last executing test programs:

1m58.599025828s ago: executing program 3 (id=2434):
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}])
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}, 0x1, 0xba01}, 0x0)

1m58.093063062s ago: executing program 3 (id=2438):
syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafd86dd62b5313f00083cff200100000000001e0000000000000000fe8000000000000000000000000000aaf8c34bb9d02a27c6"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="400000001000030400000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000200012800b00010067656e657665000010000280080001000300000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
fanotify_init(0x200, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00')
r2 = socket$inet(0x2b, 0x1, 0x9)
connect$inet(r2, 0x0, 0x0)
setsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xe6, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xfffffc00)
read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000000)={r1})

1m54.565817164s ago: executing program 3 (id=2449):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x10000040)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x7, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000d04000000000000000100000000a59bd36cd1c7632a1a88cee6c40fdd54a531b722c0c0a05697012962b1592a87571204df29eeb505ab4b5396ff15f3d7bf75", @ANYRES16=r0, @ANYRESOCT=r1], 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10)
r6 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfef2, 0xfffffffffffffffd}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@private0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x40}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x73}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x778a, 0xffff}, {0x3}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8)
close(r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB="fa78d84224a6e24a4f2819f06856227d0b450d5db8641c5f081e06835d8ea3d1fe1bb6042dd6b60208126d83e731af2ca5ea001c7ebf3d437ca53208cb4c5ed66b067aa09e50a332a596d74ca66df88c6b3d2354adb8d42425f4c2d1286ad6bbb67335d6b736797aaffa6fca934257a20144d5998c5d32844ba39a319bb6e69b4375c5229eefb8d6b0bb58fac6aa9648f807bdb36a1ce996bd4b6d56f5844e1f17ec6dc66140a7d1c11eb7b571dd9dd69b69becf43fb2172c73d3dbfe7508179208c521354764970fa6967a5ee865f60ccfc31b2f4a72cf2d2c5be2866f8d045bd3a77f5cecdb49bbaa172459ef492fe6df067"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000)
r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000280)='spmi_cmd\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10)
r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}, 0x0, {0x3, 0x4}})
write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)

1m52.448993367s ago: executing program 3 (id=2455):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x80, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x64, 0x0, 0x5, 0x2f, 0x0, @remote, @private=0xa010101}}}})
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1m52.261539548s ago: executing program 3 (id=2456):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x40000007}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000940)=""/4087, 0xff7}, {&(0x7f0000000000)=""/231, 0xe7}, {&(0x7f00000007c0)=""/73, 0x49}, {&(0x7f0000000700)=""/84, 0x54}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0)
accept4(r0, 0x0, 0x0, 0x800)
close_range(0xffffffffffffffff, r1, 0x2) (async, rerun: 64)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x0, 0x8, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x5}, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) (rerun: 64)
socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64)
r2 = syz_io_uring_setup(0x82e, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000005c0)) (rerun: 64)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0xfffffffffffffe41, 0x1, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async, rerun: 32)
socket$key(0xf, 0x3, 0x2) (async, rerun: 32)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async)
syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) (async)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 32)
r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000380)) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)

1m51.836191085s ago: executing program 3 (id=2457):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10)
syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0)
r6 = socket(0x1e, 0x1, 0x0)
connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r6, &(0x7f0000000400), 0x2000011a)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x38}}}}, &(0x7f0000000040)=0x84)

1m36.591714645s ago: executing program 32 (id=2457):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10)
syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0)
r6 = socket(0x1e, 0x1, 0x0)
connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r6, &(0x7f0000000400), 0x2000011a)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x38}}}}, &(0x7f0000000040)=0x84)

11.589585417s ago: executing program 5 (id=2865):
socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000011140100"], 0x28}}, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

10.524027487s ago: executing program 1 (id=2866):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x321381)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81)
epoll_create(0xeed)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r4, 0x567, 0x1000a387, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x100000]}}], 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r7, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x3)
write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="04a6ae4726e9acc16e683270cd559ca1a775025aff798a790c553a98", 0x1c}], 0x1)

10.349665238s ago: executing program 1 (id=2868):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x71bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x3c}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r1, @ANYRES16=r2], 0x0)

9.908294379s ago: executing program 5 (id=2869):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000340)={0x8, 0x1, 0x0, "416a03491a03a969ba9dbeef385d8c1d2dbdd86781293a91af348d2c19ca8eda"})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000010001000000000009006970366772657461700000000c000280060010004e220000"], 0x40}}, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x0, 0xe, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)

9.298967709s ago: executing program 2 (id=2872):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/138, 0xab}], 0x4, &(0x7f0000008640), 0x1, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x20, 0x14, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x7ffc0002}]})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="000306"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="001802e11e0044a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.151969533s ago: executing program 0 (id=2873):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xeeee8000, 0x1000, &(0x7f0000018000/0x1000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0)
ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5c, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.816136175s ago: executing program 0 (id=2874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getresuid(0x0, &(0x7f0000000300), 0x0)
quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x1, 0x1})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000caa5e7188a1865000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18060000000000000000000000000000181200e4", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000000008500000005000000b70000000000000085000000c100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="8105"], 0x581)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r7, @ANYRES64=r1, @ANYRESDEC=r7, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYRES64=r7], 0x7c}}, 0x4000)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000000c0)={{r8}, 0x0, 0x0, 0x100000})
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)

7.197767087s ago: executing program 1 (id=2876):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x129040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x8, 0x7, 0x0, [{0x401000, 0x4, 0x401, 0x20006}, {0x8, 0x7, 0x8, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x1}, {0x7fde, 0x40, 0x54, 0x4}, {0x5, 0x2, 0x2, 0x2}, {0x7, 0x0, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
sendfile(r11, r0, &(0x7f00000021c0)=0x4, 0x1)
read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0xf)

6.779923883s ago: executing program 1 (id=2877):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x66, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10135, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
munlockall()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xffffffffffffff3d)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000340)={@desc={0x1, 0x0, @desc4}})
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000002c0)="420f01c8c4a1f82843d6b9040b00000f32642ef3450f09f2440f114ff4f30fc7770c2664660f3a42b09c6a0000f40faea4f0927deef5f26db900b54d560c0c5ed7d6aeba000000000f30", 0x4a}], 0x1, 0x42, 0x0, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000002, 0x4, 0x3, 0xfffd, 0x1, 0x400, 0x400, 0x7}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="64640f01ca0f30ab3d2900366467f32666670f22583e652e0fc728f326650f1f0066b98f09000066b8657d000066ba000000000f3066b91308000066b80f00000066ba008000000f30bad104ec", 0x4d}], 0x1, 0x11, 0x0, 0x0)

6.772304628s ago: executing program 5 (id=2878):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x321381)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81)
epoll_create(0xeed)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r4, 0x567, 0x1000a387, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x100000]}}], 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r7, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x3)
write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="04a6ae4726e9acc16e683270cd559ca1a775025aff798a790c553a98", 0x1c}], 0x1)

6.354965195s ago: executing program 5 (id=2879):
socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000011140100"], 0x28}}, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000007730a00fe000000007704000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

6.308551781s ago: executing program 2 (id=2880):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (rerun: 32)
write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
setsockopt(0xffffffffffffffff, 0xf2, 0x827, 0x0, 0x0)
r4 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async)
wait4(r3, 0x0, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
mmap$KVM_VCPU(&(0x7f0000e16000/0x2000)=nil, 0x0, 0x0, 0x43033, 0xffffffffffffffff, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) (rerun: 64)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)={0xc}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r11=>0x0})
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000001c0)=0x6, 0x4) (async)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r11, @ANYBLOB="df2fff87ea6b8cc56f71362dc8c92139d0762f1033914d4edc0b80157d443fa9c5028a61a38ca44075d26c2d197917b721ccdf686af3e12968ca543390d9fd18e4fdca8e76cd20bc81e0c25d6e155e02ead097b025d96059f5cd5fe42b09b138e3a88e28973b8ddfd6a99f4cdbba059c100cbb7c8b48d27b"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0xffffffffffffff55, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x20008014)

5.236028007s ago: executing program 2 (id=2881):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x0, 0x0, 0x1004, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

5.20011157s ago: executing program 0 (id=2882):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r1, 0x10, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000"], 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x2, 0x40, 0x6}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x7fff}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
fcntl$dupfd(r5, 0x0, r6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfdef)
r7 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100000016274f5be002f470441f7f1df4fd00001000048008000fcf"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x24040010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r9, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})

4.923327102s ago: executing program 4 (id=2883):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20001010, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRESHEX=r1], 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x18)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
timer_create(0x2, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
fchdir(r5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
fchdir(r6)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10000, 0x0)
fsetxattr$trusted_overlay_opaque(r7, &(0x7f00000001c0), 0x0, 0x0, 0x1)
timer_gettime(0x0, &(0x7f0000000140))

3.876021459s ago: executing program 5 (id=2884):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCFLSH(r0, 0x80047456, 0xfffffffffffffffe)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x7ff}}}}]}, 0x40}}, 0x24004800)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000cc0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="200600000000707cf8b1fa370eec8ba7cff8e41e528895bf3dfce988a3670844c3cd4c70d6ecc13742e4b63f2cbb20e43ccd5f7ddd40b7c03ab3b2fee478514e71c5561148b9c043aa851a0f614a4fa9f37f3a3071a62a34d0ac19588c2a58d8"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r3, 0x0, 0x78)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
close(r3)
write$6lowpan_enable(r3, &(0x7f0000000040)='1', 0x1)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000300)=ANY=[], 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)

3.79157351s ago: executing program 1 (id=2885):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1802010000000000000000000000932018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500030100000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

3.438304822s ago: executing program 1 (id=2886):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x85, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x34, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "93"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xbdb, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0xb2b, 0x17}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x4, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xe, 0x7, 0x2}, @acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x49, 0x78, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xf8, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xbb, 0x6, 0x2}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0x1d, 0x9, 0x20, 0x2}, 0x1a, &(0x7f0000000140)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x72, 0x40, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xae, 0x2, 0x10}]}, 0x1, [{0x2b, &(0x7f0000000180)=ANY=[@ANYBLOB="2b03ca8cb6f94aa95becdb8081ea61975a85467b9fbd69179395754d505b53bef6e46ddc1250f55af35df1"]}]})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r3, 0x0, 0x0)
bind$qrtr(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_buf(r4, 0x1, 0x15, &(0x7f00000006c0)=""/146, &(0x7f0000000780)=0x92)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket(0x1d, 0x3, 0x9af3)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400)
ioctl$int_in(r2, 0x5452, 0x0)
listen(r2, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc)
r7 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x1fa}, &(0x7f0000ffe000), 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x2, 0x0, 0xfe)
preadv(0xffffffffffffffff, &(0x7f0000001940)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000640)=""/219, 0xdb}, {&(0x7f0000000740)=""/226, 0xe2}, {0x0}], 0x7, 0x2aa4, 0x8)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/166, 0xa6}, {0x0}, {&(0x7f0000000240)=""/8, 0x8}], 0x3, 0x400, 0xffffffff)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0xc, 0xc, {0xc, 0x6, "6206e6fa5bbda03af691"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x18, 0xf2, "ee46a30ac5862a906cad30dff0db9cfa07768a743b3dfa622cb537105cc1bb0ea9c9cfe64c1e94cc450728bf7903a87072b9e40792ecf22cdde5e58a1d43d69b4b81f47aa76b0f1d61a6e81c1e607bf8725de15dd31332e4eaf9e7c7d776d8c3379d693aeccb6a40a108efc95b8f91dc0bf8d9c9c986a75ff562faeeec10359d2a9452911693a0dd46d73a4e62cab7e8bd53a906addfd666d6754ab7b029de6bb9bde45c9ddd591aa4ca7c8a9b26e1e86f3366d8494da23183a33be00b7470987a7f96cd5a64e708d31aee8eb41903018eaa74d0bbe24de9f727a782cab389747586b46fc127eeacc687d57a6b04f9b0c9e5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x592, 0x7fff, 0x1, 0x6, 0x9, 0x8, 0x5, 0x9a, 0x80, 0x9, 0x6}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x805}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000540)={0x20, 0x89, 0x2}})

1.764111648s ago: executing program 4 (id=2887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x6}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000004)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff0010000007000000080009000200000008000b"], 0x24}}, 0x890)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x5)

1.417554111s ago: executing program 2 (id=2888):
r0 = memfd_secret(0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000340)={0xa0, 0x400, 0x3c0, 0x1e0, 0x2, 0x81, 0x8, 0x0, {0xfff, 0x8, 0x1}, {0xfe3, 0x74}, {0x1, 0x6}, {0x5, 0x81, 0x5}, 0x3, 0x0, 0x1000, 0x92, 0x0, 0xd, 0x9, 0x8, 0xff, 0xffff, 0x100, 0xffe1, 0x2, 0x0, 0x0, 0x8})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10, 0x8010, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = dup2(r2, r3)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000040b7020000000000008500fcff2a000000bf9100000000cc00b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r6 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r10, 0x4, 0x76}, &(0x7f0000000040)=0xc)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f00000002c0)={0x10000005})
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f00002dd000/0x3000)=nil, 0x3000, 0x1000002, 0x50, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x70, &(0x7f00000001c0)={0x0, 0xf904, 0x2000, 0x0, 0xfd}, &(0x7f0000000400), 0x0)
mlock(&(0x7f0000d6f000/0x2000)=nil, 0x2000)
fsopen(&(0x7f0000000040)='ext3\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0xe50, 0x2)

1.411520122s ago: executing program 0 (id=2889):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x321381)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81)
epoll_create(0xeed)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r4, 0x567, 0x1000a387, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x100000]}}], 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r7, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x3)
write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="04a6ae4726e9acc16e683270cd559ca1a775025aff798a790c553a98", 0x1c}], 0x1)

1.37833734s ago: executing program 4 (id=2890):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50)
r0 = epoll_create1(0x0)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x104000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="290000fe36000000feff"], 0x18}, 0xc000)
r6 = dup(r5)
bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4)
r8 = dup(r7)
bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000080)={0x2c, 0x0, r10, 0x4, r4}, 0x10)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r11, &(0x7f0000000400)={0xa})

1.149582624s ago: executing program 0 (id=2891):
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r0, 0x40086602, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'rr\x00'}, 0x2c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r2, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x404083c)

960.265556ms ago: executing program 5 (id=2892):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
listen(r0, 0x802)

686.786081ms ago: executing program 4 (id=2893):
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x2860) (async, rerun: 32)
r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18)
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r3, &(0x7f0000003bc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x2004c040) (async)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00')
statx(r4, 0x0, 0x1000, 0x6000, 0x0) (async)
sendto$l2tp6(r4, &(0x7f0000000000)="82d74ebc9ca8b2f4905faa9d21", 0xd, 0x4040010, &(0x7f0000000040)={0xa, 0x0, 0x3ff, @local, 0x9, 0x3}, 0x20) (async)
sendto$unix(r3, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0)

446.051186ms ago: executing program 4 (id=2894):
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0x8e, &(0x7f0000000000), &(0x7f0000000280)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f00000001c0)=""/159)
r5 = signalfd(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x3, {0x0, 0x0, 0x2}, 0x263a035a3716c7cc}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0306000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000140800034000000000080002400000000208000740000000090900010073797a300000f2ff0900020073797a32"], 0x94}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)
r9 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x2000000003c0, 0x2000000003f0, 0x200000000566], 0xfeffff07, 0x0, 0x0}, 0x116)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000340)={r9, r5})

336.050516ms ago: executing program 2 (id=2895):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) (async)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async)
r3 = epoll_create(0x8)
epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x7ff)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0x1})
poll(&(0x7f0000000040)=[{r0, 0x9100}, {r0, 0x6104}, {r0, 0x20}, {r0, 0x6200}, {r0, 0x10}, {r0}, {r1, 0x8140}], 0x7, 0xf99) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
io_setup(0x402, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x80, r5, 0x0}])
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@broadcast, {0x2000000000000, 0x0, 0x0, 0x0, 0x3, 0x400000000000000}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0xc800)

220.674983ms ago: executing program 4 (id=2896):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1802010000000000000000000000932018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500010200000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

128.558249ms ago: executing program 2 (id=2897):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)
r1 = epoll_create(0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$isdn(0x22, 0x3, 0x11)
io_uring_enter(0xffffffffffffffff, 0x45ba, 0x6673, 0x44, &(0x7f0000000000)={[0x5]}, 0x8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0x10})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="53d8a1498ce6fd3ed7fbd4047e7a963d270ce59e92dc5adebb59ab34a371ac2400b318259b14d5c7ba23b9d017abcc6dfb3b2f3bf45cbb876723994cbf0cb625e4d3dabf47ea5b9b", 0x0, 0x48)
epoll_pwait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x6, &(0x7f0000000140)={[0x6]}, 0x8)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=@hopopts={0x2f, 0x206, '\x00', [@generic={0x1, 0x1000, "58ce643d614b377cd98e919b74d8a73a5380bfddad08c4d23dbd6cb91d1296d75bedd7765c8857b8b499d41675dc04bf62228b29da9dc240ebb605c5563ff6b84fdd4afe730af6ed0df5456fbf7040c964c7eaead92ec0b93eacd0df8425a93009f9c66d5aaec07acde8168e6f5cbef060057d2650cccd5cab47b9f4366951dfa2b97683b7dae5843998706ba659f153e1bad7db9c5cfd5422bb471b3e0b686ce60cbd63937fe500f074d041b0ef17e3b09e03be0808197e78ce885e0e6e5707d186aba436688db42b6bd58b983e213785b51aa5430b138256237c8837837b9e6de738d8b2e3b40e5785ee0febd2d7fa8c2005affef3ffa217e4a65000cf65e89de89b3a41a9aacd557ffdaa90c9cc70805751d56e4d372413a6cc7bb63afa7021e10fa7e2cf055f9a12b364fdf331fd52d458e930c45ec01b15dd23d7bc061cb4d318aa1a9b2b35802f60e4934c11ee353ea9f0598bfa74e32cc398251647891c4784637a58b7c9026512b0c52f3724b16907f3a8fef7858656cb9cd9f9720e4036d10232129fcf88942633a01388a5c4ebd0001712ad38b33efcd164c9792e43fcb04b2a09aa4bbaea89c75d838eb2bb04a4e178a3a5d5706f2ac62ff30343626d6019ef5fb99c9b72c50ebe297cebbe8e584fde2ec6e022ab4877f8b300fc0cd98ebbefcff110c12e1f508cb6fd11dc95f41d7644c00fed12df99448f43831e8cd31ed49907d56ad1086021177b31569923cb7635056555bca297f74fd68396652b2c95b53792c0dc4c35139ec63b02490858c7320faeaeb3ad158ec1dbad6839cbf56a0e9f8b340fb7d521daeeb078f85c0fe0437c33c664c65ddc5ea269bc997c0b3b9008d40374c73870cc519a0adb24316c3e2af5876e1e30c35b07931189e0647cffb7ac1f5a6d4178deb8d431cc60ab9ff5528b858d597c7397cbd8820fe9430b0e00bb2ef9adbb41a493def62de78a79eac3e9f88bc90eec07b497ab8272fe8f391e72be86fe9a22ede36449df93b1e5bdbb65e45466fb7810081fa434120f29c3b2ff799217eed0e907e2b6e4b42a18ed2413cb084a5e5cf422e41e99f8879c5c45b083be5490895b73f422214bdb26ee1880a4f23017ce781f4db8013d5a3303ea31d02a483bd518875c39b00b6e38a8378eb63c6484b98f3d33223a22ba3c7b4166349dc399e765bb67cd6ee9cae86ab0b670da5fb7a586c38c9814329db98a10d1b3c30e5627a9cf23c10e6fea5872b51c7ad0ef7e726b3d737b19830700729ec5073bd31c24f55859676a721128dac0d2c1fc7e44fd7efa6da84a777a46ca2ad2bbe572edc8858501162cff43cf0583e3e8f191d2d2892eaf257a9161e231b4c54f0a3c8e3d242b6601b2761afd87bea4c98a23d79494fc239a1ae1c6c3858c43f90a88060e00b5cd0a75352a22d7fc653e75647bb84a174adf672fdf34c239defe55d0a7e1eaa6dee9c27a712b4231b520ae8483838c9fd561833b3b3be08bb3f26901ef404b64dddb10511b88f9e40cdd19a140eed6159436c76bfa3e29b9f8bdd58df13bb6a019c9175799fffc8a2e78143608292be9d9f4a18cbd64f03f1a88783b80cf21b71a25bce0a8d3bef0658d555a06a6fe2d6588ed3b04a0900575f8c706031d38a63fbd84724a390f204c79b55061ddffa2c1923360dd1fc766f4e179d29f1fec2e7365045a57bdc3fef13681434f4c6aef419b93373bd3d8da8758b029029f2423388a4aabfda00c263c346d3bffea44b73defe116f219b433ddff36cb9bb64c682ef0fbc681bb151112d15386fc9edad838dcf4b8403822932a5feb31a6204b280e78c6f1a9c9f7ac316ac764bcaf968252605bc109aa49b4f03c1e49a67066f0e8b5f53421f8f7457008596479ff496a0912ee1f7bdf3af95d9ff4077229f6b9cc78ebf283e8623d85010733e9e65d9bbfb2c19ef4f544ad0eeccca4bf639c1f0cfb3f7db3ac7c71e40db88f09f9ee6e6f1c631614acbdf0c190d691301e2d5b6616945b73add71fbcb25d4cbf925a6cc979df3faec67b7555e93d4f38c79867702f7bfd4947d07ed6cf41307725e278c78898a213e1ce94b1b445d86bf81b8eb1500a7d90ae89f45557472e9c6ddd979f520e51ac6f3ed22e77088a5ff4429e1ea762f23fcdd987f5d97d7ac91ab1ba117867760d4be6e8ccf844404f8223dcef64dc378846bb067b1bf1be042f4efa4e880928d3da7ebdfb3ca656a1e0dafc8305d675bf9168ee7e7a5ff6dd3b6d8a8b0397bbf8a7853b3e7a9060737ab516757e47184152dba037d30370c0bd41419933a8ca264621413bdad1af15d48d3c84822d33ca3627f9cdbd7150284c0272818f367bb8933830634d0fa8d0545dcb4a806d7f9e0e91c9cdda32167f0734c1912e818f999c66d0dc923f4f8776337436e0d1783eaa51a9ee6920457863b1725b12bc39613a86eb064f0ac20098ddfd9d83684175d2d23422060f4b7e6a2581179e8b0f1e20b4ffed1c5d4b4bd5141d5424c4588bbb908b4be3c86a675e97043052083f120733ce696eac1d9ab548242015d2bf34d049d71e4e3c938cb9716577839c180a6020425e2b45f35e28528785983307c8e001baf26977a540e69817eb651cc98e74c446edb546faac2aa49b7a86c918770db8980c91018dfe4e53eef36a37885164e506ff2305a9910ce64fb95f2451931ef352ab033e8e5eac57df9ddf4437dd13eb1735ec0618c08e3dea2776c35773b0d8a838bdb288a719bf66de389fe85ed807ef69c2e2a54076c0003a7c200577fcdaebd2e3c52935e511f226f87fc66e83575f96bb0de0a81482bd6d9b906fe6deab6bf9bfdf13bbee064d1901997cee32c293c4f897406aacc58c97abfafebcf64070b14b691ddda542dd973463731f0731e5758833003100c50833ac4f5186e3850a9daa9f23437d2e10adb8b8e5a10265fa8c6426a78ba84723b582012dc79454759aa659e1613cc0f2da93eae07707b22f32faf3d69a8384b7bf4e575b9668fbb9206b3010145ee4b513e2fcd7645df5859050d1500f212a4253d0a1bfce0d6a6121f0e209d9df0734d8c388f82c12dcee8f5259e06e39a8dbe5735404c845026a9294e2e4532e19c8edbf32bbfef8eb1723c91d26025d3035e52551e13b3a793ec36c33a26282b75933e346474c983e16c6a393dbfec2229575542b49fc957c251c070b352cab87034ca31649031e0e0fb80867af6819ba51cd8680388a7ffc906df60f17479e6e56ba193a949b23c71c02f19af193111a78bd69ada21d70b0204e95cdab63e372211befe5b18b0dce8c59a86d9fbc207acc9315fa2db8733688019cb0a511b1295fc140911f4e7b934292f8f1a5b6755915169eec769b0792fe13fa645b353287b509c78d6a62ca376428cc88cac65d8204cbe6a130a7ad3514d3cde45e0a8186a2c6efe9ac1fee4fc98c67e441312b678ccd0cca51d92dcccf5806f89ac707519440013de3788c8cef1fd88f8f0ef7c9944fb7d8a9c9b790f7a824561b75564b239f1cada24521407862c816c4ae48d270b95834da6640ebea190431f18756a2bf74b98b085de8adb211231fccc46995af7a10fb89f9dbc646cc6b910fc92780988a6c6edf11926f65534f9c4f8e079fa8d2db1fb290760e9900c81bcfd7a40340703c2f1b2575cf46dc5c7576c0e6a1dfbcab5fcc903778c74c39bb298ec26d93cd2d92e8607a06fb8199dc1a51d73ec00abb3f4e158eec458dfc15cf4bf953f04979110b7dcded078646fa965cfb3abb615919134de8d4d50fc7efcb47f46d2fbd83cc42330da7c178fa746f0652a43c24c71cb0407464ea6fe648467df21e4120b7ec41588c5dfeca4cdd921d4cbe10e2985cd44c7446ac5a4fe8a4edf2addd764c8e3c07bf3c21487a75653ca0999ef440db7cb0af82626944d1efa4b67daa34415161ec432f7a3c73e5a02a30318733c8bd534e5f523f47f40773fade32836eacccf982e4f2e910e992936df95d66bedb4daa198ad032d286f2fed24561d28b19236b4bce8cd43d93a41a92f93978949b862bb1a29bec4ee792a22147eaee83d2f462ea9e4630d0b4e8244249143a194d651d685c0b74f290b123b9bf2df9da454fdb72dcaaef3627eda9e065711059f61b2f7b2eee3c9d53f25e7ace1c55ab470ba5201c742e7d7c67abebc1c00145b7b184b56a95a95d29a0862130b1657db6e66a2cd3b6f6e3618bffbcd70734e00d2e8849eb8a71f92fa813c4a501c8d86f02bf9e83d96e78e219ae0270f779c3187d36e93cd310ee2cd980e7c3425f8eddecfa6aff780ec94e85031b0b424ab6fe922a8fb9128781340daca87bc4718870ac36e0da4e7117d784156bc372823b465696b013dc9b0e660407eab91cfc826c7e93cb5a0333fae84aa147a4b61a2bc0f48aac36b8a5d96f842b7034b8ae3220a4e3145e54ac0f6eb3570cb6f664ff7e5ced3eb0e5129c61c3b24cc3e29ea7882d76afd7c25ec38ee03f2b586800d5f9f7e0518075aab852f7c44de4a5e14d891241a54b74ca9813c9b2441baed9010b139bdc99e3c16739a5f66e59558e2fd89f11ffbc6516423a44f15e5ff1bc21bc05fbf8181843f3f930d6f80fc750aef218ac5636f310b7f3c5040fff616321f18350a87358e83668ae60a370a0b4fd8f5ab04491fd4c0a639cdfd28bff6726ab8e2d6fcfeae8f4129402f5394d6302a240ebb6ecb8dcd45fc72bf8668ca609e544f8aa2786a9c1007b720819a0e9cec9835d55ec35241584cc41a78358113d5de82e434dbd6d77ccd8ef57c54eea5c7c21e1cddbb1f518be10af5ba2bbeb77ef73f242669d9ca116e1ae363f3a6511cb77dfd1319af5fc2ef531aba929a079f5324601800a94e4b68db2848c2bf41af86443afdd55b23e5c6c89be875d3a7dd3b5c3e34038c3b22bb6eaf92f0a31acf56efe3923cab375505de83f82936edc94f6086e0a3058a7f45dfdb18b58cb01719777d8a3084f6ae0a2113b6a202147ca2194da44729164aa5240d32b550cab2c97a46c1ca2d6659e1499226472e66bae13101bd93b5b75aaeabe1084f17c1d0c16ba0025c6cd497f1251d9fc6e2d70312a8ad7405db10b7c738cd0fa2f64160ca5e37b8396ff8bdaaf7ee3ff9264024c006d9929fd2351ef04b304e9e2e6ee2958532ebb5b87bbfcd0f3fa9a1004e9efa6b19ae063332a266bb82b2013445c232554cd91d8b573252c4d72a9c175ac676128f3adcda95c0036dfeac8a5ab0df888fea104b3047d2f57d5563ba756b50e83117a68832f21c387ddbd76358f5a21b6c92138ec47316583c2a1f09409af08e2acaf1f3566143902a9ac21213af7090ba5df3068f4e7873389561a8c2dc4f952e8f84d4ec0a161a5f0f5e14c6dab590bc7e04f0f0ba42e5c975c81055617bfc7733d4fde0a0f0b9483f377f3a1bf0bc012cc81f07e95b99c481d0140123922080fd31968b9c77a550a61a14d1d2089dd80c1ca5115a5d181828c315e50569a5c4d57d46ccc68393b52ee83b48ff35dfd44fe97750887eeced73e035008917c57c82219a4509a50ffc62d48fd12a72adb5d9d52bd3793f151641fb7c71d29a01bd07b533a99b6ef9834661392903f2fc5b71528d2e32d2941dd6242d9e309f526cb4b5f722bd1551eae9aa52504d3d7ef51ec2c5d9cee3272e37f7862ac7fce14f930bfd58e5e1314b902dc55a6d527e8b4de491532950a6aae53d5c29a302a500d26e9c54daa743ab816820ea626293c01c64e008c1c0eea6377531bc940601def071912c1375a1956c666b3b14c"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x80, 0x7, [0x3aa0, 0x2, 0x9, 0x7, 0x2]}}]}, 0x1040)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000011c0)={0xb, 0x2, 0x2, {0x9, 0x4, 0x3, 0x3}})
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000001200)={0x8, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
poll(&(0x7f0000001340)=[{r1, 0x1004}, {r2}, {r4, 0x10}, {r4, 0x160}, {r2, 0x4410}, {r0, 0x58c}, {r2, 0x2200}, {r0, 0x400}], 0x8, 0x2)
r5 = syz_open_dev$ndb(&(0x7f0000001380), 0x0, 0x40000)
ioctl$BLKFRASET(r5, 0x1264, &(0x7f00000013c0)=0x8)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x35}]}, 0x24}, 0x1, 0x0, 0x0, 0x40890}, 0x8405)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000001500)=0xa, 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0xc, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0xd}, @empty}, 0x10)
ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000001580)={0xfffffffffffffffa, 0x5, 0x1})
r7 = openat$cgroup(r6, &(0x7f00000015c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f0000001600)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001640)={'gre0\x00', <r8=>0x0})
r9 = syz_usb_connect$uac1(0x3, 0x112, &(0x7f0000001680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x45, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3a}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x4, 0x5, [0xa, 0x9, 0x4, 0x1, 0x7], 0x6}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x1, 0x8, "1b9c5e27"}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0x8, 0x7f, "acddc78b2bfc"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x6, 0x680, 0x8, 0x7e}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x6, "8661637cbc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x10, 0x3, 0x2, "e383caae888b17"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x9, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x1, 0x9, 0xff, "2e2c754250a7c63e"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4, 0x3, "bc", "ce"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x7, 0x1d, {0x7, 0x25, 0x1, 0x1, 0x8, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0xb, 0x7, ')'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x81, 0x1}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x1, "3466cfd8d170483799"}, @as_header={0x7, 0x24, 0x1, 0xa0, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0xdc65, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x2, 0x5, {0x7, 0x25, 0x1, 0x83, 0x1, 0x8}}}}}}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x300, 0xf, 0x9, 0x40, 0x20, 0x4}, 0x15, &(0x7f0000001800)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x100, 0xf011, 0x8, [0xc0]}]}, 0x7, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x81a}}, {0x36, &(0x7f0000001880)=@string={0x36, 0x3, "120baecaa59fe670e8b8d8194a7518524b078638b7f7a5985055b28878c19620aa9ec4f65720c9a9e582ef00a37cc9ba10b290c5"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x409}}, {0x55, &(0x7f0000001900)=@string={0x55, 0x3, "9176c59f59f83cff7d1d434bb676a27da276f12efa816035856087efe94fa8c619a8b9b8826b37f8411c3de7a092f77273f2c5d3fd5bb8ed43bb8ec80bdd5610437a846e0996311b77a30fa7bce16d45c3fb8e"}}, {0x97, &(0x7f0000001980)=@string={0x97, 0x3, "2cfff9b8ed1ea31446d9ae5893061fd57c5fd6b8bf30e310eeddfdfb3f106661672981c0e0d00e3de0da0931cdd250d9e54f57f56aeef34e574e07706aecd3372ec2f2a1a02a0088793c9947b49fce1d30244afd426c56694f9c1338bbd1d1ab1dbc61e7e6a5eb29705c1d38c1a5978eeee0a146f30393c93bf88f9d90545c5690e401726ec6b20221b15694b5bf4dbd8371b97c7b"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4}}]})
syz_usb_control_io$uac1(r9, &(0x7f0000001c00)={0x14, &(0x7f0000001b40)={0x20, 0x31, 0x6e, {0x6e, 0x22, "fdaad599044599c102bbecc976ee80f5a7593d92ae3e1a3833d66e5cd50d107fabb694f437b1e66af63be571aba67f82fd312289e6afc17eac47f6f35502a5eef1eef3ab8dedccfb1a6a770026d8db7bf7b38ff25d1a59a312073576070d15276cd88f1eb4f9bad17ec317d5"}}, &(0x7f0000001bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000001f00)={0x44, &(0x7f0000001c40)={0x40, 0x7, 0xef, "9fc3d6d2c6c972d430375ca070cdb107d39d7825a7b0c47d7d981022e94bfa88d340e359e5792710d98ce8d374a7063a5d4ff43cad7951666fc222487789d69a6ed35ec7e4b837b8844036f44e38419bb88c8a2612152db8ca1d8a0b189eb76cd6bb5ecb3f8df31548b2b7c2a36e96c154271f8b9c3cb9501e4d5e5953d87b0510776819cdb04b30eeee7c8d159303d2c43cc84f757f742e529a1c0561e1c839877ce0113538468e6febbc4e30f2f5b8af43a10eb4bde0976959f7df623b66b73213c29945b971ac3e755a3d886a1aa1fee72ded71c8d0388372bce719771706d6fc58e91453e40a43f2bacd4e1ec1"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001dc0)={0x20, 0x81, 0x1, '\n'}, &(0x7f0000001e00)={0x20, 0x82, 0x3, "f579ec"}, &(0x7f0000001e40)={0x20, 0x83, 0x1, '6'}, &(0x7f0000001e80)={0x20, 0x84, 0x2, "f4f1"}, &(0x7f0000001ec0)={0x20, 0x85, 0x3, "9012a4"}})
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002080)={'erspan0\x00', &(0x7f0000001fc0)={'syztnl1\x00', <r11=>r8, 0x20, 0x8, 0x9, 0x3, {{0x1e, 0x4, 0x3, 0x0, 0x78, 0x68, 0x0, 0x98, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@end, @timestamp_prespec={0x44, 0x3c, 0x47, 0x3, 0x8, [{@multicast2, 0x16d}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x2}, {@local, 0x7}, {@remote, 0x8}, {@local, 0xf}, {@multicast2, 0xffffffff}, {@loopback, 0x6}]}, @timestamp={0x44, 0x20, 0xd9, 0x0, 0x6, [0x955d, 0x101, 0x1, 0x10000, 0xc, 0x0, 0x0]}, @noop, @ra={0x94, 0x4}]}}}}})
sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000003400)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000033c0)={&(0x7f00000020c0)={0x12d8, 0x13, 0x8, 0x70bd26, 0x25dfdbfe, {0x3, 0x6, 0x9, 0x5, {0x4e24, 0x4e23, [0x3, 0xfffffff7, 0x0, 0x80000000], [0x7, 0x6, 0xee86, 0x1], r11, [0x9, 0xa56f]}, 0xe, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "886380b7996492621853ed588d0b7f10096fea0f31277b7f6a7606f0c740e920b247a56e612fbc007f10b5db6f244c3a57a079f17605fd758025502f383222f92d81d7a32a72283ad1cff17a300176f4fc65c1d6cd83293b8f843f112a1ce8e568f8324766e4b42c5745c06826417f898e417023dfe1dd08fb6891099813df84135cdc55e91a8bb5ce76ac2249e979d80b5172c8c8ec3ae980721d23d50dda54ee"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "46f1e1a31cdf431ed40f7e7ee9e74a3eff7f71a3411fd0445e9f38536f0592d166dc3b5f3a9475815c983fa16bb890fb9767f00df07b54f98f5b34dbdfe6a49ff17da67b6bb8b43e58eba5d50cd35f1d54124ae926f3d1caabc14fb77939ffdb225f41230252aa3dc952e4c9aef0cb9b10621b766e1431783ebe4d8726bdd4cff30ef8b95d9972c975e46b30a9262f1287a6825867c1da30f113e690037dad879c91878407d78ac649cc6ac9d5c6cb6832b1a086618b6dac1ffa52"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "8ac7f9e0c9b1112752522f55909f68d576856f85f5497dede97b5c816d10d23e457761870d10e5dd0f562cd9fa048ade72c197a743fe8a950603c8b09dac27d6070e95d7a17c5fee692b470f"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "2483fa5bbbabecb6c951c0a825b6c86c657ee9dff382b6be0e22bf8b9cc462a846187e9f3bbb7f0b32cc488ef5a9d437c2547bae7a49ee988b4e599e34e54782145a800f5b6bdb079efc2c95804a4a68e82e7f4def1268d4c882776cdfdf4ad101da0e37a13789b4ca39f1ca6a4a83589abacca0c974d431474be880033ba19bd3faf7d85f12e3dc9b48de970b7bb2dc580be807893b381f8a7a2455b7e76f70964df9b462d3c12a5d148f86d1a6f18e1165288502157fe36ed5ac692abd926b09e1e5e72669d76a7b7795"}]}, 0x12d8}, 0x1, 0x0, 0x0, 0x8050}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 0 (id=2898):
unshare(0x6a040000)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0003, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x4040)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4001, 0x0, 0x0, 0x2)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80800)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x80000001, 0x7d8537e0, 0x1400000, 0x7fffffff, 0x7f, 0x29}, 0x1c)

kernel console output (not intermixed with test programs):

yer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  728.970397][    C1] vkms_vblank_simulate: vblank timer overrun
[  728.997206][T16319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.028719][T16319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  729.048049][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  729.086284][T16319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  729.129997][   T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  729.148758][T16335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.158892][T16335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.174893][   T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  729.188583][ T5892] usb 2-1: USB disconnect, device number 75
[  729.194870][   T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.281770][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  729.310031][   T24] usb 3-1: config 0 has no interface number 0
[  729.337526][   T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  729.348426][   T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.362517][   T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  729.372345][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.380799][   T24] usb 3-1: Product: syz
[  729.384988][   T24] usb 3-1: Manufacturer: syz
[  729.386687][T16319] hsr_slave_0: entered promiscuous mode
[  729.389576][   T24] usb 3-1: SerialNumber: syz
[  729.389969][T16315] Bluetooth: hci5: command tx timeout
[  729.407876][T16319] hsr_slave_1: entered promiscuous mode
[  729.411420][   T24] usb 3-1: config 0 descriptor??
[  729.590635][   T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  729.627239][   T24] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  729.651023][   T24] usb 3-1: USB disconnect, device number 76
[  729.752315][   T10] usb 5-1: Using ep0 maxpacket: 16
[  729.762817][   T10] usb 5-1: config 0 has an invalid interface number: 190 but max is 1
[  729.785448][   T10] usb 5-1: config 0 has an invalid interface number: 2 but max is 1
[  729.794312][   T10] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[  729.803907][   T10] usb 5-1: config 0 has no interface number 1
[  729.811939][   T10] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  729.825592][   T10] usb 5-1: config 0 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  729.838700][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  729.846829][   T10] usb 5-1: config 0 interface 2 has no altsetting 0
[  729.856397][   T10] usb 5-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f
[  729.866023][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.875178][   T10] usb 5-1: Product: syz
[  729.879366][   T10] usb 5-1: Manufacturer: syz
[  729.884449][   T10] usb 5-1: SerialNumber: syz
[  729.901391][   T10] usb 5-1: config 0 descriptor??
[  730.131469][   T10] usb 5-1: selecting invalid altsetting 0
[  730.172875][   T10] usb 5-1: USB disconnect, device number 60
[  730.472399][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  731.106474][   T53] bond0 (unregistering): Released all slaves
[  731.538767][T16315] Bluetooth: hci5: command tx timeout
[  731.559954][T16362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  731.572374][   T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  731.653039][T16362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  731.664373][T16362] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  731.670706][T16362] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  731.677646][   T53] tipc: Left network mode
[  731.680079][T16362] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  731.724684][T16362] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  731.760500][   T10] usb 2-1: device descriptor read/64, error -71
[  731.786855][T16319] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  732.043069][   T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  732.170445][T16319] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  732.237429][T16319] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  732.254846][   T10] usb 2-1: device descriptor read/64, error -71
[  732.305089][T16319] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  732.427711][   T10] usb usb2-port1: attempt power cycle
[  732.812378][   T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  732.855041][   T10] usb 2-1: device descriptor read/8, error -71
[  732.979243][   T53] hsr_slave_0: left promiscuous mode
[  732.985251][   T53] batman_adv: batadv0: Interface deactivated: dummy0
[  733.049636][   T53] batman_adv: batadv0: Removing interface: dummy0
[  733.131315][   T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  733.288033][   T53] veth1_macvtap: left promiscuous mode
[  733.334696][   T53] veth0_macvtap: left promiscuous mode
[  733.419622][   T53] veth1_vlan: left promiscuous mode
[  733.463124][   T53] veth0_vlan: left promiscuous mode
[  733.510747][ T5890] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  733.629890][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  733.658243][   T10] usb 2-1: device descriptor read/8, error -71
[  733.693867][ T5890] usb 5-1: config 0 has an invalid interface number: 114 but max is 0
[  733.710050][ T5841] Bluetooth: hci5: command 0x0419 tx timeout
[  733.716116][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  733.722565][T16315] Bluetooth: hci1: command 0x0406 tx timeout
[  733.761031][ T5890] usb 5-1: config 0 has no interface number 0
[  733.799484][ T5890] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67
[  733.816931][   T10] usb usb2-port1: unable to enumerate USB device
[  733.823872][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.833294][ T5890] usb 5-1: Product: syz
[  733.839882][ T5890] usb 5-1: Manufacturer: syz
[  733.844526][ T5890] usb 5-1: SerialNumber: syz
[  733.859842][ T5890] usb 5-1: config 0 descriptor??
[  734.077491][ T5890] cdc_subset 5-1:0.114: probe with driver cdc_subset failed with error -22
[  734.150404][T16403] usb usb8: usbfs: process 16403 (syz.2.2538) did not claim interface 7 before use
[  734.285480][ T5890] usb 5-1: USB disconnect, device number 61
[  734.390188][ T5927] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  734.560020][ T5927] usb 3-1: Using ep0 maxpacket: 8
[  734.576241][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  734.591023][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.599252][ T5927] usb 3-1: Product: syz
[  734.605300][ T5927] usb 3-1: Manufacturer: syz
[  734.615221][ T5927] usb 3-1: SerialNumber: syz
[  734.629482][ T5927] usb 3-1: config 0 descriptor??
[  734.654028][ T5927] gspca_main: vc032x-2.14.0 probing 046d:0896
[  734.848751][ T5927] gspca_vc032x: reg_r err -71
[  734.855277][ T5927] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  734.887437][ T5927] usb 3-1: USB disconnect, device number 77
[  735.268936][T16319] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.341032][T16319] 8021q: adding VLAN 0 to HW filter on device team0
[  735.376678][T16110] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.385213][T16110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  735.446069][T16422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.447364][T16108] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.461728][T16108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  735.481090][T16422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.753771][T16434] input: syz1 as /devices/virtual/input/input69
[  735.802223][T16400] Bluetooth: hci5: command 0x0419 tx timeout
[  736.212502][T16319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.295936][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  736.362835][T16319] veth0_vlan: entered promiscuous mode
[  736.414369][T16319] veth1_vlan: entered promiscuous mode
[  736.502423][T16319] veth0_macvtap: entered promiscuous mode
[  736.566783][T16319] veth1_macvtap: entered promiscuous mode
[  736.652830][T16319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.695663][T16319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.703895][T16473] fuse: Bad value for 'rootmode'
[  736.721938][T16319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.784787][T16319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  736.799161][T16319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.819268][T16319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  736.836090][T16319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.860895][ T5890] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  736.864764][T16319] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  736.887790][T16480] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  736.894324][T16480] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  736.901978][T16480] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  736.908423][T16480] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  736.920386][T16319] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  736.930016][T16480] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  736.936412][T16480] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  736.939666][T16319] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  736.987098][T16480] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  736.993603][T16480] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  737.017381][T16480] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  737.023909][T16480] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  737.036511][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  737.087921][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.114987][ T5890] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  737.129819][ T5890] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  737.143250][T16108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.155463][T16108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  737.163802][ T5890] usb 5-1: Manufacturer: syz
[  737.178966][ T5890] usb 5-1: config 0 descriptor??
[  737.298538][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.310120][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  737.336378][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  737.411466][T16469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  737.430219][T16469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.796659][ T5890] cougar 0003:060B:700A.002F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  737.858553][T16507] random: crng reseeded on system resumption
[  737.872430][T16400] Bluetooth: hci5: command 0x0419 tx timeout
[  738.349976][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  738.400723][T16469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.436130][T16469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.495225][ T5892] usb 5-1: USB disconnect, device number 63
[  739.459338][T16546] syz_tun: entered allmulticast mode
[  739.487836][T16546] syz_tun: left allmulticast mode
[  739.897213][T16566] Cannot find del_set index 0 as target
[  739.922779][ T5892] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  739.952314][T16400] Bluetooth: hci5: command 0x0419 tx timeout
[  740.100209][ T5892] usb 2-1: Using ep0 maxpacket: 8
[  740.124252][ T5892] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  740.144185][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  740.160043][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  740.169660][ T5892] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  740.174786][T16575] netlink: 'syz.4.2573': attribute type 322 has an invalid length.
[  740.191903][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  740.236942][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  740.291416][ T5892] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  740.310133][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  740.345062][ T5892] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  740.384182][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  740.390016][   T24] usb 6-1: Using ep0 maxpacket: 16
[  740.412855][   T24] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  740.429809][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  740.431663][   T24] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  740.474663][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'.
[  740.493029][ T5892] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  740.499820][   T24] usb 6-1: config 0 has no interface number 0
[  740.509375][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  740.522650][   T24] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  740.552046][ T5892] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  740.582588][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  740.588989][   T24] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  740.615959][   T24] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  740.620285][ T5892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  740.627048][   T24] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  740.676513][ T5892] usb 2-1: string descriptor 0 read error: -22
[  740.684637][ T5892] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  740.692491][   T24] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  740.714833][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.749070][   T24] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  740.763853][ T5892] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  740.772042][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.783843][ T5890] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  740.809580][   T24] usb 6-1: config 0 descriptor??
[  740.856157][T16566] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  740.879260][   T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  740.960207][ T5890] usb 3-1: Using ep0 maxpacket: 32
[  740.971537][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.992249][ T5890] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  741.028378][ T5890] usb 3-1: config 1 has no interface number 1
[  741.049916][ T5890] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  741.075863][   T10] usb 2-1: USB disconnect, device number 80
[  741.114803][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  741.134990][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.164242][ T5890] usb 3-1: Product: syz
[  741.165024][   T24] usb 6-1: USB disconnect, device number 2
[  741.169966][ T5892] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  741.212842][ T5890] usb 3-1: Manufacturer: syz
[  741.231593][ T5890] usb 3-1: SerialNumber: syz
[  741.242460][ T7910] udevd[7910]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  741.362575][ T5892] usb 5-1: config 0 has no interfaces?
[  741.391955][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  741.421375][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.433510][ T5892] usb 5-1: Product: syz
[  741.442735][ T5892] usb 5-1: Manufacturer: syz
[  741.457476][ T5892] usb 5-1: SerialNumber: syz
[  741.482436][ T5890] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  741.491809][ T5892] usb 5-1: config 0 descriptor??
[  741.513637][ T5890] usb 3-1: 2:1 : format type 6 is not supported yet
[  741.578621][ T5890] usb 3-1: USB disconnect, device number 78
[  741.716381][T16606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.725552][T16606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.824351][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  742.099095][T16627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2583'.
[  742.307894][T16632] loop2: detected capacity change from 0 to 7
[  742.318963][T16632] Dev loop2: unable to read RDB block 7
[  742.324927][T16632]  loop2: unable to read partition table
[  742.344644][T16632] loop2: partition table beyond EOD, truncated
[  742.401832][T16632] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5)
[  743.801349][ T5892] usb 5-1: USB disconnect, device number 64
[  744.331148][T16688] misc userio: The device must be registered before sending interrupts
[  744.529896][   T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  744.609929][  T917] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  744.770350][   T24] usb 5-1: config 128 has no interfaces?
[  744.797336][   T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  744.816473][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.840998][   T24] usb 5-1: Product: syz
[  744.845186][   T24] usb 5-1: Manufacturer: syz
[  744.913401][   T24] usb 5-1: SerialNumber: syz
[  744.938446][  T917] usb 6-1: Using ep0 maxpacket: 16
[  744.975109][  T917] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  745.004560][  T917] usb 6-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config
[  745.080632][  T917] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  745.189852][  T917] usb 6-1: config 1 has no interface number 1
[  745.270462][  T917] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  745.342761][  T917] usb 6-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE
[  745.406910][  T917] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7
[  745.615561][  T917] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024
[  745.736530][  T917] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  745.745921][  T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.775148][  T917] usb 6-1: Product: syz
[  745.787342][  T917] usb 6-1: Manufacturer: syz
[  745.797607][  T917] usb 6-1: SerialNumber: syz
[  745.929863][   T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  746.038011][  T917] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  746.168781][  T917] usb 6-1: found format II with max.bitrate = 0, frame size=0
[  746.208194][  T917] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  746.323967][  T917] usb 6-1: USB disconnect, device number 3
[  746.521590][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  747.048035][  T917] usb 5-1: USB disconnect, device number 65
[  747.152594][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  747.158996][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  747.362019][T16749] fuse: Bad value for 'fd'
[  747.404437][T16750] tipc: Started in network mode
[  747.409476][T16750] tipc: Node identity 4, cluster identity 4711
[  747.422355][T16750] tipc: Node number set to 4
[  747.850183][ T5892] usb 2-1: new low-speed USB device number 81 using dummy_hcd
[  748.139311][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  748.169725][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  748.199434][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  748.228764][ T5892] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  748.271441][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.308966][T16757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  748.361301][ T5892] hub 2-1:1.0: bad descriptor, ignoring hub
[  748.431541][ T5892] hub 2-1:1.0: probe with driver hub failed with error -5
[  748.439272][ T5892] cdc_wdm 2-1:1.0: skipping garbage
[  748.465612][ T5892] cdc_wdm 2-1:1.0: skipping garbage
[  748.482070][ T5892] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  748.491783][T16774] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2616'.
[  748.516810][ T5892] cdc_wdm 2-1:1.0: Unknown control protocol
[  749.115296][    C1] wdm_int_callback: 130 callbacks suppressed
[  749.115322][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  749.128038][    C1] wdm_int_callback: 130 callbacks suppressed
[  749.128052][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  749.200019][   T24] usb 3-1: device descriptor read/64, error -71
[  749.300523][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'.
[  749.421754][T16788] fuse: Bad value for 'fd'
[  749.439942][   T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  749.613097][ T5892] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  749.736598][   T24] usb 3-1: Using ep0 maxpacket: 32
[  749.771424][ T5892] usb 5-1: config index 0 descriptor too short (expected 20498, got 18)
[  749.784204][ T5892] usb 5-1: config 190 has too many interfaces: 57, using maximum allowed: 32
[  749.795549][ T5892] usb 5-1: config 190 has an invalid descriptor of length 29, skipping remainder of the config
[  749.823440][ T5892] usb 5-1: config 190 has 0 interfaces, different from the descriptor's value: 57
[  749.847579][ T5892] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  749.874022][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.990581][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  750.026942][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  750.066791][   T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  750.097051][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.107625][   T24] usb 3-1: config 0 descriptor??
[  750.244650][ T5892] usb 5-1: language id specifier not provided by device, defaulting to English
[  750.447026][T16786] fuse: Bad value for 'rootmode'
[  750.598337][ T5892] usb 5-1: USB disconnect, device number 66
[  750.621569][T16765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  750.761384][  T917] usb 2-1: USB disconnect, device number 81
[  751.346518][T16806] vcan0: tx drop: invalid sa for name 0x0000000000010002
[  751.538223][T16809] FAULT_INJECTION: forcing a failure.
[  751.538223][T16809] name failslab, interval 1, probability 0, space 0, times 0
[  751.651730][T16809] CPU: 0 UID: 0 PID: 16809 Comm: syz.0.2624 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) 
[  751.651758][T16809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  751.651786][T16809] Call Trace:
[  751.651794][T16809]  <TASK>
[  751.651802][T16809]  dump_stack_lvl+0x241/0x360
[  751.651832][T16809]  ? __pfx_dump_stack_lvl+0x10/0x10
[  751.651857][T16809]  ? __pfx__printk+0x10/0x10
[  751.651889][T16809]  ? __pfx___might_resched+0x10/0x10
[  751.651916][T16809]  should_fail_ex+0x424/0x570
[  751.651942][T16809]  should_failslab+0xac/0x100
[  751.651964][T16809]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  751.651985][T16809]  ? __alloc_skb+0x1c2/0x480
[  751.651997][T16809]  ? arch_stack_walk+0xff/0x150
[  751.652027][T16809]  __alloc_skb+0x1c2/0x480
[  751.652052][T16809]  ? __pfx___alloc_skb+0x10/0x10
[  751.652067][T16809]  ? stack_trace_save+0x11a/0x1d0
[  751.652096][T16809]  ? __pfx_stack_trace_save+0x10/0x10
[  751.652119][T16809]  alloc_skb_with_frags+0xc3/0x830
[  751.652139][T16809]  ? kasan_save_stack+0x4f/0x60
[  751.652157][T16809]  ? kasan_save_stack+0x3f/0x60
[  751.652177][T16809]  ? kasan_record_aux_stack+0xbf/0xd0
[  751.652194][T16809]  ? call_rcu+0x172/0xad0
[  751.652220][T16809]  sock_alloc_send_pskb+0x91c/0xa70
[  751.652244][T16809]  ? __sock_sendmsg+0xef/0x270
[  751.652261][T16809]  ? ____sys_sendmsg+0x523/0x860
[  751.652286][T16809]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  751.652322][T16809]  __ip_append_data+0x3097/0x4750
[  751.652382][T16809]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  751.652431][T16809]  ? __pfx___ip_append_data+0x10/0x10
[  751.652446][T16809]  ? __pfx_ipv4_mtu+0x10/0x10
[  751.652467][T16809]  ? ip_setup_cork+0x580/0x9a0
[  751.652523][T16809]  ip_make_skb+0x19a/0x420
[  751.652550][T16809]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  751.652571][T16809]  ? __pfx_ip_make_skb+0x10/0x10
[  751.652604][T16809]  udp_sendmsg+0x1c7e/0x2ca0
[  751.652664][T16809]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  751.652686][T16809]  ? __pfx_udp_sendmsg+0x10/0x10
[  751.652709][T16809]  ? tomoyo_supervisor+0x590/0x18b0
[  751.652754][T16809]  ? register_lock_class+0x54/0x330
[  751.652783][T16809]  udpv6_sendmsg+0xe4c/0x3070
[  751.652839][T16809]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  751.652873][T16809]  ? __lock_acquire+0xad5/0xd80
[  751.652913][T16809]  ? inet_send_prepare+0x1b7/0x260
[  751.652934][T16809]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  751.652957][T16809]  ? inet_send_prepare+0x1b7/0x260
[  751.652981][T16809]  ? do_raw_spin_unlock+0x13c/0x8b0
[  751.653020][T16809]  ? inet_send_prepare+0x1b7/0x260
[  751.653047][T16809]  __sock_sendmsg+0xef/0x270
[  751.653071][T16809]  ____sys_sendmsg+0x523/0x860
[  751.653098][T16809]  ? __pfx_____sys_sendmsg+0x10/0x10
[  751.653120][T16809]  ? __fget_files+0x2a/0x420
[  751.653143][T16809]  ? __fget_files+0x2a/0x420
[  751.653171][T16809]  __sys_sendmmsg+0x3a0/0x7b0
[  751.653202][T16809]  ? __pfx___sys_sendmmsg+0x10/0x10
[  751.653247][T16809]  ? rcu_read_lock_any_held+0xbb/0x160
[  751.653277][T16809]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  751.653308][T16809]  ? vfs_write+0xb29/0xd10
[  751.653342][T16809]  ? ksys_write+0x24e/0x2d0
[  751.653361][T16809]  ? __mutex_unlock_slowpath+0x229/0x800
[  751.653413][T16809]  ? ksys_write+0x275/0x2d0
[  751.653451][T16809]  __x64_sys_sendmmsg+0xa0/0xb0
[  751.653475][T16809]  do_syscall_64+0xf3/0x230
[  751.653501][T16809]  ? clear_bhb_loop+0x45/0xa0
[  751.653519][T16809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.653534][T16809] RIP: 0033:0x7fead338d169
[  751.653548][T16809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  751.653567][T16809] RSP: 002b:00007fead4210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  751.653592][T16809] RAX: ffffffffffffffda RBX: 00007fead35a5fa0 RCX: 00007fead338d169
[  751.653607][T16809] RDX: 0000000000000002 RSI: 0000200000002f80 RDI: 0000000000000003
[  751.653620][T16809] RBP: 00007fead4210090 R08: 0000000000000000 R09: 0000000000000000
[  751.653632][T16809] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  751.653652][T16809] R13: 0000000000000000 R14: 00007fead35a5fa0 R15: 00007fead36cfa28
[  751.653675][T16809]  </TASK>
[  752.272302][ T6885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  752.280775][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  752.591230][   T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  752.725747][T16849] fuse: Bad value for 'fd'
[  752.750215][   T10] usb 5-1: Using ep0 maxpacket: 8
[  752.759006][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  752.769955][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  752.789691][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  752.826004][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  752.849672][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  752.873863][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  752.885111][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  752.916385][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  752.948093][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  752.974639][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  752.989687][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  752.998795][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  753.017751][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  753.031773][ T5892] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  753.069585][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  753.100599][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  753.129304][   T10] usb 5-1: string descriptor 0 read error: -22
[  753.196234][   T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  753.206281][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  753.211618][ T5892] usb 2-1: Using ep0 maxpacket: 8
[  753.212504][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  753.251854][ T5892] usb 2-1: config 0 has an invalid interface number: 145 but max is 0
[  753.263817][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  753.276376][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.300035][   T24] usb 3-1: USB disconnect, device number 80
[  753.309970][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  753.339348][ T5892] usb 2-1: config 0 has no interface number 0
[  753.370899][   T10] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  753.376658][T16863] net_ratelimit: 1990 callbacks suppressed
[  753.376678][T16863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  753.380841][ T5892] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=d8.06
[  753.384897][T16863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  753.410354][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.437623][ T5892] usb 2-1: Product: syz
[  753.449910][ T5892] usb 2-1: Manufacturer: syz
[  753.464056][T16863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  753.467376][ T5892] usb 2-1: SerialNumber: syz
[  753.470587][T16863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  753.479964][T16863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  753.488077][T16863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  753.511872][ T5892] usb 2-1: config 0 descriptor??
[  753.514347][T16863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  753.523310][T16863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  753.587792][T16863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  753.594278][T16863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  753.699956][   T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  753.712377][ T5906] usb 5-1: USB disconnect, device number 67
[  753.736406][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.775944][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.849908][   T24] usb 3-1: device descriptor read/64, error -71
[  754.090038][   T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  754.230151][   T24] usb 3-1: device descriptor read/64, error -71
[  754.251130][T16884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  754.325799][ T5892] usb 2-1: Found UVC 0.00 device syz (2833:0201)
[  754.350035][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  754.358163][ T5892] usb 2-1: No valid video chain found.
[  754.358896][   T24] usb usb3-port1: attempt power cycle
[  754.380683][ T5892] usb 2-1: USB disconnect, device number 82
[  754.730058][   T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  754.760574][   T24] usb 3-1: device descriptor read/8, error -71
[  755.030239][ T5892] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  755.060817][   T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  755.124258][   T24] usb 3-1: device descriptor read/8, error -71
[  755.240948][   T24] usb usb3-port1: unable to enumerate USB device
[  755.249096][ T5892] usb 2-1: config 0 has no interfaces?
[  755.261039][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  755.270400][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.278869][ T5892] usb 2-1: Product: syz
[  755.283977][ T5892] usb 2-1: Manufacturer: syz
[  755.290070][ T5892] usb 2-1: SerialNumber: syz
[  755.328465][ T5892] usb 2-1: config 0 descriptor??
[  755.910113][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2641'.
[  757.240079][ T5892] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  757.392109][ T5892] usb 5-1: Using ep0 maxpacket: 8
[  757.405882][ T5892] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  757.418748][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  757.441925][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  757.470945][ T5892] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.530033][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  757.564758][ T5892] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  757.588646][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.681739][   T10] usb 6-1: config 0 has an invalid interface number: 83 but max is 0
[  757.690129][   T10] usb 6-1: config 0 has no interface number 0
[  757.711833][   T10] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  757.766013][   T10] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  757.785406][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.814312][ T5892] usb 5-1: usb_control_msg returned -32
[  757.835580][   T10] usb 6-1: config 0 descriptor??
[  757.843671][ T5890] usb 2-1: USB disconnect, device number 83
[  757.907976][ T5892] usbtmc 5-1:16.0: can't read capabilities
[  757.931248][   T10] ttusbir 6-1:0.83: cannot find expected altsetting
[  758.080175][  T917] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  758.175762][   T10] usb 6-1: USB disconnect, device number 4
[  758.257335][  T917] usb 3-1: Using ep0 maxpacket: 32
[  758.282549][  T917] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  758.303997][  T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.327222][  T917] usb 3-1: Product: syz
[  758.340106][ T5890] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  758.344975][  T917] usb 3-1: Manufacturer: syz
[  758.378876][  T917] usb 3-1: SerialNumber: syz
[  758.409571][  T917] usb 3-1: config 0 descriptor??
[  758.419653][  T917] usb 3-1: bad CDC descriptors
[  758.438835][  T917] usb 3-1: unsupported MDLM descriptors
[  758.511383][ T5890] usb 2-1: Using ep0 maxpacket: 8
[  758.544190][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  758.566982][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  758.608531][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  758.623048][  T917] usb 3-1: USB disconnect, device number 85
[  758.632808][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  758.648066][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  758.711867][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  758.729645][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  758.746784][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  758.776581][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  758.811015][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  758.839234][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  758.847919][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  758.859396][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  758.874841][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  758.895415][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  758.926145][ T5890] usb 2-1: string descriptor 0 read error: -22
[  758.936247][ T5890] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  758.956921][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.988638][ T5890] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  759.254861][ T5890] usb 2-1: USB disconnect, device number 84
[  759.409975][T17011] vlan1: entered allmulticast mode
[  759.425449][T17011] geneve0: entered allmulticast mode
[  759.508419][T17011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2657'.
[  759.519209][T17018] FAULT_INJECTION: forcing a failure.
[  759.519209][T17018] name failslab, interval 1, probability 0, space 0, times 0
[  759.537754][T17018] CPU: 1 UID: 0 PID: 17018 Comm: syz.0.2658 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) 
[  759.537783][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  759.537795][T17018] Call Trace:
[  759.537803][T17018]  <TASK>
[  759.537812][T17018]  dump_stack_lvl+0x241/0x360
[  759.537848][T17018]  ? __pfx_dump_stack_lvl+0x10/0x10
[  759.537877][T17018]  ? __pfx__printk+0x10/0x10
[  759.537916][T17018]  should_fail_ex+0x424/0x570
[  759.537942][T17018]  should_failslab+0xac/0x100
[  759.537971][T17018]  __kmalloc_node_track_caller_noprof+0xe2/0x4d0
[  759.538001][T17018]  ? nf_ct_ext_add+0x1a8/0x410
[  759.538021][T17018]  ? nf_ct_ext_add+0x1a8/0x410
[  759.538040][T17018]  krealloc_noprof+0x10f/0x300
[  759.538079][T17018]  nf_ct_ext_add+0x1a8/0x410
[  759.538104][T17018]  init_conntrack+0x6c1/0x1010
[  759.538131][T17018]  ? __pfx_init_conntrack+0x10/0x10
[  759.538155][T17018]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[  759.538184][T17018]  ? __local_bh_enable_ip+0x168/0x200
[  759.538203][T17018]  ? lockdep_hardirqs_on+0x9d/0x150
[  759.538235][T17018]  nf_conntrack_in+0xd61/0x18c0
[  759.538278][T17018]  ? __pfx_nf_conntrack_in+0x10/0x10
[  759.538307][T17018]  ? ipt_do_table+0x314/0x1870
[  759.538335][T17018]  ? __pfx_ipt_do_table+0x10/0x10
[  759.538365][T17018]  ? ipv4_conntrack_defrag+0x2a5/0x5a0
[  759.538385][T17018]  ? ipv4_conntrack_local+0x123/0x210
[  759.538415][T17018]  ? __pfx_ipv4_conntrack_local+0x10/0x10
[  759.538440][T17018]  nf_hook_slow+0xc8/0x220
[  759.538465][T17018]  ? __pfx_dst_output+0x10/0x10
[  759.538486][T17018]  nf_hook+0x2c9/0x460
[  759.538508][T17018]  ? nf_hook+0xa0/0x460
[  759.538524][T17018]  ? __pfx_nf_hook+0x10/0x10
[  759.538544][T17018]  ? __pfx_dst_output+0x10/0x10
[  759.538568][T17018]  ? ip_fast_csum+0x1f4/0x2b0
[  759.538600][T17018]  __ip_local_out+0x50f/0x610
[  759.538616][T17018]  ? __pfx_dst_output+0x10/0x10
[  759.538640][T17018]  ip_send_skb+0x4a/0x100
[  759.538678][T17018]  udp_send_skb+0xad0/0x1650
[  759.538739][T17018]  udp_sendmsg+0x1cb3/0x2ca0
[  759.538786][T17018]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  759.538810][T17018]  ? __pfx_udp_sendmsg+0x10/0x10
[  759.538831][T17018]  ? __asan_memset+0x23/0x50
[  759.538892][T17018]  ? register_lock_class+0x54/0x330
[  759.538922][T17018]  udpv6_sendmsg+0xe4c/0x3070
[  759.538977][T17018]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  759.539009][T17018]  ? irqentry_exit+0x63/0x90
[  759.539032][T17018]  ? lockdep_hardirqs_on+0x9d/0x150
[  759.539079][T17018]  ? inet_send_prepare+0x1b7/0x260
[  759.539101][T17018]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  759.539121][T17018]  ? inet_send_prepare+0x1b7/0x260
[  759.539143][T17018]  ? do_raw_spin_unlock+0x13c/0x8b0
[  759.539181][T17018]  ? inet_send_prepare+0x1b7/0x260
[  759.539211][T17018]  __sock_sendmsg+0xef/0x270
[  759.539255][T17018]  ____sys_sendmsg+0x523/0x860
[  759.539286][T17018]  ? __pfx_____sys_sendmsg+0x10/0x10
[  759.539304][T17018]  ? __fget_files+0x2a/0x420
[  759.539325][T17018]  ? __fget_files+0x2a/0x420
[  759.539352][T17018]  __sys_sendmmsg+0x3a0/0x7b0
[  759.539386][T17018]  ? __pfx___sys_sendmmsg+0x10/0x10
[  759.539440][T17018]  ? rcu_read_lock_any_held+0xbb/0x160
[  759.539467][T17018]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  759.539497][T17018]  ? vfs_write+0xb29/0xd10
[  759.539528][T17018]  ? ksys_write+0x24e/0x2d0
[  759.539553][T17018]  ? __mutex_unlock_slowpath+0x229/0x800
[  759.539608][T17018]  ? ksys_write+0x275/0x2d0
[  759.539642][T17018]  __x64_sys_sendmmsg+0xa0/0xb0
[  759.539666][T17018]  do_syscall_64+0xf3/0x230
[  759.539690][T17018]  ? clear_bhb_loop+0x45/0xa0
[  759.539714][T17018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.539732][T17018] RIP: 0033:0x7fead338d169
[  759.539750][T17018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  759.539766][T17018] RSP: 002b:00007fead4210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  759.539786][T17018] RAX: ffffffffffffffda RBX: 00007fead35a5fa0 RCX: 00007fead338d169
[  759.539800][T17018] RDX: 0000000000000002 RSI: 0000200000002f80 RDI: 0000000000000003
[  759.539823][T17018] RBP: 00007fead4210090 R08: 0000000000000000 R09: 0000000000000000
[  759.539834][T17018] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  759.539846][T17018] R13: 0000000000000000 R14: 00007fead35a5fa0 R15: 00007fead36cfa28
[  759.539873][T17018]  </TASK>
[  759.959128][    C1] vkms_vblank_simulate: vblank timer overrun
[  760.000252][   T10] usb 5-1: USB disconnect, device number 68
[  760.047136][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2659'.
[  760.111690][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2659'.
[  760.146440][T17023] netlink: 'syz.5.2659': attribute type 11 has an invalid length.
[  760.167337][T17023] netlink: 'syz.5.2659': attribute type 14 has an invalid length.
[  760.316016][T17029] netlink: 'syz.5.2659': attribute type 10 has an invalid length.
[  760.423496][T17029] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2659'.
[  760.568360][T17029] team0: Port device geneve0 added
[  760.680032][  T917] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  760.844092][  T917] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  760.853526][  T917] usb 5-1: config 0 has no interface number 0
[  760.865950][  T917] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  760.886830][  T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.903465][  T917] usb 5-1: Product: syz
[  760.916955][  T917] usb 5-1: Manufacturer: syz
[  760.926333][  T917] usb 5-1: SerialNumber: syz
[  760.947320][  T917] usb 5-1: config 0 descriptor??
[  761.069992][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  761.171911][T16400] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  761.295219][T17058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'.
[  761.313718][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  761.340755][   T24] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  761.437173][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  761.484753][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.506265][   T24] usb 6-1: Product: syz
[  761.511022][   T24] usb 6-1: Manufacturer: syz
[  761.515795][   T24] usb 6-1: SerialNumber: syz
[  761.638793][   T30] audit: type=1326 audit(1744584229.763:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.2.2668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa356f8d169 code=0x0
[  761.969474][T17049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  762.008523][   T24] cdc_ncm 6-1:1.0: bind() failure
[  762.017071][   T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  762.054453][   T24] cdc_ncm 6-1:1.1: bind() failure
[  762.088545][   T24] usb 6-1: USB disconnect, device number 5
[  762.671614][T17086] FAULT_INJECTION: forcing a failure.
[  762.671614][T17086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  762.729488][T17086] CPU: 1 UID: 0 PID: 17086 Comm: syz.2.2670 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) 
[  762.729510][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  762.729519][T17086] Call Trace:
[  762.729525][T17086]  <TASK>
[  762.729531][T17086]  dump_stack_lvl+0x241/0x360
[  762.729564][T17086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  762.729587][T17086]  ? __pfx__printk+0x10/0x10
[  762.729614][T17086]  should_fail_ex+0x424/0x570
[  762.729632][T17086]  _copy_from_user+0x2d/0xb0
[  762.729653][T17086]  move_addr_to_kernel+0x7f/0x170
[  762.729674][T17086]  copy_msghdr_from_user+0x477/0x580
[  762.729697][T17086]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  762.729726][T17086]  __sys_sendmmsg+0x361/0x7b0
[  762.729760][T17086]  ? __pfx___sys_sendmmsg+0x10/0x10
[  762.729814][T17086]  ? rcu_read_lock_any_held+0xbb/0x160
[  762.729840][T17086]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  762.729869][T17086]  ? vfs_write+0xb29/0xd10
[  762.729901][T17086]  ? ksys_write+0x24e/0x2d0
[  762.729924][T17086]  ? __mutex_unlock_slowpath+0x229/0x800
[  762.729961][T17086]  ? ksys_write+0x275/0x2d0
[  762.729985][T17086]  __x64_sys_sendmmsg+0xa0/0xb0
[  762.730001][T17086]  do_syscall_64+0xf3/0x230
[  762.730019][T17086]  ? clear_bhb_loop+0x45/0xa0
[  762.730035][T17086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.730048][T17086] RIP: 0033:0x7fa356f8d169
[  762.730060][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  762.730072][T17086] RSP: 002b:00007fa357d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  762.730087][T17086] RAX: ffffffffffffffda RBX: 00007fa3571a5fa0 RCX: 00007fa356f8d169
[  762.730098][T17086] RDX: 0000000000000002 RSI: 0000200000002f80 RDI: 0000000000000003
[  762.730107][T17086] RBP: 00007fa357d31090 R08: 0000000000000000 R09: 0000000000000000
[  762.730116][T17086] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  762.730125][T17086] R13: 0000000000000000 R14: 00007fa3571a5fa0 R15: 00007fa3572cfa28
[  762.730145][T17086]  </TASK>
[  762.933450][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.619230][  T917] usb 5-1: Found UVC 0.08 device syz (046d:0823)
[  763.659999][  T917] uvcvideo 5-1:0.64: Entity type for entity Output 3 was not initialized!
[  763.688267][  T917] usb 5-1: Failed to create links for entity 3
[  763.727317][  T917] usb 5-1: Failed to register entities (-22).
[  763.749991][   T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  763.784111][  T917] usb 5-1: USB disconnect, device number 69
[  763.929997][   T10] usb 3-1: Using ep0 maxpacket: 8
[  763.978517][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  764.029587][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  764.032740][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'.
[  764.070911][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.120552][   T10] usb 3-1: config 0 descriptor??
[  764.157951][   T10] gspca_main: vc032x-2.14.0 probing 046d:0892
[  764.205088][T17104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2672'.
[  764.980631][ T5927] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  765.180666][ T5927] usb 6-1: Using ep0 maxpacket: 8
[  765.188835][ T5927] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  765.203906][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  765.259406][ T5927] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  765.320398][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  765.359326][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  765.401027][ T5927] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  765.416320][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  765.441837][T17156] xt_hashlimit: size too large, truncated to 1048576
[  765.475704][ T5927] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  765.549880][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  765.569912][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  765.609046][ T5927] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  765.625907][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  765.671569][   T10] gspca_vc032x: reg_w err -110
[  765.673881][ T5927] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  765.676677][   T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -110
[  765.698298][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  765.739131][ T5927] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  765.819668][ T5927] usb 6-1: string descriptor 0 read error: -22
[  765.829289][ T5927] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  765.859041][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.963792][ T5927] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  766.014898][ T5927] usb 3-1: USB disconnect, device number 86
[  766.060446][   T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  766.220265][   T10] usb 5-1: Using ep0 maxpacket: 32
[  766.238507][   T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  766.253432][   T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  766.264761][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  766.279054][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  766.294763][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  766.302303][ T5927] usb 6-1: USB disconnect, device number 6
[  766.318110][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  766.351488][   T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  766.370143][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.400544][   T10] usb 5-1: config 0 descriptor??
[  766.618966][   T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  766.893742][T17163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.928618][T17163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.955625][ T5907] usb 5-1: USB disconnect, device number 70
[  766.978292][ T5907] usblp0: removed
[  767.130519][   T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  767.293000][   T10] usb 3-1: config 0 has no interfaces?
[  767.306669][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  767.327683][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.345526][   T10] usb 3-1: Product: syz
[  767.350153][   T10] usb 3-1: Manufacturer: syz
[  767.356025][   T10] usb 3-1: SerialNumber: syz
[  767.365121][   T10] usb 3-1: config 0 descriptor??
[  767.936404][  T917] usb 3-1: USB disconnect, device number 87
[  768.019874][ T5927] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  768.249586][ T5927] usb 5-1: Using ep0 maxpacket: 32
[  768.337162][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  768.378489][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  768.388836][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.397129][ T5927] usb 5-1: Product: syz
[  768.404891][ T5927] usb 5-1: Manufacturer: syz
[  768.416340][ T5927] usb 5-1: SerialNumber: syz
[  768.432671][ T5927] usb 5-1: config 0 descriptor??
[  768.452695][ T5927] hdpvr 5-1:0.0: Could not find bulk-in endpoint
[  768.459582][ T5927] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  768.830406][T16106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  769.033934][   T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  769.250334][   T10] usb 3-1: Using ep0 maxpacket: 8
[  769.257882][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  769.272927][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  769.290650][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  769.327512][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  769.355760][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  769.392232][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  769.405491][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  769.426881][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  769.472125][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  769.514118][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  769.546283][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  769.554798][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  769.573948][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  769.637574][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  769.683374][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  769.713965][   T10] usb 3-1: string descriptor 0 read error: -22
[  769.723500][   T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  769.733541][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.796018][   T10] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  769.829971][ T5927] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  769.872946][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  769.925463][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2707'.
[  770.114213][   T24] usb 3-1: USB disconnect, device number 88
[  770.179869][  T917] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  770.194251][ T5927] usb 2-1: device descriptor read/64, error -71
[  770.350129][  T917] usb 6-1: Using ep0 maxpacket: 32
[  770.363443][  T917] usb 6-1: config 9 has an invalid interface number: 160 but max is 0
[  770.378752][  T917] usb 6-1: config 9 has no interface number 0
[  770.390977][  T917] usb 6-1: config 9 interface 160 has no altsetting 0
[  770.405544][  T917] usb 6-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=4e.3f
[  770.417614][  T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.429630][  T917] usb 6-1: Product: syz
[  770.434341][  T917] usb 6-1: Manufacturer: syz
[  770.439198][  T917] usb 6-1: SerialNumber: syz
[  770.444074][ T5927] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  770.603917][ T5927] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  770.614852][ T5927] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  770.625184][ T5927] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  770.636313][ T5927] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6
[  770.649087][ T5927] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  770.666541][  T917] ftdi_sio 6-1:9.160: FTDI USB Serial Device converter detected
[  770.674456][ T5927] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  770.685975][  T917] ftdi_sio ttyUSB0: unknown device type: 0x4e3f
[  770.694865][ T5927] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  770.704272][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.718268][  T917] usb 6-1: USB disconnect, device number 7
[  770.724511][ T5927] usb 2-1: Product: syz
[  770.728742][ T5927] usb 2-1: Manufacturer: syz
[  770.735017][  T917] ftdi_sio 6-1:9.160: device disconnected
[  770.744038][ T5927] usb 2-1: SerialNumber: syz
[  770.765249][ T5927] usb 2-1: ucan: probing device on interface #0
[  770.776774][ T5927] usb 2-1: ucan: invalid endpoint configuration
[  770.784246][ T5927] usb 2-1: ucan: probe failed; try to update the device firmware
[  770.919957][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  770.967185][T17273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  770.978475][T17273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  771.278194][  T917] usb 5-1: USB disconnect, device number 71
[  771.549129][  T917] usb 2-1: USB disconnect, device number 86
[  771.571410][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  771.758368][T17288] fuse: Bad value for 'fd'
[  771.773267][   T10] usb 6-1: config 0 has no interfaces?
[  771.799301][   T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  771.861425][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.895795][   T10] usb 6-1: Product: syz
[  771.914966][   T10] usb 6-1: Manufacturer: syz
[  771.919601][   T10] usb 6-1: SerialNumber: syz
[  771.947380][   T10] usb 6-1: config 0 descriptor??
[  772.191043][ T5892] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  772.210762][  T917] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  772.442027][ T5927] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  772.463918][ T5892] usb 2-1: config 7 descriptor has 1 excess byte, ignoring
[  772.472208][ T5892] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2
[  772.481589][  T917] usb 5-1: config 0 has no interfaces?
[  772.491601][  T917] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  772.501196][  T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.509184][  T917] usb 5-1: Product: syz
[  772.514261][  T917] usb 5-1: Manufacturer: syz
[  772.518889][  T917] usb 5-1: SerialNumber: syz
[  772.536711][  T917] usb 5-1: config 0 descriptor??
[  772.548987][ T5892] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  772.562264][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.571208][ T5892] usb 2-1: Product: syz
[  772.577486][ T5892] usb 2-1: Manufacturer: syz
[  772.588939][ T5892] usb 2-1: SerialNumber: syz
[  772.609879][ T5927] usb 3-1: Using ep0 maxpacket: 16
[  772.622088][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short
[  772.628997][ T5892] option 2-1:7.0: GSM modem (1-port) converter detected
[  772.643178][ T5927] usb 3-1: too many configurations: 252, using maximum allowed: 8
[  772.660950][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  772.693553][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  772.711670][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  772.724008][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  772.734656][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  772.751175][T17290] fuse: Bad value for 'fd'
[  772.771512][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  772.792814][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  772.803542][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  772.833821][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  772.857273][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  772.867723][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  772.908022][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  772.927586][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  772.938279][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  772.959785][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  773.151296][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  773.163826][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  773.192159][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  773.203649][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  773.215930][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  773.236455][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  773.247483][ T5927] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  773.259173][ T5927] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  773.273330][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0
[  773.286616][ T5927] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  773.296382][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.304940][ T5927] usb 3-1: Product: syz
[  773.309471][ T5927] usb 3-1: Manufacturer: syz
[  773.315051][ T5927] usb 3-1: SerialNumber: syz
[  774.354851][ T5892] usb 6-1: USB disconnect, device number 8
[  774.766726][ T5892] usb 5-1: USB disconnect, device number 72
[  774.874183][ T5907] usb 2-1: USB disconnect, device number 87
[  774.889095][T17311] loop8: detected capacity change from 0 to 467
[  774.912261][ T5907] option 2-1:7.0: device disconnected
[  775.102307][ T5927] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  775.130256][ T5927] usb 3-1: USB disconnect, device number 89
[  775.376802][T17324] xt_time: invalid argument - start or stop time greater than 23:59:59
[  775.475045][ T5907] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  775.483746][T17304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  775.661959][ T5907] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  775.724124][ T5907] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  775.750026][ T5907] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  775.759181][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.774088][T17317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  775.792972][ T5907] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  775.989859][T17317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  776.010141][T17317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.043075][ T5892] usb 5-1: USB disconnect, device number 73
[  776.260167][ T5907] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  776.426007][ T5907] usb 3-1: config 0 has no interfaces?
[  776.437672][ T5907] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  776.447068][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.455233][ T5907] usb 3-1: Product: syz
[  776.478382][ T5907] usb 3-1: Manufacturer: syz
[  776.501951][ T5907] usb 3-1: SerialNumber: syz
[  776.538612][ T5907] usb 3-1: config 0 descriptor??
[  777.382083][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'.
[  779.180135][ T5892] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[  779.233733][T17386] macsec0: entered promiscuous mode
[  779.244502][T17386] macsec1: entered allmulticast mode
[  779.254170][T17386] macsec0: entered allmulticast mode
[  779.259572][T17386] veth1_macvtap: entered allmulticast mode
[  779.342355][ T5892] usb 2-1: config 0 has an invalid interface number: 207 but max is 0
[  779.368387][ T5892] usb 2-1: config 0 has no interface number 0
[  779.384621][ T5892] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  779.399644][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.416986][ T5892] usb 2-1: Product: syz
[  779.424819][ T5892] usb 2-1: Manufacturer: syz
[  779.432901][ T5892] usb 2-1: SerialNumber: syz
[  779.447464][ T5892] usb 2-1: config 0 descriptor??
[  779.463156][ T5892] qmi_wwan 2-1:0.207: bogus CDC Union: master=0, slave=1
[  779.677073][ T5892] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22
[  779.796756][ T5892] usb 3-1: USB disconnect, device number 90
[  780.003772][T17400] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2738'.
[  780.055911][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'.
[  780.089906][ T5906] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  780.131054][T17400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2738'.
[  780.152514][ T5927] usb 2-1: USB disconnect, device number 88
[  780.263576][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.287570][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  780.308782][ T5906] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00
[  780.319282][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.370563][ T5906] usb 5-1: config 0 descriptor??
[  780.441893][  T917] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  780.600648][  T917] usb 6-1: Using ep0 maxpacket: 32
[  780.623691][  T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.710353][  T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.721347][  T917] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  780.730894][  T917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.743516][  T917] usb 6-1: config 0 descriptor??
[  781.100156][ T5907] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[  781.178361][  T917] savu 0003:1E7D:2D5A.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  781.260099][ T5907] usb 2-1: device descriptor read/64, error -71
[  781.500123][ T5907] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  781.641357][ T5907] usb 2-1: device descriptor read/64, error -71
[  781.780741][ T5907] usb usb2-port1: attempt power cycle
[  782.150509][ T5907] usb 2-1: new full-speed USB device number 91 using dummy_hcd
[  782.200636][ T5907] usb 2-1: device descriptor read/8, error -71
[  782.450271][ T5907] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  782.500596][  T917] usb 6-1: reset high-speed USB device number 9 using dummy_hcd
[  782.510568][ T5907] usb 2-1: device descriptor read/8, error -71
[  782.585469][ T5906] usbhid 5-1:0.0: can't add hid device: -71
[  782.611985][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  782.630488][ T5907] usb usb2-port1: unable to enumerate USB device
[  782.634299][ T5906] usb 5-1: USB disconnect, device number 74
[  782.708519][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'.
[  782.718884][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'.
[  782.730653][T17422] net_ratelimit: 1990 callbacks suppressed
[  782.730670][T17422] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  782.746093][T17422] loop2: detected capacity change from 0 to 7
[  782.753600][T17422] Dev loop2: unable to read RDB block 7
[  782.759424][T17422]  loop2: unable to read partition table
[  782.766174][T17422] loop2: partition table beyond EOD, truncated
[  782.774699][T17422] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5)
[  782.790968][T17424] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  783.374684][ T5907] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  783.589887][ T5907] usb 5-1: Using ep0 maxpacket: 8
[  783.604466][ T5907] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  783.623590][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.650566][ T5927] usb 6-1: USB disconnect, device number 9
[  783.656696][ T5907] usb 5-1: Product: syz
[  783.666937][ T5907] usb 5-1: Manufacturer: syz
[  783.683289][ T5907] usb 5-1: SerialNumber: syz
[  783.724829][T17439] i2c i2c-0: Invalid block write size 252
[  783.729589][ T5907] usb 5-1: config 0 descriptor??
[  783.859945][ T5927] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  783.950038][ T5907] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  783.990334][ T5927] usb 6-1: device descriptor read/64, error -71
[  784.240074][ T5927] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  784.392511][ T5927] usb 6-1: device descriptor read/64, error -71
[  784.512482][ T5927] usb usb6-port1: attempt power cycle
[  784.576869][ T5907] usb write operation failed. (-71)
[  784.603650][ T5907] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  784.628530][ T5907] dvbdev: DVB: registering new adapter (Terratec H7)
[  784.648389][ T5907] usb 5-1: media controller created
[  784.659367][ T5907] usb read operation failed. (-71)
[  784.666817][ T5907] usb write operation failed. (-71)
[  784.678314][ T5907] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  784.702372][ T5907] usb 5-1: USB disconnect, device number 75
[  784.884772][ T5927] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  784.921134][T16108] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  784.930485][ T5927] usb 6-1: device descriptor read/8, error -71
[  785.177404][ T5927] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  785.228763][ T5927] usb 6-1: device descriptor read/8, error -71
[  785.342686][ T5927] usb usb6-port1: unable to enumerate USB device
[  785.660009][ T5927] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  785.680030][ T5907] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  785.919819][ T5927] usb 2-1: Using ep0 maxpacket: 8
[  785.949960][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  785.978706][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  786.000422][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  786.017016][ T5907] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  786.035039][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.050591][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  786.064884][ T5907] usb 5-1: config 0 descriptor??
[  786.085653][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  786.190102][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  786.221515][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  786.271134][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  786.344913][ T5927] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  786.428441][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.458858][ T5927] usb 2-1: Product: syz
[  786.489067][ T5927] usb 2-1: Manufacturer: syz
[  786.498836][ T5927] usb 2-1: SerialNumber: syz
[  786.518979][ T5927] usb 2-1: config 0 descriptor??
[  786.539026][ T5927] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8
[  786.717692][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.741726][ T5927] usb 2-1: USB disconnect, device number 93
[  786.753512][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.781684][ T5907] usb 5-1: string descriptor 0 read error: -22
[  786.814313][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  786.982919][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  786.990161][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  787.010823][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  787.026367][   T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  787.036344][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  787.049254][   T10] usb 6-1: SerialNumber: syz
[  787.138829][T17490] netlink: 'syz.2.2771': attribute type 9 has an invalid length.
[  787.236187][ T5907] uclogic 0003:256C:006D.0031: failed retrieving string descriptor #100: -71
[  787.262134][ T5907] uclogic 0003:256C:006D.0031: failed retrieving pen parameters: -71
[  787.275889][ T5907] uclogic 0003:256C:006D.0031: failed probing pen v1 parameters: -71
[  787.296850][   T10] usb 6-1: 0:2 : does not exist
[  787.310727][ T5907] uclogic 0003:256C:006D.0031: failed probing parameters: -71
[  787.318342][ T5907] uclogic 0003:256C:006D.0031: probe with driver uclogic failed with error -71
[  787.356021][ T5907] usb 5-1: USB disconnect, device number 76
[  787.365104][   T10] usb 6-1: USB disconnect, device number 14
[  787.586039][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'.
[  787.621077][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  787.864061][T17501] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2775'.
[  787.900771][T17501] gretap0: entered promiscuous mode
[  787.915882][T17501] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2775'.
[  787.936491][T17501] 0猉功D: renamed from gretap0
[  787.949374][T17501] 0猉功D: left promiscuous mode
[  787.961705][T17501] 0猉功D: entered allmulticast mode
[  787.978038][T17501] A link change request failed with some changes committed already. Interface 
30猉功D may have been left with an inconsistent configuration, please check.
[  788.113563][   T47] kworker/1:1 (47) used greatest stack depth: 15088 bytes left
[  788.719876][ T5927] usb 2-1: new low-speed USB device number 94 using dummy_hcd
[  788.882028][ T5927] usb 2-1: Invalid ep0 maxpacket: 16
[  788.934195][T17529] sctp: [Deprecated]: syz.4.2780 (pid 17529) Use of struct sctp_assoc_value in delayed_ack socket option.
[  788.934195][T17529] Use struct sctp_sack_info instead
[  788.971639][T17529] xt_limit: Overflow, try lower: 0/0
[  789.029855][ T5927] usb 2-1: new low-speed USB device number 95 using dummy_hcd
[  789.064617][T17528] kvm: kvm [17527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x859
[  789.259092][ T5927] usb 2-1: Invalid ep0 maxpacket: 16
[  789.290069][ T5927] usb usb2-port1: attempt power cycle
[  789.380076][ T5907] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  789.509816][ T5907] usb 6-1: device descriptor read/64, error -71
[  789.650355][ T5927] usb 2-1: new low-speed USB device number 96 using dummy_hcd
[  789.670925][ T5927] usb 2-1: Invalid ep0 maxpacket: 16
[  789.761808][ T5907] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  789.810140][ T5927] usb 2-1: new low-speed USB device number 97 using dummy_hcd
[  789.841527][ T5927] usb 2-1: Invalid ep0 maxpacket: 16
[  789.848876][ T5927] usb usb2-port1: unable to enumerate USB device
[  789.920326][ T5907] usb 6-1: device descriptor read/64, error -71
[  790.040516][ T5907] usb usb6-port1: attempt power cycle
[  790.390132][ T5907] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  790.438490][ T5907] usb 6-1: device descriptor read/8, error -71
[  790.720226][ T5907] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  790.763292][ T5907] usb 6-1: device descriptor read/8, error -71
[  790.884096][ T5907] usb usb6-port1: unable to enumerate USB device
[  790.980184][ T5892] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  791.182665][ T5892] usb 5-1: config 1 interface 0 has no altsetting 0
[  791.206143][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  791.245774][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.277051][ T5892] usb 5-1: Product: syz
[  791.301899][ T5892] usb 5-1: Manufacturer: syz
[  791.318660][ T5892] usb 5-1: SerialNumber: syz
[  791.616071][T17511] syz.2.2778 (17511): drop_caches: 1
[  792.120113][   T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  792.311916][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  792.408877][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  792.508431][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  792.519011][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.561273][   T10] usb 3-1: Product: syz
[  792.570704][   T10] usb 3-1: Manufacturer: syz
[  792.581679][   T10] usb 3-1: SerialNumber: syz
[  792.599813][  T917] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  792.619398][   T10] usb 3-1: config 0 descriptor??
[  792.750064][  T917] usb 2-1: Using ep0 maxpacket: 32
[  792.757952][  T917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  792.819470][  T917] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  792.902948][  T917] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  792.919108][  T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.934321][  T917] usb 2-1: config 0 descriptor??
[  792.947697][  T917] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  793.007083][   T10] usb 3-1: USB disconnect, device number 91
[  793.303381][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  793.640305][ T5892] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  793.671132][ T5892] usb 5-1: USB disconnect, device number 77
[  793.688605][ T5892] usblp0: removed
[  793.785497][T17586] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2796'.
[  793.813467][T17586] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2796'.
[  794.129883][ T5927] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  794.289887][ T5927] usb 5-1: Using ep0 maxpacket: 32
[  794.297667][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short
[  794.306996][ T5927] usb 5-1: config 128 has an invalid interface number: 255 but max is 3
[  794.315554][ T5927] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  794.326571][ T5927] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4
[  794.335773][ T5927] usb 5-1: config 128 has no interface number 0
[  794.342393][ T5927] usb 5-1: config 128 interface 255 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  794.354112][ T5927] usb 5-1: config 128 interface 255 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  794.364807][ T5927] usb 5-1: config 128 interface 255 has no altsetting 0
[  794.374801][ T5927] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  794.384466][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.392890][ T5927] usb 5-1: Product: syz
[  794.397106][ T5927] usb 5-1: Manufacturer: syz
[  794.402237][ T5927] usb 5-1: SerialNumber: syz
[  794.919961][ T5890] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  795.035831][ T5927] usb 5-1: USB disconnect, device number 78
[  795.080512][ T5890] usb 3-1: Using ep0 maxpacket: 32
[  795.091551][  T917] usb 2-1: USB disconnect, device number 98
[  795.095740][ T5890] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  795.116584][ T5890] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  795.131798][ T5847] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  795.134560][ T5890] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  795.160134][ T5890] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[  795.175911][ T5890] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  795.194200][T17608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.197149][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0
[  795.212510][T17608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.216851][ T5890] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  795.232915][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  795.249165][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.279841][ T5847] usb 6-1: device descriptor read/64, error -71
[  795.287203][ T5890] usb 3-1: config 0 descriptor??
[  795.519936][ T5847] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  795.570739][ T5892] usb 2-1: new low-speed USB device number 99 using dummy_hcd
[  795.659868][ T5847] usb 6-1: device descriptor read/64, error -71
[  795.736494][ T5890] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  795.745141][ T5890] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  795.755476][ T5890] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  795.763835][ T5892] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  795.772841][ T5890] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  795.781352][ T5892] usb 2-1: config 246 descriptor has 1 excess byte, ignoring
[  795.785064][ T5847] usb usb6-port1: attempt power cycle
[  795.788751][ T5892] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42
[  795.788802][ T5892] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  795.815937][ T5890] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  795.826245][ T5890] hid-thrustmaster 0003:044F:B65D.0032: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  795.838522][ T5890] hid-thrustmaster 0003:044F:B65D.0032: setup data couldn't be sent
[  795.846786][ T5892] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  795.862526][ T5892] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 3222, setting to 8
[  795.879595][ T5892] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  795.889422][ T5892] usb 2-1: config 246 descriptor has 1 excess byte, ignoring
[  795.889992][  T917] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  795.896883][ T5892] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42
[  795.913924][ T5892] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  795.925866][ T5892] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  795.940100][ T5892] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 3222, setting to 8
[  795.957951][    C0] hid-thrustmaster 0003:044F:B65D.0032: URB to get model id failed with error -71
[  795.968200][ T5890] usb 3-1: USB disconnect, device number 93
[  795.982662][ T5892] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  795.997239][ T5892] usb 2-1: config 246 descriptor has 1 excess byte, ignoring
[  796.006583][ T5892] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42
[  796.017311][ T5892] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  796.029121][ T5892] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  796.040641][ T5892] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 3222, setting to 8
[  796.057359][ T5892] usb 2-1: string descriptor 0 read error: -22
[  796.064009][ T5892] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  796.073125][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.080521][  T917] usb 5-1: Using ep0 maxpacket: 32
[  796.091675][  T917] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  796.101911][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.104920][ T5892] adutux 2-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  796.112976][  T917] usb 5-1: config 0 descriptor??
[  796.137279][  T917] gspca_main: sq930x-2.14.0 probing 041e:403c
[  796.143884][ T5847] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  796.170627][ T5847] usb 6-1: device descriptor read/8, error -71
[  796.325309][ T5890] usb 2-1: USB disconnect, device number 99
[  796.431072][ T5847] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  796.451579][ T5847] usb 6-1: device descriptor read/8, error -71
[  796.562273][ T5847] usb usb6-port1: unable to enumerate USB device
[  796.790049][  T917] gspca_sq930x: reg_w 0305 fd00 failed -71
[  796.798702][  T917] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  796.810535][  T917] usb 5-1: USB disconnect, device number 79
[  797.267297][T17626] x_tables: ip_tables: udp match: only valid for protocol 17
[  797.295728][T17623] x_tables: ip_tables: udp match: only valid for protocol 17
[  797.589812][  T917] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  798.094534][  T917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  798.103885][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.134992][  T917] usb 5-1: config 0 descriptor??
[  798.559937][  T917] cp210x 5-1:0.0: cp210x converter detected
[  798.889960][ T5927] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  799.070670][  T917] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  799.099454][ T5927] usb 6-1: config 0 has no interfaces?
[  799.161990][  T917] usb 5-1: cp210x converter now attached to ttyUSB0
[  799.292085][ T5927] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  799.310142][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.321422][  T917] usb 5-1: USB disconnect, device number 80
[  799.330154][ T5927] usb 6-1: Product: syz
[  799.334420][ T5927] usb 6-1: Manufacturer: syz
[  799.353262][  T917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  799.361597][ T5927] usb 6-1: SerialNumber: syz
[  799.378251][  T917] cp210x 5-1:0.0: device disconnected
[  799.388266][ T5927] usb 6-1: config 0 descriptor??
[  799.970315][T17657] lo: entered allmulticast mode
[  799.998406][T17657] tunl0: entered allmulticast mode
[  800.021322][T17657] gre0: entered allmulticast mode
[  800.068121][T17657] erspan0: entered allmulticast mode
[  800.094607][T17657] ip_vti0: entered allmulticast mode
[  800.134019][T17657] ip6_vti0: entered allmulticast mode
[  800.149541][T17657] sit0: entered allmulticast mode
[  800.164440][T17657] ip6tnl0: entered allmulticast mode
[  800.174850][T17657] ip6gre0: entered allmulticast mode
[  800.226255][T17657] syz_tun: entered allmulticast mode
[  800.243307][T17657] ip6gretap0: entered allmulticast mode
[  800.253390][T17657] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.260767][T17657] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.269691][T17657] bridge0: entered allmulticast mode
[  800.286294][T17657] bond0: entered allmulticast mode
[  800.293326][T17657] bond_slave_0: entered allmulticast mode
[  800.299246][T17657] bond_slave_1: entered allmulticast mode
[  800.305654][T17657] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  800.314777][T17657] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  800.330197][T17657] team0: entered allmulticast mode
[  800.335588][T17657] team_slave_0: entered allmulticast mode
[  800.342140][T17657] team_slave_1: entered allmulticast mode
[  800.352102][T17657] dummy0: left promiscuous mode
[  800.362029][T17657] nlmon0: entered allmulticast mode
[  800.368789][T17657] caif0: entered allmulticast mode
[  800.375218][T17657] batadv0: entered allmulticast mode
[  800.384723][T17657] veth0: entered allmulticast mode
[  800.395085][T17657] veth1: entered allmulticast mode
[  800.404318][T17657] wg0: entered allmulticast mode
[  800.412947][T17657] wg1: entered allmulticast mode
[  800.420607][T17657] wg2: entered allmulticast mode
[  800.427504][T17657] veth0_to_bridge: entered allmulticast mode
[  800.438588][T17657] veth1_to_bridge: entered allmulticast mode
[  800.451421][T17657] veth0_to_bond: entered allmulticast mode
[  800.461703][T17657] veth1_to_bond: entered allmulticast mode
[  800.474507][T17657] veth0_to_team: entered allmulticast mode
[  800.486520][T17657] veth1_to_team: entered allmulticast mode
[  800.498272][T17657] veth0_to_batadv: entered allmulticast mode
[  800.506442][T17657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  800.519522][T17657] batadv_slave_0: entered allmulticast mode
[  800.528591][T17657] veth1_to_batadv: entered allmulticast mode
[  800.529908][ T5892] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  800.537804][T17657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  800.550929][T17657] batadv_slave_1: entered allmulticast mode
[  800.559090][T17657] xfrm0: left promiscuous mode
[  800.565105][T17657] veth0_to_hsr: entered allmulticast mode
[  800.574260][T17657] hsr_slave_0: entered allmulticast mode
[  800.583268][T17657] veth1_to_hsr: entered allmulticast mode
[  800.592009][T17657] hsr_slave_1: entered allmulticast mode
[  800.600955][T17657] veth1_virt_wifi: entered allmulticast mode
[  800.609655][T17657] veth0_virt_wifi: entered allmulticast mode
[  800.634427][T17657] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  800.642877][T17657] veth1_vlan: entered allmulticast mode
[  800.663428][T17657] vlan0: entered allmulticast mode
[  800.669441][T17657] macvlan0: entered allmulticast mode
[  800.705188][ T5892] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  800.715735][ T5892] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  800.732420][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0
[  800.732441][T17657] macvlan1: entered allmulticast mode
[  800.739133][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  800.760315][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.772967][T17657] ipvlan0: entered allmulticast mode
[  800.778702][T17657] ipvlan1: entered allmulticast mode
[  800.779533][ T5892] usb 3-1: config 0 descriptor??
[  800.785589][T17657] veth1_macvtap: entered allmulticast mode
[  800.798394][T17657] veth0_macvtap: entered allmulticast mode
[  800.808498][T17657] macvtap0: entered allmulticast mode
[  800.819038][T17657] macsec0: entered allmulticast mode
[  800.828301][T17657] geneve0: entered allmulticast mode
[  800.838725][T17657] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  800.848007][T17657] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  800.866459][T17657] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  800.876034][T17657] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  800.885444][T17657] geneve1: entered allmulticast mode
[  800.898165][T17657] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  800.909430][T17657] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  800.918299][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  800.932550][T17657] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  800.942592][T17657] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  800.950233][T17657] vlan2: entered allmulticast mode
[  800.955521][T17657] team1: entered allmulticast mode
[  800.961144][T17657] gre1: entered allmulticast mode
[  800.971740][T17657] bond1: entered allmulticast mode
[  800.977010][T17657] gretap1: entered allmulticast mode
[  800.986336][T17657] ip6gre1: entered allmulticast mode
[  800.993701][T17657] bond2: entered allmulticast mode
[  800.994058][ T5892] usb 3-1: string descriptor 0 read error: -71
[  800.999030][T17657] bridge1: entered allmulticast mode
[  801.011584][T17657] syztnl1: entered allmulticast mode
[  801.022499][T17657] hsr1: entered allmulticast mode
[  801.031007][T17657] bond3: entered allmulticast mode
[  801.036487][T17657] wireguard0: entered allmulticast mode
[  801.039418][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72
[  801.052254][T17657] wireguard0: left promiscuous mode
[  801.060388][ T5197] bcm5974 3-1:0.0: could not read from device
[  801.067832][T17657] bond4: entered allmulticast mode
[  801.074497][T17657] gretap2: entered allmulticast mode
[  801.085818][ T5892] usb 3-1: USB disconnect, device number 94
[  801.093648][T17657] syzkaller0: entered allmulticast mode
[  801.106573][T17657] bridge2: entered allmulticast mode
[  801.117657][T17657] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  801.129157][T17657] vxlan0: entered allmulticast mode
[  801.135684][T17657] veth2: entered allmulticast mode
[  801.141917][T17657] veth3: entered allmulticast mode
[  801.147290][T17657] bond5: entered allmulticast mode
[  801.153707][T17657] gre2: entered allmulticast mode
[  801.314792][ T5847] usb 6-1: USB disconnect, device number 23
[  801.477517][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'.
[  801.514482][T17680] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2823'.
[  801.649515][T17680] could not allocate digest TFM handle crc32-pclmul
[  801.671707][T17680] netlink: 'syz.4.2823': attribute type 10 has an invalid length.
[  801.680485][T17680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2823'.
[  801.697453][T17680] batadv0: entered promiscuous mode
[  801.708047][T17680] batadv0: entered allmulticast mode
[  801.723758][T17683] vivid-004: disconnect
[  801.739949][ T5927] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  801.750392][ T5847] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  801.763486][T17680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.775791][T17680] bridge0: port 3(batadv0) entered blocking state
[  801.786946][T17680] bridge0: port 3(batadv0) entered disabled state
[  801.814606][T17680] bridge0: port 3(batadv0) entered blocking state
[  801.821254][T17680] bridge0: port 3(batadv0) entered forwarding state
[  801.836797][T17680] bridge0: mtu less than device minimum
[  801.912449][ T5927] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  801.922321][ T5847] usb 6-1: config 0 has an invalid interface number: 113 but max is 0
[  801.940183][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.950013][ T5847] usb 6-1: config 0 has no interface number 0
[  801.960008][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  801.961311][ T5927] usb 2-1: config 0 descriptor??
[  801.973646][ T5847] usb 6-1: config 0 interface 113 has no altsetting 0
[  801.990231][ T5892] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  802.019271][ T5847] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  802.031309][ T5927] gspca_main: sunplus-2.14.0 probing 055f:c420
[  802.037543][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.045933][ T5847] usb 6-1: Product: syz
[  802.063848][ T5847] usb 6-1: Manufacturer: syz
[  802.106022][ T5847] usb 6-1: SerialNumber: syz
[  802.117702][ T5847] usb 6-1: config 0 descriptor??
[  802.147561][ T5847] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  802.163979][ T5892] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  802.186643][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  802.195972][ T5892] usb 3-1: Product: syz
[  802.228825][ T5892] usb 3-1: SerialNumber: syz
[  802.233362][ T5927] gspca_sunplus: reg_w_riv err -71
[  802.240699][ T5927] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  802.254810][ T5927] usb 2-1: USB disconnect, device number 100
[  802.265426][T16107] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  802.275563][T16107] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  802.334808][ T5892] usb 3-1: config 0 descriptor??
[  802.347561][T17675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  802.365357][T17675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  802.376164][ T5847] usb 6-1: USB disconnect, device number 24
[  802.784762][ T5892] ldusb 3-1:0.0: Interrupt in endpoint not found
[  802.814513][ T5892] usb 3-1: USB disconnect, device number 95
[  802.989956][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  803.370446][   T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  803.550406][   T10] usb 6-1: Using ep0 maxpacket: 8
[  803.570542][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  803.583144][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.598114][   T10] usb 6-1: Product: syz
[  803.611403][   T10] usb 6-1: Manufacturer: syz
[  803.666827][   T10] usb 6-1: SerialNumber: syz
[  803.686829][   T10] usb 6-1: config 0 descriptor??
[  803.900777][   T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  803.989847][ T5890] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  804.162032][ T5890] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  804.200245][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0
[  804.279032][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  804.299131][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.339413][ T5890] usb 2-1: Product: syz
[  804.349553][ T5890] usb 2-1: Manufacturer: syz
[  804.371347][ T5890] usb 2-1: SerialNumber: syz
[  804.454791][T17676] vivid-004: reconnect
[  804.482666][ T5890] usb 2-1: config 0 descriptor??
[  804.494747][T17717] input: syz0 as /devices/virtual/input/input73
[  804.529872][ T5907] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  804.598527][ T5890] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  804.691923][ T5907] usb 3-1: config 17 has an invalid interface number: 255 but max is 0
[  804.703660][ T5907] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config
[  804.732226][ T6278] udevd[6278]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  804.799307][ T5847] usb 2-1: USB disconnect, device number 101
[  804.849883][ T5907] usb 3-1: config 17 has no interface number 0
[  804.856660][ T5907] usb 3-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30
[  804.942140][ T5907] usb 3-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  804.962309][ T5907] usb 3-1: config 17 interface 255 has no altsetting 0
[  804.969424][ T5907] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  804.985467][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.224857][T17714] FAULT_INJECTION: forcing a failure.
[  805.224857][T17714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  805.224899][T17697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  805.246927][T17714] CPU: 0 UID: 0 PID: 17714 Comm: syz.2.2837 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) 
[  805.246956][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  805.246970][T17714] Call Trace:
[  805.246979][T17714]  <TASK>
[  805.246992][T17714]  dump_stack_lvl+0x241/0x360
[  805.247042][T17714]  ? __pfx_dump_stack_lvl+0x10/0x10
[  805.247071][T17714]  ? __pfx__printk+0x10/0x10
[  805.247111][T17714]  should_fail_ex+0x424/0x570
[  805.247138][T17714]  _copy_from_user+0x2d/0xb0
[  805.247167][T17714]  copy_msghdr_from_user+0xb3/0x580
[  805.247202][T17714]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  805.247227][T17714]  ? __fget_files+0x2a/0x420
[  805.247249][T17714]  ? __fget_files+0x2a/0x420
[  805.247276][T17714]  __sys_sendmsg+0x20a/0x360
[  805.247304][T17714]  ? __pfx___sys_sendmsg+0x10/0x10
[  805.247377][T17714]  ? do_syscall_64+0xb6/0x230
[  805.247407][T17714]  do_syscall_64+0xf3/0x230
[  805.247433][T17714]  ? clear_bhb_loop+0x45/0xa0
[  805.247457][T17714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.247476][T17714] RIP: 0033:0x7fa356f8d169
[  805.247494][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  805.247512][T17714] RSP: 002b:00007fa357d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  805.247533][T17714] RAX: ffffffffffffffda RBX: 00007fa3571a5fa0 RCX: 00007fa356f8d169
[  805.247548][T17714] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000a
[  805.247560][T17714] RBP: 00007fa357d31090 R08: 0000000000000000 R09: 0000000000000000
[  805.247573][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  805.247583][T17714] R13: 0000000000000000 R14: 00007fa3571a5fa0 R15: 00007fa3572cfa28
[  805.247612][T17714]  </TASK>
[  805.258974][T17697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  805.265963][ T5907] usb 3-1: string descriptor 0 read error: -71
[  805.349924][ T5847] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  805.353965][ T5907] aiptek 3-1:17.255: interface has no int in endpoints, but must have minimum 1
[  805.481905][ T5907] usb 3-1: USB disconnect, device number 96
[  805.502113][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.530406][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  805.548743][ T5847] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[  805.559305][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.595599][ T5847] usb 5-1: config 0 descriptor??
[  805.671354][   T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  805.694656][   T10] usb 6-1: USB disconnect, device number 25
[  805.980300][ T5927] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[  806.036338][ T5847] hid-generic 0003:05AC:4262.0033: unbalanced delimiter at end of report description
[  806.067209][ T5847] hid-generic 0003:05AC:4262.0033: probe with driver hid-generic failed with error -22
[  806.142636][T17757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2850'.
[  806.156078][ T5927] usb 2-1: config 0 has an invalid interface number: 30 but max is 0
[  806.239272][   T10] usb 5-1: USB disconnect, device number 82
[  806.244756][ T5927] usb 2-1: config 0 has no interface number 0
[  806.247666][   T30] audit: type=1800 audit(1744584274.353:693): pid=17758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2849" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=64255 res=0 errno=0
[  806.405127][ T5927] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2
[  806.447665][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.529469][ T5927] usb 2-1: config 0 descriptor??
[  806.542091][ T5927] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  806.553943][ T5927] usb 2-1: setting power ON
[  806.558617][ T5927] dvb-usb: bulk message failed: -22 (2/0)
[  806.699919][ T5927] dvb-usb: bulk message failed: -22 (1/0)
[  806.771051][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.788660][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.850826][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.891324][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  806.892124][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.910211][ T5907] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  806.935571][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.941932][ T5927] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19)
[  806.970159][ T5927] dvb_usb_cxusb 2-1:0.30: probe with driver dvb_usb_cxusb failed with error -22
[  806.995495][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.071975][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  807.090509][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.144617][ T5907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  807.161282][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.201206][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.213808][ T5907] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  807.223780][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.235540][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.262195][ T5907] usb 6-1: config 0 descriptor??
[  807.456072][ T5892] usb 2-1: USB disconnect, device number 102
[  807.599922][   T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  807.810357][   T10] usb 5-1: Using ep0 maxpacket: 16
[  807.843248][   T10] usb 5-1: config 0 has no interfaces?
[  807.852582][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  807.872508][   T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  807.909136][   T10] usb 5-1: Manufacturer: syz
[  807.943898][   T10] usb 5-1: config 0 descriptor??
[  808.139869][ T5927] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  808.164935][T17765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'.
[  808.174208][T17765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'.
[  808.222109][T17766] lo: entered promiscuous mode
[  808.228926][T17766] tunl0: entered promiscuous mode
[  808.236601][T17766] gre0: entered promiscuous mode
[  808.271052][T17766] gretap0: entered promiscuous mode
[  808.286599][T17766] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  808.363745][ T5927] usb 2-1: config 0 has no interfaces?
[  808.397237][ T5927] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  808.420007][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.449352][ T5927] usb 2-1: Product: syz
[  808.459082][ T5927] usb 2-1: Manufacturer: syz
[  808.486602][  T917] usb 5-1: USB disconnect, device number 83
[  808.494108][ T5927] usb 2-1: SerialNumber: syz
[  808.521015][ T5847] usb 3-1: new full-speed USB device number 97 using dummy_hcd
[  808.538004][ T5927] usb 2-1: config 0 descriptor??
[  808.593757][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  808.593941][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  808.630316][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  808.721492][ T5847] usb 3-1: not running at top speed; connect to a high speed hub
[  808.738491][ T5847] usb 3-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40
[  808.748278][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.766255][ T5847] usb 3-1: Product: syz
[  808.770764][ T5847] usb 3-1: Manufacturer: syz
[  808.775854][ T5847] usb 3-1: SerialNumber: syz
[  809.007612][T17779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.016530][T17779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.035245][ T5847] usbhid 3-1:1.0: can't add hid device: -71
[  809.046612][ T5847] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  809.084925][ T5847] usb 3-1: USB disconnect, device number 97
[  809.713390][ T5907] usbhid 6-1:0.0: can't add hid device: -71
[  809.719388][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  809.816687][ T5907] usb 6-1: USB disconnect, device number 26
[  809.873291][T17784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  810.103047][   T30] audit: type=1326 audit(1744584278.233:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.5.2859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2eddb8d169 code=0x0
[  810.320474][T17804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  810.528714][  T917] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  810.729903][  T917] usb 3-1: Using ep0 maxpacket: 32
[  810.737042][  T917] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  810.758037][  T917] usb 3-1: config 0 has no interface number 0
[  810.776996][  T917] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  810.786397][  T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.796905][  T917] usb 3-1: Product: syz
[  810.801223][  T917] usb 3-1: Manufacturer: syz
[  810.805844][  T917] usb 3-1: SerialNumber: syz
[  810.820450][  T917] usb 3-1: config 0 descriptor??
[  810.828746][  T917] smsc95xx v2.0.0
[  810.837140][ T5927] usb 2-1: USB disconnect, device number 103
[  810.910280][ T5892] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  811.071752][ T5892] usb 5-1: config 160 has an invalid interface number: 200 but max is 0
[  811.085986][ T5892] usb 5-1: config 160 has no interface number 0
[  811.098806][T17813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2865'.
[  811.123167][ T5892] usb 5-1: config 160 interface 200 has no altsetting 0
[  811.143038][ T5892] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  811.155212][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.185105][ T5892] usb 5-1: Product: syz
[  811.193865][ T5892] usb 5-1: Manufacturer: syz
[  811.205238][ T5892] usb 5-1: SerialNumber: syz
[  811.232808][  T917] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  811.248259][  T917] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  811.450103][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  811.459434][ T5892] usb 5-1: MIDIStreaming interface descriptor not found
[  811.583225][ T5892] usb 5-1: USB disconnect, device number 84
[  811.837127][ T7910] udevd[7910]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  811.903404][T17802] geneve4: entered promiscuous mode
[  811.926683][T17802] geneve4: entered allmulticast mode
[  812.146870][  T917] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  812.191890][  T917] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  812.220295][  T917] usb 3-1: USB disconnect, device number 98
[  812.549837][ T5927] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  812.610119][T17824] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2869'.
[  812.699950][ T5927] usb 2-1: device descriptor read/64, error -71
[  812.869818][ T5847] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  812.877598][  T917] usb 5-1: new full-speed USB device number 85 using dummy_hcd
[  812.939901][ T5927] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  813.010032][ T5847] usb 6-1: device descriptor read/64, error -71
[  813.034658][  T917] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[  813.076849][  T917] usb 5-1: config 4 has no interface number 0
[  813.090605][ T5927] usb 2-1: device descriptor read/64, error -71
[  813.098805][  T917] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c
[  813.111318][  T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.119328][  T917] usb 5-1: Product: syz
[  813.131440][  T917] usb 5-1: Manufacturer: syz
[  813.140746][  T917] usb 5-1: SerialNumber: syz
[  813.161257][  T917] gspca_main: spca505-2.14.0 probing 0733:0430
[  813.205870][ T5927] usb usb2-port1: attempt power cycle
[  813.259928][ T5847] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  813.388009][T17826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.396928][T17826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.399940][ T5847] usb 6-1: device descriptor read/64, error -71
[  813.480090][ T5892] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[  813.544411][ T5847] usb usb6-port1: attempt power cycle
[  813.560858][ T5927] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  813.581758][ T5927] usb 2-1: device descriptor read/8, error -71
[  813.633562][ T5892] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  813.655162][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.670567][ T5892] usb 3-1: config 0 descriptor??
[  813.771165][  T917] gspca_spca505: reg write: error -71
[  813.789336][  T917] spca505 5-1:4.9: probe with driver spca505 failed with error -5
[  813.819999][ T5927] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  813.890056][ T5927] usb 2-1: device descriptor read/8, error -71
[  813.891708][T17843] usb usb8: usbfs: process 17843 (syz.0.2874) did not claim interface 0 before use
[  813.907660][ T5847] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  813.942215][ T5847] usb 6-1: device descriptor read/8, error -71
[  813.983761][  T917] usb 5-1: USB disconnect, device number 85
[  814.030036][ T5927] usb usb2-port1: unable to enumerate USB device
[  814.179819][ T5847] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  814.205550][ T5847] usb 6-1: device descriptor read/8, error -71
[  814.330271][ T5847] usb usb6-port1: unable to enumerate USB device
[  814.858969][   T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  815.180760][ T5892] pegasus 3-1:0.0: can't reset MAC
[  815.186233][ T5892] pegasus 3-1:0.0: probe with driver pegasus failed with error -5
[  815.211648][   T10] usb 5-1: config 0 has no interfaces?
[  815.228439][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  815.286294][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.336578][   T10] usb 5-1: Product: syz
[  815.364696][   T10] usb 5-1: Manufacturer: syz
[  815.369337][   T10] usb 5-1: SerialNumber: syz
[  815.478502][   T10] usb 5-1: config 0 descriptor??
[  816.116621][ T5847] usb 3-1: USB disconnect, device number 99
[  816.326189][T17864] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2879'.
[  816.828549][T17869] macsec0: entered promiscuous mode
[  816.841779][T17869] macsec0: left allmulticast mode
[  816.862003][T17869] macsec0: left promiscuous mode
[  817.529037][ T5847] usb 5-1: USB disconnect, device number 86
[  818.090030][  T917] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  818.270107][ T5847] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  818.317934][  T917] usb 3-1: Using ep0 maxpacket: 32
[  818.481652][  T917] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  818.497560][  T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.573211][  T917] usb 3-1: config 0 descriptor??
[  818.594223][ T5847] usb 5-1: config index 0 descriptor too short (expected 15012, got 77)
[  818.635862][ T5847] usb 5-1: config 68 has too many interfaces: 160, using maximum allowed: 32
[  818.851055][ T5847] usb 5-1: config 68 has an invalid descriptor of length 145, skipping remainder of the config
[  818.879859][ T5847] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 160
[  818.980842][ T5847] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  818.990030][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.011876][ T5847] usb 5-1: Product: syz
[  819.066860][ T5847] usb 5-1: Manufacturer: syz
[  819.102432][ T5847] usb 5-1: SerialNumber: syz
[  819.130216][   T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  819.208416][  T917] ortek 0003:1223:3F07.0034: item fetching failed at offset 2/5
[  819.267800][  T917] ortek 0003:1223:3F07.0034: probe with driver ortek failed with error -22
[  819.289875][   T10] usb 6-1: Using ep0 maxpacket: 16
[  819.297174][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  819.323426][   T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  819.348689][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.391699][   T10] usb 6-1: Product: syz
[  819.400517][ T5890] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  819.419583][   T10] usb 6-1: Manufacturer: syz
[  819.446690][   T10] usb 6-1: SerialNumber: syz
[  819.473390][   T10] usb 6-1: config 0 descriptor??
[  819.547635][   T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  819.591114][   T10] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  819.605239][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  819.651987][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  819.689366][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.724911][ T5890] usb 2-1: Product: syz
[  819.736561][ T5890] usb 2-1: Manufacturer: syz
[  819.749954][ T5890] usb 2-1: SerialNumber: syz
[  819.992920][ T5890] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  820.215269][   T10] em28xx 6-1:0.0: chip ID is em2874
[  820.230710][T17910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  820.239333][T17910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  820.685594][ T5847] usb 5-1: USB disconnect, device number 87
[  820.776574][ T5890] usb 3-1: USB disconnect, device number 100
[  820.801838][T17913] loop2: detected capacity change from 0 to 7
[  820.812061][T17913] Dev loop2: unable to read RDB block 7
[  820.827670][T17913]  loop2: unable to read partition table
[  820.840142][   T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  820.871807][T17913] loop2: partition table beyond EOD, truncated
[  820.878064][T17913] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5)
[  820.929639][   T10] em28xx 6-1:0.0: board has no eeprom
[  821.038976][   T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  821.107818][   T10] em28xx 6-1:0.0: dvb set to bulk mode.
[  821.132139][ T5890] em28xx 6-1:0.0: Binding DVB extension
[  821.184309][   T10] usb 6-1: USB disconnect, device number 31
[  821.269159][   T10] em28xx 6-1:0.0: Disconnecting em28xx
[  821.381619][ T5890] em28xx 6-1:0.0: Registering input extension
[  821.488261][ T5890] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  821.532644][ T5890] Registered IR keymap rc-empty
[  821.580977][ T5890] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  821.637141][T17929] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  821.665458][ T5890] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input75
[  821.755834][ T5890] em28xx 6-1:0.0: Input extension successfully initialized
[  821.774071][   T10] em28xx 6-1:0.0: Closing input extension
[  821.896486][   T10] em28xx 6-1:0.0: Freeing device
[  822.494579][T17950] 
[  822.496965][T17950] ======================================================
[  822.504000][T17950] WARNING: possible circular locking dependency detected
[  822.511034][T17950] 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 Not tainted
[  822.518157][T17950] ------------------------------------------------------
[  822.525203][T17950] syz.2.2897/17950 is trying to acquire lock:
[  822.531280][T17950] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x10f0/0x39c0
[  822.540349][T17950] 
[  822.540349][T17950] but task is already holding lock:
[  822.547705][T17950] ffff88805e0a7da8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  822.557800][T17950] 
[  822.557800][T17950] which lock already depends on the new lock.
[  822.557800][T17950] 
[  822.568283][T17950] 
[  822.568283][T17950] the existing dependency chain (in reverse order) is:
[  822.577303][T17950] 
[  822.577303][T17950] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  822.585918][T17950]        lock_acquire+0x116/0x2f0
[  822.590964][T17950]        __mutex_lock+0x1a5/0x10c0
[  822.596081][T17950]        smc_switch_to_fallback+0x35/0xda0
[  822.601887][T17950]        smc_sendmsg+0x11f/0x530
[  822.606818][T17950]        __sock_sendmsg+0x221/0x270
[  822.612012][T17950]        __sys_sendto+0x365/0x4c0
[  822.617028][T17950]        __x64_sys_sendto+0xde/0x100
[  822.622313][T17950]        do_syscall_64+0xf3/0x230
[  822.627385][T17950]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.633808][T17950] 
[  822.633808][T17950] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  822.641548][T17950]        lock_acquire+0x116/0x2f0
[  822.646569][T17950]        lock_sock_nested+0x48/0x100
[  822.651864][T17950]        do_ipv6_setsockopt+0xccd/0x3680
[  822.657507][T17950]        ipv6_setsockopt+0x5d/0x170
[  822.662715][T17950]        do_sock_setsockopt+0x3b1/0x710
[  822.668265][T17950]        __x64_sys_setsockopt+0x1ee/0x280
[  822.673983][T17950]        do_syscall_64+0xf3/0x230
[  822.679014][T17950]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.685426][T17950] 
[  822.685426][T17950] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  822.692656][T17950]        validate_chain+0xa69/0x24e0
[  822.697980][T17950]        __lock_acquire+0xad5/0xd80
[  822.703185][T17950]        lock_acquire+0x116/0x2f0
[  822.708212][T17950]        __mutex_lock+0x1a5/0x10c0
[  822.713329][T17950]        do_ip_setsockopt+0x10f0/0x39c0
[  822.718878][T17950]        ip_setsockopt+0x63/0x100
[  822.723921][T17950]        smc_setsockopt+0x25c/0xd50
[  822.729182][T17950]        do_sock_setsockopt+0x3b1/0x710
[  822.734834][T17950]        __x64_sys_setsockopt+0x1ee/0x280
[  822.740573][T17950]        do_syscall_64+0xf3/0x230
[  822.745606][T17950]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.752112][T17950] 
[  822.752112][T17950] other info that might help us debug this:
[  822.752112][T17950] 
[  822.762341][T17950] Chain exists of:
[  822.762341][T17950]   rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock
[  822.762341][T17950] 
[  822.775988][T17950]  Possible unsafe locking scenario:
[  822.775988][T17950] 
[  822.783435][T17950]        CPU0                    CPU1
[  822.788795][T17950]        ----                    ----
[  822.794183][T17950]   lock(&smc->clcsock_release_lock);
[  822.799578][T17950]                                lock(sk_lock-AF_INET6);
[  822.806598][T17950]                                lock(&smc->clcsock_release_lock);
[  822.814490][T17950]   lock(rtnl_mutex);
[  822.818481][T17950] 
[  822.818481][T17950]  *** DEADLOCK ***
[  822.818481][T17950] 
[  822.826615][T17950] 1 lock held by syz.2.2897/17950:
[  822.831714][T17950]  #0: ffff88805e0a7da8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  822.842333][T17950] 
[  822.842333][T17950] stack backtrace:
[  822.848216][T17950] CPU: 0 UID: 0 PID: 17950 Comm: syz.2.2897 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) 
[  822.848236][T17950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  822.848247][T17950] Call Trace:
[  822.848253][T17950]  <TASK>
[  822.848260][T17950]  dump_stack_lvl+0x241/0x360
[  822.848286][T17950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  822.848308][T17950]  ? __pfx__printk+0x10/0x10
[  822.848329][T17950]  ? print_lock+0x171/0x1a0
[  822.848348][T17950]  print_circular_bug+0x2e1/0x300
[  822.848368][T17950]  check_noncircular+0x142/0x160
[  822.848389][T17950]  validate_chain+0xa69/0x24e0
[  822.848409][T17950]  ? finish_task_switch+0x1e5/0x870
[  822.848429][T17950]  __lock_acquire+0xad5/0xd80
[  822.848446][T17950]  lock_acquire+0x116/0x2f0
[  822.848460][T17950]  ? do_ip_setsockopt+0x10f0/0x39c0
[  822.848485][T17950]  __mutex_lock+0x1a5/0x10c0
[  822.848503][T17950]  ? do_ip_setsockopt+0x10f0/0x39c0
[  822.848524][T17950]  ? look_up_lock_class+0x7b/0x170
[  822.848543][T17950]  ? register_lock_class+0x54/0x330
[  822.848558][T17950]  ? do_ip_setsockopt+0x10f0/0x39c0
[  822.848576][T17950]  ? __pfx___mutex_lock+0x10/0x10
[  822.848593][T17950]  ? __lock_acquire+0xad5/0xd80
[  822.848612][T17950]  ? __pfx___mutex_trylock_common+0x10/0x10
[  822.848633][T17950]  do_ip_setsockopt+0x10f0/0x39c0
[  822.848654][T17950]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  822.848674][T17950]  ? smc_setsockopt+0x1b2/0xd50
[  822.848691][T17950]  ? __pfx___mutex_lock+0x10/0x10
[  822.848714][T17950]  ip_setsockopt+0x63/0x100
[  822.848731][T17950]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  822.848754][T17950]  smc_setsockopt+0x25c/0xd50
[  822.848772][T17950]  ? __pfx_aa_sk_perm+0x10/0x10
[  822.848791][T17950]  ? __pfx_smc_setsockopt+0x10/0x10
[  822.848808][T17950]  ? aa_sock_opt_perm+0x79/0x120
[  822.848830][T17950]  ? __pfx_smc_setsockopt+0x10/0x10
[  822.848847][T17950]  do_sock_setsockopt+0x3b1/0x710
[  822.848864][T17950]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  822.848878][T17950]  ? __fget_files+0x2a/0x420
[  822.848893][T17950]  ? __fget_files+0x39d/0x420
[  822.848905][T17950]  ? __fget_files+0x2a/0x420
[  822.848920][T17950]  __x64_sys_setsockopt+0x1ee/0x280
[  822.848937][T17950]  do_syscall_64+0xf3/0x230
[  822.848956][T17950]  ? clear_bhb_loop+0x45/0xa0
[  822.848972][T17950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.848988][T17950] RIP: 0033:0x7fa356f8d169
[  822.849002][T17950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  822.849016][T17950] RSP: 002b:00007fa357d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  822.849033][T17950] RAX: ffffffffffffffda RBX: 00007fa3571a5fa0 RCX: 00007fa356f8d169
[  822.849044][T17950] RDX: 000000000000002b RSI: 0000000000000000 RDI: 0000000000000005
[  822.849053][T17950] RBP: 00007fa35700e990 R08: 0000000000000108 R09: 0000000000000000
[  822.849063][T17950] R10: 0000200000001200 R11: 0000000000000246 R12: 0000000000000000
[  822.849073][T17950] R13: 0000000000000000 R14: 00007fa3571a5fa0 R15: 00007fa3572cfa28
[  822.849088][T17950]  </TASK>
[  823.337773][   T10] usb 2-1: USB disconnect, device number 108
[  823.346258][   T10] usblp0: removed
[  823.599823][ T5888] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  823.619797][ T5890] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  823.759831][ T5888] usb 5-1: Using ep0 maxpacket: 16
[  823.765589][ T5888] usb 5-1: too many configurations: 200, using maximum allowed: 8
[  823.775346][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  823.782131][ T5890] usb 3-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config
[  823.793215][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  823.802344][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61
[  823.810356][ T5888] usb 5-1: can't read configurations, error -61
[  823.818230][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  823.828138][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.836391][ T5890] usb 3-1: Product: 袎
[  823.840558][ T5890] usb 3-1: Manufacturer: 喱掛榫ョ儲耄ㄡ鐣婂垬輯恽嗭灧棰ュ晲琚察吀鈧栭邯餂勨仐戋夎嫢茂绮ｋ珘雸愳枑
[  823.851789][ T5890] usb 3-1: SerialNumber: 鐨戦繀铩欙技岬戒瓋鐨剁盯鐨⑩槐鑷恒暊鎮咁緡淇╈毃隊欕⒐娈傦牱岜侇溄閵犵嫹飰稠弲瀵筋陡氕冹醽栫﹥婧勯槈岈标嵎隃忣喖鋾瘍
[  823.939799][ T5888] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  824.090068][ T5888] usb 5-1: Using ep0 maxpacket: 16
[  824.095700][ T5888] usb 5-1: too many configurations: 200, using maximum allowed: 8
[  824.106487][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61
[  824.114373][ T5888] usb 5-1: can't read configurations, error -61
[  824.121047][ T5888] usb usb5-port1: attempt power cycle
[  824.274398][ T5890] usb 3-1: 0:2 : does not exist
[  824.295315][ T5890] usb 3-1: USB disconnect, device number 101
[  824.459775][ T5888] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  824.470796][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  824.487134][ T5888] usb 5-1: Using ep0 maxpacket: 16
[  824.494233][ T5888] usb 5-1: too many configurations: 200, using maximum allowed: 8
[  824.503401][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61
[  824.511378][ T5888] usb 5-1: can't read configurations, error -61
[  824.639954][ T5888] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  824.660483][ T5888] usb 5-1: Using ep0 maxpacket: 16
[  824.666123][ T5888] usb 5-1: too many configurations: 200, using maximum allowed: 8
[  824.675592][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61
[  824.683305][ T5888] usb 5-1: can't read configurations, error -61
[  824.690120][ T5888] usb usb5-port1: unable to enumerate USB device