last executing test programs:

8m45.519893247s ago: executing program 1 (id=1695):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7f, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0)
r2 = socket(0xa, 0x3, 0xfc)
setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8)
sendto$unix(r2, 0x0, 0x0, 0x80, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r0)

8m43.707609036s ago: executing program 1 (id=1701):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="a39c50fb000011adb4d94a6c8d246205b3a296a352e495b2f6a5f60042009e8def659e33488853633472f40dec91c9c6f14808f872fdda768029f3ff07b9259223174389f6540b82a35a27551c8a30f3358f4bd7452cc6314960fe525299de574f9241299c5d93647842e56508ec33add3e6cbaedb3635363872591dc21c0c7f7d922ff23cd4c09680c713412d5f584bbe33aafa7af4fe261c949ffdfc3308411326e60c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0xffffffbd, 0x0, 0x0, 0x1, [], [0x0, 0x0, 0x3], [], [0x0, 0x100000000, 0x1, 0x9]})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0x90, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'macsec0\x00', 'ip6erspan0\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}}, @common=@inet=@ipcomp={{0x30}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'dummy0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0502103, 0xfffffffffffffffe)
write$UHID_CREATE(r6, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000c40)={0x8, {"751be3c602a0e5276e79c086adc21270633fb3d067b21d544abb92036ecf489f5b3345ad3d6df45ba403e3d9b1137267182b6c67e967f54aaae1a43f4632e4e173f8ce97adfb7996e5cd702f546f95645b64fc34a8730dc2b3be9d88f47e1f6a862b07ab1d850e3e817f6005dabb3381780aa95a7c31cb78bf8721902712937891e9438cd773ef9e8c64c67bf47ea562d9f71def0c6ea559873b67cbdec5e83ec479104c3b3d54aa973d173522c9779135e0b5d91a1cdec65798dd915f2f59515b9335b256d166d9aace8f6c881272af4514796e6bc6549a4c65a0b1fe100f9136250d114800ff60013f6361bd7a772bdba813242130a6afcd8df14522aeb8ab20c8b7ceaae10e40c273c91c9c6462141ccb4f873279862524f0252c25aabc8386c3e404f0acd9033d24103d662d33be10a409713a13b557843396136ffc3111cbebac293d82cf913a5ea34a5b728d8da1f80327f4386ae7e9c2b6997638c372ef75f40a8688e8c74b2689dafb6b2ad2b3d6b7d558beb22a305e5904ac8a291f188334baeecbabd5d0431d63468e2d456a30da83ce133247a76e72cb1b8794e2967ef0bc18f8fdab10838b725840dba1817f2ba431b5f4ff40c19f5c36195afd79cba926416b0f94283ecb68aab6bf10a562cc3291fd5b2ce009f966fd0a94b388a6c172305e281cfeec6f8688b98b36e9910913b12d7e8c4bee96918f412d409a873a56d863df5c254afed14ce8a8c43fc84d2036b40879290f282faf06a2884c74a79594776f260618a245769ab877c1ef31e27878ea89e4ca8bdd646ce95bab8a7d5a1de735048639a2d3680126211dc9c20085dd8d715e647197a0187d03a985bf06c8da5fd961aa49645b88a927b2a2455cbda4dd3382dd2af7a9430b8606f984f4424d19562d14380b171ef1424b84ea1d22e31555b7758264962a6fa03d39c7887f47a91815189dc63ab0ecef4692b2983025bab06aad0c7ff178aa62cc882a482940f3767ea1c679176a9bd308222625570ce4ce1b49cef27a3e2f50fae9eea4a6819be790a685ede4a36d6eaba696cde1d5b7b05765b84d4b70f750aff9dd455106d816ca6324b85b07d2622150605472b72a36f503dc5e01a5390458747aa3f19c8db247b97cb14222b5e79cc6e3135be812bc8ca7c9a155852cef9dcf017ae378d9ecc9482b4857dc98c403beaf9f8bc4960292777fc58221ad46e9d5976ce2941e4fe427810dfb032c99cef90cf17f4e0083c986d66e0e170c2fea96a7360897a81a57921a9025dd021c2b0f6bbe08f8a49d8ac428a7074930bd2ef7ad28a0f17550b45bbfddd723b710994160bcc0ea2e92dbcbb114fefe22db643b9d392118ec05d7f48807ea1c4b5e39845d8207dc6b24d5d8a573034189b3563cdd14f102e2b41239ad1581a7839981d56cbdb7d8c843560272a075788603ec9b62aec5de81c734e3d8118e271179cfdb9e0ffb460519d769c05ad2b5044c2eca76a2c0824b5275c06b8715c0b6df6625a70ca14cc86ebc401f7abbd6d53e8e5d391371840510a9fb2d515be1bb1581a7e2b3a8610425da60d9ba8a841c324c3e1487036a20bc4d9149cbad2be5ed0e37f5cd21eb0d475f0c5730139d8b790e768ea169ef74069b6ccb4d09c78fcd1f1b791faef2218ce5e2707ffd0e38ada6a96a88a53dfc2ad72c9791a92d6a4d86f0f832062d62d3b425f260f654266196584729971fc3903d24300c9da725d47daa985bddff4b6fe301eb324bf6a35157bd79a0cf213398380de3bd91f583d537415afff80658992a949e433ff048c1d2495dec0461f0dd5bf4c8ac506268cd959f3493d37f8feb754062ca89398ade01f923c850eebc84ba9ee3d8c46d880d6f54f0ceafa451669c44b3e5c64411b0c855c94e8d3c345915412e041d284481e4242a1ae828345d76614979c252316b0f5eec34b98077cf89ff1834c25de73e83ad92873f2da115c02af04b71e7303e6289dbe76aaf9e5400dbbd9952c985283ff18aea8a7cab00ae650d21d235b62d9c21965c9888deebd4102bc75b95d33c6b5548f64c3c3f8fa256f21ab2577354221d5ddbc7247d46fb3532ed6322eef55aa24ac77797a38d1614923e24a9d70f6a24e0a1f28519a202fd91100f4d12ce61c37c819874bfbe5c61b4eb06c1b2b1cce56afaf16d560cf4ea727566f701e10233051dd633f4cca90c09c7aa733ecc0932d855abc08566dffe484de6d498c3625f7c2ba5bb12925d5f12e6194e21df4a4d69e1d0915963a04959348d49de928635128126557f8b5b87e1a47da42b311c47d3f0f969f069404e72d8a0d3cb0147ae6ee87abf994f384959eae9c7a91509f94f53098a8017d62bb1050b28c7976309957c34321d5a9520567970280714857904fb6e8f8c54fcdbb768028e4b37d47fd53ebd9cadb94baecbb54c78c81f7a80dd4c616df98d20ec22a0459844828c18eb7ec6d46cdc535266468bef9cfc6ce844b4b7ec9e3ff9e2619c05b477f72be3448f931312ff85727d8e1f48fbb978cb4b22bf959e97ebf4f25e19710f38a2c518702853410b32e74a68c98d58973a4a5c9d3d99c331f0d918a76fd047bb77a18eb655f72f6867cb3093438a26f080dbff4c4cd9544b9f401da3db9d235921a44c61e8292b83f83e8c9825d50bb0dbe32216e21733da8024343206e571c1d051daa670895566a9a218fb112ab2cdfa6a76bfd6374454ee1c211e5871d4186af9c7fef85af11c5b8a11774a1dd890ed2d5723b8698c339bc32473a1b5a9ec39b093ed24a3ec02b6455479bb34fa5a96c1b38fbe356c36b863e28d1234b64bcc0d071c790283b9b71137948776d6a60b67ff552d64286db810ecb90f1117dbedf6d2ce3162ec4ca4070333d1bce11419c13fdc1772ffe70fb03ad824f285660ec0c1985fff2441eddd0fa4b58dc53256ffa0df94a59a3c4165d4ae8bb883b23a8512d435e026da4583183d5147dfb2e05742803c6e9a3166f9dc40e1565887b3fd5d97c00b97b1ac542c23658d4ff03e8b9f3ecf3e35206e6ab3f38f26b70ee4e101f84ad6e3dce689ebdfa544b27af4a9a78667f6ef3564f1f0ffd0a9ed142c77961c7ae9c9a1b300023b6d79511e65d3db989052be9166b4bf9fc128b05fc500af7e7938f4e7ba7d67a117cde6c6330ca18d57150c2d51281df54d8735410805a92d4e5885a580124ecc54bc49bf451c6110a7fa195ae5691743bc4f0d3ab0a1e434884bbfbe8d0e8a5de217269c54f2f2415dbdb7e9285c7006c21cf3b593eefffd79c52c4a95da668651ed12ffe7ec0d2206588c452d107d543cf90f514a417d67b30082ed8ea7ab609d27b4ef9a7e3ac9c0d32020bca61f1df1c83e0b9625e7d6944f6d1fa3e388fb88dc0fd053fe1f1d2c5fa282a59eb2459475c6f1b556fbc791104a6707b8d37d81e7bdf158417f3e920d07d3b6ff305bafec00291c825ffc7d965e570094853389f6996ef02cc3e2f5ce3468e2d0a4ded990d372c2b234c3c1bbd6b6cff24ce474cdd98c42e7179295ac12740cefaf6e86898fb7180db31116ac7bb6d06a242f1fff5530ac7fc47f6593ac73c1a231a73e28d5b4b90d1a596b981675e4f7e0616095dffa6807c49c9d147f5a81b2822b128b035f4de8e017e54ac06e2e7dd52b3bbd778a76477dbe33e6fce5ae786879ba0739de0dee0987258912445664a405cb12a01bb94a97abccdc6d3afe7b61ba72b403a2e66c4c6b2cad20c427c0daf1d9d2dc57ccd502ff4993367dd0debcadee0e431e9115977e1c51a1905fb54268d25aa71cf056358f6d2c4c8bccdc675e350499f7776a15b41fb9e74d56ce3c82a28e9ee1815e039c6b18c8c551ddd46689e27e4c6b4ec384ee8d7fe1bd0ef40a6c288111fd61f00302f7dc442183e6dc0a2cdbbd6d43e061687989f9fef7ce54b238038461bf941a0706e2dfa8c069f4d90d1381a7429b3e692e346074c4de9e208f473a8794a6aaac2a297c29a396a28a10f4a5fa17863ed592fc39d7e8549af9f952366cee76372cf17812964c7322b370ff7f8f2074cc16b88b7cf8fd44bc3504c77efa6effb0813fe4f8ad6da76054d84d50bd9d7e1ff78b9afb4988d843d298515895d9aeaa29e496492097c79d0ecd887045cbd37cc476decc5836640d9a000e2a0a9e389dd6a996cea1dc0a7f62e2abf25d6ebee990ef19db33783d0485eaf43476b134d6873fd9a4f376ec2e4ae0993407683597ebd9376ca9d9d85d4399b3d24b8b6bf0e4910f257f6f54887f321a3768f82982144c5fe4fdf40068c3c71d34ffec82726e704c40f82f537d41b3621f06c1bb11b1665de3732df4f3eb727c04ad6b25910d9d97163119a2b72ff40109edbc58676682e0f86f75870b6f639d368d11aa1ceae80708288757db2389b16a4420008ce4a7a8487cbb7c922108a1acff54a0da5fc32c4c1e29a483e50ab9818c15c86a4997b4c8ef8dce08f633d2b558823a1c3476e61badcbb4ebcfd5f89f4075f093f5ea52c5c6f6c3025a8558ffb7c38a0662c05b8c44c0af1f15d3df1b1814255e27e9edec3346e2d59202fd643cf51a8ac5fe2a17579433afb9898cdba1c31c6083a8040064cd67c5012738660a09677e2b2156074a6586c76b86b745e7e209884185226fdbc2d826e2264e0b8d9e8896af60d82cc06452366c5dbf959e14a1a12b56bea30e35b1f50cdf95e37e0a5d272a792caec048947dd56abfe85271f0131e8d7f542525230ee0b005fe6bdec05a5f42c7027b555292374b210b7a6d72139574e10500f7db0914270d122ad93a0893c6875008e6b055a0358a48ef9b9309089323a110fcc7c5122c45401532c075957214dd6c86305819ead9cdcddec00faf31b0be040165aee5210c648eb7ac1d856dfce811391876735a05e71f2c8fa0beed3c5489897de524dd52da8a18c5a69d0be29a59dba736addf52ba02bb14121660f973a030d705480ae121b44f6d46441af124982c6b759389977e32de862bf409eeae3eaf7321c779b1c2e32080e031d854c34ce5413a098e18ac7a4b871985c83b0ba4fe68d82061923547d3ea28e004fab11afa63fcd5a6149c4bb3a2480061e5d58899a5d717893c0b73be62d4a42eb3fec479aea240fae76ef79561d4a7bf26c4f67cbe1659557f20f8fce0e183e2b4da3553741cbd764714d3e6ebec6ff0a9fb7efcd99bc71c3938b4142ca0a69faa54bab2b4f7b9143633fd6e9a26f7766b8353f491a0bcb62066df77faaaf7b639d9455bdc8937968c51848e4391c52db579a48dcc3a7f1406053bbf06ee64eb3a5b7d2e0c63efdd5edeef53820e3e52d3d12828e39d698095aa3c3cd84989fc7ca73e541ba7da40aa2297a5e3633096dfb81b5c2ec6fbeb894e41bce4e8ec5096326feece88f5a795cad6097ea7c91ec487092ebad33c06f355a195d64d17afe092a0d7ae2161ad3d33f863336ed1e4055f7f81c065230e0c1fa5b332cd6a57692f3b0f60115dcece23ee7c46a45ac79e8ec19ca091c98f06750c802b103480ebe72849b22b7419ea1e35999d0b374286c20fe64880fc5259c61e300d15659b9f6a43127aaf0587048ca9a4284b2e25f3d079ddc194a7bf12a211bdc8f969be78e6d9a686c8ebdec19bd3518a901fd9bc3ad02065f0b145a8b72abf97d7584c7ebe6054e36d6f095df5a0cfc80e82878c4a5845f31e8f351e7411b0c81880523040585881fd87424e6288fc4b877a39bb81a9a40200c8e7a438d944c268d12d7ff1f234d2a12001d3a97ad15da3d628a420bcecd3f365488120", 0x1000}}, 0x1006)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="150600000000000000000100000030000180140004007f020000000000000000000000000001060005004e220000060001000a00000008000600010000"], 0x44}, 0x5}, 0x0)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

8m39.350968993s ago: executing program 1 (id=1720):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a0000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006)
utimensat(r1, 0x0, 0x0, 0x8c) (async)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x8, 0x1}})

8m39.047613022s ago: executing program 1 (id=1723):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8)
r3 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r2}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2})
io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0)
signalfd(r2, &(0x7f0000002340), 0x8)
mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

8m38.801205444s ago: executing program 1 (id=1724):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80)
recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f00000000c0)=@caif=@dgm, 0x80, &(0x7f0000001200)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/56, 0x38}, {&(0x7f0000001180)=""/67, 0x43}], 0x3, &(0x7f0000001240)=""/112, 0x70}, 0xe6b1}, {{&(0x7f00000012c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001340)=""/165, 0xa5}, {&(0x7f0000001400)=""/200, 0xc8}], 0x2}, 0x80000000}], 0x2, 0x2000, &(0x7f00000015c0)={0x77359400})
r2 = dup(r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="c744240000180000c7442402c7665dd0c7442406000000000f011c24f30fae639e6526660f383cc1f30f090f01c926660fd07e0066b83a010f00d8c4c12171e6000fc7b05626c27f3e0f72f699", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006)

8m38.631768175s ago: executing program 1 (id=1727):
r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x10, 0x18, &(0x7f00000002c0)="bb837f9cb5015bc7a52f08cfbb18c2d641e0bd9d348239e0e977ed0d17a25dd431544ee200a7dd3d72c8e371fe164c52ac51f454e6f0951c503803c3f3ae5e7fe76643f3a29deef589eea83f5971dde0cf4de658992ec8c7e3630bfcdc82f3b600766b9c32e7f7f64406b05dfaa2f9916be7d33eb8811fffe04b0aef3380ba1a5ed89538cac00f46e40d25f428215c7c5f005c31b8f7f92de5f8ab3cf2cf39490fa3d7e9c056fcccd7f59014d881c88e9f398d36ad6ab78518ee70b0383a1c1aef4a27531f10", {0x3, 0x55, 0x4745504d, 0x7, 0x7, 0x3, 0xc, 0x6}})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000001240)={'\x00', 0x6, 0x0, 0x5})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000400)={0x1e0, 0x240, 0x3c00, 0x280, 0x5bac, 0x8, 0x4bfe210fed2ce1bf, 0x2, {0x0, 0xb, 0x1}, {0x7, 0x40, 0x1}, {0x2, 0x9}, {0x3, 0x6, 0x1}, 0x1, 0x10, 0x8, 0x9, 0x1, 0x5, 0x1, 0x101, 0x2e50, 0x2, 0x7, 0xc, 0x26, 0x2, 0x0, 0xc})
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
recvmsg$can_raw(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}], 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r9, 0x8008550e)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r11=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r10, 0xc01064c1, &(0x7f0000000080)={r11})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd27, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x2000c884)

8m38.304996482s ago: executing program 32 (id=1727):
r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x10, 0x18, &(0x7f00000002c0)="bb837f9cb5015bc7a52f08cfbb18c2d641e0bd9d348239e0e977ed0d17a25dd431544ee200a7dd3d72c8e371fe164c52ac51f454e6f0951c503803c3f3ae5e7fe76643f3a29deef589eea83f5971dde0cf4de658992ec8c7e3630bfcdc82f3b600766b9c32e7f7f64406b05dfaa2f9916be7d33eb8811fffe04b0aef3380ba1a5ed89538cac00f46e40d25f428215c7c5f005c31b8f7f92de5f8ab3cf2cf39490fa3d7e9c056fcccd7f59014d881c88e9f398d36ad6ab78518ee70b0383a1c1aef4a27531f10", {0x3, 0x55, 0x4745504d, 0x7, 0x7, 0x3, 0xc, 0x6}})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000001240)={'\x00', 0x6, 0x0, 0x5})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000400)={0x1e0, 0x240, 0x3c00, 0x280, 0x5bac, 0x8, 0x4bfe210fed2ce1bf, 0x2, {0x0, 0xb, 0x1}, {0x7, 0x40, 0x1}, {0x2, 0x9}, {0x3, 0x6, 0x1}, 0x1, 0x10, 0x8, 0x9, 0x1, 0x5, 0x1, 0x101, 0x2e50, 0x2, 0x7, 0xc, 0x26, 0x2, 0x0, 0xc})
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
recvmsg$can_raw(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}], 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r9, 0x8008550e)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r11=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r10, 0xc01064c1, &(0x7f0000000080)={r11})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd27, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x2000c884)

12.651221824s ago: executing program 5 (id=3765):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async, rerun: 32)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000180)=0x8000000000000001) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x80010, 0xffffffffffffffff, 0x57c68000) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, 0x0, 0x0) (async)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
writev(r5, 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) (async)
shutdown(r5, 0x1) (async)
connect$rds(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) (async, rerun: 64)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) (async)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r7, &(0x7f0000000000)='.\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1, 0x0, 0x2}})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x0)

10.871984632s ago: executing program 5 (id=3767):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200c0500000005013bd709"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x483f}}, &(0x7f0000000200)={0x0, 0xf, 0xf2, {0x5, 0xf, 0xf2, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0xbf, 0x8, 0x8001, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x2, 0x7}, @generic={0xb7, 0x10, 0xabb2a521e3bf8ce4, "af3f5daab03968d83663b3f283180e46a50c1aa785c83dd38229ddcae36a6de579c483803a92df9a01a897bb624db5c11f3c862952b750942253fa9a32a2bf3bf13246b942955af906334be8e40bce5cc199d7c1af7d599ecd14d5900e7f1c98fe7608b5c6a8216141b095cc4049cea8a883284adc665c352a7cfd86f681520709c0b224902ac292ff66106a32b74cceffa9261c7ed47e9a388346bc697fd6e5f8867dcd6828164fc5cc3f0d2a717b962db7ed3a"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x100, 0xf00, 0x8, [0x3f30, 0x8100, 0xff00ff, 0xc0cf, 0xc0, 0x1b0]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0xa, 0x0, "af4f6c74", "82bc3f93"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x18, 0x0, 0x7, 0x3, 0x3, 0x2, 0x8}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000440)={0x20, 0x16, 0xc6, "3edab9a6c9714083bf692b576d33531bc3bdd6faeba03be3d354eee04f99c3eaefc66b72c5a967e12857c3c469809fdc99701d2099aad60eb3c1945da3d4ecf7d3b79e6e2a3d153d6d915919ec746499144febd7fbbb6bbb35d9ec4c58e915e3b840b359857356c7ae15671718d642dc709eefcfbdb35e5c2a2ff6ba5f4074594214179e7eef4e56b26e1fb7f62375d3410b3324698e9fd5022d2e07b18e2b6cf41f7d10173806145acad848e69254fd387cdf57d09236a8287e31d4833a37a3a351dc4b6544"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0xc0, 0x10, [0x1100f]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "188d"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "6bcb"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x74e2}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xd}})
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x20000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x418bb})
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="000e00009678d8580a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.316505048s ago: executing program 3 (id=3774):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x7794662c, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xfffffff9}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000400)="b86983c841d4c4f23b9a7f0ce7f9ec075bc637428293c2eb306866f21489c77a847446de73b6afd03b5012d2dec73af42c2b58fe75860ea5cfd261207ea722a027f9eb6407ba64d7fd4e0d9e491402e8a8b1dba03c0b223082a958434a54da", 0x5f}, {&(0x7f0000000480)="d48dbcb44b930c55cd1692937c6bad2da19ecf2dc9f94eb0f2a378c88879f600156b4d3d7111db4bf1a9a1fde0d52c6e31980515307633d79c9eee8d64cab32106704c1c466a6cd5a51bf973e47dcc79cb807768c5308a8e0b1a692de0aed67d1567dcbb6f9e1b40ffff94924d593d2b27c24ca07ca037fbff92f2f4f575c4e824fe10921bab7635cfc5abe051ddf51118c351960a99d3b3eb0b6485e8ac883644cf795b9c2234bbc64e3abf6dc088113bc3e3316964aea7f19d8ba815a4a67de466323f9daa07e27f7eca183b08d8dab01493727e88", 0xd6}, {&(0x7f0000000580)="b00d45bfb21ed3f116daf574c54ac15c782b34804455467957c461f6a5685fb317f1f7d8aed3b60dc9805e644ff80b", 0x2f}, {&(0x7f00000005c0)="345ea57ae8e2bbd5c55b9cf88368c6b03b02b15c3f19598aec456c9be77e1fad638e352b9d32526b2b12e3f1d8fde29206b818fa4d083652c843b9497f0a209f44f0bb58497d0580786498aa050ad3b346ca0c7dc1ca8bf2bfc6e0326618d959423fd72223e3b8492afcb610d6317ccb2097dc7c2c3b35e94006496d32af83c60d34f3419e3f674a44d61b4b36c1", 0x8e}, {&(0x7f0000000680)="d6c320a21b1c49", 0x7}, {&(0x7f00000006c0)="9f791442a16d51ebc1b18793d08b51fee6e0f6058eebce8ed7cbcc6f63d9c0afbcf18202cbe0fe44c67c6dd6823b6818632ef8e0806b8835c892eff526c71c8a5bbc58", 0x43}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="e00000000000000029000000360000003c1800000000000008c137f53477591729e72a5a3f49812cb498606c53c5c33fba32160edff6ab9695692063fd9f507d74ff6a53896a2b3821717b8a591d372e6009015b147e9221bbe5e8185901cdac45aaf35b3451d8416b49211f30f3663812517f6f175e34dbc0261aacbffb21e57a6812377e0867ce1a1eca354e911771fda67f422e3482c682c2320c639a4fee34b553dc8027473e03b9cc1068fcb0ec397c50cfc2b7a8396a92c026cb583095ac540e4b9ccdb80797bec2f5e1588219136650040d0c87f7e745ff0000000000140000000000000029000000080000000200000000000000"], 0xf8}}], 0x1, 0x4000)
unshare(0x28000600)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x200002000000})
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0xfff}, &(0x7f0000000080)=0x90)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='os2n~'], 0x0, 0x0, 0x2)
lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
sendto$unix(r5, &(0x7f00000007c0)="8ccb30f4f3c1235738e41b97359f8df76b3f8411ad751db631a209f381e9470897a1c9bfd4605fed70fbd2d7d27a26a15b8c11d737f7c0e679be9085432e32815ee119d6276597aa42a90de294863f39831a6a692f12541e259ed6fc1487df6ff8d7567281ab2269c8fedd3039d25543f682ad91f847aafed1f9ec48608a4895eea95c619ba0eee1e7ac59d62d", 0x8d, 0xc008800, &(0x7f0000000380)=@file={0x587f53642120b02, './file0\x00'}, 0x6e)
llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000956000/0x4000)=nil, 0x4000, 0x3)
shmdt(0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa0ac0, 0x0)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/4, 0x4)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0, r7)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0)

8.09777668s ago: executing program 5 (id=3778):
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810904006641f392ff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000001200)=[{0xc00, 0x8a10, 0x0, 0x0}, {0x8000, 0x7001, 0x0, 0x0}], 0x2})
ioctl$I2C_RDWR(r0, 0x707, 0x0)

7.963990607s ago: executing program 3 (id=3779):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="9c69fafb2983f377"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

7.879131651s ago: executing program 0 (id=3780):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15})
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r4 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r4, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x8, 0x200, 0x8082, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x6, 0x5, 0x7}, 0x50)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000a40)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @initial, @device_b, {0x0, 0x1}, "", @value={0x4, 0x0, 0x3, 0x0, 0x80}}, @random="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"}, 0x7e4)
lstat(0xfffffffffffffffe, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0)
syz_clone(0x40012000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400030000000900020073797a310000000018000780050003001f0000000c000180080001400000000005000500020000000500010006"], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

5.857505893s ago: executing program 2 (id=3783):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x80c, 0x5, 0x35314258, 0x6, 0x0, [{0x8, 0x94}, {0x2, 0x8000}, {0x100, 0x1}, {0x8, 0x1ff}, {0x800, 0x7fff}, {0x8, 0xfffffffd}, {0x6, 0x9}, {0x7, 0xfffffffa}], 0x3, 0x9, 0x4, 0x2}})
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x100)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/210)
r2 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
unshare(0x2040400)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
fcntl$setsig(r2, 0xa, 0x11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190a01040000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x8004)

5.822808129s ago: executing program 5 (id=3784):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group\a\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) (async)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents(r2, &(0x7f0000000100)=""/97, 0x61)

5.692223959s ago: executing program 2 (id=3785):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000004f00))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]})
socket(0x400000000010, 0x3, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0)
utimensat(r4, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
read$FUSE(r4, &(0x7f0000002e80)={0x2020}, 0x2020)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x492492492492846, 0x0)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
connect$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000180)=0x1)
write$binfmt_elf32(r5, 0x0, 0x4cd)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES32=0x0, @ANYBLOB="01e38020000008000300060100"/24], 0x54}}, 0x20000080)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)=0x1)

5.622012706s ago: executing program 5 (id=3786):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0xa102, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xe4776000)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x9, 0x4)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [], {0x14, 0x10}}, 0x28}}, 0x0)
syz_usb_disconnect(r2)
readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/194, 0xc2}], 0x1000000000000122)

4.587467838s ago: executing program 3 (id=3788):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x80000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x34}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x40}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_settime(r5, 0x0, &(0x7f0000000080), &(0x7f00000001c0))
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1})

4.502068405s ago: executing program 0 (id=3789):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x80000bd2, 0x0, 0x0})
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x20, 0x28, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4, 0x9, 0x6}}}}}]}}]}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x3})
ppoll(&(0x7f0000000080)=[{r5, 0x12058}], 0x1, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe2(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05", @ANYRES32=r6, @ANYRES16=r7], 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ef000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300002b0000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000020000008500000085000000b70000002be300eb95"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1002, &(0x7f0000001e40)=""/4098}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000a4c000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c167f30fc7b48800480000440f01320f01c966b8e1000f00d066b82f000f00d025c0000000c422fd30183e47adc443ad6c5cf40049", 0x3c}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181100)
r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000110008002cbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8001)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x80, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0006"], 0x1c}}, 0x0)

4.243474031s ago: executing program 4 (id=3790):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x700, 0x740, 0x5, 0xa000, {{0x1a, 0x4, 0x3, 0x1c, 0x68, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp_addr={0x44, 0x54, 0xb6, 0x1, 0x4, [{@broadcast, 0xf3b6}, {@broadcast, 0xfffff801}, {@multicast1, 0x1}, {@loopback, 0x401}, {@empty, 0x1}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9af}]}]}}}}})
r0 = fsopen(&(0x7f0000000a80)='debugfs\x00', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x700, 0x740, 0x5, 0xa000, {{0x1a, 0x4, 0x3, 0x1c, 0x68, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp_addr={0x44, 0x54, 0xb6, 0x1, 0x4, [{@broadcast, 0xf3b6}, {@broadcast, 0xfffff801}, {@multicast1, 0x1}, {@loopback, 0x401}, {@empty, 0x1}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9af}]}]}}}}}) (async)
fsopen(&(0x7f0000000a80)='debugfs\x00', 0x0) (async)
fcntl$dupfd(r0, 0x0, r0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

3.961010496s ago: executing program 3 (id=3791):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f000000ba00)=[{{&(0x7f0000002240)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f00000022c0)="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", 0xfc}, {&(0x7f0000000180)="ea71c52f4e0787fe045bb93323c018b15b0e2ecbc3126acb2af4cd5e579320ac88a58cf707d2bb4057ce9d9ef6e326e0a502d96a0fee", 0x36}, {&(0x7f0000002900)="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", 0xfd}], 0x3, &(0x7f00000025c0)=ANY=[@ANYBLOB="00000000010000000180000000000000"], 0x10}}, {{&(0x7f0000002480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002680)="098a3a1dd8f3a048e1b0a25e0498ade57d3bdd673775a2461b6458201604bed4d2d28b5a3f1ee30e02abff6161c0b056ee3db0cd683a0713e035", 0x3a}, {&(0x7f00000026c0)}, {&(0x7f0000002700)="c6610ab2d667b2e1e2f0150be6f42978bb2eebdf18b13f95800049c47de3b96e782f8b38e7d16aa68eab6dde373dd7f2ca47d2d3cbe62ab9670e8bc6f674457139866e610aa17956ece1ad3a065fae8c27e0745b8820db5aab5558dd6675665ffe67671a36980c96819ca1033546f1a39a4283", 0x73}, {&(0x7f0000002780)="a14b98c5cf7ff545adcc48c958fb3f7b965b27fdd5ce7d811e5f5d9268aa503c7732b6ef9b2f9d1778d2a00c9ea74babfb908d1d984cd4dc85cb64b1346066c7aa361317962836e50454d6f2ae704e3d3bc20f1e2be89cec43d52915eba7ed5eb2615e07393f579feeda1a61f01aeebed86694fcb34a80660fe4fa89cee9dc3cca9636c3fe05074f94c3ffa2163661672a78149fed6857e909c81dbac106360bd2deb6098e8a75a1350f635f03ae1543059bb5a4fa022e26d2", 0xb9}, {&(0x7f0000002840)="aeb91732da", 0x5}], 0x5, &(0x7f0000002a80), 0x0, 0x44050}}, {{&(0x7f0000004100)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f000000b640)=[{&(0x7f0000002c80)="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", 0xfd}, {&(0x7f000000a3c0)="3fe29cb383299b6f97fdb778dcfdb46b604a9a0e2874d256eedf08cbe6491ae8c64ddf99713519a74edec835c59a86d91757188d354d0b4df59640140d0ae3369a6417d8cb7f14c0cd54b8b2a0e76e5d042fc745d4635f8de78d87488e660998a2f6a3f86b4bde04222cf022ba840067a2648422674ca88c46b2af1876eb1dee56795cd84028c12c9211cc9c5e70944512409e61d49e9fb107714f04101216508a6b28bcf0a8b21139226dc2f439a550c7c6d12a1292a254992eab121c065eefd73cb440766e1a66887650c5d7", 0xcd}, {&(0x7f000000a4c0)="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", 0x1000}, {&(0x7f00000062c0)="e18a524cbea12a228a49dbc1b607c0ca327956acea43962eb3d0730868fe56789661bb6efe892db184809f3b0475517790fb738d70824f28592ed8c30f5aecfb1fd3cae48e753e4593de6f0132e27a1027173407228a43014c6b2848d62b4f726253dce954b69a68e449427b62ef535ba7802b9f887521e626bc65603371e1bf", 0x80}, {&(0x7f0000004180)="979a7eb09f19082c9689bb6204e3bde16a56b8480bd8f0a7e02aed837553f352d963e4027868f1f5f2953aea27a3c09b43f16d1c0c", 0x35}, {&(0x7f000000b4c0)="9cb2405a25fa64df17ee469c10f5b703a187536a98919002a01611c8ab53568dd51c353c2a458a20fc14def0163c7bb2a74a3d0bce4051c3a5a65c7c25f9bb436263bc7abdc2063b40970a62bfd6b1dff75cd2d8ddd23c3f97168abf4d34a9f9cf6ecf70d2795bb6535fd34aada7bc0dbae91b56bb7ac139e38729c62dbc2fd9f88e7ac0b88661e2001de1685989402508ac107f0661026ca5c5c2c94a58232efc99c78066248be016237228751c26c17862651943f6da0e8dc6dd9f9a", 0xbd}, {&(0x7f000000b580)="7461ec840675660818907aafbd8d80f69d0419c90ab66c95f9e073e6095897ad464e2100eb3853d6dd47db163266116f43e92c6cfc08e93b0a65b63655698dab9892090cebfb14f71199c9d2228209f3942fd36f618483fdcdcff5f5715d5e6522794286731b1fb7ef16ef7099388f22925d1dca563d7db0403369182adb9aac6ffa808e215ccbc5a11c70237264df0606c503e56e1f70294d122589f7c23a242a", 0xa1}], 0x7, &(0x7f000000b880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x4000}}], 0x3, 0x804)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000007640), 0x0, &(0x7f00000041c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000004800)=[{&(0x7f0000002580)=""/5, 0x5}, {&(0x7f00000042c0)=""/231, 0xe7}, {&(0x7f00000026c0)=""/57, 0x39}, {&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f00000044c0)=""/248, 0xf8}, {&(0x7f00000045c0)=""/181, 0xb5}, {&(0x7f00000040c0)=""/48, 0x30}, {&(0x7f0000004680)=""/95, 0x5f}, {&(0x7f0000004700)=""/176, 0xb0}, {&(0x7f00000047c0)=""/37, 0x25}], 0xa}}, {{&(0x7f00000048c0), 0x6e, &(0x7f0000005ac0)=[{&(0x7f0000004940)=""/157, 0x9d}, {&(0x7f0000004a00)=""/147, 0x93}, {&(0x7f0000004ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000005b00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28}}], 0x78}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/59, 0x3b}, {&(0x7f0000007700)=""/194, 0xc2}, {&(0x7f0000005c80)}, {&(0x7f0000005cc0)=""/160, 0xa0}, {&(0x7f0000002a00)=""/245, 0xf5}, {&(0x7f0000005e80)=""/147, 0x1e}, {&(0x7f0000005f40)=""/171, 0xab}], 0x8}}, {{&(0x7f0000002600), 0x6e, &(0x7f0000007340)=[{&(0x7f0000006100)=""/150, 0x96}], 0x37, &(0x7f0000007380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x5, 0x100, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x409, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1bf)
close(r6)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r6}, './file1/file0\x00'})
openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, 0x0, 0x0)
listen(r8, 0x8)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendto$inet(r9, &(0x7f0000000380)="cd", 0x1, 0x4000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)

3.897382561s ago: executing program 2 (id=3792):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x4, 0xffff1000, 0x8, 0xffffffffffffffff, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000)
r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)=0x9, 0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000140)=""/18)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe48c2, 0x100)
ftruncate(r9, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
recvmmsg(r11, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendfile(r10, r9, 0x0, 0x578410eb)
fchown(r6, r7, r8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, <r12=>0x0})
prlimit64(r12, 0xe, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.810545678s ago: executing program 4 (id=3793):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="3170d5cb1bc451e04e70f5549e82ac73"}]}]}, 0x38}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x80}}, 0x0)

3.643267166s ago: executing program 4 (id=3794):
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x7fff, 0x3, 0x1})
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010101, @in=@empty, 0x0, 0xbf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8)
prlimit64(0x0, 0xe, 0x0, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
listen(r6, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002800000000000690780000000000dd000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0)
r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r8, r5)

3.441408125s ago: executing program 4 (id=3795):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$unix(0x1, 0x2, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

3.340446708s ago: executing program 4 (id=3796):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0)

3.236238126s ago: executing program 4 (id=3797):
unshare(0x40000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r2, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa6000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da20402001497747010203010902"], 0x0)
socket$inet6(0xa, 0x3, 0x1)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x100, 0xfffffffc}, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
read$alg(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0)

3.097113587s ago: executing program 5 (id=3798):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x2, 0x8d, 0x80, 0xf7, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0x5}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x3475, 0x7}, {0x81, 0x5}]}, 0x14, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1, &(0x7f0000000240)=""/201, &(0x7f0000000000)=0xc9)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0x2a, 0xf, {0x7, 0x25, 0x1, 0x0, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x401}}}}}}}]}}, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0), 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

3.057662729s ago: executing program 3 (id=3799):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) (async)
socket(0xa, 0x3, 0x3a) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffd56, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)}, {&(0x7f0000000500)="86e9a0d3", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94) (async)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.744469768s ago: executing program 2 (id=3800):
epoll_create(0x2e)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_io_uring_setup(0x66e, 0x0, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

2.61109908s ago: executing program 2 (id=3801):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0x1ef, 0x0, 0xffffffff, {0xa, 0x14, 0x0, 0xf4, 0x0, 0x2, 0x0, 0x8}}, 0x1c}, 0x1, 0x11}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "a028be", 0x18, 0x3c, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x33, 0x0, 0x4, 0x0, 0x10, 0x40, 0x1}, @fragment={0x3b, 0x0, 0x4, 0x0, 0x0, 0x4, 0x64}, @fragment={0x1d, 0x0, 0x6, 0x0, 0x0, 0x8, 0x66}]}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0x1ef, 0x0, 0xffffffff, {0xa, 0x14, 0x0, 0xf4, 0x0, 0x2, 0x0, 0x8}}, 0x1c}, 0x1, 0x11}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "a028be", 0x18, 0x3c, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x33, 0x0, 0x4, 0x0, 0x10, 0x40, 0x1}, @fragment={0x3b, 0x0, 0x4, 0x0, 0x0, 0x4, 0x64}, @fragment={0x1d, 0x0, 0x6, 0x0, 0x0, 0x8, 0x66}]}}}}}, 0x0) (async)

2.560714557s ago: executing program 2 (id=3802):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000080)=0x1)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffe})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019ed6e20d3131132d7cb011203010902120001000000000904"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$unix(r6, &(0x7f0000000880)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40010020, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x201, 0x0)
r9 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r9)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r10 = semget$private(0x0, 0x3, 0x401)
semop(r10, &(0x7f00000011c0)=[{0x0, 0x7fff, 0x1800}, {0x1, 0x8001, 0x1000}], 0x1f4)
semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000001580)=[0x5])

1.356251775s ago: executing program 3 (id=3803):
unshare(0x40000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r2, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa6000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da20402001497747010203010902"], 0x0)
socket$inet6(0xa, 0x3, 0x1)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x100, 0xfffffffc}, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
read$alg(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0)

1.355528079s ago: executing program 0 (id=3804):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000100000004000a70000000060a0b0400000000000000000200000044000480400001800b00010064796e73657400003000028008000440000000030800034000000001080002400000000308000940000000010073797a3000000000090073797a3200000000140000001100010000000000000000000000000a0000000000000000003d2fc0fd0000"], 0x98}}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/4085, 0xff5}], 0x3}}], 0x1, 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000820}, 0x80) (async)
keyctl$reject(0x13, 0x0, 0x8, 0x204, 0x0) (async)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

1.113610478s ago: executing program 0 (id=3805):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000140), 0x0, 0x4000)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x14c)
ftruncate(r6, 0x200004)
sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d1)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000d86000/0x4000)=nil, 0x4000})
ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"])
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0xff}, 0xc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000300)=0x1, 0x4)
sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r7, &(0x7f000000e280), 0x58a, 0x42, 0x0)
syz_io_uring_setup(0x4519, &(0x7f0000000340)={0x0, 0xf407, 0x2, 0x10001, 0x3ad}, &(0x7f00000000c0), &(0x7f00000001c0))

403.571276ms ago: executing program 0 (id=3806):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000001c00000829bd7000fcdbdf251c000000", @ANYRES32=r3, @ANYBLOB="2000220100e137045b04090781000200ffffffffffff000000000c00c100000000000c0001000000000009000100008000000900ff010000"], 0x44}}, 0x41)

0s ago: executing program 0 (id=3807):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x2d, 0x0, &(0x7f00000017c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'macsec0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2, 0x0, 0x0, 0x5, 0x25, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2, 0x4d5}, @sadb_address={0x0, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x10, @dev}}, @sadb_key={0x1e, 0x8, 0x738, 0x0, "936de671b5a60fe3fcde629071b9262166ac3ac3e9f92d81f2364363736f8944ae8ac7278e8d9f64b1daad11a90e7f9ed4ef51eb0da173b7bb2c870e6eefabad4c9d34ed87ee0a79a4ab2294233df68e55d4c8a417ac4c3e32dc0a9d3c756efbf04073ac393c7b1711aeadc45ce8db6d388f96b3a36dae6666d85afd549b5f0a2f5da26b5e38966f0a7560a583dde593dcf724437ee90390d31f3cd83aaa3ead53d98e14c236d1b89597eb1a25fc41f8badd15bb5529f4ea832633626d891f829d6ce3962c41c311ea471874746bdfe5739ef3a1853b9d646e7440d20c72a33c22b8ecd4f16361"}]}, 0x128}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
unshare(0x4000400)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
rmdir(&(0x7f0000000080)='.\x00')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)}, 0x8}], 0x3, 0x2, 0x0)
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, <r10=>0x0], 0x3b, 0xfffffffffffffd13, 0x0, 0x2})
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a80)={@in6={{0xa, 0x4e23, 0x3, @mcast1, 0x2e}}, 0x0, 0x0, 0x11, 0x0, "ed8abd3015e36c21791b4470b70f68ad15fbd99b08d779999b46f0744e51c123486ad66392ea1b4e9edf1e654971f58968a385bf62e3d37509bff02b3f5f27e9ff150d1b355a24c6e59901fa81d76a53"}, 0xd8)
eventfd2(0x1, 0x80000)
ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000a00)={r10})
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)

kernel console output (not intermixed with test programs):

ned -16
[  962.546071][T19522] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  962.554023][T19522] Cannot create hsr debugfs directory
[  962.565253][T19580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.579528][T19580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.937285][T10142] bridge_slave_1: left allmulticast mode
[  962.953326][T10142] bridge_slave_1: left promiscuous mode
[  962.966243][T10142] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.986470][T10142] bridge_slave_0: left promiscuous mode
[  963.000300][T10142] bridge0: port 1(bridge_slave_0) entered disabled state
[  963.332261][T10142] bond8 (unregistering): (slave ip6gre2): Releasing backup interface
[  963.350686][T10142] ip6gre2 (unregistering): left promiscuous mode
[  964.003544][T10142] dvmrp8 (unregistering): left allmulticast mode
[  964.081821][T10142] bond5 (unregistering): (slave geneve3): Releasing backup interface
[  964.195037][ T6562] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  964.378985][ T6562] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  964.389655][ T6562] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  964.400210][ T6562] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  964.409435][ T6562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  964.417944][ T6562] usb 5-1: SerialNumber: syz
[  964.504780][ T5851] Bluetooth: hci2: command tx timeout
[  964.630899][T10142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  964.640085][ T6562] usb 5-1: 0:2 : does not exist
[  964.650010][T10142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  964.660543][T10142] bond0 (unregistering): Released all slaves
[  964.669770][ T6562] usb 5-1: USB disconnect, device number 13
[  964.720079][T11158] udevd[11158]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  964.864136][T10142] bond1 (unregistering): Released all slaves
[  964.878895][T10142] bond2 (unregistering): Released all slaves
[  964.893879][T10142] bond3 (unregistering): Released all slaves
[  965.050688][T10142] bond4 (unregistering): Released all slaves
[  965.063574][T10142] bond5 (unregistering): Released all slaves
[  965.078682][T10142] bond6 (unregistering): Released all slaves
[  965.093036][T10142] bond7 (unregistering): Released all slaves
[  965.285333][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'.
[  965.337849][T10142] bond8 (unregistering): Released all slaves
[  965.457713][T19614] vlan2: entered promiscuous mode
[  965.474828][T19614] bridge0: entered promiscuous mode
[  965.480306][T19614] vlan2: entered allmulticast mode
[  965.487001][T19614] bridge0: entered allmulticast mode
[  965.503005][T19617] bridge_slave_0: left allmulticast mode
[  965.505335][ T5918] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  965.509134][T19617] bridge_slave_0: left promiscuous mode
[  965.531741][T19617] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.544306][T19617] bridge_slave_1: left allmulticast mode
[  965.551345][T19617] bridge_slave_1: left promiscuous mode
[  965.563908][T19617] bridge0: port 2(bridge_slave_1) entered disabled state
[  965.636964][T19617] bond0: (slave bond_slave_0): Releasing backup interface
[  965.664368][T19617] bond0: (slave bond_slave_1): Releasing backup interface
[  965.690121][ T5918] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  965.693782][T19617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  965.711502][T19617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  965.712160][ T5918] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  965.730112][T19617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  965.739701][T19617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  965.750464][ T5918] usb 5-1: Product: syz
[  965.760675][ T5918] usb 5-1: Manufacturer: syz
[  965.766063][T19617] bond0: (slave bond1): Releasing backup interface
[  965.770017][ T5918] usb 5-1: SerialNumber: syz
[  965.795579][ T5918] usb 5-1: config 0 descriptor??
[  965.826766][T10142] tipc: Disabling bearer <udp:syz2>
[  965.832552][T10142] tipc: Left network mode
[  966.147428][   T48] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  966.160587][T10142] batman_adv: batadv0: Interface deactivated: dummy0
[  966.170209][T10142] batman_adv: batadv0: Removing interface: dummy0
[  966.181610][T10142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  966.191076][T10142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  966.220792][ T5918] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  966.236340][ T5918] asix 5-1:0.0: probe with driver asix failed with error -71
[  966.252612][ T5918] usb 5-1: USB disconnect, device number 14
[  966.259379][T10142] pim6reg (unregistering): left allmulticast mode
[  966.308792][   T48] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  966.332292][   T48] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  966.343062][   T48] usb 6-1: config 220 has no interface number 2
[  966.377900][   T48] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  966.393655][   T48] usb 6-1: config 220 interface 0 has no altsetting 0
[  966.401380][   T48] usb 6-1: config 220 interface 76 has no altsetting 0
[  966.419221][   T48] usb 6-1: config 220 interface 1 has no altsetting 0
[  966.454587][   T48] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  966.473117][   T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.488252][   T48] usb 6-1: Product: syz
[  966.492483][   T48] usb 6-1: Manufacturer: syz
[  966.497487][   T48] usb 6-1: SerialNumber: syz
[  966.585617][ T5851] Bluetooth: hci2: command tx timeout
[  966.739358][T19634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.765978][T19634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.817341][T19628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.861577][T19628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  967.130434][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  967.305296][    T9] usb 5-1: Using ep0 maxpacket: 16
[  967.318357][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  967.341368][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.350640][    T9] usb 5-1: Product: syz
[  967.371522][    T9] usb 5-1: Manufacturer: syz
[  967.376489][   T48] usb 6-1: selecting invalid altsetting 0
[  967.377749][   T48] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  967.442932][    T9] usb 5-1: SerialNumber: syz
[  967.464035][   T48] usb 6-1: No valid video chain found.
[  967.493521][   T48] usb 6-1: selecting invalid altsetting 0
[  967.498767][    T9] usb 5-1: config 0 descriptor??
[  967.499385][   T48] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  967.508090][    T9] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  967.530256][   T48] usb 6-1: USB disconnect, device number 86
[  967.693844][T10142] team0 (unregistering): Port device team_slave_1 removed
[  967.720688][    T9] usb 5-1: clie_3_5_startup: get config number bad return length: 0
[  967.740177][    T9] visor 5-1:0.0: probe with driver visor failed with error -5
[  967.803415][T10142] team0 (unregistering): Port device team_slave_0 removed
[  967.950144][ T5930] usb 5-1: USB disconnect, device number 15
[  969.135716][ T5930] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  969.306217][ T5930] usb 5-1: Using ep0 maxpacket: 32
[  969.387121][ T5930] usb 5-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config
[  969.474214][ T5930] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  969.496561][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.573165][ T5930] usb 5-1: Product: syz
[  969.676838][ T5930] usb 5-1: Manufacturer: syz
[  969.724823][ T5930] usb 5-1: SerialNumber: syz
[  969.803610][T19522] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  969.803895][ T5930] usb 5-1: config 0 descriptor??
[  969.843023][T19522] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  969.911306][T19522] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  969.950127][ T5930] usb 5-1: bad CDC descriptors
[  969.957556][T19522] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  969.971507][ T5930] usb 5-1: unsupported MDLM descriptors
[  969.980365][T19629] delete_channel: no stack
[  970.292195][T19522] 8021q: adding VLAN 0 to HW filter on device bond0
[  970.323454][T19522] 8021q: adding VLAN 0 to HW filter on device team0
[  970.390992][T12499] bridge0: port 1(bridge_slave_0) entered blocking state
[  970.398137][T12499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  970.659796][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.687275][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.717243][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.724442][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  970.887710][T19522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  970.962226][T19522] veth0_vlan: entered promiscuous mode
[  970.971276][T19675] delete_channel: no stack
[  970.980203][T19522] veth1_vlan: entered promiscuous mode
[  971.035757][T19522] veth0_macvtap: entered promiscuous mode
[  971.060093][T19522] veth1_macvtap: entered promiscuous mode
[  971.111446][T19522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  971.165652][T19522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  971.206741][T19522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  971.245721][T19522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  971.273817][T19522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  971.293220][T19522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  971.358554][T19701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.379806][T19701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.684231][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.719149][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.799095][T10142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.812634][T10142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.897530][    T9] usb 5-1: USB disconnect, device number 16
[  972.091212][T19711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.119363][T19711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.404624][    T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  972.565402][    T9] usb 3-1: Using ep0 maxpacket: 32
[  972.602044][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  972.707413][    T9] usb 3-1: can't read configurations, error -61
[  972.874683][    T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  973.107954][    T9] usb 3-1: Using ep0 maxpacket: 32
[  973.165383][T19733] syz.3.3187: attempt to access beyond end of device
[  973.165383][T19733] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  973.348471][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  973.380288][    T9] usb 3-1: can't read configurations, error -61
[  973.405269][    T9] usb usb3-port1: attempt power cycle
[  973.802656][    T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  973.857474][    T9] usb 3-1: Using ep0 maxpacket: 32
[  973.895360][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  973.903001][    T9] usb 3-1: can't read configurations, error -61
[  974.004602][   T48] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  974.084495][    T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  974.125932][    T9] usb 3-1: Using ep0 maxpacket: 32
[  974.151685][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  974.167789][   T48] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024
[  974.174550][    T9] usb 3-1: can't read configurations, error -61
[  974.196816][   T48] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0
[  974.218250][   T48] usb 5-1: config 16 interface 0 has no altsetting 0
[  974.220566][    T9] usb usb3-port1: unable to enumerate USB device
[  974.232809][   T48] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  974.251064][   T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.278089][T19744] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  974.313834][T19753] netlink: 'syz.3.3191': attribute type 10 has an invalid length.
[  974.329990][T19753] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  974.505133][T19741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  974.521276][T19741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  974.559802][   T48] usb 5-1: string descriptor 0 read error: -71
[  974.582496][   T48] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  974.604588][   T48] imon 5-1:16.0: unable to initialize intf0, err -19
[  974.611325][   T48] imon:imon_probe: failed to initialize context!
[  974.638955][   T48] imon 5-1:16.0: unable to register, err -19
[  974.683757][   T48] usb 5-1: USB disconnect, device number 17
[  975.104649][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3195'.
[  975.358486][   T30] audit: type=1326 audit(1752618825.075:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[  975.394239][   T30] audit: type=1326 audit(1752618825.105:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[  975.419292][   T30] audit: type=1326 audit(1752618825.105:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[  975.461162][   T30] audit: type=1326 audit(1752618825.105:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[  975.495840][   T30] audit: type=1326 audit(1752618825.105:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[  975.520538][   T30] audit: type=1326 audit(1752618825.105:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[  975.550092][   T30] audit: type=1326 audit(1752618825.105:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[  975.580064][ T6559] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  975.605728][   T30] audit: type=1326 audit(1752618825.105:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb09d590847 code=0x7ffc0000
[  975.632558][   T30] audit: type=1326 audit(1752618825.105:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb09d5907bc code=0x7ffc0000
[  975.676701][ T5918] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  975.712097][   T30] audit: type=1326 audit(1752618825.105:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19774 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb09d5906f4 code=0x7ffc0000
[  975.754565][ T6559] usb 5-1: Using ep0 maxpacket: 32
[  975.921074][ T6559] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  975.934039][ T6559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.950966][ T5918] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  975.964166][ T5918] usb 3-1: config 0 has no interface number 0
[  975.987993][ T6559] usb 5-1: config 0 descriptor??
[  976.016348][ T6559] gspca_main: sq930x-2.14.0 probing 041e:403c
[  976.030344][ T5918] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  976.043101][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.062436][ T5918] usb 3-1: Product: syz
[  976.072617][ T5918] usb 3-1: Manufacturer: syz
[  976.082749][ T5918] usb 3-1: SerialNumber: syz
[  976.110456][ T5918] usb 3-1: config 0 descriptor??
[  976.325891][ T5918] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  976.363478][ T5918] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  976.374683][   T48] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[  976.399861][ T5918] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  976.413575][ T5918] usb 3-1: media controller created
[  976.441364][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  976.539628][   T48] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  976.550984][   T48] usb 6-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  976.574198][   T48] usb 6-1: config 0 interface 0 has no altsetting 0
[  976.615701][ T5918] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  976.649572][   T48] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00
[  976.659406][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.706033][   T48] usb 6-1: config 0 descriptor??
[  976.721496][T19792] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22
[  976.950528][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.966868][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.989691][   T48] usbhid 6-1:0.0: can't add hid device: -71
[  976.998182][   T48] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  977.044490][   T48] usb 6-1: USB disconnect, device number 87
[  977.050624][ T6559] gspca_sq930x: ucbus_write failed -71
[  977.056247][ T6559] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  977.101940][ T6559] usb 5-1: USB disconnect, device number 18
[  977.494529][   T48] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  977.654592][   T48] usb 6-1: Using ep0 maxpacket: 32
[  977.664046][   T48] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11
[  977.683932][   T48] usb 6-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  977.703089][   T48] usb 6-1: config 0 interface 0 has no altsetting 0
[  977.710321][   T48] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00
[  977.721779][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.744582][   T48] usb 6-1: config 0 descriptor??
[  977.765602][ T5918] usb 3-1: USB disconnect, device number 78
[  977.772766][   T48] hub 6-1:0.0: bad descriptor, ignoring hub
[  977.790387][T19806] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  977.807025][   T48] hub 6-1:0.0: probe with driver hub failed with error -5
[  977.924557][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  978.074558][    T9] usb 5-1: Using ep0 maxpacket: 32
[  978.081583][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  978.092896][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  978.103124][    T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  978.112780][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.124137][    T9] usb 5-1: config 0 descriptor??
[  978.169013][   T48] plantronics 0003:047F:C055.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.5-1/input0
[  978.375916][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.393930][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.571093][    T9] ft260 0003:0403:6030.003F: unknown main item tag 0x7
[  978.627761][ T5930] usb 6-1: USB disconnect, device number 88
[  978.899962][T19819] cifs: Unknown parameter 'fd'
[  979.470204][    T9] ft260 0003:0403:6030.003F: failed to retrieve chip version
[  979.488037][    T9] ft260 0003:0403:6030.003F: probe with driver ft260 failed with error -71
[  979.563488][    T9] usb 5-1: USB disconnect, device number 19
[  980.034514][ T5911] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  980.216764][ T5911] usb 3-1: Using ep0 maxpacket: 8
[  980.272129][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  980.309425][ T5911] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  980.343463][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  980.365536][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.382624][ T5911] usb 3-1: Product: syz
[  980.388283][ T5911] usb 3-1: Manufacturer: syz
[  980.392914][ T5911] usb 3-1: SerialNumber: syz
[  980.447774][ T5911] cdc_ether 3-1:1.0: skipping garbage
[  980.458740][ T5911] usb 3-1: bad CDC descriptors
[  980.646913][T19847] netlink: 'syz.2.3215': attribute type 2 has an invalid length.
[  981.108824][T19868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.148569][T19868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.479448][T19875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.502604][T19875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.604570][ T5911] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[  981.830928][ T5911] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  981.857750][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  981.894231][ T5911] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  981.923749][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.943800][ T5911] usb 6-1: Product: syz
[  981.966762][ T5911] usb 6-1: Manufacturer: syz
[  981.999796][ T5911] usb 6-1: SerialNumber: syz
[  982.471345][ T5911] usb 6-1: 0:2 : does not exist
[  982.484995][ T5911] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  982.514649][T18872] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  982.544811][ T5911] usb 6-1: USB disconnect, device number 89
[  982.604908][T11158] udevd[11158]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  982.651037][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'.
[  982.694677][T18872] usb 5-1: Using ep0 maxpacket: 32
[  982.704102][T18872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  982.720661][T18872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  982.733534][T18872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  982.755641][T18872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  982.779287][T18872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  982.793503][T18872] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  982.803387][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.813405][T18872] usb 5-1: Product: syz
[  982.818667][T18872] usb 5-1: Manufacturer: syz
[  982.823803][T18872] usb 5-1: SerialNumber: syz
[  982.838790][T18872] usb 5-1: config 0 descriptor??
[  983.046676][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3230'.
[  983.324800][   T48] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  983.514997][   T48] usb 6-1: Using ep0 maxpacket: 16
[  983.524863][T19912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  983.537328][   T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  983.548744][T19912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  983.567919][   T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  983.592533][   T48] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  983.609558][T19912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  983.627013][T19912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  983.635581][   T48] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  983.654670][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.697742][   T48] usb 6-1: config 0 descriptor??
[  984.119147][   T48] ryos 0003:1E7D:31CE.0040: unbalanced delimiter at end of report description
[  984.134369][   T48] ryos 0003:1E7D:31CE.0040: parse failed
[  984.140183][   T48] ryos 0003:1E7D:31CE.0040: probe with driver ryos failed with error -22
[  984.150240][ T5918] usb 5-1: USB disconnect, device number 20
[  984.346228][   T48] usb 6-1: USB disconnect, device number 90
[  984.428493][T19925] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3234'.
[  985.031236][T19929] IPVS: set_ctl: invalid protocol: 137 172.30.0.5:20003
[  985.550530][T19939] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  986.104955][T19950] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  986.446756][T18872] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  986.686519][T18872] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  986.695376][T18872] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  986.740156][T18872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  986.760280][T18872] usb 5-1: config 1 has no interface number 0
[  986.775437][T18872] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  986.799804][T18872] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  986.813316][T18872] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  986.822783][T18872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.859982][T18872] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  987.329869][T19982] netlink: 'syz.2.3248': attribute type 9 has an invalid length.
[  987.338318][T19982] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.3248'.
[  987.447151][T18872] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  987.487700][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  987.487717][   T30] audit: type=1804 audit(1752618837.195:4429): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3249" name="bus" dev="ramfs" ino=89895 res=1 errno=0
[  988.243192][   T48] usb 5-1: USB disconnect, device number 21
[  988.250395][   T48] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  988.585327][T19993] fuse: Unknown parameter 'uid>00000000000000000000'
[  989.171415][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'.
[  989.331766][   T30] audit: type=1400 audit(1752618839.035:4430): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=20010 comm="syz.5.3257"
[  989.370565][T20023] usb usb8: usbfs: process 20023 (syz.5.3257) did not claim interface 0 before use
[  989.473289][T20024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  990.501455][T20046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.504527][   T48] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  990.538118][T20046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  990.646562][T20047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.664967][T20047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  990.732349][   T48] usb 5-1: Using ep0 maxpacket: 32
[  990.740952][   T48] usb 5-1: config 0 has an invalid interface number: 235 but max is 0
[  990.754166][   T48] usb 5-1: config 0 has no interface number 0
[  990.797994][   T48] usb 5-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  990.807413][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.818681][   T48] usb 5-1: Product: syz
[  990.827607][   T48] usb 5-1: Manufacturer: syz
[  990.838354][   T48] usb 5-1: SerialNumber: syz
[  990.863326][   T48] usb 5-1: config 0 descriptor??
[  990.951863][T20053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  991.001323][T20053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  991.020829][T20052] kvm: requested 9219 ns i8254 timer period limited to 200000 ns
[  991.092045][   T48] kaweth 5-1:0.235: Firmware present in device.
[  991.281740][   T48] kaweth 5-1:0.235: Statistics collection: 92ab801
[  991.294640][   T48] kaweth 5-1:0.235: Multicast filter limit: 3cb2
[  991.311748][   T48] kaweth 5-1:0.235: MTU: 16815
[  991.328842][   T48] kaweth 5-1:0.235: Read MAC address b9:e4:e3:15:c9:13
[  991.890463][   T48] kaweth 5-1:0.235: Error setting receive filter
[  991.933456][   T48] kaweth 5-1:0.235: probe with driver kaweth failed with error -5
[  992.104246][   T48] usb 5-1: USB disconnect, device number 22
[  992.946676][T20077] netlink: 'syz.0.3269': attribute type 13 has an invalid length.
[  992.997324][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  993.017371][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  993.337802][T20079] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  993.631769][T20077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  994.291564][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'.
[  995.002522][T20106] loop4: detected capacity change from 0 to 1
[  995.034863][T20106] Dev loop4: unable to read RDB block 1
[  995.050598][T20106]  loop4: unable to read partition table
[  995.064301][T20106] loop4: partition table beyond EOD, truncated
[  995.094010][T20106] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  995.594604][ T6559] usb 6-1: new full-speed USB device number 91 using dummy_hcd
[  995.803109][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3283'.
[  995.866286][ T6559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  995.884502][ T6559] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  995.910034][ T6559] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  995.951438][ T6559] usb 6-1: New USB device found, idVendor=0525, idProduct=86a1, bcdDevice= 0.40
[  995.963240][ T6559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.978634][ T6559] usb 6-1: Product: syz
[  995.990165][ T6559] usb 6-1: Manufacturer: syz
[  995.997666][ T6559] usb 6-1: SerialNumber: syz
[  996.055964][T20129] program syz.0.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  996.074640][T18872] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  996.172914][T20131] netlink: 'syz.0.3285': attribute type 10 has an invalid length.
[  996.189854][T20131] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  996.202509][T20131] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  996.217960][T20131] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  996.221225][T20130] syz.0.3285 (20130): drop_caches: 2
[  996.239866][T20130] syz.0.3285 (20130): drop_caches: 2
[  996.254642][T18872] usb 5-1: Using ep0 maxpacket: 16
[  996.264011][ T6559] cdc_ncm 6-1:1.0: bind() failure
[  996.268925][T18872] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  996.280666][T18872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  996.292466][T18872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  996.295763][ T6559] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  996.310672][T18872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 31488, setting to 1024
[  996.313652][ T6559] cdc_ncm 6-1:1.1: bind() failure
[  996.349423][T18872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  996.384286][T18872] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  996.389054][ T6559] usb 6-1: USB disconnect, device number 91
[  996.399538][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.408291][T18872] usb 5-1: Product: syz
[  996.412641][T18872] usb 5-1: Manufacturer: syz
[  996.417656][T18872] usb 5-1: SerialNumber: syz
[  996.441535][T18872] usb 5-1: config 0 descriptor??
[  996.450649][T20121] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  996.458461][T20121] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  996.509156][    C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71)
[  996.516091][T18872] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected
[  996.523249][    C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71)
[  996.714099][T20141] pim6reg: entered allmulticast mode
[  996.725121][T18872] usb 5-1: USB disconnect, device number 23
[  996.733138][T18872] mcba_usb 5-1:0.0 can0: device disconnected
[  997.359943][T20135] pim6reg: left allmulticast mode
[  997.880892][T20164] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  998.581425][   T48] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  998.732331][T20177] loop7: detected capacity change from 16384 to 16382
[  998.767419][T20177] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3298'.
[  998.805665][   T48] usb 5-1: Using ep0 maxpacket: 16
[  998.838851][   T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  998.854078][   T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  998.873131][   T48] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  998.882522][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.914147][   T48] usb 5-1: Product: syz
[  998.918595][   T48] usb 5-1: Manufacturer: syz
[  998.923444][   T48] usb 5-1: SerialNumber: syz
[  998.949240][   T48] usb 5-1: config 0 descriptor??
[  998.966136][   T48] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  999.004183][   T48] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  999.373758][   T48] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  999.423309][   T48] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  999.453679][   T48] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  999.474707][   T48] em28xx 5-1:0.0: No AC97 audio processor
[  999.516143][   T48] usb 5-1: USB disconnect, device number 24
[  999.523435][   T48] em28xx 5-1:0.0: Disconnecting em28xx
[  999.555552][   T48] em28xx 5-1:0.0: Freeing device
[  999.626580][T20200] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  999.663500][T20200] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  999.679472][T20202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  999.700100][T20202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1000.117880][T20213] bridge0: entered promiscuous mode
[ 1000.588403][T20220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1000.630182][T20220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1000.944880][ T5918] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1001.106470][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1001.120037][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1001.142996][ T5918] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00
[ 1001.165884][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.197178][ T5918] usb 5-1: config 0 descriptor??
[ 1001.622840][ T5918] saitek 0003:06A3:0CCB.0041: item fetching failed at offset 0/3
[ 1001.653699][ T5918] saitek 0003:06A3:0CCB.0041: parse failed
[ 1001.723212][ T5918] saitek 0003:06A3:0CCB.0041: probe with driver saitek failed with error -22
[ 1001.830198][ T5918] usb 5-1: USB disconnect, device number 25
[ 1002.614080][T20247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3316'.
[ 1002.734612][ T5918] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[ 1003.079751][ T5918] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.096583][ T5918] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[ 1003.107969][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.134988][ T5918] usb 5-1: Product: syz
[ 1003.159405][ T5918] usb 5-1: Manufacturer: syz
[ 1003.164072][ T5918] usb 5-1: SerialNumber: syz
[ 1003.406818][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.427181][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.440558][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.468060][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.508186][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.546300][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.558336][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.568721][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.579357][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.589848][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.650558][ T5918] usb 5-1: selecting invalid altsetting 1
[ 1003.683283][T20260] fuse: Unknown parameter '
[ 1003.683283][T20260] �*0x0000000000000007'
[ 1003.754894][T20262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.821351][T20262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.884865][ T5918] LME2510(C): Firmware Status: 00 00 00 00 00 00
[ 1003.884996][ T5918] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[ 1003.926353][T20262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1004.005331][T20262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1004.657206][ T5918] usb 5-1: USB disconnect, device number 26
[ 1005.402506][T20286] netlink: 'syz.4.3330': attribute type 12 has an invalid length.
[ 1005.431133][T20286] netlink: 'syz.4.3330': attribute type 29 has an invalid length.
[ 1005.449525][T20286] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3330'.
[ 1005.474515][T20286] netlink: 'syz.4.3330': attribute type 2 has an invalid length.
[ 1005.496963][T20286] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3330'.
[ 1006.012845][T20292] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3331'.
[ 1007.295060][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3336'.
[ 1007.332380][T20307] veth1_to_hsr: entered promiscuous mode
[ 1007.363361][T20307] macsec1: entered promiscuous mode
[ 1007.398251][T20307] macsec1: entered allmulticast mode
[ 1007.413923][T20307] veth1_to_hsr: entered allmulticast mode
[ 1007.463034][T20307] veth1_to_hsr: left allmulticast mode
[ 1007.485380][T20307] veth1_to_hsr: left promiscuous mode
[ 1008.290274][T20336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1008.301383][T20336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1008.851106][T20349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1008.892138][T20349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1008.970911][T20354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1009.023341][T20354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1009.204597][ T6562] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1009.280576][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3349'.
[ 1009.366696][ T6562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.380448][ T6562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1009.392620][ T6562] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[ 1009.402062][ T6562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.412301][ T6562] usb 5-1: config 0 descriptor??
[ 1009.614534][ T5911] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1009.635941][ T6562] usbhid 5-1:0.0: can't add hid device: -71
[ 1009.641991][ T6562] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1009.695379][ T6562] usb 5-1: USB disconnect, device number 27
[ 1009.730986][T20367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1009.742163][T20367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1009.797748][T20365] netlink: 'syz.2.3351': attribute type 30 has an invalid length.
[ 1009.805767][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'.
[ 1009.814991][T20365] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[ 1009.816937][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.839337][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1009.852782][ T5911] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1009.862306][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.882849][ T5911] usb 6-1: config 0 descriptor??
[ 1010.118052][T20372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1010.127700][T20373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1010.129345][T20372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1010.142327][T20373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1010.297994][ T5911] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0
[ 1010.329543][ T5911] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1010.549429][ T5911] usb 6-1: USB disconnect, device number 92
[ 1010.749282][T20391] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3356'.
[ 1011.363034][T20404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1011.441809][T20404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1011.661289][T20412] macvlan0: entered allmulticast mode
[ 1011.668659][T20412] veth1_vlan: entered allmulticast mode
[ 1012.084869][T20422] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 1012.107550][T20422] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[ 1012.134744][T20422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1012.320048][   T30] audit: type=1326 audit(1752618862.035:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20428 comm="syz.3.3368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x0
[ 1012.421546][T20431] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3367'.
[ 1012.519526][T20432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1012.759143][T20450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.768612][T20450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.783850][T20450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.793273][T20450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.324676][ T5918] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1013.534965][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1013.546664][ T5918] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1013.557255][ T5918] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1013.566427][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.582784][T20459] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[ 1013.605415][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1013.819213][ T5918] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0
[ 1013.844584][ T5918] hid-generic 0000:0000:0000.0043: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1013.944345][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'.
[ 1014.001645][ T5918] usb 5-1: USB disconnect, device number 28
[ 1016.092039][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.126293][T20473] veth1_macvtap: left promiscuous mode
[ 1016.133027][T20473] macsec0: entered promiscuous mode
[ 1016.134833][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.159177][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.162648][T20474] veth1_macvtap: entered promiscuous mode
[ 1016.173941][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.210279][T20474] macsec0: left promiscuous mode
[ 1016.213274][T20476] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3378'.
[ 1017.152935][T20497] macsec0: left allmulticast mode
[ 1017.159877][T20497] veth1_macvtap: entered promiscuous mode
[ 1017.167358][T20497] macsec0: left promiscuous mode
[ 1017.764582][ T5918] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1018.036212][ T5918] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1018.131527][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.233255][ T5918] usb 5-1: config 0 descriptor??
[ 1018.259659][ T5918] cp210x 5-1:0.0: cp210x converter detected
[ 1018.663982][ T5918] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1018.675960][ T5918] cp210x 5-1:0.0: GPIO initialisation failed: -71
[ 1018.756406][ T5918] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1018.792166][ T5918] usb 5-1: USB disconnect, device number 29
[ 1018.808400][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1018.942733][ T5918] cp210x 5-1:0.0: device disconnected
[ 1019.135341][ T5911] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1019.175317][T20522] netlink: 'syz.2.3391': attribute type 14 has an invalid length.
[ 1019.290888][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1019.300021][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1019.319968][ T5911] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.5a
[ 1019.335548][ T5911] usb 6-1: New USB device strings: Mfr=248, Product=2, SerialNumber=3
[ 1019.399633][ T5911] usb 6-1: Product: syz
[ 1019.462067][ T5911] usb 6-1: Manufacturer: syz
[ 1019.514609][ T5911] usb 6-1: SerialNumber: syz
[ 1019.571427][ T5911] usb 6-1: config 0 descriptor??
[ 1020.283452][   T51] Bluetooth: hci2: command 0x0405 tx timeout
[ 1020.303770][ T5911] usb 6-1: Firmware: major: 13, minor: 0, hardware type: ATUSB (0)
[ 1020.365382][ T5918] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1020.668936][   T30] audit: type=1326 audit(1752618870.365:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.3.3395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x0
[ 1020.885060][T20554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3395'.
[ 1020.915985][ T5918] usb 5-1: device descriptor read/64, error -71
[ 1021.294510][ T5918] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1021.385576][ T5911] usb 6-1: failed to fetch extended address, random address set
[ 1021.434823][ T5918] usb 5-1: device descriptor read/64, error -71
[ 1021.548355][ T5918] usb usb5-port1: attempt power cycle
[ 1021.959631][ T6562] usb 6-1: USB disconnect, device number 93
[ 1022.064774][ T5918] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1022.116074][ T5918] usb 5-1: device descriptor read/8, error -71
[ 1022.594506][ T5918] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1022.620657][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3402'.
[ 1023.213395][T20580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1023.257829][T20580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1023.396747][T20585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[ 1023.403310][T20585] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1023.445540][T20585] vhci_hcd vhci_hcd.0: Device attached
[ 1023.496931][T20587] vhci_hcd: connection closed
[ 1023.497866][   T12] vhci_hcd: stop threads
[ 1023.524619][   T12] vhci_hcd: release socket
[ 1023.544478][   T12] vhci_hcd: disconnect device
[ 1023.599141][ T5918] usb 5-1: device descriptor read/8, error -71
[ 1023.744986][ T5918] usb usb5-port1: unable to enumerate USB device
[ 1023.822227][T20593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1023.852610][T20593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.134844][ T6559] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1024.137956][T20602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3409'.
[ 1024.157957][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'.
[ 1024.209783][T20605] tipc: Enabling of bearer <ib:dvmrp1> rejected, failed to enable media
[ 1024.309608][ T6559] usb 6-1: device descriptor read/64, error -71
[ 1024.310758][T20607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.336811][T20607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.365530][T20607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3411'.
[ 1024.584530][ T6559] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1024.721769][ T6559] usb 6-1: device descriptor read/64, error -71
[ 1024.990095][T20622] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1024.995115][ T6559] usb usb6-port1: attempt power cycle
[ 1025.022482][T20622] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1025.114117][T20622] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[ 1025.134914][T20623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1025.142387][T20623] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1025.161153][T20623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1025.168867][T20623] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1025.177541][T20623] batman_adv: batadv0: Removing interface: ip6gretap1
[ 1025.374518][ T6559] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1025.452370][ T6559] usb 6-1: device descriptor read/8, error -71
[ 1025.611386][T20631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1025.628350][T20631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1025.642081][T20631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1025.653363][T20631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1025.694645][ T6559] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1025.715981][ T6559] usb 6-1: device descriptor read/8, error -71
[ 1025.835309][ T6559] usb usb6-port1: unable to enumerate USB device
[ 1026.724642][ T6562] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1026.854658][ T6562] usb 5-1: device descriptor read/64, error -71
[ 1027.021337][   T30] audit: type=1326 audit(1752618876.735:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20648 comm="syz.5.3421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb09d58e929 code=0x0
[ 1027.104497][ T6562] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1027.234649][ T6562] usb 5-1: device descriptor read/64, error -71
[ 1027.354815][ T5911] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1027.363387][ T6562] usb usb5-port1: attempt power cycle
[ 1027.515021][ T5911] usb 6-1: Using ep0 maxpacket: 8
[ 1027.522671][ T5911] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[ 1027.532381][ T5911] usb 6-1: config 6 has no interface number 0
[ 1027.538858][ T5911] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1027.555475][ T5911] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1027.569906][ T5911] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1027.581585][ T5911] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1027.594065][ T5911] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1027.619202][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.628015][ T5911] usb 6-1: Product: syz
[ 1027.632284][ T5911] usb 6-1: Manufacturer: syz
[ 1027.642234][ T5911] usb 6-1: SerialNumber: syz
[ 1027.663023][ T5911] hso 6-1:6.2: Failed to find BULK IN ep
[ 1027.704548][ T6562] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1027.736184][ T6562] usb 5-1: device descriptor read/8, error -71
[ 1027.803244][T20659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1027.822835][T20659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1027.984605][ T6562] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1028.005244][ T6562] usb 5-1: device descriptor read/8, error -71
[ 1028.125996][ T6562] usb usb5-port1: unable to enumerate USB device
[ 1028.442018][T20664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.451413][T20664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1029.065477][T20669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1029.074154][T20669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1029.494243][T20677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1030.019078][    T9] usb 6-1: USB disconnect, device number 98
[ 1030.113184][T20682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.171834][T20683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.182098][T20682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.185248][T20683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.263730][T18872] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1030.303966][T20682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.315473][T20682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.330489][T20689] kernel read not supported for file /eth0 (pid: 20689 comm: syz.2.3433)
[ 1030.349073][   T30] audit: type=1800 audit(1752618880.055:4434): pid=20689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3433" name="eth0" dev="mqueue" ino=97611 res=0 errno=0
[ 1030.391767][T20690] netlink: 'syz.5.3432': attribute type 12 has an invalid length.
[ 1030.454903][T18872] usb 5-1: Using ep0 maxpacket: 16
[ 1030.478418][T18872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1030.488703][T18872] usb 5-1: config 0 has no interfaces?
[ 1030.503646][T18872] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1030.522649][T18872] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1030.533082][T18872] usb 5-1: Manufacturer: syz
[ 1030.539902][T18872] usb 5-1: config 0 descriptor??
[ 1030.682740][T20701] bond0: option use_carrier: invalid value (4)
[ 1031.027879][T20708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1031.039007][T20708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1031.503234][   T30] audit: type=1326 audit(1752618881.215:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1031.531645][   T30] audit: type=1326 audit(1752618881.215:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1031.614904][    T9] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1031.624693][   T30] audit: type=1326 audit(1752618881.325:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cd8f8d290 code=0x7ffc0000
[ 1031.656522][T20714] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3436'.
[ 1031.753659][   T30] audit: type=1326 audit(1752618881.325:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1031.797278][   T30] audit: type=1326 audit(1752618881.335:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1031.868527][   T30] audit: type=1326 audit(1752618881.335:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1031.900443][   T30] audit: type=1326 audit(1752618881.375:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1031.994438][   T30] audit: type=1326 audit(1752618881.375:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.065119][   T30] audit: type=1326 audit(1752618881.375:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.114092][   T30] audit: type=1326 audit(1752618881.375:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.152436][   T30] audit: type=1326 audit(1752618881.385:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.223144][    T9] usb 6-1: config 0 has no interfaces?
[ 1032.231945][    T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1032.293678][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.309672][   T30] audit: type=1326 audit(1752618881.385:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.352876][    T9] usb 6-1: Product: syz
[ 1032.373161][    T9] usb 6-1: Manufacturer: syz
[ 1032.440220][    T9] usb 6-1: SerialNumber: syz
[ 1032.475533][   T30] audit: type=1326 audit(1752618881.385:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.505720][    T9] usb 6-1: config 0 descriptor??
[ 1032.560250][   T30] audit: type=1326 audit(1752618881.385:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.641958][   T30] audit: type=1326 audit(1752618881.385:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.789652][T20712] pimreg: entered allmulticast mode
[ 1032.813523][T20712] pimreg: left allmulticast mode
[ 1032.846207][   T30] audit: type=1326 audit(1752618881.455:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1032.911186][   T30] audit: type=1326 audit(1752618881.455:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd8f8e929 code=0x7ffc0000
[ 1033.074542][T18872] usb 5-1: USB disconnect, device number 38
[ 1033.111821][T11158] udevd[11158]: setting mode of /dev/bus/usb/005/038 to 020664 failed: No such file or directory
[ 1033.161600][T11158] udevd[11158]: setting owner of /dev/bus/usb/005/038 to uid=0, gid=0 failed: No such file or directory
[ 1033.484332][T20734] ptrace attach of "./syz-executor exec"[11384] was attempted by "./syz-executor exec"[20734]
[ 1033.526572][T20735] delete_channel: no stack
[ 1033.792524][T20723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1033.811727][T20723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1034.047347][ T6559] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1034.261531][T20723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1034.322039][T20723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1034.405204][ T5911] usb 6-1: USB disconnect, device number 99
[ 1034.473383][ T6559] usb 5-1: Using ep0 maxpacket: 16
[ 1034.491914][ T6559] usb 5-1: New USB device found, idVendor=a8e6, idProduct=3483, bcdDevice= c.90
[ 1034.509300][ T6559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.526265][ T6559] usb 5-1: Product: syz
[ 1034.530956][ T6559] usb 5-1: Manufacturer: syz
[ 1034.541414][ T6559] usb 5-1: SerialNumber: syz
[ 1034.568022][ T6559] usb 5-1: config 0 descriptor??
[ 1034.656766][T20749] netlink: 'syz.2.3446': attribute type 2 has an invalid length.
[ 1034.679963][T20749] �: entered promiscuous mode
[ 1034.791406][T20741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1034.800183][T20741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1035.158008][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'.
[ 1035.282994][T20768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3448'.
[ 1035.292884][T20768] fuse: Bad value for 'fd'
[ 1036.184695][T18872] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1036.324531][T18872] usb 6-1: device descriptor read/64, error -71
[ 1036.489409][ T6559] usb 5-1: USB disconnect, device number 39
[ 1036.594669][T18872] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1036.768196][T20781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1037.284525][T18872] usb 6-1: device descriptor read/64, error -71
[ 1037.571165][T18872] usb usb6-port1: attempt power cycle
[ 1037.764911][ T6559] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1037.954483][ T6559] usb 5-1: Using ep0 maxpacket: 16
[ 1037.963119][ T6559] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1038.024953][T18872] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 1038.046519][ T6559] usb 5-1: config 0 has no interfaces?
[ 1038.077594][T18872] usb 6-1: device descriptor read/8, error -71
[ 1038.130861][ T6559] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1038.181634][ T6559] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1038.290740][ T6559] usb 5-1: Manufacturer: syz
[ 1038.330954][ T6559] usb 5-1: config 0 descriptor??
[ 1038.454839][T18872] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 1038.488381][T18872] usb 6-1: device descriptor read/8, error -71
[ 1038.603806][T18872] usb usb6-port1: unable to enumerate USB device
[ 1039.612886][T20808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.632554][T20808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.726850][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3461'.
[ 1040.038498][ T6559] usb 5-1: USB disconnect, device number 40
[ 1040.794560][ T6559] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1040.962508][ T6559] usb 5-1: Using ep0 maxpacket: 8
[ 1040.976553][ T6559] usb 5-1: config 0 has too many interfaces: 190, using maximum allowed: 32
[ 1041.119557][T20829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1041.135101][T20844] input: syz0 as /devices/virtual/input/input84
[ 1041.141737][T20829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1041.201831][ T6559] usb 5-1: config 0 has an invalid interface number: 224 but max is 189
[ 1041.220254][ T6559] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 190
[ 1041.309581][ T6559] usb 5-1: config 0 has no interface number 0
[ 1041.318044][ T6559] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[ 1041.361231][ T6559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.393277][ T6559] usb 5-1: config 0 descriptor??
[ 1041.637174][    T9] usb 5-1: USB disconnect, device number 41
[ 1042.931975][T20877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1043.027908][T20879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1043.113723][T20880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1043.125261][T20880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1043.828452][ T6559] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 1044.349248][ T6559] usb 6-1: device descriptor read/64, error -71
[ 1044.607253][ T6559] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1044.944537][ T6559] usb 6-1: device descriptor read/64, error -71
[ 1045.054773][ T6559] usb usb6-port1: attempt power cycle
[ 1045.068792][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3474'.
[ 1045.394709][ T6559] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 1045.424977][ T6559] usb 6-1: device descriptor read/8, error -71
[ 1045.624802][T20891] netlink: 'syz.4.3477': attribute type 1 has an invalid length.
[ 1045.654896][T20891] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3477'.
[ 1045.747986][ T6559] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1045.902854][T20895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1045.947181][T20895] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3478'.
[ 1045.954683][ T6559] usb 6-1: device not accepting address 107, error -71
[ 1045.955727][ T6559] usb usb6-port1: unable to enumerate USB device
[ 1046.105673][T20900] netlink: 'syz.0.3479': attribute type 1 has an invalid length.
[ 1046.231037][T20898] bond3: (slave gretap2): making interface the new active one
[ 1046.234334][T20898] bond3: (slave gretap2): Enslaving as an active interface with an up link
[ 1046.292125][T20903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1046.292467][T20903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.174517][T18872] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1047.419013][T18872] usb 5-1: Using ep0 maxpacket: 16
[ 1047.428827][T18872] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1047.502767][T18872] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1047.547400][T18872] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1047.564171][T18872] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1047.583354][T18872] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1047.598231][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.610188][T18872] usb 5-1: Product: syz
[ 1047.619156][T18872] usb 5-1: Manufacturer: syz
[ 1047.631588][T18872] usb 5-1: SerialNumber: syz
[ 1047.876853][T20941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.954871][T20941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.975173][T18872] usb 5-1: config 0 descriptor??
[ 1048.154257][T20941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1048.220071][T20941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1048.690218][T20921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1048.716281][T20921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1048.779897][T18872] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85
[ 1048.804933][ T5202] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1048.842542][ T5202] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1048.865126][T18872] usb 5-1: USB disconnect, device number 42
[ 1049.195044][T20950] netlink: 'syz.4.3493': attribute type 10 has an invalid length.
[ 1049.503251][T20957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3495'.
[ 1049.729036][T20963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1049.925875][T20964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.937486][T20964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1051.338722][T20981] fuse: Unknown parameter 'd}��XP�ڠ_\xÑɿI���	�h1��I�g���Ě���C�\���0x0000000000000006'
[ 1051.582997][T20989] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3501'.
[ 1051.611321][T20989] misc userio: No port type given on /dev/userio
[ 1051.635123][T20989] misc userio: The device must be registered before sending interrupts
[ 1051.685667][T20989] netlink: 'syz.4.3501': attribute type 1 has an invalid length.
[ 1051.923127][T20989] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1052.127893][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3503'.
[ 1052.509583][T20994] pim6reg: entered allmulticast mode
[ 1052.519495][T20994] pim6reg: left allmulticast mode
[ 1053.551134][T21041] team_slave_0: entered promiscuous mode
[ 1053.557850][T21041] team_slave_1: entered promiscuous mode
[ 1053.563600][T21041] batadv0: entered promiscuous mode
[ 1053.767161][T21047] loop6: detected capacity change from 0 to 524287999
[ 1053.998559][   T30] audit: type=1326 audit(1752618903.715:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.030978][   T30] audit: type=1326 audit(1752618903.715:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.062071][   T30] audit: type=1326 audit(1752618903.745:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.132474][   T30] audit: type=1326 audit(1752618903.745:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.197368][   T30] audit: type=1326 audit(1752618903.745:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.239033][   T30] audit: type=1326 audit(1752618903.745:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.270798][   T30] audit: type=1326 audit(1752618903.745:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.305017][   T30] audit: type=1326 audit(1752618903.745:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.353626][   T30] audit: type=1326 audit(1752618903.745:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.388123][   T30] audit: type=1326 audit(1752618903.745:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d58e929 code=0x7ffc0000
[ 1054.459068][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.470120][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.589768][ T6559] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1054.695771][T21072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1054.745991][T21072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1054.766770][ T6559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1054.778121][ T6559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1054.794868][ T6559] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1054.811072][ T6559] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1054.821322][ T6559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.844049][ T6559] usb 5-1: config 0 descriptor??
[ 1054.920490][T21076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1055.343079][ T6559] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1055.746790][T21086] veth1_to_batadv: entered promiscuous mode
[ 1056.177955][T21096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1056.356691][T21097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.381290][T21097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1056.796222][T18872] usb 5-1: reset high-speed USB device number 43 using dummy_hcd
[ 1057.446055][T18872] usb 5-1: device descriptor read/64, error -32
[ 1057.706226][T18872] usb 5-1: reset high-speed USB device number 43 using dummy_hcd
[ 1057.875685][T18872] usb 5-1: device descriptor read/64, error -32
[ 1058.114522][T18872] usb 5-1: reset high-speed USB device number 43 using dummy_hcd
[ 1058.135957][T18872] usb 5-1: device descriptor read/8, error -32
[ 1058.391629][T18872] usb 5-1: reset high-speed USB device number 43 using dummy_hcd
[ 1058.489994][T21059] raw-gadget.3 gadget.4: failed to queue suspend event
[ 1058.497989][T21114] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 67108897, id = 0
[ 1058.508254][T21059] raw-gadget.3 gadget.4: failed to queue disconnect event
[ 1058.657187][T21123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3532'.
[ 1058.669058][T21123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3532'.
[ 1058.691261][T21123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3532'.
[ 1058.724609][T18872] usb 5-1: device not accepting address 43, error -71
[ 1058.733787][ T5930] usb 5-1: USB disconnect, device number 43
[ 1059.081764][T21133] kvm: user requested TSC rate below hardware speed
[ 1059.308862][T21140] PKCS8: Unsupported PKCS#8 version
[ 1059.344600][ T5930] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1059.494643][ T5930] usb 5-1: device descriptor read/64, error -71
[ 1059.768090][ T5930] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1059.954616][ T5930] usb 5-1: device descriptor read/64, error -71
[ 1060.066891][ T5930] usb usb5-port1: attempt power cycle
[ 1060.194861][ T6559] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1060.219587][T21152] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[ 1060.239918][T21152] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[ 1060.347081][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805b557000: rx timeout, send abort
[ 1060.390007][ T6559] usb 6-1: config 0 has no interfaces?
[ 1060.407936][ T6559] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1060.424879][ T6559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.424885][ T5930] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1060.446493][ T5930] usb 5-1: device descriptor read/8, error -71
[ 1060.624613][ T6559] usb 6-1: Product: syz
[ 1060.658115][ T6559] usb 6-1: Manufacturer: syz
[ 1060.662906][ T6559] usb 6-1: SerialNumber: syz
[ 1060.677238][ T6559] usb 6-1: config 0 descriptor??
[ 1060.685272][ T5930] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1060.735127][ T5930] usb 5-1: device descriptor read/8, error -71
[ 1060.857280][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805b557000: abort rx timeout. Force session deactivation
[ 1060.906435][ T5930] usb usb5-port1: unable to enumerate USB device
[ 1060.942029][T21159] sit1: entered promiscuous mode
[ 1061.042548][   T12] tipc: Subscription rejected, illegal request
[ 1061.145036][T21167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3543'.
[ 1061.198147][T21167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3543'.
[ 1061.219942][T21167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3543'.
[ 1061.443236][T21178] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1061.648563][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1061.671655][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1061.693211][T21181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3546'.
[ 1061.732664][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1061.769347][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1062.434548][ T5930] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1062.597959][ T5930] usb 5-1: config 0 has no interfaces?
[ 1062.609898][ T5930] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1062.632543][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.657276][ T5930] usb 5-1: Product: syz
[ 1062.671157][ T5930] usb 5-1: Manufacturer: syz
[ 1062.679326][ T5930] usb 5-1: SerialNumber: syz
[ 1062.697891][ T5930] usb 5-1: config 0 descriptor??
[ 1062.817379][T21193] kvm: pic: non byte write
[ 1062.925011][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'.
[ 1062.947054][ T6562] usb 5-1: USB disconnect, device number 48
[ 1063.684168][ T6562] usb 6-1: USB disconnect, device number 108
[ 1063.701611][T21220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3556'.
[ 1063.741385][T21220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3556'.
[ 1063.922379][T21231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.931925][T21231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.028778][ T6562] IPVS: starting estimator thread 0...
[ 1064.455658][T21234] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1065.486969][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'.
[ 1066.099004][T21267] i2c i2c-0: Invalid block write size 36
[ 1067.058836][T21275] fuse: Bad value for 'fd'
[ 1068.300622][T21293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.387318][T21294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.387963][T21293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.436628][T21294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.441452][T21295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.455552][T21295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.464314][T21294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.485374][T21294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.104846][ T6559] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 1069.142107][T21320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.151629][T21320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.174540][   T48] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1069.191846][T21320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.200824][T21320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.328126][   T48] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1069.338099][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.346805][   T48] usb 5-1: Product: syz
[ 1069.352843][   T48] usb 5-1: Manufacturer: syz
[ 1069.384795][   T48] usb 5-1: SerialNumber: syz
[ 1069.411690][   T48] usb 5-1: config 0 descriptor??
[ 1069.424718][ T6559] usb 6-1: Using ep0 maxpacket: 16
[ 1069.433390][ T6559] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.445425][ T6559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1069.522215][ T6559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1069.568859][   T48] ch341 5-1:0.0: ch341-uart converter detected
[ 1069.599053][ T6559] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1069.674655][ T6559] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1069.750827][ T6559] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1069.760372][ T6559] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1069.770454][ T6559] usb 6-1: Manufacturer: syz
[ 1069.785646][ T6559] usb 6-1: config 0 descriptor??
[ 1069.790905][   T48] usb 5-1: failed to send control message: -71
[ 1069.798126][   T48] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1069.825653][   T48] usb 5-1: USB disconnect, device number 49
[ 1069.841684][   T48] ch341 5-1:0.0: device disconnected
[ 1070.067308][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 1070.067325][   T30] audit: type=1800 audit(1752618919.775:4486): pid=21337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3589" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1070.544762][ T6559] rc_core: IR keymap rc-hauppauge not found
[ 1070.550763][ T6559] Registered IR keymap rc-empty
[ 1070.558802][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1070.786370][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1070.812070][ T6559] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1070.833323][ T6559] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input87
[ 1070.908796][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.029317][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.055031][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.074757][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.097984][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.167037][T21356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3593'.
[ 1071.179389][T21356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1071.265000][T21356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1071.290870][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.314544][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.346492][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.374615][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.414660][ T6559] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1071.456606][ T6559] mceusb 6-1:0.0: Registered 振 with mce emulator interface version 1
[ 1071.476275][ T6559] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1071.910839][ T6559] usb 6-1: USB disconnect, device number 109
[ 1072.224603][ T5918] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[ 1072.386412][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.397159][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1072.421013][   T30] audit: type=1326 audit(1752618922.135:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1072.451238][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3597'.
[ 1072.465605][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[ 1072.505354][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64
[ 1072.528128][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1072.542283][   T30] audit: type=1326 audit(1752618922.165:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1072.588299][ T5918] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1072.602483][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.611058][ T5918] usb 5-1: Product: syz
[ 1072.616514][ T5918] usb 5-1: Manufacturer: syz
[ 1072.626468][ T5918] usb 5-1: SerialNumber: syz
[ 1072.631974][   T30] audit: type=1326 audit(1752618922.165:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1072.643042][ T5918] usb 5-1: config 0 descriptor??
[ 1072.701132][   T30] audit: type=1326 audit(1752618922.165:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1072.729786][T21359] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[ 1072.762530][T21380] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3599'.
[ 1072.821067][   T30] audit: type=1326 audit(1752618922.165:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1072.892442][   T30] audit: type=1326 audit(1752618922.195:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1072.923752][ T5918] rc_core: IR keymap rc-xbox-dvd not found
[ 1072.938316][ T5918] Registered IR keymap rc-empty
[ 1072.946706][T21359] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1072.993090][   T30] audit: type=1326 audit(1752618922.195:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1073.017117][ T5918] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1073.035344][ T5918] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input88
[ 1073.093625][   T30] audit: type=1326 audit(1752618922.195:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1073.093675][   T30] audit: type=1326 audit(1752618922.195:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21368 comm="syz.5.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09d58e929 code=0x7ffc0000
[ 1073.448155][   T48] usb 5-1: USB disconnect, device number 50
[ 1073.448187][    C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[ 1074.034573][ T5918] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 1074.186721][ T5918] usb 6-1: Using ep0 maxpacket: 32
[ 1074.201154][ T5918] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1074.225444][ T5918] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1074.251695][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1074.267036][ T5918] usb 6-1: config 1 has no interface number 0
[ 1074.273433][ T5918] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1074.284999][ T5918] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1074.299021][ T5918] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1074.320474][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.367948][ T5918] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[ 1074.375153][T21420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.384696][ T5930] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1074.406929][T21420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.426436][T21422] ip6t_srh: unknown srh match flags  5040
[ 1074.474117][T21429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.488862][T21429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.544583][ T5930] usb 5-1: Using ep0 maxpacket: 16
[ 1074.557839][ T5930] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1074.572388][ T5918] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[ 1074.584632][ T5930] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1074.614629][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1074.631581][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1074.661280][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.669546][ T5930] usb 5-1: Product: syz
[ 1074.673828][ T5930] usb 5-1: Manufacturer: syz
[ 1074.678647][ T5930] usb 5-1: SerialNumber: syz
[ 1074.971655][T21442] kAFS: unable to lookup cell '�({^�@'
[ 1074.984166][    T9] usb 6-1: USB disconnect, device number 110
[ 1075.002109][    T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[ 1075.127852][ T5930] usb 5-1: 0:2 : does not exist
[ 1075.227206][T21447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.246577][T21449] netlink: 'syz.0.3618': attribute type 1 has an invalid length.
[ 1075.259201][T21447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.684702][T21462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.744882][T21462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1077.167039][ T5911] usb 5-1: USB disconnect, device number 51
[ 1077.392346][T21490] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1077.454918][T21492] tipc: Cannot configure node identity twice
[ 1077.492996][T21490] tipc: Cannot configure node identity twice
[ 1077.768318][T21500] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[ 1077.831914][   T30] audit: type=1326 audit(1752618927.545:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1077.884559][   T30] audit: type=1326 audit(1752618927.545:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1077.907467][   T30] audit: type=1326 audit(1752618927.575:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1077.930150][   T30] audit: type=1326 audit(1752618927.575:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1077.971861][   T30] audit: type=1326 audit(1752618927.575:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1078.037305][T21504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3632'.
[ 1078.244726][T21513] kvm: kvm [21512]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc2) = 0xe200000035ff
[ 1078.277294][T21520] input: syz0 as /devices/virtual/input/input89
[ 1078.533297][T21524] vlan0: entered promiscuous mode
[ 1079.072021][T21529] loop7: detected capacity change from 0 to 7
[ 1079.264656][ T5930] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1079.430241][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10
[ 1079.472406][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1079.500505][ T5930] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1079.510279][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.576157][ T5930] usb 6-1: config 0 descriptor??
[ 1079.664929][T21529] Dev loop7: unable to read RDB block 7
[ 1079.677670][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1079.687502][    C0] buffer_io_error: 2 callbacks suppressed
[ 1079.687511][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[ 1079.745201][T21529]  loop7: unable to read partition table
[ 1079.802000][T21529] loop7: partition table beyond EOD, truncated
[ 1079.822140][T21529] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1080.052197][ T5930] usbhid 6-1:0.0: can't add hid device: -71
[ 1080.069674][ T5930] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1080.094375][ T5930] usb 6-1: USB disconnect, device number 111
[ 1080.506206][T21558] usb usb8: usbfs: process 21558 (syz.2.3645) did not claim interface 0 before use
[ 1081.054759][T21562] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1081.171266][T21565] fuse: Bad value for 'user_id'
[ 1081.176525][T21565] fuse: Bad value for 'user_id'
[ 1081.564657][ T5911] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1081.600968][T21584] openvswitch: netlink: VXLAN extension 15480 out of range max 1
[ 1081.732867][ T5911] usb 5-1: config 0 has no interfaces?
[ 1081.749136][ T5911] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1081.768238][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.783940][ T5911] usb 5-1: Product: syz
[ 1081.806384][ T5911] usb 5-1: Manufacturer: syz
[ 1081.822067][ T5911] usb 5-1: SerialNumber: syz
[ 1081.842095][ T5911] usb 5-1: config 0 descriptor??
[ 1082.104973][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[ 1082.332736][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3655'.
[ 1082.395521][T21590] kvm: kvm [21589]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x827
[ 1082.615323][ T5911] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1082.654103][T21607] trusted_key: encrypted_key: master key parameter is missing
[ 1082.754628][ T5911] usb 6-1: device descriptor read/64, error -71
[ 1082.994627][ T5911] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1083.144791][ T5911] usb 6-1: device descriptor read/64, error -71
[ 1083.238429][T21616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1083.248239][T21616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1083.266505][ T5911] usb usb6-port1: attempt power cycle
[ 1083.639663][ T5911] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 1083.675245][ T5911] usb 6-1: device descriptor read/8, error -71
[ 1083.869892][T21630] netlink: 'syz.3.3663': attribute type 5 has an invalid length.
[ 1083.924607][ T5911] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 1083.967119][ T5911] usb 6-1: device descriptor read/8, error -71
[ 1084.125658][ T5911] usb usb6-port1: unable to enumerate USB device
[ 1084.203229][ T5918] usb 5-1: USB disconnect, device number 52
[ 1084.734538][ T5911] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[ 1084.981659][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1085.065267][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1085.100334][ T5911] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1085.192772][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.261667][ T5911] usb 5-1: config 0 descriptor??
[ 1085.341027][ T5911] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1085.406386][T21649] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3667'.
[ 1085.416601][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3667'.
[ 1085.468767][ T5911] dvb-usb: bulk message failed: -22 (3/0)
[ 1085.529945][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1085.725821][T21639] netlink: 'syz.4.3664': attribute type 13 has an invalid length.
[ 1085.745236][ T5911] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1085.765052][ T5911] usb 5-1: media controller created
[ 1085.777466][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1085.858880][ T5911] dvb-usb: bulk message failed: -22 (6/0)
[ 1085.893202][T21639] 8021q: adding VLAN 0 to HW filter on device $H�
[ 1085.918704][ T5911] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1085.954925][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input90
[ 1086.025138][ T5911] dvb-usb: schedule remote query interval to 150 msecs.
[ 1086.046781][T21639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1086.099697][ T5911] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1086.254495][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1086.260264][ T6562] dvb-usb: error while querying for an remote control event.
[ 1086.434594][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1086.445306][ T6562] dvb-usb: error while querying for an remote control event.
[ 1086.615051][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1086.621033][ T6562] dvb-usb: error while querying for an remote control event.
[ 1086.784846][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1086.794126][ T6562] dvb-usb: error while querying for an remote control event.
[ 1086.964560][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1086.970617][ T6562] dvb-usb: error while querying for an remote control event.
[ 1087.050654][T21669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.079364][T21669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1087.112265][T21672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.122360][T21672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1087.149028][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1087.159126][ T6562] dvb-usb: error while querying for an remote control event.
[ 1087.334886][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1087.347239][ T6562] dvb-usb: error while querying for an remote control event.
[ 1087.534597][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1087.548331][ T6562] dvb-usb: error while querying for an remote control event.
[ 1087.737883][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1087.752778][ T6562] dvb-usb: error while querying for an remote control event.
[ 1087.808462][T21684] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1087.934597][ T6562] dvb-usb: bulk message failed: -22 (1/0)
[ 1087.940356][ T6562] dvb-usb: error while querying for an remote control event.
[ 1087.952064][ T5930] usb 5-1: USB disconnect, device number 53
[ 1088.071137][ T5930] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1088.188284][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'.
[ 1088.215771][T21694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1088.258782][T21702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.280908][T21702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.301856][T21703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.322132][T21703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.624624][ T6562] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[ 1088.797936][ T6562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1088.810254][ T6562] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1088.828672][ T6562] usb 5-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00
[ 1088.838811][ T6562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.851997][ T6562] usb 5-1: config 0 descriptor??
[ 1088.866957][T21710] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22
[ 1089.114052][ T6562] usbhid 5-1:0.0: can't add hid device: -71
[ 1089.136058][ T6562] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1089.147725][ T6562] usb 5-1: USB disconnect, device number 54
[ 1089.362849][T21731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1090.094611][ T6562] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[ 1090.280694][ T6562] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[ 1090.290313][ T6562] usb 5-1: config 0 has no interface number 0
[ 1090.300332][ T6562] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[ 1090.309739][ T6562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.319777][ T6562] usb 5-1: Product: syz
[ 1090.324009][ T6562] usb 5-1: Manufacturer: syz
[ 1090.329141][ T6562] usb 5-1: SerialNumber: syz
[ 1090.341298][ T6562] usb 5-1: config 0 descriptor??
[ 1090.358248][ T6562] usb-storage 5-1:0.20: USB Mass Storage device detected
[ 1090.379498][ T6562] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[ 1090.569102][ T5925] usb 5-1: USB disconnect, device number 55
[ 1091.254985][ T6562] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1091.388423][ T6562] usb 6-1: device descriptor read/64, error -71
[ 1091.649585][ T6562] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 1091.784510][ T6562] usb 6-1: device descriptor read/64, error -71
[ 1091.814654][ T5925] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1091.895020][ T6562] usb usb6-port1: attempt power cycle
[ 1091.975129][ T5925] usb 5-1: Using ep0 maxpacket: 32
[ 1091.983007][ T5925] usb 5-1: config 0 has no interfaces?
[ 1091.993293][ T5925] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1092.004225][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.015789][ T5925] usb 5-1: Product: syz
[ 1092.020697][ T5925] usb 5-1: Manufacturer: syz
[ 1092.027746][ T5925] usb 5-1: SerialNumber: syz
[ 1092.045734][ T5925] usb 5-1: config 0 descriptor??
[ 1092.261022][T21772] $H�: left promiscuous mode
[ 1092.265867][T21772] bond_slave_0: left promiscuous mode
[ 1092.281712][T21772] bond_slave_1: left promiscuous mode
[ 1092.362558][T21772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1092.382108][T21779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1092.403577][ T6562] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 1092.421529][T21779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1092.446176][ T6562] usb 6-1: device descriptor read/8, error -71
[ 1092.693063][T21788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3699'.
[ 1092.815017][ T6562] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 1092.877168][ T6562] usb 6-1: device descriptor read/8, error -71
[ 1092.995103][ T6562] usb usb6-port1: unable to enumerate USB device
[ 1093.657552][T21798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3702'.
[ 1094.358812][ T6562] usb 5-1: USB disconnect, device number 56
[ 1094.472810][T21811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3705'.
[ 1095.400610][T21828] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[ 1095.590439][T21833] vti0: entered promiscuous mode
[ 1095.595811][T21833] vti0: entered allmulticast mode
[ 1097.630126][ T5918] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1097.965012][ T5918] usb 5-1: Using ep0 maxpacket: 32
[ 1097.974377][ T5918] usb 5-1: config 0 has no interfaces?
[ 1097.982900][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1098.002380][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.037981][ T5918] usb 5-1: Product: syz
[ 1098.047991][ T5918] usb 5-1: Manufacturer: syz
[ 1098.089402][ T5918] usb 5-1: SerialNumber: syz
[ 1098.150527][ T5918] usb 5-1: config 0 descriptor??
[ 1098.395033][T21848] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1099.058251][T21890] binder_alloc: 21889: binder_alloc_buf size 8 failed, no address space
[ 1099.069463][T21890] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0)
[ 1099.719622][T21900] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3727'.
[ 1099.745033][T21900] netlink: 'syz.5.3727': attribute type 7 has an invalid length.
[ 1099.761206][T21900] netlink: 'syz.5.3727': attribute type 8 has an invalid length.
[ 1099.775787][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3727'.
[ 1100.019353][ T5918] usb 5-1: USB disconnect, device number 57
[ 1100.474637][ T5918] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1100.634574][ T5918] usb 5-1: Using ep0 maxpacket: 32
[ 1100.650521][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1100.678412][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1100.704600][ T5918] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1100.716778][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.746266][ T5918] usb 5-1: config 0 descriptor??
[ 1101.200699][ T5918] savu 0003:1E7D:2D5A.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[ 1101.254097][T21918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3732'.
[ 1101.380264][T21922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1101.429024][T21902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1101.634189][ T5918] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 1101.804788][ T5918] usb 6-1: device descriptor read/64, error -71
[ 1101.928800][ T5911] usb 5-1: USB disconnect, device number 58
[ 1102.044536][ T5918] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1102.188960][ T5918] usb 6-1: device descriptor read/64, error -71
[ 1102.363769][ T5918] usb usb6-port1: attempt power cycle
[ 1102.525208][T21946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1102.551591][T21946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1102.573867][T21946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1102.586477][T21946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1102.600491][T21946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1102.614043][T21947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1102.629700][T21946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1102.650014][T21947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1102.765477][ T5918] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1102.795813][ T5918] usb 6-1: device descriptor read/8, error -71
[ 1102.809628][T21953] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1103.054568][ T5918] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1103.085317][ T5918] usb 6-1: device descriptor read/8, error -71
[ 1103.194711][ T5918] usb usb6-port1: unable to enumerate USB device
[ 1104.080090][T21972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1104.125085][T21972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1104.231388][   T30] audit: type=1326 audit(1752618953.935:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21971 comm="syz.2.3743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff23778e929 code=0x0
[ 1104.554683][ T5911] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1105.527497][ T5911] usb 5-1: config 0 has no interfaces?
[ 1105.535664][ T5911] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1105.545465][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.553803][ T5911] usb 5-1: Product: syz
[ 1105.558817][ T5911] usb 5-1: Manufacturer: syz
[ 1105.563516][ T5911] usb 5-1: SerialNumber: syz
[ 1105.581503][ T5911] usb 5-1: config 0 descriptor??
[ 1106.103349][T21996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1106.104641][ T5911] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1106.140128][T21996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1106.284494][ T5911] usb 6-1: Using ep0 maxpacket: 16
[ 1106.291284][ T5911] usb 6-1: config 0 has an invalid interface number: 6 but max is 0
[ 1106.303333][ T5911] usb 6-1: config 0 has no interface number 0
[ 1106.309532][ T5911] usb 6-1: too many endpoints for config 0 interface 6 altsetting 162: 209, using maximum allowed: 30
[ 1106.320794][ T5911] usb 6-1: config 0 interface 6 altsetting 162 has 0 endpoint descriptors, different from the interface descriptor's value: 209
[ 1106.334324][ T5911] usb 6-1: config 0 interface 6 has no altsetting 0
[ 1106.342324][ T5911] usb 6-1: New USB device found, idVendor=0471, idProduct=6927, bcdDevice= 0.75
[ 1106.351752][ T5911] usb 6-1: New USB device strings: Mfr=112, Product=0, SerialNumber=0
[ 1106.361289][ T5911] usb 6-1: Manufacturer: syz
[ 1106.368929][ T5911] usb 6-1: config 0 descriptor??
[ 1106.840583][T22007] kvm: user requested TSC rate below hardware speed
[ 1106.853167][T22007] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1106.971441][T22009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1106.982596][T22009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1107.302737][ T6562] usb 5-1: USB disconnect, device number 59
[ 1107.468375][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3754'.
[ 1107.750532][T22024] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1107.764138][T22025] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1107.785188][T22024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1107.818156][T22024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1108.675939][ T5911] usb 6-1: USB disconnect, device number 124
[ 1109.038581][T22037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1109.524807][ T5911] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1109.617256][T22046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1109.627108][T22046] syzkaller0: entered promiscuous mode
[ 1109.632650][T22046] syzkaller0: entered allmulticast mode
[ 1109.657406][T22046] tipc: Resetting bearer <eth:syzkaller0>
[ 1109.684685][ T5911] usb 5-1: Using ep0 maxpacket: 16
[ 1109.699500][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1109.710707][ T5911] usb 5-1: config 0 has no interfaces?
[ 1109.728871][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1109.738994][ T5911] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1109.747350][ T5911] usb 5-1: Manufacturer: syz
[ 1109.756522][ T5911] usb 5-1: config 0 descriptor??
[ 1110.222341][T22060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.233766][T22060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.298843][T22060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3763'.
[ 1110.645192][  T977] tipc: Node number set to 3379851077
[ 1110.692329][   T30] audit: type=1326 audit(1752618960.395:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1111.269776][   T30] audit: type=1326 audit(1752618960.395:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1111.332703][   T30] audit: type=1326 audit(1752618960.405:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1111.454746][   T30] audit: type=1326 audit(1752618960.405:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1111.637227][   T30] audit: type=1326 audit(1752618960.405:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1111.719771][ T5911] usb 5-1: USB disconnect, device number 60
[ 1111.882836][   T30] audit: type=1326 audit(1752618960.405:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f00c3d8e929 code=0x7ffc0000
[ 1112.484949][    T9] usb 6-1: new full-speed USB device number 125 using dummy_hcd
[ 1112.668300][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1112.684741][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.692810][    T9] usb 6-1: Product: syz
[ 1112.692859][T22045] tipc: Resetting bearer <eth:syzkaller0>
[ 1112.697487][    T9] usb 6-1: Manufacturer: syz
[ 1112.722632][    T9] usb 6-1: SerialNumber: syz
[ 1112.731130][    T9] usb 6-1: config 0 descriptor??
[ 1112.750961][T22045] tipc: Disabling bearer <eth:syzkaller0>
[ 1112.865451][ T5911] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1112.963801][    T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1113.066834][ T5911] usb 5-1: config 0 has no interfaces?
[ 1113.076435][ T5911] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1113.086138][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.094163][ T5911] usb 5-1: Product: syz
[ 1113.098774][ T5911] usb 5-1: Manufacturer: syz
[ 1113.103395][ T5911] usb 5-1: SerialNumber: syz
[ 1113.111223][ T5911] usb 5-1: config 0 descriptor??
[ 1113.331715][T22085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1113.340609][T22085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1113.636933][ T5911] usb 5-1: USB disconnect, device number 61
[ 1114.099898][T22075] program syz.5.3767 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1114.173207][    T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1114.222953][T22117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1114.233625][T22117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1114.333482][T22117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1114.364870][T22117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1114.878051][T22123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3777'.
[ 1114.963875][ T5918] usb 6-1: USB disconnect, device number 125
[ 1115.293721][T22131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3779'.
[ 1115.306825][T22131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1115.325087][T22131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1115.410041][T22131] batadv0 (unregistering): left allmulticast mode
[ 1115.456995][ T5918] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1115.645566][T22137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1115.687989][ T5918] usb 6-1: Using ep0 maxpacket: 8
[ 1115.697195][ T5918] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1115.803789][ T5918] usb 6-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[ 1116.041422][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.047894][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.070019][ T5918] usb 6-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[ 1116.138542][ T5918] usb 6-1: config 4 interface 0 has no altsetting 0
[ 1116.192576][ T5918] usb 6-1: string descriptor 0 read error: -22
[ 1116.247321][ T5918] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1116.285633][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.364501][ T5925] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1116.489176][ T5918] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1116.515293][ T5918] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1116.544900][ T5918] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1116.627332][ T5918] usb 6-1: media controller created
[ 1116.696076][T22127] usb 6-1: dvb_usb_au6610: wlen=0, aborting
[ 1116.772199][ T5925] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1116.798381][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.865991][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1116.878814][ T5925] usb 5-1: Product: syz
[ 1116.890504][ T5925] usb 5-1: Manufacturer: syz
[ 1116.902722][ T5925] usb 5-1: SerialNumber: syz
[ 1116.949254][ T5925] usb 5-1: config 0 descriptor??
[ 1116.964646][ T5918] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1116.984933][ T5925] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1117.286021][T22145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3783'.
[ 1117.380382][T22147] fuse: Unknown parameter 'group'
[ 1117.714359][ T5918] usb 6-1: USB disconnect, device number 126
[ 1117.720882][ T5925] gspca_sunplus: reg_r err -71
[ 1117.741670][ T5925] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 1117.814591][ T5925] usb 5-1: USB disconnect, device number 62
[ 1118.104782][ T5918] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1118.591688][ T5918] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1118.613182][ T5918] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1118.654155][ T5918] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1118.674169][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.768999][T22156] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1118.804142][ T5918] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1119.263588][ T5911] usb 6-1: USB disconnect, device number 127
[ 1120.274958][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1120.374537][ T5930] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1120.456832][ T5918] usb 6-1: Using ep0 maxpacket: 32
[ 1120.491615][ T5918] usb 6-1: config 1 has an invalid interface number: 137 but max is 0
[ 1120.524545][ T5930] usb 5-1: Using ep0 maxpacket: 32
[ 1120.540497][ T5918] usb 6-1: config 1 has no interface number 0
[ 1120.541591][ T5930] usb 5-1: config 0 has no interfaces?
[ 1120.553461][ T5918] usb 6-1: config 1 interface 137 has no altsetting 0
[ 1120.569555][ T5930] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1120.578808][ T5918] usb 6-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a
[ 1120.588176][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.596402][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.606066][ T5918] usb 6-1: Product: syz
[ 1120.610243][ T5918] usb 6-1: Manufacturer: syz
[ 1120.615056][ T5930] usb 5-1: Product: syz
[ 1120.622384][ T5918] usb 6-1: SerialNumber: syz
[ 1120.627119][ T5930] usb 5-1: Manufacturer: syz
[ 1120.636253][ T5930] usb 5-1: SerialNumber: syz
[ 1120.686055][ T5930] usb 5-1: config 0 descriptor??
[ 1120.797840][T22212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1120.827331][T22212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1121.075735][T22214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1121.085160][T22214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1121.238738][T22202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1121.812219][T22220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3804'.
[ 1122.406596][T22227] pim6reg: entered allmulticast mode
[ 1122.514097][T22232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1122.523526][T22232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1122.814776][T22232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1123.364194][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'.
[ 1123.652470][ T5918] pl2303 6-1:1.137: required interrupt-in endpoint missing
[ 1123.682495][T22238] macsec0: entered promiscuous mode
[ 1123.688689][T22238] team0: entered promiscuous mode
[ 1123.693793][T22238] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579
[ 1123.703136][T22238] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22238, name: syz.0.3807
[ 1123.712267][T22238] preempt_count: 201, expected: 0
[ 1123.717302][T22238] RCU nest depth: 0, expected: 0
[ 1123.722234][T22238] 3 locks held by syz.0.3807/22238:
[ 1123.727443][T22238]  #0: ffffffff8fa232b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1123.736978][T22238]  #1: ffffffff8f51da08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[ 1123.746134][T22238]  #2: ffff8880513e4368 (&macsec_netdev_addr_lock_key#3/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120
[ 1123.757147][T22238] Preemption disabled at:
[ 1123.757157][T22238] [<ffffffff895a8926>] dev_uc_add+0x56/0x120
[ 1123.767485][T22238] CPU: 0 UID: 0 PID: 22238 Comm: syz.0.3807 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[ 1123.767501][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1123.767510][T22238] Call Trace:
[ 1123.767517][T22238]  <TASK>
[ 1123.767523][T22238]  dump_stack_lvl+0x189/0x250
[ 1123.767543][T22238]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1123.767557][T22238]  ? __pfx__printk+0x10/0x10
[ 1123.767574][T22238]  ? print_lock_name+0xde/0x100
[ 1123.767587][T22238]  ? dev_uc_add+0x56/0x120
[ 1123.767610][T22238]  __might_resched+0x495/0x610
[ 1123.767626][T22238]  ? dev_uc_add+0x56/0x120
[ 1123.767639][T22238]  ? __pfx___might_resched+0x10/0x10
[ 1123.767651][T22238]  ? irq_work_queue+0xbc/0x140
[ 1123.767669][T22238]  __mutex_lock+0x106/0xe80
[ 1123.767686][T22238]  ? team_change_rx_flags+0x38/0x220
[ 1123.767702][T22238]  ? __pfx___mutex_lock+0x10/0x10
[ 1123.767711][T22238]  ? netdev_info+0x10a/0x160
[ 1123.767726][T22238]  ? __sock_sendmsg+0x219/0x270
[ 1123.767738][T22238]  ? __pfx_netdev_info+0x10/0x10
[ 1123.767759][T22238]  team_change_rx_flags+0x38/0x220
[ 1123.767773][T22238]  ? __pfx_team_change_rx_flags+0x10/0x10
[ 1123.767784][T22238]  __dev_set_promiscuity+0x534/0x740
[ 1123.767799][T22238]  ? __pfx_netdev_info+0x10/0x10
[ 1123.767816][T22238]  netif_set_promiscuity+0x50/0xe0
[ 1123.767830][T22238]  dev_set_promiscuity+0x126/0x260
[ 1123.767844][T22238]  ? __pfx_macsec_dev_change_rx_flags+0x10/0x10
[ 1123.767856][T22238]  __dev_set_promiscuity+0x534/0x740
[ 1123.767870][T22238]  ? __hw_addr_add_ex+0x3c5/0x770
[ 1123.767885][T22238]  __dev_set_rx_mode+0x17c/0x260
[ 1123.767898][T22238]  dev_uc_add+0xc8/0x120
[ 1123.767912][T22238]  macsec_dev_open+0xd9/0x530
[ 1123.767924][T22238]  ? ib_device_get_by_netdev+0x46b/0x4d0
[ 1123.767934][T22238]  ? __pfx_macsec_dev_open+0x10/0x10
[ 1123.767945][T22238]  ? ib_device_get_by_netdev+0x84/0x4d0
[ 1123.767954][T22238]  ? hsr_netdev_notify+0x29e/0xcf0
[ 1123.767966][T22238]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[ 1123.767977][T22238]  ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500
[ 1123.767993][T22238]  ? ip6_route_dev_notify+0x9a/0x5b0
[ 1123.768007][T22238]  ? notifier_call_chain+0x3bf/0x3e0
[ 1123.768023][T22238]  __dev_open+0x470/0x880
[ 1123.768037][T22238]  ? __pfx___dev_open+0x10/0x10
[ 1123.768061][T22238]  __dev_change_flags+0x1ea/0x6d0
[ 1123.768083][T22238]  ? validate_linkmsg+0x765/0x950
[ 1123.768110][T22238]  ? __pfx___dev_change_flags+0x10/0x10
[ 1123.768141][T22238]  rtnl_newlink_create+0x555/0xb00
[ 1123.768167][T22238]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1123.768179][T22238]  ? rtnl_newlink+0x8db/0x1c70
[ 1123.768191][T22238]  ? __pfx___mutex_lock+0x10/0x10
[ 1123.768207][T22238]  ? ns_capable+0x8a/0xf0
[ 1123.768221][T22238]  rtnl_newlink+0x16d6/0x1c70
[ 1123.768234][T22238]  ? netlink_sendmsg+0x805/0xb30
[ 1123.768253][T22238]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1123.768277][T22238]  ? kasan_quarantine_put+0xdd/0x220
[ 1123.768288][T22238]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1123.768307][T22238]  ? nlmon_xmit+0xb0/0x100
[ 1123.768317][T22238]  ? kmem_cache_free+0x18f/0x400
[ 1123.768333][T22238]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1123.768349][T22238]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1123.768365][T22238]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1123.768376][T22238]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1123.768389][T22238]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1123.768410][T22238]  ? __lock_acquire+0xab9/0xd20
[ 1123.768434][T22238]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1123.768444][T22238]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1123.768458][T22238]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1123.768468][T22238]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1123.768478][T22238]  ? ref_tracker_free+0x63a/0x7d0
[ 1123.768493][T22238]  ? __copy_skb_header+0xa7/0x550
[ 1123.768508][T22238]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1123.768529][T22238]  netlink_rcv_skb+0x208/0x470
[ 1123.768542][T22238]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1123.768554][T22238]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1123.768573][T22238]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1123.768585][T22238]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1123.768610][T22238]  netlink_unicast+0x75c/0x8e0
[ 1123.768628][T22238]  netlink_sendmsg+0x805/0xb30
[ 1123.768646][T22238]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1123.768661][T22238]  ? aa_sock_msg_perm+0x94/0x160
[ 1123.768678][T22238]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1123.768694][T22238]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1123.768708][T22238]  __sock_sendmsg+0x219/0x270
[ 1123.768720][T22238]  ____sys_sendmsg+0x505/0x830
[ 1123.768737][T22238]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1123.768755][T22238]  ? import_iovec+0x74/0xa0
[ 1123.768769][T22238]  ___sys_sendmsg+0x21f/0x2a0
[ 1123.768783][T22238]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1123.768815][T22238]  ? __fget_files+0x2a/0x420
[ 1123.768828][T22238]  ? __fget_files+0x3a0/0x420
[ 1123.768847][T22238]  __x64_sys_sendmsg+0x19b/0x260
[ 1123.768861][T22238]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1123.768880][T22238]  ? rcu_is_watching+0x15/0xb0
[ 1123.768896][T22238]  ? do_syscall_64+0xbe/0x3b0
[ 1123.768909][T22238]  do_syscall_64+0xfa/0x3b0
[ 1123.768918][T22238]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1123.768933][T22238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1123.768943][T22238]  ? clear_bhb_loop+0x60/0xb0
[ 1123.768956][T22238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1123.768967][T22238] RIP: 0033:0x7f0cd8f8e929
[ 1123.768980][T22238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1123.768989][T22238] RSP: 002b:00007f0cd9eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1123.769001][T22238] RAX: ffffffffffffffda RBX: 00007f0cd91b5fa0 RCX: 00007f0cd8f8e929
[ 1123.769010][T22238] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005
[ 1123.769017][T22238] RBP: 00007f0cd9010b39 R08: 0000000000000000 R09: 0000000000000000
[ 1123.769023][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1123.769030][T22238] R13: 0000000000000000 R14: 00007f0cd91b5fa0 R15: 00007f0cd92dfa28
[ 1123.769046][T22238]  </TASK>
[ 1123.769053][T22238] 
[ 1124.343160][T22238] =============================
[ 1124.347993][T22238] [ BUG: Invalid wait context ]
[ 1124.352830][T22238] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Tainted: G        W          
[ 1124.361922][T22238] -----------------------------
[ 1124.366753][T22238] syz.0.3807/22238 is trying to lock:
[ 1124.372107][T22238] ffff88805b1f0e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220
[ 1124.382234][T22238] other info that might help us debug this:
[ 1124.388110][T22238] context-{5:5}
[ 1124.391551][T22238] 3 locks held by syz.0.3807/22238:
[ 1124.396738][T22238]  #0: ffffffff8fa232b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1124.406229][T22238]  #1: ffffffff8f51da08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[ 1124.415363][T22238]  #2: ffff8880513e4368 (&macsec_netdev_addr_lock_key#3/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120
[ 1124.425991][T22238] stack backtrace:
[ 1124.429700][T22238] CPU: 0 UID: 0 PID: 22238 Comm: syz.0.3807 Tainted: G        W           6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[ 1124.429722][T22238] Tainted: [W]=WARN
[ 1124.429727][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1124.429737][T22238] Call Trace:
[ 1124.429744][T22238]  <TASK>
[ 1124.429751][T22238]  dump_stack_lvl+0x189/0x250
[ 1124.429773][T22238]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1124.429790][T22238]  ? __pfx__printk+0x10/0x10
[ 1124.429814][T22238]  ? print_lock_name+0xde/0x100
[ 1124.429833][T22238]  __lock_acquire+0xbcb/0xd20
[ 1124.429850][T22238]  ? team_change_rx_flags+0x38/0x220
[ 1124.429866][T22238]  lock_acquire+0x120/0x360
[ 1124.429879][T22238]  ? team_change_rx_flags+0x38/0x220
[ 1124.429898][T22238]  __mutex_lock+0x182/0xe80
[ 1124.429918][T22238]  ? team_change_rx_flags+0x38/0x220
[ 1124.429936][T22238]  ? team_change_rx_flags+0x38/0x220
[ 1124.429951][T22238]  ? __pfx___mutex_lock+0x10/0x10
[ 1124.429964][T22238]  ? netdev_info+0x10a/0x160
[ 1124.429989][T22238]  ? __sock_sendmsg+0x219/0x270
[ 1124.430003][T22238]  ? __pfx_netdev_info+0x10/0x10
[ 1124.430026][T22238]  team_change_rx_flags+0x38/0x220
[ 1124.430043][T22238]  ? __pfx_team_change_rx_flags+0x10/0x10
[ 1124.430058][T22238]  __dev_set_promiscuity+0x534/0x740
[ 1124.430076][T22238]  ? __pfx_netdev_info+0x10/0x10
[ 1124.430097][T22238]  netif_set_promiscuity+0x50/0xe0
[ 1124.430114][T22238]  dev_set_promiscuity+0x126/0x260
[ 1124.430132][T22238]  ? __pfx_macsec_dev_change_rx_flags+0x10/0x10
[ 1124.430148][T22238]  __dev_set_promiscuity+0x534/0x740
[ 1124.430166][T22238]  ? __hw_addr_add_ex+0x3c5/0x770
[ 1124.430184][T22238]  __dev_set_rx_mode+0x17c/0x260
[ 1124.430201][T22238]  dev_uc_add+0xc8/0x120
[ 1124.430220][T22238]  macsec_dev_open+0xd9/0x530
[ 1124.430235][T22238]  ? ib_device_get_by_netdev+0x46b/0x4d0
[ 1124.430249][T22238]  ? __pfx_macsec_dev_open+0x10/0x10
[ 1124.430264][T22238]  ? ib_device_get_by_netdev+0x84/0x4d0
[ 1124.430276][T22238]  ? hsr_netdev_notify+0x29e/0xcf0
[ 1124.430293][T22238]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[ 1124.430308][T22238]  ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500
[ 1124.430327][T22238]  ? ip6_route_dev_notify+0x9a/0x5b0
[ 1124.430344][T22238]  ? notifier_call_chain+0x3bf/0x3e0
[ 1124.430363][T22238]  __dev_open+0x470/0x880
[ 1124.430379][T22238]  ? __pfx___dev_open+0x10/0x10
[ 1124.430396][T22238]  __dev_change_flags+0x1ea/0x6d0
[ 1124.430414][T22238]  ? validate_linkmsg+0x765/0x950
[ 1124.430434][T22238]  ? __pfx___dev_change_flags+0x10/0x10
[ 1124.430454][T22238]  rtnl_newlink_create+0x555/0xb00
[ 1124.430475][T22238]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1124.430492][T22238]  ? rtnl_newlink+0x8db/0x1c70
[ 1124.430507][T22238]  ? __pfx___mutex_lock+0x10/0x10
[ 1124.430523][T22238]  ? ns_capable+0x8a/0xf0
[ 1124.430540][T22238]  rtnl_newlink+0x16d6/0x1c70
[ 1124.430561][T22238]  ? netlink_sendmsg+0x805/0xb30
[ 1124.430582][T22238]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1124.430603][T22238]  ? kasan_quarantine_put+0xdd/0x220
[ 1124.430618][T22238]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1124.430641][T22238]  ? nlmon_xmit+0xb0/0x100
[ 1124.430655][T22238]  ? kmem_cache_free+0x18f/0x400
[ 1124.430678][T22238]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1124.430694][T22238]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1124.430714][T22238]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1124.430730][T22238]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1124.430746][T22238]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1124.430770][T22238]  ? __lock_acquire+0xab9/0xd20
[ 1124.430790][T22238]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1124.430805][T22238]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1124.430821][T22238]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1124.430835][T22238]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1124.430850][T22238]  ? ref_tracker_free+0x63a/0x7d0
[ 1124.430870][T22238]  ? __copy_skb_header+0xa7/0x550
[ 1124.430889][T22238]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1124.430913][T22238]  netlink_rcv_skb+0x208/0x470
[ 1124.430929][T22238]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1124.430944][T22238]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1124.430964][T22238]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1124.430980][T22238]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1124.430998][T22238]  netlink_unicast+0x75c/0x8e0
[ 1124.431016][T22238]  netlink_sendmsg+0x805/0xb30
[ 1124.431036][T22238]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1124.431053][T22238]  ? aa_sock_msg_perm+0x94/0x160
[ 1124.431074][T22238]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1124.431096][T22238]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1124.431112][T22238]  __sock_sendmsg+0x219/0x270
[ 1124.431126][T22238]  ____sys_sendmsg+0x505/0x830
[ 1124.431146][T22238]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1124.431166][T22238]  ? import_iovec+0x74/0xa0
[ 1124.431183][T22238]  ___sys_sendmsg+0x21f/0x2a0
[ 1124.431201][T22238]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1124.431229][T22238]  ? __fget_files+0x2a/0x420
[ 1124.431247][T22238]  ? __fget_files+0x3a0/0x420
[ 1124.431268][T22238]  __x64_sys_sendmsg+0x19b/0x260
[ 1124.431286][T22238]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1124.431308][T22238]  ? rcu_is_watching+0x15/0xb0
[ 1124.431326][T22238]  ? do_syscall_64+0xbe/0x3b0
[ 1124.431341][T22238]  do_syscall_64+0xfa/0x3b0
[ 1124.431354][T22238]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1124.431374][T22238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.431388][T22238]  ? clear_bhb_loop+0x60/0xb0
[ 1124.431403][T22238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.431418][T22238] RIP: 0033:0x7f0cd8f8e929
[ 1124.431432][T22238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1124.431445][T22238] RSP: 002b:00007f0cd9eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1124.431461][T22238] RAX: ffffffffffffffda RBX: 00007f0cd91b5fa0 RCX: 00007f0cd8f8e929
[ 1124.431471][T22238] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005
[ 1124.431482][T22238] RBP: 00007f0cd9010b39 R08: 0000000000000000 R09: 0000000000000000
[ 1124.431491][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1124.431499][T22238] R13: 0000000000000000 R14: 00007f0cd91b5fa0 R15: 00007f0cd92dfa28
[ 1124.431514][T22238]  </TASK>
[ 1125.059699][ T5930] usb 5-1: USB disconnect, device number 63
[ 1125.076610][ T5918] usb 6-1: USB disconnect, device number 2