5688] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  566.886126][   T29] usb usb6-port1: unable to enumerate USB device
[  566.905972][ T5688] usb 5-1: device descriptor read/64, error -71
[  567.156167][ T5688] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  567.301781][ T5688] usb 5-1: device descriptor read/64, error -71
[  567.418507][ T5688] usb usb5-port1: attempt power cycle
[  567.806167][ T5688] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  567.847444][ T5688] usb 5-1: device descriptor read/8, error -71
[  568.097793][ T5688] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  568.167105][ T5688] usb 5-1: device descriptor read/8, error -71
[  568.296401][ T5688] usb usb5-port1: unable to enumerate USB device
[  568.837782][   T29] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  569.030977][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  569.062080][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  569.114951][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  569.136699][T22086] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  569.158595][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  569.204794][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  569.241336][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  569.335633][   T29] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  569.368813][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.394850][   T29] usb 6-1: Product: syz
[  569.409921][   T29] usb 6-1: Manufacturer: syz
[  569.424138][   T29] usb 6-1: SerialNumber: syz
[  569.461532][   T29] usb 6-1: config 0 descriptor??
[  569.512117][   T29] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected
[  569.552303][   T29] ti_usb_3410_5052 6-1:0.0: missing endpoints
[  569.916098][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  569.961680][T22120] netlink: 'syz.0.1970': attribute type 1 has an invalid length.
[  570.295463][T22120] bond9: entered promiscuous mode
[  570.314741][T22120] 8021q: adding VLAN 0 to HW filter on device bond9
[  570.691174][T22141] bond9: (slave bridge16): making interface the new active one
[  570.709273][T22141] bridge16: entered promiscuous mode
[  570.740449][T22141] bond9: (slave bridge16): Enslaving as an active interface with an up link
[  571.036352][    T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  571.894026][T22218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.951072][T22218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.587417][   T29] usb 6-1: USB disconnect, device number 23
[  573.176320][T22239] netlink: 'syz.5.1978': attribute type 4 has an invalid length.
[  573.498134][T22249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1979'.
[  573.666281][   T29] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  573.726331][ T5720] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  573.829432][T22262] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  573.851046][   T29] usb 6-1: Using ep0 maxpacket: 16
[  573.864770][   T29] usb 6-1: config 0 has no interfaces?
[  573.878923][   T29] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  573.894630][   T29] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  573.906840][ T5720] usb 1-1: Using ep0 maxpacket: 8
[  573.922402][   T29] usb 6-1: Manufacturer: syz
[  573.935992][ T5720] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  573.962333][   T29] usb 6-1: config 0 descriptor??
[  573.967554][ T5720] usb 1-1: config 179 has no interface number 0
[  573.990086][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  574.022754][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  574.048612][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  574.080390][ T5720] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  574.121642][ T5720] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  574.145623][ T5720] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  574.166169][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.199744][T22248] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  574.346945][   T29] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  574.535844][   T29] usb 5-1: Using ep0 maxpacket: 8
[  574.557346][ T5720] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29
[  574.583484][   T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  574.625902][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.669062][   T29] usb 5-1: Product: syz
[  574.693589][   T29] usb 5-1: Manufacturer: syz
[  574.700667][ T5722] usb 1-1: USB disconnect, device number 114
[  574.700762][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  574.700813][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  574.735376][   T29] usb 5-1: SerialNumber: syz
[  574.828408][T22285] team0: Device gtp0 is of different type
[  575.232887][T22317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.253729][T22317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.355115][T22317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.377978][T22317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.083495][T22337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.120737][T22337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.565329][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  576.584262][   T29] usb 5-1: clock source 0 is not valid, cannot use
[  578.008586][ T5688] usb 6-1: USB disconnect, device number 24
[  578.124125][   T29] usb 5-1: 1:1: cannot get freq (v2/v3): err -71
[  578.163061][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  578.201844][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  578.216622][   T29] usb 5-1: clock source 0 is not valid, cannot use
[  578.227266][   T29] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[  578.234261][   T29] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  578.358161][T22413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'.
[  578.538541][T22421] vlan3: entered allmulticast mode
[  578.563933][   T29] usb 5-1: USB disconnect, device number 119
[  578.580622][T22421] bridge4: entered allmulticast mode
[  578.635205][T22413] erspan0: left allmulticast mode
[  578.667941][T22413] erspan0: left promiscuous mode
[  578.692809][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  578.725435][T22413] bridge2: port 1(erspan0) entered disabled state
[  578.837015][T22413] bridge4: port 1(erspan0) entered blocking state
[  578.857310][T22413] bridge4: port 1(erspan0) entered disabled state
[  578.884363][T22413] erspan0: entered allmulticast mode
[  578.925631][T22455] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261
[  578.938890][T22413] erspan0: entered promiscuous mode
[  578.954107][T22413] bridge4: port 1(erspan0) entered blocking state
[  578.960778][T22413] bridge4: port 1(erspan0) entered forwarding state
[  579.380413][T22470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.407675][ T5688] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[  579.440915][T22470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.553507][T22357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.586779][ T5688] usb 1-1: no configurations
[  579.591490][ T5688] usb 1-1: can't read configurations, error -22
[  579.598580][T22357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.705984][ T5718] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  579.736048][ T5688] usb 1-1: new full-speed USB device number 116 using dummy_hcd
[  579.846212][ T5718] usb 6-1: device descriptor read/64, error -71
[  579.906738][ T5688] usb 1-1: no configurations
[  579.914930][ T5688] usb 1-1: can't read configurations, error -22
[  579.939440][ T5688] usb usb1-port1: attempt power cycle
[  580.095852][ T5718] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  580.256317][ T5718] usb 6-1: device descriptor read/64, error -71
[  580.309355][ T5688] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[  580.350871][ T5688] usb 1-1: no configurations
[  580.374220][ T5688] usb 1-1: can't read configurations, error -22
[  580.377236][ T5718] usb usb6-port1: attempt power cycle
[  580.535975][ T5688] usb 1-1: new full-speed USB device number 118 using dummy_hcd
[  580.568786][ T5688] usb 1-1: no configurations
[  580.574528][ T5688] usb 1-1: can't read configurations, error -22
[  580.585111][ T5688] usb usb1-port1: unable to enumerate USB device
[  580.738255][ T5718] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  580.777337][ T5718] usb 6-1: device descriptor read/8, error -71
[  581.036024][ T5718] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  581.069034][T22508] netlink: 'syz.3.2004': attribute type 1 has an invalid length.
[  581.077290][ T5718] usb 6-1: device descriptor read/8, error -71
[  581.196115][ T5718] usb usb6-port1: unable to enumerate USB device
[  581.244296][T22508] bond7: entered promiscuous mode
[  581.293681][T22508] 8021q: adding VLAN 0 to HW filter on device bond7
[  581.483901][T22543] bond7: (slave bridge30): making interface the new active one
[  581.580165][T22543] bridge30: entered promiscuous mode
[  581.666176][ T5688] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  581.681789][T22543] bond7: (slave bridge30): Enslaving as an active interface with an up link
[  581.866082][ T5688] usb 5-1: Using ep0 maxpacket: 32
[  581.873483][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.890459][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.907114][T22508] kvm: user requested TSC rate below hardware speed
[  581.916971][T22558] netlink: 'syz.1.2006': attribute type 1 has an invalid length.
[  581.932768][ T5688] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  581.951035][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.974428][ T5688] usb 5-1: config 0 descriptor??
[  582.003777][ T5688] hub 5-1:0.0: USB hub found
[  582.095596][T22558] bond10: entered promiscuous mode
[  582.112651][T22558] 8021q: adding VLAN 0 to HW filter on device bond10
[  582.197679][ T5688] hub 5-1:0.0: 1 port detected
[  582.292434][T22596] bond10: (slave bridge18): making interface the new active one
[  582.317649][T22596] bridge18: entered promiscuous mode
[  582.380510][T22596] bond10: (slave bridge18): Enslaving as an active interface with an up link
[  582.943214][ T5688] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  582.985371][ T5688] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  583.046793][ T5688] usbhid 5-1:0.0: can't add hid device: -71
[  583.072029][ T5688] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  583.162627][ T5688] usb 5-1: USB disconnect, device number 120
[  583.466685][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  583.656038][    T9] usb 6-1: Using ep0 maxpacket: 32
[  583.705104][    T9] usb 6-1: config 0 has no interfaces?
[  583.721981][    T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  583.749348][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.781485][    T9] usb 6-1: Product: syz
[  583.797490][    T9] usb 6-1: Manufacturer: syz
[  583.812138][    T9] usb 6-1: SerialNumber: syz
[  583.852303][    T9] usb 6-1: config 0 descriptor??
[  584.132195][T22676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.160660][T22676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.192148][    T9] usb 6-1: USB disconnect, device number 29
[  584.435923][T22704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.454354][T22704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.491705][T22704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.510489][T22704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.526771][ T5359] usb 5-1: new full-speed USB device number 121 using dummy_hcd
[  584.706680][ T5359] usb 5-1: no configurations
[  584.711515][ T5359] usb 5-1: can't read configurations, error -22
[  584.847491][ T5359] usb 5-1: new full-speed USB device number 122 using dummy_hcd
[  584.915973][ T5722] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  585.006939][ T5359] usb 5-1: no configurations
[  585.011714][ T5359] usb 5-1: can't read configurations, error -22
[  585.019360][ T5359] usb usb5-port1: attempt power cycle
[  585.079995][ T5722] usb 1-1: Using ep0 maxpacket: 16
[  585.088489][ T5722] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.112768][ T5722] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  585.127613][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0
[  585.143317][ T5722] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  585.159829][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.184261][ T5722] usb 1-1: config 0 descriptor??
[  585.240916][T22749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.264706][T22749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.376182][ T5359] usb 5-1: new full-speed USB device number 123 using dummy_hcd
[  585.401238][T22743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2022'.
[  585.410897][ T5359] usb 5-1: no configurations
[  585.423721][ T5359] usb 5-1: can't read configurations, error -22
[  585.566454][ T5359] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[  585.597489][ T5359] usb 5-1: no configurations
[  585.602371][ T5359] usb 5-1: can't read configurations, error -22
[  585.606882][ T5722] usbhid 1-1:0.0: can't add hid device: -71
[  585.617086][ T5359] usb usb5-port1: unable to enumerate USB device
[  585.623535][ T5722] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  585.641248][ T5722] usb 1-1: USB disconnect, device number 119
[  585.786025][    T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  585.957883][    T9] usb 6-1: config 0 has no interfaces?
[  585.969798][    T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  585.980508][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.989197][    T9] usb 6-1: Product: syz
[  585.993505][    T9] usb 6-1: Manufacturer: syz
[  586.001177][    T9] usb 6-1: SerialNumber: syz
[  586.010249][    T9] usb 6-1: config 0 descriptor??
[  586.030729][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.044994][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.183847][T22779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'.
[  586.212999][T22779] vlan5: entered allmulticast mode
[  586.218365][T22779] bridge17: entered allmulticast mode
[  586.227983][T22779] erspan0: left allmulticast mode
[  586.233848][T22779] erspan0: left promiscuous mode
[  586.241517][T22779] bridge15: port 1(erspan0) entered disabled state
[  586.254070][T22779] bridge17: port 1(erspan0) entered blocking state
[  586.261308][T22779] bridge17: port 1(erspan0) entered disabled state
[  586.268739][T22779] erspan0: entered allmulticast mode
[  586.276515][T22779] erspan0: entered promiscuous mode
[  586.333804][ T5722] usb 6-1: USB disconnect, device number 30
[  586.601174][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.613042][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.621845][ T5359] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  586.776042][ T5359] usb 1-1: Using ep0 maxpacket: 8
[  586.782676][ T5359] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  586.790711][ T5359] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  586.802598][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  586.814368][ T5359] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  586.826358][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  586.837711][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  586.849883][ T5359] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  586.863404][ T5359] usb 1-1: config 168 interface 0 has no altsetting 0
[  586.871506][ T5359] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  586.879322][ T5359] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  586.890630][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  586.903717][ T5359] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  586.925148][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  586.952977][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  586.989196][ T5359] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  587.013334][ T5359] usb 1-1: config 168 interface 0 has no altsetting 0
[  587.021565][ T5359] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  587.041862][ T5359] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  587.057079][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  587.114179][ T5359] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  587.166177][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  587.210328][ T5359] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  587.228453][ T5359] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  587.245387][ T5359] usb 1-1: config 168 interface 0 has no altsetting 0
[  587.256546][ T5359] usb 1-1: string descriptor 0 read error: -22
[  587.263042][ T5359] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  587.272783][ T5359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.303345][ T5359] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  587.596707][T22820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.610151][T22820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.785948][   T29] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  587.925835][   T29] usb 5-1: device descriptor read/64, error -71
[  588.176185][   T29] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  588.314575][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.325008][   T29] usb 5-1: device descriptor read/64, error -71
[  588.333171][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.436438][   T29] usb usb5-port1: attempt power cycle
[  588.786016][   T29] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  588.821937][   T29] usb 5-1: device descriptor read/8, error -71
[  588.932798][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2037'.
[  589.075923][   T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  589.116801][   T29] usb 5-1: device descriptor read/8, error -71
[  589.199482][T22900] vlan4: entered allmulticast mode
[  589.224265][T22900] bridge5: entered allmulticast mode
[  589.231001][   T29] usb usb5-port1: unable to enumerate USB device
[  589.241911][T22902] erspan0: left allmulticast mode
[  589.256129][T22902] erspan0: left promiscuous mode
[  589.272475][T22902] bridge4: port 1(erspan0) entered disabled state
[  589.310697][T22902] bridge5: port 1(erspan0) entered blocking state
[  589.325266][T22902] bridge5: port 1(erspan0) entered disabled state
[  589.344219][T22902] erspan0: entered allmulticast mode
[  589.356712][T22902] erspan0: entered promiscuous mode
[  589.365187][T22902] bridge5: port 1(erspan0) entered blocking state
[  589.371822][T22902] bridge5: port 1(erspan0) entered forwarding state
[  589.381331][   T29] usb 1-1: USB disconnect, device number 120
[  589.619315][T22924] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0
[  590.070732][T22934] Invalid argument reading file caps for ./file0
[  590.154677][T22938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.167813][T22938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.765850][ T5722] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  590.778288][    T9] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  590.936318][ T5722] usb 6-1: Using ep0 maxpacket: 32
[  590.948024][ T5722] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  590.966328][    T9] usb 1-1: Using ep0 maxpacket: 32
[  590.967780][ T5722] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  590.990014][ T5722] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  591.012867][ T5722] usb 6-1: config 1 has no interface number 0
[  591.017889][    T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  591.024080][ T5722] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  591.046801][ T5722] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  591.067167][ T5722] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  591.068413][    T9] usb 1-1: config 0 has no interface number 0
[  591.078394][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.128472][    T9] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  591.139537][ T5722] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  591.164541][    T9] usb 1-1: config 0 interface 89 has no altsetting 0
[  591.191183][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  591.224214][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.257961][    T9] usb 1-1: Product: syz
[  591.271424][    T9] usb 1-1: Manufacturer: syz
[  591.285941][    T9] usb 1-1: SerialNumber: syz
[  591.328485][    T9] usb 1-1: config 0 descriptor??
[  591.369958][    T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  591.404620][    T9] em28xx 1-1:0.89: Video interface 89 found:
[  591.634011][    T9] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  591.735946][ T5722] snd_usb_pod 6-1:1.1: set_interface failed
[  591.764343][ T5722] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  591.793323][ T5722] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71
[  591.815177][    T9] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  591.844880][    T9] em28xx 1-1:0.89: board has no eeprom
[  591.880153][ T5722] usb 6-1: USB disconnect, device number 31
[  591.891371][T23014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'.
[  591.916433][    T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  591.941994][    T9] em28xx 1-1:0.89: analog set to bulk mode.
[  591.963652][ T5688] em28xx 1-1:0.89: Registering V4L2 extension
[  592.004141][T23021] vlan6: entered allmulticast mode
[  592.041641][T23021] bridge18: entered allmulticast mode
[  592.070627][    T9] usb 1-1: USB disconnect, device number 121
[  592.084781][T23014] erspan0: left allmulticast mode
[  592.105125][    T9] em28xx 1-1:0.89: Disconnecting em28xx
[  592.127656][T23014] erspan0: left promiscuous mode
[  592.148711][T23014] bridge17: port 1(erspan0) entered disabled state
[  592.213153][T23014] bridge18: port 1(erspan0) entered blocking state
[  592.242217][T23014] bridge18: port 1(erspan0) entered disabled state
[  592.270645][T23014] erspan0: entered allmulticast mode
[  592.296799][T23014] erspan0: entered promiscuous mode
[  592.390468][ T5688] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  592.427823][ T5688] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  592.474027][ T5688] em28xx 1-1:0.89: No AC97 audio processor
[  592.508561][T22974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.543996][ T5688] usb 1-1: Decoder not found
[  592.572559][ T5688] em28xx 1-1:0.89: failed to create media graph
[  592.615657][ T5688] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  592.686242][ T5688] em28xx 1-1:0.89: Registering snapshot button...
[  592.702739][T22974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.843797][ T5688] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input34
[  592.976668][ T5688] em28xx 1-1:0.89: Remote control support is not available for this card.
[  592.994442][    T9] em28xx 1-1:0.89: Closing input extension
[  593.007079][    T9] em28xx 1-1:0.89: Deregistering snapshot button
[  593.108102][T23056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.137762][T23056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.234443][    T9] em28xx 1-1:0.89: Freeing device
[  593.258779][ T7259] udevd[7259]: setting mode of /dev/bus/usb/001/121 to 020664 failed: No such file or directory
[  593.305128][ T7259] udevd[7259]: setting owner of /dev/bus/usb/001/121 to uid=0, gid=0 failed: No such file or directory
[  593.598532][    T9] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  593.778201][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  593.852006][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.931748][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  593.968623][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  593.996134][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.024738][T23072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.046669][T23072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.070111][T23072] netlink: zone id is out of range
[  594.081212][    T9] usb 1-1: config 0 descriptor??
[  594.091608][T23072] netlink: zone id is out of range
[  594.112102][T23072] netlink: get zone limit has 4 unknown bytes
[  594.575954][    T9] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  595.074252][T23087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.092204][T23087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.113973][T23104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.127677][T23104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.170595][T23107] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2057'.
[  595.185894][ T5722] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  595.315987][ T5722] usb 5-1: device descriptor read/64, error -71
[  595.555909][ T5722] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  595.687316][ T5722] usb 5-1: device descriptor read/64, error -71
[  595.807289][ T5722] usb usb5-port1: attempt power cycle
[  595.998534][ T5688] usb 1-1: reset high-speed USB device number 122 using dummy_hcd
[  596.070689][T23126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.082172][T23126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.145820][ T5722] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  596.156529][ T5720] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  596.166356][ T5688] usb 1-1: device descriptor read/64, error -32
[  596.177624][ T5722] usb 5-1: device descriptor read/8, error -71
[  596.318645][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.335965][ T5720] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00
[  596.351802][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.381132][ T5720] usb 6-1: config 0 descriptor??
[  596.416138][ T5722] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  596.419941][ T5688] usb 1-1: reset high-speed USB device number 122 using dummy_hcd
[  596.466817][ T5722] usb 5-1: device descriptor read/8, error -71
[  596.543236][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'.
[  596.555642][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'.
[  596.587277][ T5722] usb usb5-port1: unable to enumerate USB device
[  596.875875][ T5688] usb 1-1: device descriptor read/64, error -71
[  597.130498][ T5688] usb 1-1: reset high-speed USB device number 122 using dummy_hcd
[  597.172023][T23119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2061'.
[  597.184717][ T5688] usb 1-1: device reset changed ep0 maxpacket size!
[  597.205231][    T9] usb 1-1: USB disconnect, device number 122
[  597.375826][    T9] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  597.506430][ T5720] logitech-hidpp-device 0003:046D:C090.0021: unknown main item tag 0x0
[  597.516792][ T5720] logitech-hidpp-device 0003:046D:C090.0021: item fetching failed at offset 6/41
[  597.527007][ T5720] logitech-hidpp-device 0003:046D:C090.0021: hidpp_probe:parse failed
[  597.535893][    T9] usb 1-1: Using ep0 maxpacket: 16
[  597.541067][ T5720] logitech-hidpp-device 0003:046D:C090.0021: probe with driver logitech-hidpp-device failed with error -22
[  597.580097][    T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  597.599700][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.623198][    T9] usb 1-1: Product: syz
[  597.634626][    T9] usb 1-1: Manufacturer: syz
[  597.645775][    T9] usb 1-1: SerialNumber: syz
[  597.667520][    T9] usb 1-1: config 0 descriptor??
[  597.697603][    T9] gspca_main: spca508-2.14.0 probing 041e:4018
[  597.729758][ T5720] usb 6-1: USB disconnect, device number 32
[  597.908534][    T9] gspca_spca508: reg_read err -32
[  597.928360][    T9] gspca_spca508: reg_read err -32
[  597.952283][    T9] gspca_spca508: reg_read err -32
[  598.100958][T23199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2066'.
[  598.143473][T23142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.161600][T23142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.180247][    T9] gspca_spca508: reg_read err -71
[  598.204602][    T9] gspca_spca508: reg write: error -71
[  598.220335][    T9] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  598.248827][    T9] usb 1-1: USB disconnect, device number 123
[  598.656293][ T5718] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  598.867618][T23235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'.
[  598.879436][ T5718] usb 5-1: Using ep0 maxpacket: 16
[  598.896700][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  598.920532][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0
[  598.944213][ T5718] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  598.977479][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.988354][T23240] netlink: 'syz.5.2071': attribute type 1 has an invalid length.
[  598.996185][ T5718] usb 5-1: Product: syz
[  598.996208][ T5718] usb 5-1: Manufacturer: syz
[  598.996226][ T5718] usb 5-1: SerialNumber: syz
[  599.023867][T23237] vlan13: entered allmulticast mode
[  599.029836][ T5718] usb 5-1: config 0 descriptor??
[  599.034932][T23237] bridge31: entered allmulticast mode
[  599.052216][T23235] erspan0: left allmulticast mode
[  599.057947][T23235] erspan0: left promiscuous mode
[  599.063335][T23235] bridge29: port 1(erspan0) entered disabled state
[  599.099158][T23249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.121862][T23249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.145215][T23235] bridge31: port 1(erspan0) entered blocking state
[  599.162269][T23235] bridge31: port 1(erspan0) entered disabled state
[  599.173727][T23235] erspan0: entered allmulticast mode
[  599.193741][T23235] erspan0: entered promiscuous mode
[  599.202632][T23235] bridge31: port 1(erspan0) entered blocking state
[  599.209400][T23235] bridge31: port 1(erspan0) entered forwarding state
[  599.253414][    C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  599.277604][ T5718] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35
[  599.340960][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'.
[  599.350438][ T5718] imon:send_packet: packet tx failed (-71)
[  599.376064][ T5718] imon 5-1:0.0: panel buttons/knobs setup failed
[  599.487478][ T5718] rc_core: IR keymap rc-imon-pad not found
[  599.504989][ T5718] Registered IR keymap rc-empty
[  599.521183][ T5718] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  599.532417][ T5718] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  599.543765][ T5718] imon:send_packet: packet tx failed (-71)
[  599.566457][ T5718] imon 5-1:0.0: remote input dev register failed
[  599.582723][ T5718] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  599.597229][T23240] bond1: entered promiscuous mode
[  599.622005][T23240] 8021q: adding VLAN 0 to HW filter on device bond1
[  599.662788][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'.
[  599.675902][ T5718] imon 5-1:0.0: unable to initialize intf0, err 0
[  599.691895][ T5718] imon:imon_probe: failed to initialize context!
[  599.703312][ T5718] imon 5-1:0.0: unable to register, err -19
[  599.750631][ T5718] usb 5-1: USB disconnect, device number 7
[  599.855521][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'.
[  599.985985][T23264] bond1: (slave bridge6): making interface the new active one
[  600.001630][T23264] bridge6: entered promiscuous mode
[  600.021567][T23264] bond1: (slave bridge6): Enslaving as an active interface with an up link
[  600.076049][ T5718] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  600.144314][T23326] binfmt_misc: register: failed to install interpreter file ./cgroup
[  600.265130][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  600.296137][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[  600.347844][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0
[  600.375287][ T5718] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  600.402335][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.416597][ T5718] usb 5-1: Product: syz
[  600.423994][ T5718] usb 5-1: Manufacturer: syz
[  600.433045][ T5718] usb 5-1: SerialNumber: syz
[  600.462665][ T5718] usb 5-1: config 0 descriptor??
[  600.483583][T23216] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  600.836564][T23342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'.
[  601.275085][    C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  601.299455][ T5718] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37
[  601.373653][ T5718] imon:send_packet: packet tx failed (-71)
[  601.386198][ T5722] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  601.396831][ T5718] imon 5-1:0.0: panel buttons/knobs setup failed
[  601.557861][ T5722] usb 1-1: Using ep0 maxpacket: 8
[  601.584668][ T5722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  601.592522][ T5718] rc_core: IR keymap rc-imon-pad not found
[  601.602788][ T5718] Registered IR keymap rc-empty
[  601.607828][ T5722] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  601.622140][ T5718] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  601.634917][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  601.646654][ T5718] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  601.659788][ T5722] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  601.683271][ T5718] imon:send_packet: packet tx failed (-71)
[  601.707456][ T5718] imon 5-1:0.0: remote input dev register failed
[  601.724134][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  601.737940][ T5718] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  601.755925][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  601.797713][ T5722] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  601.830449][ T5718] imon 5-1:0.0: unable to initialize intf0, err 0
[  601.844367][ T5722] usb 1-1: config 168 interface 0 has no altsetting 0
[  601.854765][ T5718] imon:imon_probe: failed to initialize context!
[  601.877220][ T5722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  601.891417][ T5718] imon 5-1:0.0: unable to register, err -19
[  601.899658][ T5722] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  601.929995][ T5718] usb 5-1: USB disconnect, device number 8
[  601.942375][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  601.978476][ T5722] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  602.038497][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  602.094347][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  602.149498][ T5722] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  602.200038][ T5722] usb 1-1: config 168 interface 0 has no altsetting 0
[  602.228757][ T5722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  602.259927][ T5722] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  602.289913][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  602.329532][ T5722] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  602.347817][    T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  602.370063][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  602.396556][ T5722] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  602.435087][ T5722] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  602.449761][ T5722] usb 1-1: config 168 interface 0 has no altsetting 0
[  602.472540][ T5722] usb 1-1: string descriptor 0 read error: -22
[  602.496943][ T5722] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  602.532124][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.548799][    T9] usb 6-1: Using ep0 maxpacket: 8
[  602.570604][ T5722] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  602.596356][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  602.629757][T23389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.644949][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.655388][T23389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.677820][    T9] usb 6-1: Product: syz
[  602.696328][    T9] usb 6-1: Manufacturer: syz
[  602.704827][    T9] usb 6-1: SerialNumber: syz
[  602.727798][    T9] usb 6-1: config 0 descriptor??
[  602.753176][    T9] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  603.192417][T23422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.210487][T23422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.596544][  T807] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  603.666146][    T9] gspca_sonixj: reg_w1 err -110
[  603.678528][    T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -110
[  603.704648][T23446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.717807][T23446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.766845][  T807] usb 5-1: Using ep0 maxpacket: 8
[  603.782308][  T807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  603.799839][  T807] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  603.814732][T23451] openvswitch: netlink: IP tunnel dst address not specified
[  603.841553][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  603.857376][  T807] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  603.884621][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  603.914228][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2092'.
[  603.921786][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  603.940214][  T807] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  603.956158][  T807] usb 5-1: config 168 interface 0 has no altsetting 0
[  603.964377][  T807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  603.973267][  T807] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  603.984819][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  604.008429][  T807] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  604.024283][ T5718] usb 6-1: USB disconnect, device number 33
[  604.030993][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  604.061485][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  604.079408][  T807] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  604.093394][  T807] usb 5-1: config 168 interface 0 has no altsetting 0
[  604.105472][  T807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  604.116683][ T5688] usb 1-1: USB disconnect, device number 124
[  604.168042][  T807] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  604.168452][T23460] vlan14: entered allmulticast mode
[  604.208863][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  604.212400][T23460] bridge32: entered allmulticast mode
[  604.231802][T23457] erspan0: left allmulticast mode
[  604.256474][T23457] erspan0: left promiscuous mode
[  604.262619][  T807] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  604.271690][T23457] bridge31: port 1(erspan0) entered disabled state
[  604.294201][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  604.317796][  T807] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  604.331037][T23457] bridge32: port 1(erspan0) entered blocking state
[  604.347381][  T807] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  604.356121][T23457] bridge32: port 1(erspan0) entered disabled state
[  604.381815][  T807] usb 5-1: config 168 interface 0 has no altsetting 0
[  604.397796][T23457] erspan0: entered allmulticast mode
[  604.402467][  T807] usb 5-1: string descriptor 0 read error: -22
[  604.417531][  T807] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  604.432122][T23457] erspan0: entered promiscuous mode
[  604.437236][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.452002][T23457] bridge32: port 1(erspan0) entered blocking state
[  604.458789][T23457] bridge32: port 1(erspan0) entered forwarding state
[  604.475984][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  604.488268][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'.
[  604.531004][  T807] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  604.727412][T23498] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2097'.
[  604.782743][  T807] usb 5-1: USB disconnect, device number 9
[  604.842941][T23502] binfmt_misc: register: failed to install interpreter file ./cgroup
[  604.877135][T23512] fuse: Bad value for 'fd'
[  605.201448][T23525] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  605.705911][ T5720] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  605.866000][ T5720] usb 6-1: Using ep0 maxpacket: 8
[  605.885549][ T5720] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.03
[  605.934962][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.971063][ T5720] usb 6-1: Product: syz
[  605.991116][ T5720] usb 6-1: Manufacturer: syz
[  606.009314][ T5720] usb 6-1: SerialNumber: syz
[  606.336214][T23556] binfmt_misc: register: failed to install interpreter file ./cgroup
[  606.360221][  T807] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  606.525806][  T807] usb 5-1: Using ep0 maxpacket: 16
[  606.584705][  T807] usb 5-1: config 251 has an invalid interface number: 202 but max is 0
[  606.640505][  T807] usb 5-1: config 251 has no interface number 0
[  606.657470][  T807] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  606.700749][  T807] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  606.752853][  T807] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  606.801132][  T807] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  606.838721][  T807] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  606.900759][  T807] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.004661][  T807] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.057067][  T807] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  607.172348][  T807] usb 5-1: config 251 interface 202 has no altsetting 0
[  607.218873][  T807] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  607.245061][  T807] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  607.264003][  T807] usb 5-1: Product: syz
[  607.296625][  T807] usb 5-1: SerialNumber: syz
[  607.611974][T23575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'.
[  607.905535][T23581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.933628][T23581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.047220][  T807] cxacru 5-1:251.202: cxacru_bind: interface has incorrect endpoints
[  608.058025][ T5720] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  608.087009][  T807] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19!
[  608.094554][ T5720] usb 6-1: clock source 0 is not valid, cannot use
[  608.147900][  T807] usb 5-1: USB disconnect, device number 10
[  608.718747][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'.
[  608.995634][T23605] bridge34: port 1(veth59) entered blocking state
[  609.010092][T23605] bridge34: port 1(veth59) entered disabled state
[  609.031762][T23605] veth59: entered allmulticast mode
[  609.051245][T23605] veth59: entered promiscuous mode
[  609.086990][T23602] veth0_to_bond: left allmulticast mode
[  609.134359][T23602] veth0_to_bond: left promiscuous mode
[  609.191446][T23602] bridge27: port 2(veth0_to_bond) entered disabled state
[  609.249372][T23622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2111'.
[  609.264563][T23602] bridge34: port 2(veth0_to_bond) entered blocking state
[  609.276745][ T5720] usb 6-1: 1:1: cannot get freq (v2/v3): err -71
[  609.307762][ T5720] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  609.340733][T23602] bridge34: port 2(veth0_to_bond) entered disabled state
[  609.366490][ T5720] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  609.369933][T23602] veth0_to_bond: entered allmulticast mode
[  609.418173][ T5720] usb 6-1: clock source 0 is not valid, cannot use
[  609.437927][T23602] veth0_to_bond: entered promiscuous mode
[  609.449118][ T5720] usb 6-1: 2:1: cannot get freq (v2/v3): err -71
[  609.465648][ T5720] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  609.600973][T23640] binder: 23639:23640 ioctl 4018620d 0 returned -22
[  609.612845][T23618] bridge34: port 3(veth61) entered blocking state
[  609.621613][T23640] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2115'.
[  609.632776][T23618] bridge34: port 3(veth61) entered disabled state
[  609.651107][T23618] veth61: entered allmulticast mode
[  609.677662][T23618] veth61: entered promiscuous mode
[  609.936879][ T5720] usb 6-1: USB disconnect, device number 34
[  610.115581][T23638] xt_l2tp: missing protocol rule (udp|l2tpip)
[  610.124174][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  610.149219][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'.
[  610.175073][T23650] syzkaller0: entered promiscuous mode
[  610.216647][T23681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.239231][T23681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.135056][T23718] fuse: Unknown parameter 'root000D000100000'
[  611.569842][T23730] netlink: 'syz.4.2125': attribute type 5 has an invalid length.
[  614.058008][T23719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2123'.
[  614.070213][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.082889][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.596585][T23774] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in;
[  614.596585][T23774]    program syz.3.2132 not setting count and/or reply_len properly
[  614.666931][T23778] netlink: 'syz.3.2132': attribute type 20 has an invalid length.
[  614.720386][T23778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'.
[  614.842431][T23778] netlink: 'syz.3.2132': attribute type 20 has an invalid length.
[  614.861333][T23778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'.
[  615.035461][T23811] loop2: detected capacity change from 0 to 7
[  615.062393][T23811] Dev loop2: unable to read RDB block 7
[  615.070027][T23812] binfmt_misc: register: failed to install interpreter file ./cgroup
[  615.083513][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'.
[  615.115222][T23811]  loop2: unable to read partition table
[  615.138755][T23811] loop2: partition table beyond EOD, truncated
[  615.155303][T23811] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  615.716445][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.738773][    T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  615.748136][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.806917][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.849273][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.916368][    T9] usb 1-1: Using ep0 maxpacket: 32
[  615.930530][    T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.970745][    T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.034409][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  616.047108][    T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  616.088411][    T9] usb 1-1: Product: syz
[  616.130392][    T9] usb 1-1: Manufacturer: syz
[  616.181729][T23868] binfmt_misc: register: failed to install interpreter file ./cgroup
[  616.192304][    T9] hub 1-1:4.0: USB hub found
[  616.377536][    T9] hub 1-1:4.0: 2 ports detected
[  616.594308][T23878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  617.265907][  T807] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  617.397514][T23904] netlink: 'syz.3.2153': attribute type 1 has an invalid length.
[  617.406070][  T807] usb 5-1: device descriptor read/64, error -71
[  617.635303][    T9] hub 1-1:4.0: activate --> -90
[  617.666133][  T807] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  617.777159][T23904] bond8: entered promiscuous mode
[  617.815332][T23904] 8021q: adding VLAN 0 to HW filter on device bond8
[  617.825987][  T807] usb 5-1: device descriptor read/64, error -71
[  617.845237][T23838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.887989][T23838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.946499][  T807] usb usb5-port1: attempt power cycle
[  618.317610][    T9] usb 1-1-port2: config error
[  618.319145][ T5722] usb 1-1: USB disconnect, device number 125
[  618.335915][  T807] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  618.346412][    T9] usb 1-1-port2: attempt power cycle
[  618.385500][  T807] usb 5-1: device descriptor read/8, error -71
[  618.616525][ T5688] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  618.645801][  T807] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  618.679376][  T807] usb 5-1: device descriptor read/8, error -71
[  618.740475][T23963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.775894][ T5688] usb 6-1: Using ep0 maxpacket: 8
[  618.778170][T23963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.803082][ T5688] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  618.814278][  T807] usb usb5-port1: unable to enumerate USB device
[  618.824452][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.850443][ T5688] usb 6-1: Product: syz
[  618.867979][ T5688] usb 6-1: Manufacturer: syz
[  618.880742][ T5688] usb 6-1: SerialNumber: syz
[  618.913740][T23970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.938194][T23970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.500254][T23988] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  619.523856][ T5688] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  619.544014][ T5688] usb 6-1: clock source 0 is not valid, cannot use
[  619.559283][ T5688] usb 6-1: 1:1: cannot get freq (v2/v3): err -32
[  619.831825][ T5688] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  619.858417][ T5688] usb 6-1: clock source 0 is not valid, cannot use
[  619.888121][ T5688] usb 6-1: 2:1: cannot get freq (v2/v3): err -71
[  619.913245][ T5688] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  619.925133][   T12] bond8: (slave geneve1): link status up again after 0 ms
[  619.959800][   T88] bond8: (slave geneve1): link status up again after 0 ms
[  619.996090][   T12] bond8: (slave geneve1): link status up again after 0 ms
[  620.036188][   T88] bond8: (slave geneve1): link status up again after 0 ms
[  620.077824][   T57] bond8: (slave geneve1): link status up again after 0 ms
[  620.130330][T24009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  620.138923][   T12] bond8: (slave geneve1): link status up again after 0 ms
[  620.190061][   T12] bond8: (slave geneve1): failed to get link speed/duplex
[  620.212238][T24009] kvm: pic: level sensitive irq not supported
[  620.212338][T24009] kvm: pic: non byte read
[  620.230288][T23997] libceph: resolve '0..' (ret=-3): failed
[  620.243711][ T5688] usb 6-1: USB disconnect, device number 35
[  620.361088][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  620.398354][   T57] bond8: (slave geneve1): failed to get link speed/duplex
[  620.545850][   T12] bond8: (slave geneve1): failed to get link speed/duplex
[  620.685916][   T57] bond8: (slave geneve1): failed to get link speed/duplex
[  620.869443][T24055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2164'.
[  621.144508][T24061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.205056][T24061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.271879][T24061] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  622.164675][T24073] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2167'.
[  622.249070][T24073] netlink: 'syz.3.2167': attribute type 1 has an invalid length.
[  622.349282][T24073] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2167'.
[  622.541540][T24077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.563844][T24077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.621230][T24077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.659439][T24077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.182351][T24087] netlink: 'syz.0.2170': attribute type 1 has an invalid length.
[  623.350967][T24087] 8021q: adding VLAN 0 to HW filter on device bond10
[  623.468468][T24090] bond10: (slave ip6gretap2): making interface the new active one
[  623.502985][T24090] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link
[  623.613972][T24117] veth39: entered promiscuous mode
[  623.631290][T24117] bond10: (slave veth39): Enslaving as an active interface with a down link
[  623.682043][T24087] erspan0: left promiscuous mode
[  623.689505][T24087] bridge18: port 1(erspan0) entered disabled state
[  623.727524][T24087] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  623.750616][T24162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'.
[  623.760377][T24129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.796298][ T5722] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  623.809777][T24129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.955996][ T5722] usb 5-1: Using ep0 maxpacket: 8
[  623.969257][ T5722] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  623.995269][ T5722] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  624.017712][ T5722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  624.045795][ T5722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  624.057579][ T5722] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  624.085357][ T5722] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  624.099092][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.244132][T24195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2179'.
[  624.278491][T24195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2179'.
[  624.332157][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  624.342946][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  624.406218][  T807] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  624.716005][  T807] usb 1-1: Using ep0 maxpacket: 16
[  624.745081][  T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  624.756754][  T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  624.767728][  T807] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  624.777649][  T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.822643][  T807] usb 1-1: config 0 descriptor??
[  625.027405][   T13] net_ratelimit: 27 callbacks suppressed
[  625.027502][   T13] bond8: (slave geneve1): failed to get link speed/duplex
[  625.089143][T24217] usbtmc 5-1:16.0: simple control status returned 9f
[  625.114518][T24216] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 24216 comm: syz.3.2182)
[  625.167236][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  625.167253][   T30] audit: type=1800 audit(1778733528.375:910): pid=24216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2182" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51676 res=0 errno=0
[  625.205855][ T5722] usb 6-1: new low-speed USB device number 36 using dummy_hcd
[  625.213435][   T12] bond8: (slave geneve1): failed to get link speed/duplex
[  625.225614][T24217] capability: warning: `syz.4.2174' uses 32-bit capabilities (legacy support in use)
[  625.272502][  T807] ntrig 0003:1B96:0008.0022: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0
[  625.345921][   T13] bond8: (slave geneve1): failed to get link speed/duplex
[  625.421139][ T5718] usb 5-1: USB disconnect, device number 15
[  625.452158][ T5722] usb 6-1: config 7 has an invalid interface number: 209 but max is 0
[  625.485885][   T13] bond8: (slave geneve1): failed to get link speed/duplex
[  625.519048][  T807] usb 1-1: USB disconnect, device number 4
[  625.560410][ T5722] usb 6-1: config 7 has no interface number 0
[  625.632751][ T5722] usb 6-1: config 7 interface 209 has no altsetting 0
[  625.653789][   T13] bond8: (slave geneve1): failed to get link speed/duplex
[  625.691998][ T5722] usb 6-1: string descriptor 0 read error: -22
[  625.698633][ T5722] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=7c.f2
[  625.730648][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.786108][   T13] bond8: (slave geneve1): failed to get link speed/duplex
[  625.990107][ T5722] usb 6-1: USB disconnect, device number 36
[  626.176710][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'.
[  626.376751][   T13] bond8: (slave geneve1): failed to get link speed/duplex
[  626.485976][  T807] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  626.493685][ T3372] bond8: (slave geneve1): failed to get link speed/duplex
[  626.505849][ T5722] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  626.616994][ T3372] bond8: (slave geneve1): failed to get link speed/duplex
[  626.648207][  T807] usb 1-1: Using ep0 maxpacket: 32
[  626.666258][ T5722] usb 5-1: Using ep0 maxpacket: 8
[  626.666993][  T807] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  626.677108][ T5722] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  626.695993][ T5722] usb 5-1: config 0 has no interface number 0
[  626.713965][  T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.724345][  T807] usb 1-1: Product: syz
[  626.728354][ T5722] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  626.738747][  T807] usb 1-1: Manufacturer: syz
[  626.750346][ T5722] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  626.766207][   T48] bond8: (slave geneve1): failed to get link speed/duplex
[  626.770202][  T807] usb 1-1: SerialNumber: syz
[  626.789641][ T5722] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  626.803133][  T807] usb 1-1: config 0 descriptor??
[  626.821189][ T5722] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  626.837827][ T5722] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  626.848046][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.858909][ T5722] usb 5-1: Product: syz
[  626.863369][ T5722] usb 5-1: Manufacturer: syz
[  626.869078][ T5722] usb 5-1: SerialNumber: syz
[  626.877225][  T807] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  626.898623][ T5722] usb 5-1: config 0 descriptor??
[  626.931239][T24309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.957911][T24309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.578953][T24344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2194'.
[  627.649973][ T5722] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  627.733267][ T5722] usb 5-1: USB disconnect, device number 16
[  627.848822][T24362] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  628.495878][ T5722] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  628.667110][ T5722] usb 6-1: Using ep0 maxpacket: 32
[  628.699164][ T5722] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  628.724555][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.766247][T24392] FAULT_INJECTION: forcing a failure.
[  628.766247][T24392] name failslab, interval 1, probability 0, space 0, times 0
[  628.801047][ T5722] usb 6-1: config 0 descriptor??
[  628.830324][ T5722] gspca_main: sunplus-2.14.0 probing 041e:400b
[  628.848157][T24392] CPU: 1 UID: 0 PID: 24392 Comm: syz.1.2202 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  628.848193][T24392] Tainted: [L]=SOFTLOCKUP
[  628.848201][T24392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  628.848215][T24392] Call Trace:
[  628.848223][T24392]  <TASK>
[  628.848233][T24392]  dump_stack_lvl+0xe8/0x150
[  628.848268][T24392]  should_fail_ex+0x412/0x560
[  628.848295][T24392]  should_failslab+0xa8/0x100
[  628.848349][T24392]  __kmalloc_noprof+0xe8/0x760
[  628.848379][T24392]  ? tomoyo_encode+0x28b/0x550
[  628.848507][T24392]  tomoyo_encode+0x28b/0x550
[  628.848543][T24392]  tomoyo_realpath_from_path+0x58d/0x5d0
[  628.848588][T24392]  ? tomoyo_path_number_perm+0x219/0x630
[  628.848607][T24392]  tomoyo_path_number_perm+0x246/0x630
[  628.848627][T24392]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  628.848660][T24392]  ? __lock_acquire+0x6b5/0x2cf0
[  628.848700][T24392]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  628.848758][T24392]  ? __fget_files+0x2a/0x420
[  628.848781][T24392]  ? __fget_files+0x2a/0x420
[  628.848797][T24392]  ? __fget_files+0x3a0/0x420
[  628.848843][T24392]  ? __fget_files+0x2a/0x420
[  628.848871][T24392]  security_file_ioctl+0xc3/0x2a0
[  628.848943][T24392]  __se_sys_ioctl+0x47/0x170
[  628.848974][T24392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.848999][T24392]  do_syscall_64+0x15f/0xf80
[  628.849027][T24392]  ? trace_irq_disable+0x3b/0x140
[  628.849062][T24392]  ? clear_bhb_loop+0x40/0x90
[  628.849081][T24392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.849097][T24392] RIP: 0033:0x7f1e8c19ce59
[  628.849127][T24392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.849147][T24392] RSP: 002b:00007f1e8cfc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  628.849169][T24392] RAX: ffffffffffffffda RBX: 00007f1e8c415fa0 RCX: 00007f1e8c19ce59
[  628.849184][T24392] RDX: 00002000000001c0 RSI: 00000000c02c564a RDI: 0000000000000003
[  628.849198][T24392] RBP: 00007f1e8cfc0090 R08: 0000000000000000 R09: 0000000000000000
[  628.849214][T24392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.849224][T24392] R13: 00007f1e8c416038 R14: 00007f1e8c415fa0 R15: 00007f1e8c53fa48
[  628.849268][T24392]  </TASK>
[  628.854375][T24392] ERROR: Out of memory at tomoyo_realpath_from_path.
[  629.326477][  T807] gspca_ov534_9: sccb_write failed
[  629.339888][T24376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.366857][T24376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.385377][T24399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.402298][T24399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.646123][ T5722] gspca_sunplus: reg_w_riv err -110
[  629.651638][ T5722] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[  629.708320][ T5722] usb 6-1: USB disconnect, device number 37
[  629.741690][  T807] gspca_ov534_9: reg_w failed -71
[  629.996120][  T807] gspca_ov534_9: Unknown sensor 0000
[  629.996218][  T807] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  630.038588][  T807] usb 1-1: USB disconnect, device number 5
[  630.077505][   T48] net_ratelimit: 26 callbacks suppressed
[  630.077521][   T48] bond8: (slave geneve1): failed to get link speed/duplex
[  630.242471][ T3372] bond8: (slave geneve1): failed to get link speed/duplex
[  630.267081][T24422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.313138][T24422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.395849][ T3372] bond8: (slave geneve1): failed to get link speed/duplex
[  630.515953][   T12] bond8: (slave geneve1): failed to get link speed/duplex
[  630.575801][  T807] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  630.641155][ T3372] bond8: (slave geneve1): failed to get link speed/duplex
[  630.738565][  T807] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  630.755517][  T807] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  630.756463][   T48] bond8: (slave geneve1): failed to get link speed/duplex
[  630.769308][  T807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.782504][  T807] usb 6-1: Product: syz
[  630.786875][  T807] usb 6-1: Manufacturer: syz
[  630.791664][  T807] usb 6-1: SerialNumber: syz
[  630.915860][   T48] bond8: (slave geneve1): failed to get link speed/duplex
[  631.026007][  T807] usb 6-1: selecting invalid altsetting 1
[  631.046211][   T12] bond8: (slave geneve1): failed to get link speed/duplex
[  631.110648][T24459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'.
[  631.122154][T24457] binfmt_misc: register: failed to install interpreter file ./cgroup
[  631.237418][  T807] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  631.237544][  T807] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  631.325350][  T807] usb 6-1: USB disconnect, device number 38
[  631.386506][   T12] bond8: (slave geneve1): failed to get link speed/duplex
[  631.556214][   T48] bond8: (slave geneve1): failed to get link speed/duplex
[  631.692359][T24483] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  631.843400][T24490] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2217'.
[  631.898531][  T807] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  632.102930][  T807] usb 5-1: Using ep0 maxpacket: 32
[  632.142395][  T807] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  632.155594][T24503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.192604][T24503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.197716][  T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.201080][ T5720] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  632.258841][T24503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.274944][  T807] usb 5-1: config 0 descriptor??
[  632.278043][T24503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.319842][  T807] gspca_main: sunplus-2.14.0 probing 041e:400b
[  632.401170][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'.
[  632.411738][ T5720] usb 1-1: Using ep0 maxpacket: 8
[  632.429919][ T5720] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  632.451732][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.474225][ T5720] usb 1-1: Product: syz
[  632.497217][ T5720] usb 1-1: Manufacturer: syz
[  632.509051][ T5720] usb 1-1: SerialNumber: syz
[  632.712311][T24484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.736078][T24484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.865808][ T5688] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  632.955082][  T807] gspca_sunplus: reg_w_riv err -71
[  632.966662][  T807] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  632.980841][  T807] usb 5-1: USB disconnect, device number 17
[  633.035852][ T5688] usb 6-1: Using ep0 maxpacket: 8
[  633.044067][ T5688] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  633.052856][ T5688] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  633.065444][ T5688] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  633.079042][ T5688] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  633.093153][ T5688] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  633.104890][ T5688] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  633.117136][ T5688] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  633.131879][ T5688] usb 6-1: config 168 interface 0 has no altsetting 0
[  633.140474][ T5688] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  633.144029][ T5720] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  633.149992][ T5688] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  633.168167][ T5720] usb 1-1: clock source 0 is not valid, cannot use
[  633.168986][ T5720] usb 1-1: 1:1: cannot get freq (v2/v3): err -71
[  633.189679][ T5720] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  633.203056][ T5720] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  633.225950][ T5720] usb 1-1: clock source 0 is not valid, cannot use
[  633.233455][ T5720] usb 1-1: 2:1: cannot get freq (v2/v3): err -71
[  633.247412][ T5720] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  633.285068][ T5688] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  633.337477][ T5688] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  633.378091][ T5688] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  633.390360][T24542] netlink: 'syz.3.2223': attribute type 29 has an invalid length.
[  633.413172][ T5688] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  633.476433][ T5688] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  633.478781][T24542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.542299][ T5720] usb 1-1: USB disconnect, device number 6
[  633.556084][T24542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.578966][ T5688] usb 6-1: config 168 interface 0 has no altsetting 0
[  633.607379][ T5688] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  633.632210][ T5688] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  633.636753][T24542] ------------[ cut here ]------------
[  633.649382][T24542] usb 4-1: BOGUS control dir, pipe 80000780 doesn't match bRequestType c0
[  633.658116][T24542] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.3.2223/24542
[  633.669405][T24542] Modules linked in:
[  633.675510][T24542] CPU: 1 UID: 0 PID: 24542 Comm: syz.3.2223 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  633.687131][T24542] Tainted: [L]=SOFTLOCKUP
[  633.693180][T24542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  633.703462][T24542] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  633.709214][T24542] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  633.729105][T24542] RSP: 0018:ffffc90005c976e8 EFLAGS: 00010246
[  633.735221][T24542] RAX: 0000000000000000 RBX: ffff88807be62b00 RCX: 0000000080000780
[  633.743303][T24542] RDX: ffff888056fef180 RSI: ffffffff8c808de0 RDI: ffffffff903e1e80
[  633.751470][T24542] RBP: 1ffff11005188fd4 R08: 00000000000000c0 R09: 0000000000000000
[  633.759689][T24542] R10: ffffc90005c977e0 R11: fffff52000b92f08 R12: ffff88807de0f100
[  633.767767][T24542] R13: ffff888028c47ea0 R14: 0000000080000780 R15: ffff888056fef180
[  633.775830][T24542] FS:  00007fb0f2a806c0(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000
[  633.784800][T24542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  633.791823][T24542] CR2: 00007fe61ceb9b4c CR3: 00000000464c8000 CR4: 00000000003526f0
[  633.799888][T24542] Call Trace:
[  633.803186][T24542]  <TASK>
[  633.806348][T24542]  ? __init_swait_queue_head+0xa9/0x150
[  633.811990][T24542]  usb_start_wait_urb+0x13f/0x5b0
[  633.817221][T24542]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  633.822853][T24542]  usb_control_msg+0x234/0x3e0
[  633.827808][T24542]  dtv5100_i2c_msg+0x231/0x2f0
[  633.832755][T24542]  dtv5100_i2c_xfer+0x1a4/0x3c0
[  633.837987][T24542]  __i2c_transfer+0x79a/0x1f70
[  633.840055][ T5688] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  633.842910][T24542]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  633.860294][T24542]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  633.866261][T24542]  ? i2c_transfer+0xc8/0x2d0
[  633.870910][T24542]  i2c_transfer+0x1cc/0x2d0
[  633.875479][T24542]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  633.881294][T24542]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  633.887596][T24542]  ? _copy_from_user+0x94/0xb0
[  633.892394][T24542]  i2cdev_write+0x113/0x1e0
[  633.897077][T24542]  vfs_writev+0x4bd/0x990
[  633.901445][T24542]  ? __pfx_i2cdev_write+0x10/0x10
[  633.906581][T24542]  ? __pfx_vfs_writev+0x10/0x10
[  633.911539][T24542]  ? __fget_files+0x2a/0x420
[  633.916232][T24542]  ? __fget_files+0x3a0/0x420
[  633.920940][T24542]  ? __fget_files+0x2a/0x420
[  633.925559][T24542]  do_writev+0x154/0x2e0
[  633.929976][T24542]  ? __pfx_do_writev+0x10/0x10
[  633.934819][T24542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.940996][T24542]  do_syscall_64+0x15f/0xf80
[  633.945749][T24542]  ? trace_irq_disable+0x3b/0x140
[  633.950827][T24542]  ? clear_bhb_loop+0x40/0x90
[  633.955542][T24542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.961515][T24542] RIP: 0033:0x7fb0f1b9ce59
[  633.966018][T24542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.985820][T24542] RSP: 002b:00007fb0f2a80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  633.994281][T24542] RAX: ffffffffffffffda RBX: 00007fb0f1e15fa0 RCX: 00007fb0f1b9ce59
[  634.002334][T24542] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000009
[  634.010416][T24542] RBP: 00007fb0f1c32d6f R08: 0000000000000000 R09: 0000000000000000
[  634.018501][T24542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  634.026588][T24542] R13: 00007fb0f1e16038 R14: 00007fb0f1e15fa0 R15: 00007fb0f1f3fa48
[  634.034591][T24542]  </TASK>
[  634.037698][T24542] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  634.044989][T24542] CPU: 1 UID: 0 PID: 24542 Comm: syz.3.2223 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  634.055943][T24542] Tainted: [L]=SOFTLOCKUP
[  634.060287][T24542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  634.070381][T24542] Call Trace:
[  634.073757][T24542]  <TASK>
[  634.076696][T24542]  vpanic+0x56c/0xa60
[  634.080731][T24542]  ? __pfx__printk+0x10/0x10
[  634.085345][T24542]  ? __pfx_vpanic+0x10/0x10
[  634.089893][T24542]  ? is_bpf_text_address+0x292/0x2b0
[  634.095194][T24542]  ? is_bpf_text_address+0x26/0x2b0
[  634.100445][T24542]  panic+0xc5/0xd0
[  634.104188][T24542]  ? __pfx_panic+0x10/0x10
[  634.108628][T24542]  __warn+0x315/0x4c0
[  634.112626][T24542]  ? usb_submit_urb+0x1053/0x18b0
[  634.117662][T24542]  ? usb_submit_urb+0x1053/0x18b0
[  634.122692][T24542]  __report_bug+0x29a/0x540
[  634.127622][T24542]  ? usb_submit_urb+0x1053/0x18b0
[  634.132651][T24542]  ? __pfx___report_bug+0x10/0x10
[  634.137690][T24542]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  634.143508][T24542]  ? lockdep_hardirqs_on+0x7a/0x110
[  634.148733][T24542]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  634.154581][T24542]  ? stack_depot_save_flags+0x3f3/0x810
[  634.160174][T24542]  report_bug_entry+0x19a/0x290
[  634.165047][T24542]  ? usb_submit_urb+0x1115/0x18b0
[  634.170084][T24542]  ? usb_submit_urb+0x111a/0x18b0
[  634.175127][T24542]  handle_bug+0xce/0x200
[  634.179389][T24542]  exc_invalid_op+0x1a/0x50
[  634.183990][T24542]  asm_exc_invalid_op+0x1a/0x20
[  634.188894][T24542] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  634.194547][T24542] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  634.214167][T24542] RSP: 0018:ffffc90005c976e8 EFLAGS: 00010246
[  634.220252][T24542] RAX: 0000000000000000 RBX: ffff88807be62b00 RCX: 0000000080000780
[  634.228232][T24542] RDX: ffff888056fef180 RSI: ffffffff8c808de0 RDI: ffffffff903e1e80
[  634.236301][T24542] RBP: 1ffff11005188fd4 R08: 00000000000000c0 R09: 0000000000000000
[  634.244278][T24542] R10: ffffc90005c977e0 R11: fffff52000b92f08 R12: ffff88807de0f100
[  634.252347][T24542] R13: ffff888028c47ea0 R14: 0000000080000780 R15: ffff888056fef180
[  634.260348][T24542]  ? usb_submit_urb+0x10a4/0x18b0
[  634.265400][T24542]  ? __init_swait_queue_head+0xa9/0x150
[  634.270972][T24542]  usb_start_wait_urb+0x13f/0x5b0
[  634.276186][T24542]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  634.281844][T24542]  usb_control_msg+0x234/0x3e0
[  634.286625][T24542]  dtv5100_i2c_msg+0x231/0x2f0
[  634.291413][T24542]  dtv5100_i2c_xfer+0x1a4/0x3c0
[  634.296300][T24542]  __i2c_transfer+0x79a/0x1f70
[  634.301180][T24542]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  634.307006][T24542]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  634.312826][T24542]  ? i2c_transfer+0xc8/0x2d0
[  634.317423][T24542]  i2c_transfer+0x1cc/0x2d0
[  634.321935][T24542]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  634.327590][T24542]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  634.333770][T24542]  ? _copy_from_user+0x94/0xb0
[  634.338562][T24542]  i2cdev_write+0x113/0x1e0
[  634.343119][T24542]  vfs_writev+0x4bd/0x990
[  634.347467][T24542]  ? __pfx_i2cdev_write+0x10/0x10
[  634.352533][T24542]  ? __pfx_vfs_writev+0x10/0x10
[  634.357412][T24542]  ? __fget_files+0x2a/0x420
[  634.362027][T24542]  ? __fget_files+0x3a0/0x420
[  634.366721][T24542]  ? __fget_files+0x2a/0x420
[  634.371349][T24542]  do_writev+0x154/0x2e0
[  634.375616][T24542]  ? __pfx_do_writev+0x10/0x10
[  634.380451][T24542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.386534][T24542]  do_syscall_64+0x15f/0xf80
[  634.391151][T24542]  ? trace_irq_disable+0x3b/0x140
[  634.396219][T24542]  ? clear_bhb_loop+0x40/0x90
[  634.400951][T24542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.406913][T24542] RIP: 0033:0x7fb0f1b9ce59
[  634.411406][T24542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  634.431063][T24542] RSP: 002b:00007fb0f2a80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  634.439515][T24542] RAX: ffffffffffffffda RBX: 00007fb0f1e15fa0 RCX: 00007fb0f1b9ce59
[  634.447690][T24542] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000009
[  634.455703][T24542] RBP: 00007fb0f1c32d6f R08: 0000000000000000 R09: 0000000000000000
[  634.464146][T24542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  634.472149][T24542] R13: 00007fb0f1e16038 R14: 00007fb0f1e15fa0 R15: 00007fb0f1f3fa48
[  634.480154][T24542]  </TASK>
[  634.484018][T24542] Kernel Offset: disabled
[  634.488390][T24542] Rebooting in 86400 seconds..