last executing test programs:

32m51.2808507s ago: executing program 4 (id=660):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f00000008c0)={0x0, 0xe, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

32m45.486801744s ago: executing program 4 (id=678):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x28000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32m44.491967092s ago: executing program 4 (id=679):
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000680)={@broadcast, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0xf, 0x24, 0x66, 0x0, 0xfb, 0x21, 0x0, @multicast1, @private=0xa010101}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x4, '7ze', 0x3, "cacda5"}}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

32m43.285278193s ago: executing program 4 (id=684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,usey_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040))
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xe}]}, 0x30}}, 0x0)

32m42.378286258s ago: executing program 4 (id=685):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r1)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000180001000000007fc514e0000a0000000003ff09"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039040000eb914422ecb016560000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

32m41.987148316s ago: executing program 4 (id=688):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x7, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

32m40.549563319s ago: executing program 32 (id=688):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x7, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m24.817401065s ago: executing program 3 (id=5425):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x4004000)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x401, 0x8, 0x0, 0x400003}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x16, 0x0, @fd_index=0xa, 0x483d, 0x0, 0xe5, 0x2})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0)
getpid()
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)

1m19.995864489s ago: executing program 3 (id=5434):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0)
inotify_init1(0x800)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00')
lseek(r2, 0x5, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
poll(&(0x7f0000000000)=[{r3, 0xb566}], 0x1, 0xfffffffd)
r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev, @multicast1}, &(0x7f0000000140)=0xc)
write$uinput_user_dev(r4, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)
socket$inet_tcp(0x2, 0x1, 0x0)

1m6.348565335s ago: executing program 3 (id=5460):
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$alg(0x26, 0x5, 0x0)
socket$igmp(0x2, 0x3, 0x2)
creat(0x0, 0x12c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800)

1m1.790832472s ago: executing program 3 (id=5469):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bd"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)

54.176779117s ago: executing program 3 (id=5486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0xfffffffd)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x148100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x7f, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf1", 0x0, 0xfffffff9, 0x1, 0x3, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
lseek(r6, 0xc6c3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock(&(0x7f00000cc000/0x2000)=nil, 0x2000)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
read(0xffffffffffffffff, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)="0ca1bb8e5f297fe9908206fb6c6c3a00", 0x10}], 0x1, 0x3, 0xd4bd)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3042}, [@IFLA_LINK={0x8}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6d8f5d40288e5ebba6e19d643b931101"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a0bb6f3e9f221375b427f136e085d050"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0707819bf796a7d66f2cc001bd1c1417"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6tnl0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7dd4ae4cc4eaf7eceaa5b7ac"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x9c}, 0x1, 0xba01, 0x0, 0x24000002}, 0x0)

45.873562905s ago: executing program 3 (id=5502):
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000)
timer_create(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0)
r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x80)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000001c0)={0x0, 0x14, 0x3, 0x0, 0xbc, 0x4, &(0x7f0000000240)="5440f3fb563051cd3dd517ddd6ebac1f78d77c22f8fa66d0c691567deb8052c3788b4206bea24f401a25570afcf8de44887db4bd0edd1a96fe19086d791f93f4971eaaacfbb8e9f96d8f908296663cfe33058ca80c983a6b51815bb99669772455ca18c5f2d0f2df5f1646c821624d18a6e5e1e081a974b4510bf7dde50ea445ab68581a5b07626914427aa925eff31c969959c8fb787437971ce87b596fae973ca75a0e16506a5620fd1f6f02b7d932a2bef071b433dfa43fc1acb9"})
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, 0x0, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="310300000000000000000500000008000300", @ANYRES64=r5], 0x1c}}, 0x800)

30.837631212s ago: executing program 33 (id=5502):
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000)
timer_create(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0)
r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x80)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000001c0)={0x0, 0x14, 0x3, 0x0, 0xbc, 0x4, &(0x7f0000000240)="5440f3fb563051cd3dd517ddd6ebac1f78d77c22f8fa66d0c691567deb8052c3788b4206bea24f401a25570afcf8de44887db4bd0edd1a96fe19086d791f93f4971eaaacfbb8e9f96d8f908296663cfe33058ca80c983a6b51815bb99669772455ca18c5f2d0f2df5f1646c821624d18a6e5e1e081a974b4510bf7dde50ea445ab68581a5b07626914427aa925eff31c969959c8fb787437971ce87b596fae973ca75a0e16506a5620fd1f6f02b7d932a2bef071b433dfa43fc1acb9"})
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, 0x0, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="310300000000000000000500000008000300", @ANYRES64=r5], 0x1c}}, 0x800)

23.510385374s ago: executing program 0 (id=5543):
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000)
timer_create(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0)
r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x80)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000001c0)={0x0, 0x14, 0x3, 0x0, 0xaf, 0x4, &(0x7f0000000240)="5440f3fb563051cd3dd517ddd6ebac1f78d77c22f8fa66d0c691567deb8052c3788b4206bea24f401a25570afcf8de44887db4bd0edd1a96fe19086d791f93f4971eaaacfbb8e9f96d8f908296663cfe33058ca80c983a6b51815bb99669772455ca18c5f2d0f2df5f1646c821624d18a6e5e1e081a974b4510bf7dde50ea445ab68581a5b07626914427aa925eff31c969959c8fb787437971ce87b596fae973ca75a0e16506a5620fd1f6f02b7d9"})
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, 0x0, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="310300000000000000000500000008000300", @ANYRES64=r5], 0x1c}}, 0x800)

21.881587033s ago: executing program 2 (id=5544):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
acct(0x0)
r2 = io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd612, 0x1, 0x0, 0x28b})
r3 = memfd_create(&(0x7f0000000680)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5Zy\xc2\x964\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xd5.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1\x15Y\x06d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05c\x15=\'0\x92\x9e\xcc\xf3\x03\xaf\xd0F\xa2\x13\x1e\xf8y~h\xca:\xe2\xb77\xdbR\x15\t#l\xd4\x98N2\x9a*\x97e\xbd\x1f\xda\x1d\xf2\xba3(\xdd{oq\xe2\x9byvh\xfe\xae\xb7\'\x96\x04\x94\xcdk\xe8\xb5cYs\x9f\xc3qW#X)\xc2y\xfe\xb0h\xae\x03\xe2\xc9\xc5\x96\xf8\xd1\xa3W\xd4\x9e\x91\x1c\xe6\xe8\xea\xbf5\x8bw\xc8\v\xfc\xd6\xd0\x03\xadJcQ\x96\xdf\xdc\xe8\xebh0\xd4\xd2>\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x98#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v[Y\x9e\xb9\xefY\xc7\"\x17\xc1|\xc3\xfe\xae\xf2\x12v\xc1\x01\xbc\xef0\xe4\x97\xcfa\xff]\xcdA\x84G\xab\xf5\x00\xe4\xac\x1b\x98\x95\xcd\f\xdc\xe6[\xd8\x16\bx\xad\xfeW8\xb4M\x9b\x96\'\xf8\x8f$\x94\xd14n/\xf1\xf2]\xb9\xfa?\x91\x0e\x1d\x83\xce\xff\x830\x88S\xba\xb9]\x967\xec\xaal+\xd9mbUJ\xe2Jw\f6\x8b\x94P8\x1b\xa8\xb5s\x82\x16\xe5~\xc1\xb6\xdf \x17\xd8\xa8CyL>\xd5q\xb7\xff-\xabj<i\xd3\x99\xe81\xef\xaa\xe5\x1c\x00\x00\x00\x00\x00\x00', 0x3)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x2}, 0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e000000"], 0x0)
r7 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r7})
keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0)

16.127874198s ago: executing program 0 (id=5554):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15.523020448s ago: executing program 2 (id=5555):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bd"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)

14.440798688s ago: executing program 0 (id=5557):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
acct(0x0)
r2 = io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd612, 0x1, 0x0, 0x28b})
r3 = memfd_create(&(0x7f0000000680)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5Zy\xc2\x964\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xd5.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1\x15Y\x06d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05c\x15=\'0\x92\x9e\xcc\xf3\x03\xaf\xd0F\xa2\x13\x1e\xf8y~h\xca:\xe2\xb77\xdbR\x15\t#l\xd4\x98N2\x9a*\x97e\xbd\x1f\xda\x1d\xf2\xba3(\xdd{oq\xe2\x9byvh\xfe\xae\xb7\'\x96\x04\x94\xcdk\xe8\xb5cYs\x9f\xc3qW#X)\xc2y\xfe\xb0h\xae\x03\xe2\xc9\xc5\x96\xf8\xd1\xa3W\xd4\x9e\x91\x1c\xe6\xe8\xea\xbf5\x8bw\xc8\v\xfc\xd6\xd0\x03\xadJcQ\x96\xdf\xdc\xe8\xebh0\xd4\xd2>\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x98#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v[Y\x9e\xb9\xefY\xc7\"\x17\xc1|\xc3\xfe\xae\xf2\x12v\xc1\x01\xbc\xef0\xe4\x97\xcfa\xff]\xcdA\x84G\xab\xf5\x00\xe4\xac\x1b\x98\x95\xcd\f\xdc\xe6[\xd8\x16\bx\xad\xfeW8\xb4M\x9b\x96\'\xf8\x8f$\x94\xd14n/\xf1\xf2]\xb9\xfa?\x91\x0e\x1d\x83\xce\xff\x830\x88S\xba\xb9]\x967\xec\xaal+\xd9mbUJ\xe2Jw\f6\x8b\x94P8\x1b\xa8\xb5s\x82\x16\xe5~\xc1\xb6\xdf \x17\xd8\xa8CyL>\xd5q\xb7\xff-\xabj<i\xd3\x99\xe81\xef\xaa\xe5\x1c\x00\x00\x00\x00\x00\x00', 0x3)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x2}, 0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e000000"], 0x0)
r7 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r7})
keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0)

12.308837042s ago: executing program 1 (id=5560):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16], 0x2c}}, 0x0)
r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)

11.606267435s ago: executing program 6 (id=5561):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0)
syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480)

10.57844701s ago: executing program 1 (id=5562):
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000)
timer_create(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0)
r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x80)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000001c0)={0x0, 0x14, 0x3, 0x0, 0xc2, 0x4, &(0x7f0000000240)="5440f3fb563051cd3dd517ddd6ebac1f78d77c22f8fa66d0c691567deb8052c3788b4206bea24f401a25570afcf8de44887db4bd0edd1a96fe19086d791f93f4971eaaacfbb8e9f96d8f908296663cfe33058ca80c983a6b51815bb99669772455ca18c5f2d0f2df5f1646c821624d18a6e5e1e081a974b4510bf7dde50ea445ab68581a5b07626914427aa925eff31c969959c8fb787437971ce87b596fae973ca75a0e16506a5620fd1f6f02b7d932a2bef071b433dfa43fc1acb9d99f3ca2150f"})
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, 0x0, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="310300000000000000000500000008000300", @ANYRES64=r5], 0x1c}}, 0x800)

10.292178179s ago: executing program 2 (id=5563):
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$alg(0x26, 0x5, 0x0)
socket$igmp(0x2, 0x3, 0x2)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0xc800)

9.873327556s ago: executing program 2 (id=5565):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bd"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)

9.733084539s ago: executing program 6 (id=5566):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x8, 0x0, 0x400003}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00')

8.736975487s ago: executing program 1 (id=5567):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="800000001e0001000000000000000000010000006c"], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x401, 0x8, 0x0, 0x400003}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x16, 0x0, @fd_index=0xa, 0x483d, 0x0, 0xe5, 0x2})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0)
getpid()
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)

8.195147224s ago: executing program 5 (id=5568):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.025500615s ago: executing program 6 (id=5569):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0)

7.659351465s ago: executing program 0 (id=5570):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bd"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)

7.579362615s ago: executing program 5 (id=5571):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e000000"], 0x0)

6.934585855s ago: executing program 1 (id=5572):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0)
inotify_init1(0x800)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
lseek(r2, 0x5, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
poll(&(0x7f0000000000)=[{r3, 0xb566}], 0x1, 0xfffffffd)
r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev, @multicast1}, &(0x7f0000000140)=0xc)
write$uinput_user_dev(r4, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)
socket$inet_tcp(0x2, 0x1, 0x0)

6.595591588s ago: executing program 6 (id=5573):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0)
inotify_init1(0x800)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00')
lseek(r2, 0x5, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
poll(&(0x7f0000000000)=[{r3, 0xb566}], 0x1, 0xfffffffd)
r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev, @multicast1}, &(0x7f0000000140)=0xc)
write$uinput_user_dev(r4, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)
socket$inet_tcp(0x2, 0x1, 0x0)

5.625383484s ago: executing program 2 (id=5574):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0)
inotify_init1(0x800)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00')
lseek(r2, 0x5, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
poll(0x0, 0x0, 0xfffffffd)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev, @multicast1}, &(0x7f0000000140)=0xc)
write$uinput_user_dev(r3, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
socket$inet_tcp(0x2, 0x1, 0x0)

4.184628143s ago: executing program 5 (id=5575):
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$alg(0x26, 0x5, 0x0)
socket$igmp(0x2, 0x3, 0x2)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0xc800)

3.514342783s ago: executing program 5 (id=5576):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bd"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)

3.455141767s ago: executing program 0 (id=5577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0xfffffffd)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x148100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x7f, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf1", 0x0, 0xfffffff9, 0x1, 0x3, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
lseek(r7, 0xc6c3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock(&(0x7f00000cc000/0x2000)=nil, 0x2000)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
read(0xffffffffffffffff, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)="0ca1bb8e5f297fe9908206fb6c6c3a00", 0x10}], 0x1, 0x3, 0xd4bd)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3042}, [@IFLA_LINK={0x8}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6d8f5d40288e5ebba6e19d643b931101"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a0bb6f3e9f221375b427f136e085d050"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0707819bf796a7d66f2cc001bd1c1417"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6tnl0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7dd4ae4cc4eaf7eceaa5b7ac"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x9c}, 0x1, 0xba01, 0x0, 0x24000002}, 0x0)

2.634189299s ago: executing program 1 (id=5578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0xfffffffd)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x148100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x7f, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf1", 0x0, 0xfffffff9, 0x1, 0x3, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
lseek(r7, 0xc6c3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock(&(0x7f00000cc000/0x2000)=nil, 0x2000)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
read(0xffffffffffffffff, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)="0ca1bb8e5f297fe9908206fb6c6c3a00", 0x10}], 0x1, 0x3, 0xd4bd)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3042}, [@IFLA_LINK={0x8}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6d8f5d40288e5ebba6e19d643b931101"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a0bb6f3e9f221375b427f136e085d050"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0707819bf796a7d66f2cc001bd1c1417"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6tnl0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7dd4ae4cc4eaf7eceaa5b7ac"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x9c}, 0x1, 0xba01, 0x0, 0x24000002}, 0x0)

2.476587237s ago: executing program 6 (id=5579):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16], 0x2c}}, 0x0)
r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)

1.215975956s ago: executing program 1 (id=5580):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16], 0x2c}}, 0x0)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)

950.984091ms ago: executing program 5 (id=5581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xe, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x4, 0x8, 0x8, 0x8}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r3}, 0x38)
r4 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x8000002)

829.493092ms ago: executing program 5 (id=5582):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x401, 0x8, 0x0, 0x400003}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x16, 0x0, @fd_index=0xa, 0x483d, 0x0, 0xe5, 0x2})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0)
r6 = getpid()
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffffffffff78}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
prlimit64(r6, 0x0, 0x0, 0x0)

787.532304ms ago: executing program 2 (id=5583):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000)
timer_create(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0)
r2 = add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400), 0x0, 0xfffffffffffffffe)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x80)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0})
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2}, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="3103000000000000000005000000"], 0x1c}}, 0x800)

707.40835ms ago: executing program 6 (id=5584):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="800000001e0001000000000000000000010000006c"], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x401, 0x8, 0x0, 0x400003}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x16, 0x0, @fd_index=0xa, 0x483d, 0x0, 0xe5, 0x2})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0)
getpid()
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)

0s ago: executing program 0 (id=5585):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bd"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)

kernel console output (not intermixed with test programs):

.1 gadget.0: fail, usb_ep_enable returned -22
[ 1980.117390][ T2346] pvrusb2: Invalid write control endpoint
[ 1980.163428][T26327] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1980.266279][ T2346] pvrusb2: Invalid write control endpoint
[ 1980.272260][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1980.286960][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1980.315840][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1980.335752][ T2346] pvrusb2: Device being rendered inoperable
[ 1980.342471][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1980.351905][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1980.453304][ T2346] pvrusb2: Attached sub-driver cx25840
[ 1980.461802][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1980.479361][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1980.497388][T22975] usb 3-1: USB disconnect, device number 100
[ 1980.662929][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4921'.
[ 1980.818176][    C1] sd 0:0:1:0: [sda] tag#3682 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1980.828731][    C1] sd 0:0:1:0: [sda] tag#3682 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1982.315323][T26327] usb 6-1: new low-speed USB device number 92 using dummy_hcd
[ 1982.516862][T22986] usb 1-1: USB disconnect, device number 94
[ 1982.695625][T26327] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1982.714020][T26327] usb 6-1: config 0 has no interface number 0
[ 1982.725330][T26327] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1982.755517][T26327] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1982.784814][T26327] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1982.809723][T26327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1982.823951][T26327] usb 6-1: config 0 descriptor??
[ 1982.849082][T26424] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1982.875947][T26327] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1984.204047][T26445] netlink: 'syz.0.4929': attribute type 3 has an invalid length.
[ 1984.560131][    C1] sd 0:0:1:0: [sda] tag#3695 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1984.570749][    C1] sd 0:0:1:0: [sda] tag#3695 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1984.887863][T26327] usb 6-1: USB disconnect, device number 92
[ 1986.366070][T26463] netlink: 'syz.0.4932': attribute type 3 has an invalid length.
[ 1986.620321][    C1] sd 0:0:1:0: [sda] tag#3700 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1986.630840][    C1] sd 0:0:1:0: [sda] tag#3700 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1988.442111][T26498] netlink: 'syz.5.4936': attribute type 3 has an invalid length.
[ 1988.506128][T26493] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4938'.
[ 1988.524915][T26493] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4938'.
[ 1988.535234][T26493] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4938'.
[ 1990.625375][T10706] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1990.786293][T10706] usb 2-1: Using ep0 maxpacket: 8
[ 1990.803284][T10706] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1990.812710][T10706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1990.830171][T10706] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1990.837673][T10706] pvrusb2: **********
[ 1990.841776][T10706] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1990.852448][T10706] pvrusb2: Important functionality might not be entirely working.
[ 1990.860672][T10706] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1990.872555][T10706] pvrusb2: **********
[ 1991.060267][ T2346] pvrusb2: Invalid write control endpoint
[ 1991.186206][ T2346] pvrusb2: Invalid write control endpoint
[ 1991.206824][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1991.208221][T22975] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1991.224655][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1991.243375][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1991.265003][ T2346] pvrusb2: Device being rendered inoperable
[ 1991.275040][T10706] usb 2-1: USB disconnect, device number 103
[ 1991.288771][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1991.296942][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1991.327300][ T2346] pvrusb2: Attached sub-driver cx25840
[ 1991.332918][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1991.348332][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1991.378283][T22975] usb 1-1: Using ep0 maxpacket: 8
[ 1991.395821][T22975] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1991.404185][T22975] usb 1-1: config 179 has no interface number 0
[ 1991.411220][T22975] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1991.423479][T22975] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1991.437373][T22975] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64
[ 1991.456582][T22975] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1991.476799][T22975] usb 1-1: config 179 interface 65 has no altsetting 0
[ 1991.495888][T22975] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1991.504968][T22975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1991.585767][T22986] usb 3-1: new low-speed USB device number 101 using dummy_hcd
[ 1991.738169][T22986] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1991.747382][T22986] usb 3-1: config 0 has no interface number 0
[ 1991.753518][T22986] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1991.792656][T22986] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1991.814235][T22986] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1991.837054][T22986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1991.868319][T22986] usb 3-1: config 0 descriptor??
[ 1991.891436][T26533] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1992.136592][T22986] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1992.272521][T26539] netlink: 'syz.1.4946': attribute type 3 has an invalid length.
[ 1992.290039][T26327] usb 1-1: USB disconnect, device number 95
[ 1992.499031][    C1] sd 0:0:1:0: [sda] tag#3708 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1992.509615][    C1] sd 0:0:1:0: [sda] tag#3708 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1992.581197][T26543] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4947'.
[ 1992.615918][T26543] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4947'.
[ 1992.693625][T26543] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4947'.
[ 1993.649101][T26559] netlink: 'syz.0.4948': attribute type 3 has an invalid length.
[ 1994.806640][T26327] usb 3-1: USB disconnect, device number 101
[ 1995.162470][T26579] netlink: 'syz.1.4951': attribute type 3 has an invalid length.
[ 1995.263970][    C1] sd 0:0:1:0: [sda] tag#3649 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1995.274457][    C1] sd 0:0:1:0: [sda] tag#3649 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1995.283921][T26575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4952'.
[ 1995.520260][T26575] hsr_slave_1 (unregistering): left promiscuous mode
[ 1995.544791][T26583] netlink: 'syz.5.4953': attribute type 3 has an invalid length.
[ 1995.946765][    C1] sd 0:0:1:0: [sda] tag#3650 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1995.957214][    C1] sd 0:0:1:0: [sda] tag#3650 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1996.550779][T26594] netlink: 'syz.1.4955': attribute type 3 has an invalid length.
[ 1996.635784][    C1] sd 0:0:1:0: [sda] tag#3651 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1996.646658][    C1] sd 0:0:1:0: [sda] tag#3651 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1997.235764][T22986] usb 3-1: new low-speed USB device number 102 using dummy_hcd
[ 1997.629429][T22986] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1997.638120][T22986] usb 3-1: config 0 has no interface number 0
[ 1997.646795][T22986] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1997.696720][T22986] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1997.738050][T22986] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1997.785853][T22986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1997.821980][T22986] usb 3-1: config 0 descriptor??
[ 1997.906460][T26602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1997.920614][T26604] netlink: 'syz.5.4957': attribute type 3 has an invalid length.
[ 1997.997429][T22986] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1998.155763][    C1] sd 0:0:1:0: [sda] tag#3652 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1998.166397][    C1] sd 0:0:1:0: [sda] tag#3652 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1999.459953][T26618] netlink: 'syz.1.4959': attribute type 3 has an invalid length.
[ 1999.629860][    C1] sd 0:0:1:0: [sda] tag#3659 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1999.640406][    C1] sd 0:0:1:0: [sda] tag#3659 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 1999.770681][T26622] netlink: 'syz.5.4960': attribute type 3 has an invalid length.
[ 1999.898938][    C1] sd 0:0:1:0: [sda] tag#3662 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1999.909502][    C1] sd 0:0:1:0: [sda] tag#3662 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2000.012114][T22986] usb 3-1: USB disconnect, device number 102
[ 2000.806412][T26637] netlink: 'syz.2.4961': attribute type 3 has an invalid length.
[ 2000.901184][T26640] netlink: 'syz.1.4963': attribute type 3 has an invalid length.
[ 2000.973021][    C1] sd 0:0:1:0: [sda] tag#3665 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2000.983655][    C1] sd 0:0:1:0: [sda] tag#3665 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2001.016861][    C1] sd 0:0:1:0: [sda] tag#3666 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2001.027542][    C1] sd 0:0:1:0: [sda] tag#3666 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2002.505253][T10706] usb 6-1: new low-speed USB device number 93 using dummy_hcd
[ 2002.708696][T10706] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2002.717507][T10706] usb 6-1: config 0 has no interface number 0
[ 2002.723928][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2002.745659][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2002.759984][T10706] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2002.775206][T10706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2002.793504][T10706] usb 6-1: config 0 descriptor??
[ 2002.820683][T26657] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2002.844537][T10706] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2003.623466][T26662] netlink: 'syz.0.4967': attribute type 3 has an invalid length.
[ 2003.880381][    C1] sd 0:0:1:0: [sda] tag#3667 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2003.891172][    C1] sd 0:0:1:0: [sda] tag#3667 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2005.707584][T26684] netlink: 'syz.3.4970': attribute type 3 has an invalid length.
[ 2006.160000][T26695] netlink: 'syz.2.4972': attribute type 3 has an invalid length.
[ 2006.558879][    C1] sd 0:0:1:0: [sda] tag#3672 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2006.569397][    C1] sd 0:0:1:0: [sda] tag#3672 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2006.859294][T22986] usb 6-1: USB disconnect, device number 93
[ 2007.084950][T26708] netlink: 'syz.1.4975': attribute type 3 has an invalid length.
[ 2007.205953][    C1] sd 0:0:1:0: [sda] tag#3673 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2007.216525][    C1] sd 0:0:1:0: [sda] tag#3673 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2007.304236][    C1] sd 0:0:1:0: [sda] tag#3674 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2007.314757][    C1] sd 0:0:1:0: [sda] tag#3674 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2008.642343][T26733] netlink: 'syz.1.4978': attribute type 3 has an invalid length.
[ 2008.778744][    C1] sd 0:0:1:0: [sda] tag#3675 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2008.789319][    C1] sd 0:0:1:0: [sda] tag#3675 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2010.228676][T26754] netlink: 'syz.2.4979': attribute type 3 has an invalid length.
[ 2010.266680][T26755] netlink: 'syz.5.4981': attribute type 3 has an invalid length.
[ 2010.302554][T26757] netlink: 'syz.0.4980': attribute type 3 has an invalid length.
[ 2010.405887][    C1] sd 0:0:1:0: [sda] tag#3685 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2010.416472][    C1] sd 0:0:1:0: [sda] tag#3685 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2010.515721][    C1] sd 0:0:1:0: [sda] tag#3686 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2010.526217][    C1] sd 0:0:1:0: [sda] tag#3686 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2010.561645][    C1] sd 0:0:1:0: [sda] tag#3687 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2010.572096][    C1] sd 0:0:1:0: [sda] tag#3687 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2012.829351][T26786] netlink: 'syz.1.4988': attribute type 3 has an invalid length.
[ 2012.885724][T26788] netlink: 'syz.2.4987': attribute type 3 has an invalid length.
[ 2012.908790][T26789] netlink: 'syz.0.4986': attribute type 3 has an invalid length.
[ 2012.944229][    C1] sd 0:0:1:0: [sda] tag#3688 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2012.954757][    C1] sd 0:0:1:0: [sda] tag#3688 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2013.065632][    C1] sd 0:0:1:0: [sda] tag#3689 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2013.076220][    C1] sd 0:0:1:0: [sda] tag#3689 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2013.086367][    C1] sd 0:0:1:0: [sda] tag#3690 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2013.096860][    C1] sd 0:0:1:0: [sda] tag#3690 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2014.459990][T26810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4991'.
[ 2015.480203][T26823] netlink: 'syz.1.4993': attribute type 3 has an invalid length.
[ 2015.605751][    C1] sd 0:0:1:0: [sda] tag#3660 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2015.616349][    C1] sd 0:0:1:0: [sda] tag#3660 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2015.785263][T10706] usb 6-1: new low-speed USB device number 94 using dummy_hcd
[ 2015.956512][T10706] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2015.964929][T10706] usb 6-1: config 0 has no interface number 0
[ 2015.976392][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2016.007120][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2016.031897][T10706] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2016.056296][T10706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2016.106205][T10706] usb 6-1: config 0 descriptor??
[ 2016.139163][T26824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2016.759169][T10706] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2017.029575][T26835] netlink: 'syz.1.4996': attribute type 3 has an invalid length.
[ 2017.349790][T26831] netlink: 'syz.2.4995': attribute type 3 has an invalid length.
[ 2017.563754][    C1] sd 0:0:1:0: [sda] tag#3661 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2017.574334][    C1] sd 0:0:1:0: [sda] tag#3661 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2019.243716][T26856] netlink: 'syz.0.5000': attribute type 3 has an invalid length.
[ 2019.674920][    C1] sd 0:0:1:0: [sda] tag#3665 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2019.685407][    C1] sd 0:0:1:0: [sda] tag#3665 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2019.912912][T22986] usb 6-1: USB disconnect, device number 94
[ 2020.359756][T26874] netlink: 'syz.5.5003': attribute type 3 has an invalid length.
[ 2020.596608][T22986] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 2020.787058][T22986] usb 4-1: device descriptor read/64, error -71
[ 2021.025642][T22986] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 2021.036360][T26878] netlink: 'syz.2.5004': attribute type 3 has an invalid length.
[ 2021.155289][T22986] usb 4-1: device descriptor read/64, error -71
[ 2021.302844][T22986] usb usb4-port1: attempt power cycle
[ 2021.555595][T10706] usb 2-1: new low-speed USB device number 104 using dummy_hcd
[ 2021.665873][T22986] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 2021.709963][T22986] usb 4-1: device descriptor read/8, error -71
[ 2021.975748][T10706] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2021.989371][T10706] usb 2-1: config 0 has no interface number 0
[ 2021.996799][T10706] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2022.005916][T22986] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 2022.008488][T10706] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2022.028983][T10706] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2022.051529][T10706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2022.076323][T22986] usb 4-1: device descriptor read/8, error -71
[ 2022.092605][T10706] usb 2-1: config 0 descriptor??
[ 2022.123347][T26883] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2022.143716][T10706] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2022.185989][T22986] usb usb4-port1: unable to enumerate USB device
[ 2022.735357][T10706] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 2022.865267][T10706] usb 1-1: device descriptor read/64, error -71
[ 2023.115326][T10706] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 2023.246704][T26894] netlink: 'syz.5.5008': attribute type 3 has an invalid length.
[ 2023.335284][T10706] usb 1-1: device descriptor read/64, error -71
[ 2023.535497][T10706] usb usb1-port1: attempt power cycle
[ 2023.995737][T10706] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 2024.029954][T10706] usb 1-1: device descriptor read/8, error -71
[ 2024.355247][T10706] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 2024.426433][T10706] usb 1-1: device descriptor read/8, error -71
[ 2024.571296][T10706] usb usb1-port1: unable to enumerate USB device
[ 2024.571764][T22975] usb 2-1: USB disconnect, device number 104
[ 2024.759392][T26898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5009'.
[ 2025.093180][T22975] usb 2-1: new low-speed USB device number 105 using dummy_hcd
[ 2025.320451][T22975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2025.344644][T22975] usb 2-1: config 0 has no interface number 0
[ 2025.387218][T22975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2025.412119][T22975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2025.437592][T22975] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2025.447317][T22975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2025.476363][T22975] usb 2-1: config 0 descriptor??
[ 2025.478973][T26915] netlink: 'syz.3.5010': attribute type 3 has an invalid length.
[ 2025.496057][T26909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2025.530398][T22975] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2025.958280][T26922] netlink: 'syz.0.5013': attribute type 3 has an invalid length.
[ 2026.477703][T26933] netlink: 'syz.2.5015': attribute type 3 has an invalid length.
[ 2026.909003][    C1] sd 0:0:1:0: [sda] tag#3674 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2026.919578][    C1] sd 0:0:1:0: [sda] tag#3674 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2027.003942][    C1] sd 0:0:1:0: [sda] tag#3675 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2027.014475][    C1] sd 0:0:1:0: [sda] tag#3675 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2028.927038][T26952] netlink: 'syz.2.5017': attribute type 3 has an invalid length.
[ 2029.035960][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[ 2029.055879][T22975] usb 2-1: USB disconnect, device number 105
[ 2029.585855][T22975] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 2029.765678][T22975] usb 2-1: device descriptor read/64, error -71
[ 2030.055804][T22975] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 2030.195487][T22975] usb 2-1: device descriptor read/64, error -71
[ 2030.306593][T22975] usb usb2-port1: attempt power cycle
[ 2030.662054][T22975] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 2030.715966][T22975] usb 2-1: device descriptor read/8, error -71
[ 2030.975775][T22975] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 2030.996498][T22975] usb 2-1: device descriptor read/8, error -71
[ 2031.105955][T22975] usb usb2-port1: unable to enumerate USB device
[ 2031.475624][T22986] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 2031.615750][T22986] usb 6-1: device descriptor read/64, error -71
[ 2031.855756][T22986] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 2031.996771][T22986] usb 6-1: device descriptor read/64, error -71
[ 2032.115879][T22986] usb usb6-port1: attempt power cycle
[ 2032.365709][T22975] usb 1-1: new low-speed USB device number 100 using dummy_hcd
[ 2032.455858][T22986] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 2032.476622][T22986] usb 6-1: device descriptor read/8, error -71
[ 2032.526786][T22975] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 2032.535501][T22975] usb 1-1: config 0 has no interface number 0
[ 2032.555972][T22975] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2032.577122][T22975] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2032.591484][T22975] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2032.601739][T22975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2032.618408][T22975] usb 1-1: config 0 descriptor??
[ 2032.624615][T26985] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 2032.652111][T22975] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2032.715737][T22986] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 2032.736322][T22986] usb 6-1: device descriptor read/8, error -71
[ 2032.846602][T22986] usb usb6-port1: unable to enumerate USB device
[ 2033.364305][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5027'.
[ 2035.225200][T10706] usb 6-1: new low-speed USB device number 99 using dummy_hcd
[ 2035.279500][T27013] netlink: 'syz.2.5032': attribute type 3 has an invalid length.
[ 2035.471059][T10706] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2035.526815][T10706] usb 6-1: config 0 has no interface number 0
[ 2035.533919][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2035.556262][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2035.570039][T10706] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2035.609941][T10706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2035.649528][T10706] usb 6-1: config 0 descriptor??
[ 2035.657881][T27019] netlink: 'syz.1.5033': attribute type 3 has an invalid length.
[ 2035.673322][T27007] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2035.709890][    C1] sd 0:0:1:0: [sda] tag#3690 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2035.720451][    C1] sd 0:0:1:0: [sda] tag#3690 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2035.762993][T10706] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[ 2036.791084][T22975] usb 1-1: USB disconnect, device number 100
[ 2037.099710][T27031] netlink: 'syz.1.5034': attribute type 3 has an invalid length.
[ 2037.266974][    C1] sd 0:0:1:0: [sda] tag#3691 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2037.277634][    C1] sd 0:0:1:0: [sda] tag#3691 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2037.670758][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.677438][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2038.071286][T10706] usb 6-1: USB disconnect, device number 99
[ 2038.586758][T10706] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 2038.808752][T10706] usb 2-1: device descriptor read/64, error -71
[ 2039.201507][T10706] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 2039.392496][T10706] usb 2-1: device descriptor read/64, error -71
[ 2039.507586][T10706] usb usb2-port1: attempt power cycle
[ 2039.865272][T10706] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 2039.896431][T10706] usb 2-1: device descriptor read/8, error -71
[ 2040.135251][T10706] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 2040.155989][T10706] usb 2-1: device descriptor read/8, error -71
[ 2040.279712][T10706] usb usb2-port1: unable to enumerate USB device
[ 2040.456295][T27078] netlink: 'syz.0.5043': attribute type 3 has an invalid length.
[ 2041.632800][T27084] netlink: 'syz.1.5045': attribute type 3 has an invalid length.
[ 2041.733521][    C1] sd 0:0:1:0: [sda] tag#3696 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2041.744159][    C1] sd 0:0:1:0: [sda] tag#3696 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2043.130052][T27103] netlink: 'syz.1.5049': attribute type 3 has an invalid length.
[ 2044.554837][T27117] netlink: 'syz.1.5052': attribute type 3 has an invalid length.
[ 2044.631815][    C1] sd 0:0:1:0: [sda] tag#3648 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2044.642299][    C1] sd 0:0:1:0: [sda] tag#3648 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2044.655629][T10706] usb 6-1: new low-speed USB device number 100 using dummy_hcd
[ 2044.877790][T10706] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2044.887495][T10706] usb 6-1: config 0 has no interface number 0
[ 2044.897915][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2044.920868][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2044.940835][T10706] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2044.960265][T10706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2045.121413][T10706] usb 6-1: config 0 descriptor??
[ 2045.186786][T27115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2045.256375][T10706] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2047.139504][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5055'.
[ 2049.596542][T10706] usb 6-1: USB disconnect, device number 100
[ 2049.841642][T27156] netlink: 'syz.3.5059': attribute type 3 has an invalid length.
[ 2050.428715][T27170] netlink: 'syz.5.5062': attribute type 3 has an invalid length.
[ 2050.677546][    C1] sd 0:0:1:0: [sda] tag#3679 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2050.688047][    C1] sd 0:0:1:0: [sda] tag#3679 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2051.243845][T27183] netlink: 'syz.1.5065': attribute type 3 has an invalid length.
[ 2054.256060][T10706] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 2054.405183][T10706] usb 1-1: device descriptor read/64, error -71
[ 2054.721466][T10706] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 2054.895946][T10706] usb 1-1: device descriptor read/64, error -71
[ 2055.007283][T10706] usb usb1-port1: attempt power cycle
[ 2055.016404][T27219] netlink: 'syz.1.5072': attribute type 3 has an invalid length.
[ 2055.087626][    C1] sd 0:0:1:0: [sda] tag#3689 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2055.098117][    C1] sd 0:0:1:0: [sda] tag#3689 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2055.445198][T10706] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 2055.477602][T10706] usb 1-1: device descriptor read/8, error -71
[ 2055.726351][T10706] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 2055.766622][T10706] usb 1-1: device descriptor read/8, error -71
[ 2055.875753][T10706] usb usb1-port1: unable to enumerate USB device
[ 2055.915789][T27212] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5071'.
[ 2055.925200][T27212] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5071'.
[ 2056.099581][T27225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5073'.
[ 2056.153368][T27212] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5071'.
[ 2056.254201][T27212] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5071'.
[ 2057.631180][T27236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5075'.
[ 2058.799199][T27257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5079'.
[ 2059.333013][T27270] netlink: 'syz.1.5083': attribute type 3 has an invalid length.
[ 2059.459547][    C1] sd 0:0:1:0: [sda] tag#3694 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2059.470185][    C1] sd 0:0:1:0: [sda] tag#3694 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2060.600127][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5084'.
[ 2061.081987][T27286] netlink: 'syz.0.5085': attribute type 3 has an invalid length.
[ 2061.126357][T27288] netlink: 'syz.5.5086': attribute type 3 has an invalid length.
[ 2061.376131][T27301] netlink: 'syz.2.5088': attribute type 3 has an invalid length.
[ 2061.405784][    C1] sd 0:0:1:0: [sda] tag#3700 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2061.416369][    C1] sd 0:0:1:0: [sda] tag#3700 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2061.460234][    C1] sd 0:0:1:0: [sda] tag#3701 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2061.470782][    C1] sd 0:0:1:0: [sda] tag#3701 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2061.628386][    C1] sd 0:0:1:0: [sda] tag#3702 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2061.638883][    C1] sd 0:0:1:0: [sda] tag#3702 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2062.691530][T27302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'.
[ 2063.185555][T22986] usb 2-1: new low-speed USB device number 114 using dummy_hcd
[ 2063.348222][T22986] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2063.358142][T22986] usb 2-1: config 0 has no interface number 0
[ 2063.364591][T22986] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2063.376204][T22986] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2063.387975][T22986] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2063.397585][T22986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2063.409198][T22986] usb 2-1: config 0 descriptor??
[ 2063.416260][T27314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2063.433361][T22986] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2064.645424][T27331] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5096'.
[ 2065.760579][T26327] usb 2-1: USB disconnect, device number 114
[ 2066.144318][T27346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5099'.
[ 2066.271892][T27351] libceph: resolve '0..' (ret=-3): failed
[ 2066.376295][T27353] netlink: 'syz.2.5101': attribute type 3 has an invalid length.
[ 2066.456202][T22986] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 2066.534840][    C1] sd 0:0:1:0: [sda] tag#3709 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2066.545349][    C1] sd 0:0:1:0: [sda] tag#3709 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2066.615768][T22986] usb 4-1: Using ep0 maxpacket: 8
[ 2066.666159][T22986] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 2066.675525][T22986] usb 4-1: config 179 has no interface number 0
[ 2066.683482][T22986] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2066.697939][T22986] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2066.727482][T22986] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2066.740234][T22986] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2066.754088][T22986] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2066.779124][T22986] usb 4-1: config 179 interface 65 has no altsetting 0
[ 2066.791968][T22986] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2066.801915][T22986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.869992][T22986] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input125
[ 2067.745364][T26327] usb 4-1: USB disconnect, device number 88
[ 2067.745639][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2068.316429][T27363] netlink: 'syz.5.5103': attribute type 3 has an invalid length.
[ 2068.478170][    C1] sd 0:0:1:0: [sda] tag#3710 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2068.488803][    C1] sd 0:0:1:0: [sda] tag#3710 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2068.614087][T27370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5105'.
[ 2070.666998][T27388] netlink: 'syz.5.5108': attribute type 3 has an invalid length.
[ 2070.978105][T27397] netlink: 'syz.1.5110': attribute type 3 has an invalid length.
[ 2071.119494][    C1] sd 0:0:1:0: [sda] tag#3652 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2071.130006][    C1] sd 0:0:1:0: [sda] tag#3652 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2072.475424][T27399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5109'.
[ 2072.736884][T27417] netlink: 'syz.5.5112': attribute type 3 has an invalid length.
[ 2072.755866][T27418] netlink: 'syz.0.5113': attribute type 3 has an invalid length.
[ 2072.866418][    C1] sd 0:0:1:0: [sda] tag#3653 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2072.877178][    C1] sd 0:0:1:0: [sda] tag#3653 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2072.916281][T27420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5114'.
[ 2072.984780][    C1] sd 0:0:1:0: [sda] tag#3654 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2072.995269][    C1] sd 0:0:1:0: [sda] tag#3654 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2073.199784][T27424] libceph: resolve '0..' (ret=-3): failed
[ 2074.673131][T27445] netlink: 'syz.5.5117': attribute type 3 has an invalid length.
[ 2074.738810][T27450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5120'.
[ 2074.954567][    C1] sd 0:0:1:0: [sda] tag#3662 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2074.965146][    C1] sd 0:0:1:0: [sda] tag#3662 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2075.956769][T27461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5122'.
[ 2075.998695][T27461] libceph: resolve '0..' (ret=-3): failed
[ 2077.092781][T27468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5124'.
[ 2077.389328][T27474] netlink: 'syz.2.5123': attribute type 3 has an invalid length.
[ 2077.611522][    C1] sd 0:0:1:0: [sda] tag#3667 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2077.622142][    C1] sd 0:0:1:0: [sda] tag#3667 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2078.421497][T27486] netlink: 'syz.1.5126': attribute type 3 has an invalid length.
[ 2078.752671][    C1] sd 0:0:1:0: [sda] tag#3668 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2078.763177][    C1] sd 0:0:1:0: [sda] tag#3668 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2080.962825][T27518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5134'.
[ 2080.991541][T27518] libceph: resolve '0..' (ret=-3): failed
[ 2081.010520][T27517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5132'.
[ 2082.466577][T27528] netlink: 'syz.1.5135': attribute type 3 has an invalid length.
[ 2082.640327][    C1] sd 0:0:1:0: [sda] tag#3678 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2082.650841][    C1] sd 0:0:1:0: [sda] tag#3678 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2083.778864][T27543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5137'.
[ 2085.205250][T26327] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 2085.375218][T26327] usb 3-1: Using ep0 maxpacket: 32
[ 2085.418032][T26327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2085.438593][T26327] usb 3-1: config 0 has no interfaces?
[ 2085.551567][T26327] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2085.581942][T26327] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2085.599294][T26327] usb 3-1: Product: syz
[ 2085.608849][T26327] usb 3-1: Manufacturer: syz
[ 2085.619809][T26327] usb 3-1: SerialNumber: syz
[ 2085.636251][T26327] usb 3-1: config 0 descriptor??
[ 2085.961756][T27557] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5141'.
[ 2085.972052][T27557] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5141'.
[ 2085.985734][T27557] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5141'.
[ 2086.323482][T22986] usb 3-1: USB disconnect, device number 103
[ 2086.422505][T27577] netlink: 'syz.1.5146': attribute type 3 has an invalid length.
[ 2086.534927][    C1] sd 0:0:1:0: [sda] tag#3705 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2086.545401][    C1] sd 0:0:1:0: [sda] tag#3705 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2088.050746][T27601] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5151'.
[ 2089.248024][T27608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5153'.
[ 2090.624615][T27637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5159'.
[ 2090.642715][T27637] libceph: resolve '0..' (ret=-3): failed
[ 2093.447837][T27654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5164'.
[ 2094.336287][T27667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5167'.
[ 2094.364587][T27667] libceph: resolve '0..' (ret=-3): failed
[ 2094.859725][T27679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5170'.
[ 2094.917149][T27679] libceph: resolve '0..' (ret=-3): failed
[ 2094.927447][T27683] netlink: 'syz.5.5169': attribute type 3 has an invalid length.
[ 2095.234829][    C1] sd 0:0:1:0: [sda] tag#3649 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2095.245617][    C1] sd 0:0:1:0: [sda] tag#3649 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2099.131058][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.140723][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2102.553126][T27766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5185'.
[ 2102.574018][T27766] libceph: resolve '0..' (ret=-3): failed
[ 2103.139690][    C1] sd 0:0:1:0: [sda] tag#3660 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2103.150305][    C1] sd 0:0:1:0: [sda] tag#3660 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2104.185796][T27782] netlink: 'syz.1.5188': attribute type 3 has an invalid length.
[ 2104.205559][    C1] sd 0:0:1:0: [sda] tag#3661 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2104.216188][    C1] sd 0:0:1:0: [sda] tag#3661 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2105.709311][T27806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5193'.
[ 2105.796586][T27807] libceph: resolve '0..' (ret=-3): failed
[ 2107.450692][T27818] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5196'.
[ 2107.468886][T27818] libceph: resolve '0..' (ret=-3): failed
[ 2107.816857][T27824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5198'.
[ 2108.086299][T27824] libceph: resolve '0..' (ret=-3): failed
[ 2108.588866][T27831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5199'.
[ 2108.613569][T27831] libceph: resolve '0..' (ret=-3): failed
[ 2108.901255][T27840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5201'.
[ 2109.046291][T27840] libceph: resolve '0..' (ret=-3): failed
[ 2109.305538][T22986] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 2109.495611][T22986] usb 2-1: Using ep0 maxpacket: 8
[ 2109.510277][T22986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2109.541442][T22986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2109.552252][T22986] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2109.568236][T22986] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2109.577763][T22986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2109.587111][T22986] usb 2-1: Product: syz
[ 2109.592446][T22986] usb 2-1: Manufacturer: syz
[ 2109.601702][T22986] usb 2-1: SerialNumber: syz
[ 2109.612489][T22986] usb 2-1: config 0 descriptor??
[ 2109.621573][T22986] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2109.629137][T22986] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2109.638347][T22986] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2111.642621][T22986] usb 2-1: USB disconnect, device number 115
[ 2113.875234][T26327] usb 3-1: new low-speed USB device number 104 using dummy_hcd
[ 2113.970691][T27890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5210'.
[ 2113.990580][T27890] libceph: resolve '0..' (ret=-3): failed
[ 2114.124058][T26327] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2114.138723][T26327] usb 3-1: config 0 has no interface number 0
[ 2114.152044][T26327] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2114.179336][T26327] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2114.223911][T26327] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2114.278973][T26327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2114.301658][T26327] usb 3-1: config 0 descriptor??
[ 2114.396545][T27883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2114.560481][T26327] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2114.711022][T27897] netlink: 'syz.5.5211': attribute type 3 has an invalid length.
[ 2115.084911][    C1] sd 0:0:1:0: [sda] tag#3679 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2115.095490][    C1] sd 0:0:1:0: [sda] tag#3679 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2115.360921][T27902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5212'.
[ 2115.382226][T27902] libceph: resolve '0..' (ret=-3): failed
[ 2116.637419][T27904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5209'.
[ 2116.731805][T27909] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5213'.
[ 2116.749458][T27909] libceph: resolve '0..' (ret=-3): failed
[ 2116.983382][T27906] libceph: resolve '0..' (ret=-3): failed
[ 2117.101741][T10706] usb 3-1: USB disconnect, device number 104
[ 2119.956080][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5221'.
[ 2120.673135][T27963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5224'.
[ 2121.115293][T10706] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 2121.285301][T10706] usb 6-1: Using ep0 maxpacket: 8
[ 2121.292403][T10706] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 2121.301300][T10706] usb 6-1: config 179 has no interface number 0
[ 2121.307765][T10706] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2121.319476][T10706] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2121.338510][T10706] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2121.351486][T10706] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2121.375488][T10706] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2121.389506][T10706] usb 6-1: config 179 interface 65 has no altsetting 0
[ 2121.410870][T10706] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2121.423598][T10706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2121.565374][T10706] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input128
[ 2121.756386][T10706] usb 6-1: USB disconnect, device number 101
[ 2121.762521][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2123.291398][T27993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5231'.
[ 2123.303519][T27991] netlink: 'syz.2.5229': attribute type 3 has an invalid length.
[ 2123.320674][T27993] libceph: resolve '0..' (ret=-3): failed
[ 2126.312339][    C1] sd 0:0:1:0: [sda] tag#3652 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2126.322823][    C1] sd 0:0:1:0: [sda] tag#3652 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2128.230765][T10706] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 2128.415157][T10706] usb 6-1: Using ep0 maxpacket: 8
[ 2128.427462][T10706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2128.440139][T10706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2128.468354][T10706] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2128.510284][T10706] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2128.525151][T10706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2128.550788][T10706] usb 6-1: Product: syz
[ 2128.560331][T10706] usb 6-1: Manufacturer: syz
[ 2128.564968][T10706] usb 6-1: SerialNumber: syz
[ 2128.617042][T10706] usb 6-1: config 0 descriptor??
[ 2128.624751][T10706] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2128.664792][T10706] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2128.685261][T10706] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2129.246826][T10706] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 2129.455514][T10706] usb 2-1: Using ep0 maxpacket: 8
[ 2129.497823][T10706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2129.521311][T10706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2129.535543][T10706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2129.554528][T10706] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2129.563977][T10706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2129.579702][T10706] usb 2-1: Product: syz
[ 2129.584311][T10706] usb 2-1: Manufacturer: syz
[ 2129.590538][T10706] usb 2-1: SerialNumber: syz
[ 2129.666299][T10706] usb 2-1: config 0 descriptor??
[ 2129.678633][T10706] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2129.685981][T10706] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2129.694876][T10706] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2130.317224][T28060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5244'.
[ 2130.419233][T28060] libceph: resolve '0..' (ret=-3): failed
[ 2130.862805][T22975] usb 6-1: USB disconnect, device number 102
[ 2131.065198][T10706] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 2131.193430][T28077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5247'.
[ 2131.236055][T10706] usb 3-1: Using ep0 maxpacket: 8
[ 2131.243841][T10706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2131.258515][T10706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2131.276344][T10706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2131.309950][T10706] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2131.319474][T10706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2131.330204][T10706] usb 3-1: Product: syz
[ 2131.336655][T10706] usb 3-1: Manufacturer: syz
[ 2131.343492][T10706] usb 3-1: SerialNumber: syz
[ 2131.359376][T10706] usb 3-1: config 0 descriptor??
[ 2131.378045][T10706] radioshark 3-1:0.0: Invalid radioSHARK device
[ 2131.384482][T10706] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[ 2131.395550][T10706] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 2131.419388][T28078] libceph: resolve '0..' (ret=-3): failed
[ 2131.830115][T10706] usb 2-1: USB disconnect, device number 116
[ 2133.643125][T26327] usb 3-1: USB disconnect, device number 105
[ 2134.344727][T28110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5255'.
[ 2134.389999][T28109] libceph: resolve '0..' (ret=-3): failed
[ 2135.585947][T28132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5258'.
[ 2135.641244][T28132] libceph: resolve '0..' (ret=-3): failed
[ 2138.060492][T28157] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5262'.
[ 2138.135210][T26327] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 2138.345320][T26327] usb 4-1: Using ep0 maxpacket: 8
[ 2138.424498][T28157] libceph: resolve '0..' (ret=-3): failed
[ 2138.492614][T26327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2138.503038][T26327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2138.517268][T28166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5265'.
[ 2138.565736][T26327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2138.602571][T26327] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2138.625732][T26327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2138.648227][T26327] usb 4-1: Product: syz
[ 2138.662318][T26327] usb 4-1: Manufacturer: syz
[ 2138.672151][T26327] usb 4-1: SerialNumber: syz
[ 2138.679607][T26327] usb 4-1: config 0 descriptor??
[ 2138.774186][T26327] radioshark 4-1:0.0: Invalid radioSHARK device
[ 2138.780576][T26327] radioshark 4-1:0.0: probe with driver radioshark failed with error -22
[ 2138.810253][T26327] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2138.878261][T28173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5267'.
[ 2138.976208][T28172] libceph: resolve '0..' (ret=-3): failed
[ 2139.315621][T22975] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 2139.476664][T22975] usb 1-1: Using ep0 maxpacket: 8
[ 2139.496995][T22975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2139.552555][T22975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2139.617240][T22975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2139.667200][T22975] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2139.762845][T22975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2139.825731][T22975] usb 1-1: Product: syz
[ 2139.830136][T22975] usb 1-1: Manufacturer: syz
[ 2139.835640][T22975] usb 1-1: SerialNumber: syz
[ 2139.860735][T22975] usb 1-1: config 0 descriptor??
[ 2139.880701][T22975] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2139.893217][T22975] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2139.940724][    C1] sd 0:0:1:0: [sda] tag#3674 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2139.951263][    C1] sd 0:0:1:0: [sda] tag#3674 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2139.987606][T22975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2140.257048][    C1] sd 0:0:1:0: [sda] tag#3675 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2140.267597][    C1] sd 0:0:1:0: [sda] tag#3675 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2140.922884][    C1] sd 0:0:1:0: [sda] tag#3680 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2140.933391][    C1] sd 0:0:1:0: [sda] tag#3680 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2141.009335][T28199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5272'.
[ 2141.111198][T28199] libceph: resolve '0..' (ret=-3): failed
[ 2141.754131][T26327] usb 1-1: USB disconnect, device number 105
[ 2143.107425][T28230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5277'.
[ 2143.147603][T28230] libceph: resolve '0..' (ret=-3): failed
[ 2145.060439][T26327] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 2145.205300][T26327] usb 6-1: device descriptor read/64, error -71
[ 2145.358954][    C1] sd 0:0:1:0: [sda] tag#3685 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2145.369599][    C1] sd 0:0:1:0: [sda] tag#3685 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2145.469945][T26327] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 2145.615149][T26327] usb 6-1: device descriptor read/64, error -71
[ 2145.727588][T26327] usb usb6-port1: attempt power cycle
[ 2146.135155][T26327] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 2146.177288][T26327] usb 6-1: device descriptor read/8, error -71
[ 2146.214769][T22986] usb 4-1: USB disconnect, device number 89
[ 2146.425821][T26327] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 2146.452471][T26327] usb 6-1: device descriptor read/8, error -71
[ 2146.575679][T26327] usb usb6-port1: unable to enumerate USB device
[ 2147.928582][T28277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5286'.
[ 2147.946451][T28277] libceph: resolve '0..' (ret=-3): failed
[ 2148.017990][T28278] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5287'.
[ 2148.394658][T28279] libceph: resolve '0..' (ret=-3): failed
[ 2150.116267][T26327] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 2150.490731][T26327] usb 2-1: Using ep0 maxpacket: 8
[ 2150.560193][T26327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2150.570880][T26327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2150.580750][T26327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2150.737590][T26327] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2150.747083][T26327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2150.757511][T26327] usb 2-1: Product: syz
[ 2150.761831][T26327] usb 2-1: Manufacturer: syz
[ 2150.766973][T26327] usb 2-1: SerialNumber: syz
[ 2150.781439][T26327] usb 2-1: config 0 descriptor??
[ 2150.791871][T26327] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2150.801800][T26327] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2150.811272][T26327] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2152.160475][T28315] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5293'.
[ 2152.273186][T28318] libceph: resolve '0..' (ret=-3): failed
[ 2152.597698][T22986] usb 2-1: USB disconnect, device number 117
[ 2153.488963][T22975] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 2153.648720][T22975] usb 2-1: Using ep0 maxpacket: 8
[ 2153.656948][T22975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2153.667933][T22975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2153.688161][T22975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2153.718452][T22975] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2153.730420][T22975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2153.750647][T22975] usb 2-1: Product: syz
[ 2153.754827][T22975] usb 2-1: Manufacturer: syz
[ 2153.765413][T22975] usb 2-1: SerialNumber: syz
[ 2153.772485][T22975] usb 2-1: config 0 descriptor??
[ 2153.804992][T22975] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2153.813505][T22975] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2153.836341][T22975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2154.845615][T28340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5298'.
[ 2154.893867][T28340] libceph: resolve '0..' (ret=-3): failed
[ 2155.766440][T26327] usb 2-1: USB disconnect, device number 118
[ 2157.285925][T28366] netlink: 'syz.1.5304': attribute type 3 has an invalid length.
[ 2157.477101][    C1] sd 0:0:1:0: [sda] tag#3667 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2157.487637][    C1] sd 0:0:1:0: [sda] tag#3667 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2157.635731][T22975] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 2157.795728][T22975] usb 1-1: Using ep0 maxpacket: 8
[ 2157.876084][T22975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2157.887801][T22975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2157.929595][T22975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2158.006293][T22975] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2158.016373][T22975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2158.108681][T22975] usb 1-1: Product: syz
[ 2158.112925][T22975] usb 1-1: Manufacturer: syz
[ 2158.130050][T22975] usb 1-1: SerialNumber: syz
[ 2158.140206][T22975] usb 1-1: config 0 descriptor??
[ 2158.168157][T22975] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2158.174482][T22975] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2158.184973][T22975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2158.235724][T22986] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 2158.347743][T28379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5306'.
[ 2158.415672][T22986] usb 6-1: Using ep0 maxpacket: 8
[ 2158.423106][T22986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2158.434390][T22986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2158.504275][T22986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2158.523184][T28380] libceph: resolve '0..' (ret=-3): failed
[ 2158.683658][T22986] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2158.693534][T22986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2158.702360][T22986] usb 6-1: Product: syz
[ 2158.715991][T22986] usb 6-1: Manufacturer: syz
[ 2158.728056][T22986] usb 6-1: SerialNumber: syz
[ 2158.774643][T22986] usb 6-1: config 0 descriptor??
[ 2158.783072][T22986] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2158.791612][T22986] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2158.808283][T22986] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2159.755162][T26327] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 2159.971939][T26327] usb 2-1: Using ep0 maxpacket: 32
[ 2159.987044][T26327] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2159.999801][T26327] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2160.009750][T26327] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2160.018330][T26327] usb 2-1: Product: syz
[ 2160.023226][T26327] usb 2-1: Manufacturer: syz
[ 2160.029812][T26327] usb 2-1: SerialNumber: syz
[ 2160.046319][T26327] usb 2-1: config 0 descriptor??
[ 2160.054074][T28384] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 2160.352319][T28384] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5307'.
[ 2160.364178][T28384] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5307'.
[ 2160.393461][T28384] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5307'.
[ 2160.548174][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.554621][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2160.614268][T26327] usb 1-1: USB disconnect, device number 106
[ 2161.382576][T22986] usb 6-1: USB disconnect, device number 107
[ 2162.617647][T22986] usb 2-1: USB disconnect, device number 119
[ 2162.990816][T28412] netlink: 'syz.1.5312': attribute type 3 has an invalid length.
[ 2163.011472][    C1] sd 0:0:1:0: [sda] tag#3674 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2163.022045][    C1] sd 0:0:1:0: [sda] tag#3674 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2163.361094][T28417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5313'.
[ 2163.399196][T28417] libceph: resolve '0..' (ret=-3): failed
[ 2164.148361][T28428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5316'.
[ 2164.319416][T28428] libceph: resolve '0..' (ret=-3): failed
[ 2165.105281][T26327] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 2165.218319][T22975] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 2165.305212][T26327] usb 2-1: Using ep0 maxpacket: 8
[ 2165.312378][T26327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2165.323241][T26327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2165.333570][T26327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2165.429729][T26327] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2165.439552][T26327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2165.447805][T26327] usb 2-1: Product: syz
[ 2165.452096][T26327] usb 2-1: Manufacturer: syz
[ 2165.457057][T26327] usb 2-1: SerialNumber: syz
[ 2165.471318][T26327] usb 2-1: config 0 descriptor??
[ 2165.520911][T26327] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2165.527752][T26327] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2165.555573][T22975] usb 1-1: Using ep0 maxpacket: 8
[ 2165.555970][T26327] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2165.562912][T22975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2165.581733][T22975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2165.653367][T22975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2165.819277][T22975] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2165.835702][T22975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2165.845915][T22975] usb 1-1: Product: syz
[ 2165.855527][T22975] usb 1-1: Manufacturer: syz
[ 2165.908354][T22975] usb 1-1: SerialNumber: syz
[ 2165.950373][T22975] usb 1-1: config 0 descriptor??
[ 2165.959856][T22975] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2165.969380][T22975] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2165.980408][T22975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2166.763287][T28451] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5321'.
[ 2166.782100][T28451] libceph: resolve '0..' (ret=-3): failed
[ 2166.935158][T26327] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 2167.085139][T26327] usb 6-1: Using ep0 maxpacket: 32
[ 2167.092193][T26327] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2167.108046][T26327] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2167.117187][T26327] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2167.125505][T26327] usb 6-1: Product: syz
[ 2167.129908][T26327] usb 6-1: Manufacturer: syz
[ 2167.134628][T26327] usb 6-1: SerialNumber: syz
[ 2167.143762][T26327] usb 6-1: config 0 descriptor??
[ 2167.152118][T28449] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2167.391829][T28449] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5322'.
[ 2167.408460][T28449] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5322'.
[ 2167.438999][T28449] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5322'.
[ 2167.594813][T26327] usb 2-1: USB disconnect, device number 120
[ 2168.014461][T26327] usb 1-1: USB disconnect, device number 107
[ 2168.844555][T28461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5324'.
[ 2168.874902][T28461] libceph: resolve '0..' (ret=-3): failed
[ 2169.153671][T28472] netlink: 'syz.2.5326': attribute type 3 has an invalid length.
[ 2170.069822][T22975] usb 6-1: USB disconnect, device number 108
[ 2171.658403][T28497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5331'.
[ 2171.728750][T28497] libceph: resolve '0..' (ret=-3): failed
[ 2172.241157][T28502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5332'.
[ 2172.319581][T28502] libceph: resolve '0..' (ret=-3): failed
[ 2172.452903][T28510] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5333'.
[ 2172.621520][T28512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5335'.
[ 2172.663181][T28512] libceph: resolve '0..' (ret=-3): failed
[ 2172.677181][T28510] libceph: resolve '0..' (ret=-3): failed
[ 2173.705217][T26327] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 2173.855210][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2173.862180][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2173.872808][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2173.882773][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2173.900047][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2173.910228][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2173.918773][T26327] usb 1-1: Product: syz
[ 2173.923000][T26327] usb 1-1: Manufacturer: syz
[ 2173.930492][T26327] usb 1-1: SerialNumber: syz
[ 2173.956452][T28522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5337'.
[ 2173.966323][T26327] usb 1-1: config 0 descriptor??
[ 2173.988867][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2173.998204][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2174.011691][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2174.066113][T28522] libceph: resolve '0..' (ret=-3): failed
[ 2175.166779][T26327] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 2175.435925][T26327] usb 6-1: Using ep0 maxpacket: 8
[ 2175.457830][T26327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2175.468926][T26327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2175.479739][T26327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2175.507377][T26327] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2175.525173][T26327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2175.545315][T26327] usb 6-1: Product: syz
[ 2175.558289][T26327] usb 6-1: Manufacturer: syz
[ 2175.574655][T26327] usb 6-1: SerialNumber: syz
[ 2175.630276][T26327] usb 6-1: config 0 descriptor??
[ 2175.658970][T26327] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2175.676188][T26327] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2175.691722][T26327] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2176.986995][T26327] usb 1-1: USB disconnect, device number 108
[ 2177.896287][T26988] usb 6-1: USB disconnect, device number 109
[ 2179.559874][T28584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5349'.
[ 2179.712840][T28581] libceph: resolve '0..' (ret=-3): failed
[ 2180.675619][T22975] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 2180.855681][T22975] usb 2-1: Using ep0 maxpacket: 32
[ 2180.863068][T22975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2180.877044][T22975] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2180.893520][T22975] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2180.905735][T22975] usb 2-1: Product: syz
[ 2180.909926][T22975] usb 2-1: Manufacturer: syz
[ 2180.915698][T22975] usb 2-1: SerialNumber: syz
[ 2180.957352][T22975] usb 2-1: config 0 descriptor??
[ 2180.963066][T28586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2181.212536][T28586] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5351'.
[ 2181.230192][T28586] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5351'.
[ 2181.270085][T28586] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5351'.
[ 2181.300120][T28595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5353'.
[ 2181.523084][T28595] libceph: resolve '0..' (ret=-3): failed
[ 2182.768448][T28609] netlink: 'syz.5.5356': attribute type 3 has an invalid length.
[ 2182.912829][    C1] sd 0:0:1:0: [sda] tag#3670 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2182.923385][    C1] sd 0:0:1:0: [sda] tag#3670 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2183.559483][T28612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5354'.
[ 2183.706377][T26327] usb 2-1: USB disconnect, device number 121
[ 2183.961597][T28626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5359'.
[ 2183.988744][T28626] libceph: resolve '0..' (ret=-3): failed
[ 2184.444218][T28614] libceph: resolve '0..' (ret=-3): failed
[ 2185.237824][T28634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5360'.
[ 2185.381868][T28633] libceph: resolve '0..' (ret=-3): failed
[ 2185.408107][T10706] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 2185.605868][T10706] usb 6-1: device descriptor read/64, error -71
[ 2185.905191][T10706] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 2186.096472][T10706] usb 6-1: device descriptor read/64, error -71
[ 2186.205620][T10706] usb usb6-port1: attempt power cycle
[ 2186.232691][T28646] libceph: resolve '0..' (ret=-3): failed
[ 2186.575158][T26327] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 2186.605121][T10706] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 2186.626635][T10706] usb 6-1: device descriptor read/8, error -71
[ 2186.746296][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2186.754794][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2186.765387][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2186.775271][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2186.798293][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2186.807644][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2186.816706][T26327] usb 1-1: Product: syz
[ 2186.820946][T26327] usb 1-1: Manufacturer: syz
[ 2186.825628][T26327] usb 1-1: SerialNumber: syz
[ 2186.832935][T26327] usb 1-1: config 0 descriptor??
[ 2186.843526][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2186.850066][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2186.858886][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2186.875583][T10706] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 2186.927206][T10706] usb 6-1: device descriptor read/8, error -71
[ 2187.056516][T10706] usb usb6-port1: unable to enumerate USB device
[ 2187.777131][T28660] libceph: resolve '0..' (ret=-3): failed
[ 2188.565321][T10706] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 2188.725256][T10706] usb 6-1: Using ep0 maxpacket: 32
[ 2188.732625][T10706] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2188.747726][T10706] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2188.757370][T10706] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2188.766079][T10706] usb 6-1: Product: syz
[ 2188.770380][T10706] usb 6-1: Manufacturer: syz
[ 2188.774973][T10706] usb 6-1: SerialNumber: syz
[ 2188.786551][T10706] usb 6-1: config 0 descriptor??
[ 2188.792341][T28668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2188.931114][T10706] usb 1-1: USB disconnect, device number 109
[ 2189.117682][T28668] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5369'.
[ 2189.164801][T28675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5370'.
[ 2189.184652][T28668] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5369'.
[ 2189.261976][T28674] libceph: resolve '0..' (ret=-3): failed
[ 2189.295578][T28668] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5369'.
[ 2190.323060][T28690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5372'.
[ 2190.363762][T28689] libceph: resolve '0..' (ret=-3): failed
[ 2191.696657][T22975] usb 6-1: USB disconnect, device number 114
[ 2191.983942][T28708] libceph: resolve '0..' (ret=-3): failed
[ 2192.181036][T10706] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 2192.440251][T10706] usb 2-1: Using ep0 maxpacket: 8
[ 2192.447617][T10706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2192.458403][T10706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2192.470130][T10706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2192.503589][T10706] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2192.512871][T10706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2192.525501][T10706] usb 2-1: Product: syz
[ 2192.553426][T10706] usb 2-1: Manufacturer: syz
[ 2192.563519][T10706] usb 2-1: SerialNumber: syz
[ 2192.584511][T10706] usb 2-1: config 0 descriptor??
[ 2192.598975][T10706] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2192.607117][T10706] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2192.646016][T10706] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2194.781805][T22975] usb 2-1: USB disconnect, device number 122
[ 2196.151855][T28741] netlink: 'syz.1.5383': attribute type 3 has an invalid length.
[ 2196.174463][    C1] sd 0:0:1:0: [sda] tag#3680 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2196.185138][    C1] sd 0:0:1:0: [sda] tag#3680 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2197.262655][T10706] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 2197.585500][T10706] usb 6-1: Using ep0 maxpacket: 8
[ 2197.746702][T10706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2197.757113][T10706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2197.766923][T10706] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2197.782326][T10706] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2197.791457][T10706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2197.807273][T10706] usb 6-1: Product: syz
[ 2197.815094][T10706] usb 6-1: Manufacturer: syz
[ 2197.819746][T10706] usb 6-1: SerialNumber: syz
[ 2197.847239][T10706] usb 6-1: config 0 descriptor??
[ 2197.856545][T10706] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2197.862856][T10706] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2197.876207][T10706] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2199.595634][T26988] usb 6-1: USB disconnect, device number 115
[ 2199.698262][T28779] libceph: resolve '0..' (ret=-3): failed
[ 2200.230897][T28783] libceph: resolve '0..' (ret=-3): failed
[ 2201.855627][T26988] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 2202.015466][T26988] usb 6-1: Using ep0 maxpacket: 8
[ 2202.023897][T26988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2202.043370][T26988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2202.058133][T26988] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2202.084298][T26988] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2202.094506][T26988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2202.103510][T26988] usb 6-1: Product: syz
[ 2202.108271][T26988] usb 6-1: Manufacturer: syz
[ 2202.112861][T26988] usb 6-1: SerialNumber: syz
[ 2202.124352][T26988] usb 6-1: config 0 descriptor??
[ 2202.138438][T26988] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2202.144876][T26988] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2202.154306][T26988] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2203.223077][T28817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5398'.
[ 2203.285839][T28817] libceph: resolve '0..' (ret=-3): failed
[ 2204.611896][T10706] usb 6-1: USB disconnect, device number 116
[ 2205.041092][T28820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5397'.
[ 2205.097221][T28835] libceph: resolve '0..' (ret=-3): failed
[ 2205.438749][T28836] libceph: resolve '0..' (ret=-3): failed
[ 2205.879883][T28820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5397'.
[ 2205.885794][T28846] libceph: resolve '0..' (ret=-3): failed
[ 2206.545469][T26327] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 2206.715127][T26327] usb 2-1: Using ep0 maxpacket: 32
[ 2206.722431][T26327] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2206.737039][T26327] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2206.755097][T26327] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2206.822390][T26327] usb 2-1: Product: syz
[ 2206.840398][T26327] usb 2-1: Manufacturer: syz
[ 2206.845789][T26327] usb 2-1: SerialNumber: syz
[ 2206.860957][T26327] usb 2-1: config 0 descriptor??
[ 2206.867711][T28849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2207.090781][T28849] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5404'.
[ 2207.100693][T28849] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5404'.
[ 2207.118059][T28849] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5404'.
[ 2207.205387][T28860] libceph: resolve '0..' (ret=-3): failed
[ 2207.411569][    C1] sd 0:0:1:0: [sda] tag#3711 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2207.422098][    C1] sd 0:0:1:0: [sda] tag#3711 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2208.468301][T28874] libceph: resolve '0..' (ret=-3): failed
[ 2209.422525][T26327] usb 2-1: USB disconnect, device number 123
[ 2210.557539][T26327] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 2210.855165][T26327] usb 6-1: Using ep0 maxpacket: 8
[ 2210.862574][T26327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2210.873705][T26327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2210.913488][T26327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2210.939765][T26327] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2210.954709][T26327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2210.965062][T26327] usb 6-1: Product: syz
[ 2210.969256][T26327] usb 6-1: Manufacturer: syz
[ 2210.975533][T26327] usb 6-1: SerialNumber: syz
[ 2210.986913][T26327] usb 6-1: config 0 descriptor??
[ 2211.027493][T26327] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2211.039748][T26327] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2211.050895][T26327] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2211.135148][T10706] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 2211.325188][T10706] usb 2-1: Using ep0 maxpacket: 8
[ 2211.332444][T10706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2211.365491][T10706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2211.381249][T10706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2211.406458][T10706] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2211.416714][T10706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2211.435706][T10706] usb 2-1: Product: syz
[ 2211.445403][T10706] usb 2-1: Manufacturer: syz
[ 2211.455536][T10706] usb 2-1: SerialNumber: syz
[ 2211.481372][T10706] usb 2-1: config 0 descriptor??
[ 2211.497617][T10706] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2211.504941][T10706] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2211.519427][T10706] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2213.002854][T26988] usb 6-1: USB disconnect, device number 117
[ 2213.383701][T28919] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5418'.
[ 2213.554317][T28921] libceph: resolve '0..' (ret=-3): failed
[ 2213.755471][T10706] usb 2-1: USB disconnect, device number 124
[ 2214.004407][T28925] libceph: resolve '0..' (ret=-3): failed
[ 2215.080558][T28929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5420'.
[ 2215.123976][T28929] libceph: resolve '0..' (ret=-3): failed
[ 2216.115751][T10706] usb 6-1: new low-speed USB device number 118 using dummy_hcd
[ 2216.349672][T10706] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2216.357850][T10706] usb 6-1: config 0 has no interface number 0
[ 2216.363953][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2216.379041][T10706] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2216.391857][T10706] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2216.405469][T10706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2216.421994][T10706] usb 6-1: config 0 descriptor??
[ 2216.439554][T28933] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2216.479077][T10706] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2216.536691][T28938] libceph: resolve '0..' (ret=-3): failed
[ 2217.993649][T28952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5426'.
[ 2218.014435][T28952] libceph: resolve '0..' (ret=-3): failed
[ 2219.404544][T28959] libceph: resolve '0..' (ret=-3): failed
[ 2219.489240][T10706] usb 6-1: USB disconnect, device number 118
[ 2221.085140][T10706] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 2221.265147][T10706] usb 3-1: Using ep0 maxpacket: 8
[ 2221.274437][T10706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2221.286239][T10706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2221.301033][T10706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2221.356301][T10706] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2221.375633][T10706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2221.391593][T10706] usb 3-1: Product: syz
[ 2221.396448][T10706] usb 3-1: Manufacturer: syz
[ 2221.401248][T10706] usb 3-1: SerialNumber: syz
[ 2221.465772][T10706] usb 3-1: config 0 descriptor??
[ 2221.481410][T10706] radioshark 3-1:0.0: Invalid radioSHARK device
[ 2221.501008][T10706] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[ 2221.572098][T10706] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 2221.991472][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.999248][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.057424][T28980] netlink: 'syz.5.5432': attribute type 3 has an invalid length.
[ 2222.071572][    C1] sd 0:0:1:0: [sda] tag#3688 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2222.082067][    C1] sd 0:0:1:0: [sda] tag#3688 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2222.136412][T10706] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 2222.179147][T28986] libceph: resolve '0..' (ret=-3): failed
[ 2222.305311][T10706] usb 1-1: Using ep0 maxpacket: 8
[ 2222.313054][T10706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2222.324084][T10706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2222.334493][T10706] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2222.355930][T10706] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2222.365701][T10706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2222.374045][T10706] usb 1-1: Product: syz
[ 2222.379675][T10706] usb 1-1: Manufacturer: syz
[ 2222.385678][T10706] usb 1-1: SerialNumber: syz
[ 2222.407766][T10706] usb 1-1: config 0 descriptor??
[ 2222.420726][T10706] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2222.427809][T10706] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2222.439581][T10706] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2223.462077][T28994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5435'.
[ 2223.482675][T28994] libceph: resolve '0..' (ret=-3): failed
[ 2223.674708][T26988] usb 3-1: USB disconnect, device number 106
[ 2223.755183][T10706] usb 4-1: new low-speed USB device number 90 using dummy_hcd
[ 2223.911351][T10706] usb 4-1: device descriptor read/64, error -71
[ 2224.205166][T10706] usb 4-1: new low-speed USB device number 91 using dummy_hcd
[ 2224.407182][T10706] usb 4-1: device descriptor read/64, error -71
[ 2224.553355][T10706] usb usb4-port1: attempt power cycle
[ 2224.724364][T29008] libceph: resolve '0..' (ret=-3): failed
[ 2224.919411][T26988] usb 1-1: USB disconnect, device number 110
[ 2225.192004][T10706] usb 4-1: new low-speed USB device number 92 using dummy_hcd
[ 2225.286681][T10706] usb 4-1: device descriptor read/8, error -71
[ 2225.605144][T10706] usb 4-1: new low-speed USB device number 93 using dummy_hcd
[ 2225.640676][T10706] usb 4-1: device descriptor read/8, error -71
[ 2225.818077][T10706] usb usb4-port1: unable to enumerate USB device
[ 2226.090210][T29019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5440'.
[ 2226.124151][T29019] libceph: resolve '0..' (ret=-3): failed
[ 2226.235179][T26327] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 2226.425245][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2226.484521][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2226.515608][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2226.545417][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2226.649250][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2226.660809][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2226.670082][T26327] usb 1-1: Product: syz
[ 2226.675488][T26327] usb 1-1: Manufacturer: syz
[ 2226.691239][T26327] usb 1-1: SerialNumber: syz
[ 2226.700665][T26327] usb 1-1: config 0 descriptor??
[ 2226.714745][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2226.721833][T29023] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5441'.
[ 2226.731901][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2226.744483][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2227.409287][T29023] libceph: resolve '0..' (ret=-3): failed
[ 2228.457522][T29037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5444'.
[ 2228.474005][T29037] libceph: resolve '0..' (ret=-3): failed
[ 2228.861504][T22975] usb 1-1: USB disconnect, device number 111
[ 2229.011044][T29038] libceph: resolve '0..' (ret=-3): failed
[ 2229.347244][T29043] libceph: resolve '0..' (ret=-3): failed
[ 2230.115592][T22975] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 2230.265500][T22975] usb 3-1: Using ep0 maxpacket: 8
[ 2230.311738][T22975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2230.335695][T22975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2230.362687][T22975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2230.392668][T22975] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2230.404356][T22975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2230.434333][T22975] usb 3-1: Product: syz
[ 2230.441795][T22975] usb 3-1: Manufacturer: syz
[ 2230.457025][T29052] netlink: 'syz.5.5447': attribute type 3 has an invalid length.
[ 2230.465580][T22975] usb 3-1: SerialNumber: syz
[ 2230.523487][T22975] usb 3-1: config 0 descriptor??
[ 2230.550579][T22975] radioshark 3-1:0.0: Invalid radioSHARK device
[ 2230.557796][T22975] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[ 2230.568402][T22975] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 2230.576972][    C1] sd 0:0:1:0: [sda] tag#3697 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2230.587581][    C1] sd 0:0:1:0: [sda] tag#3697 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2231.548526][T29070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5452'.
[ 2231.660507][T29071] libceph: resolve '0..' (ret=-3): failed
[ 2231.765248][T26327] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 2231.968993][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2231.977700][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2231.994483][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2232.020545][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2232.056902][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2232.066264][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2232.074642][T26327] usb 1-1: Product: syz
[ 2232.080039][T26327] usb 1-1: Manufacturer: syz
[ 2232.085139][T26327] usb 1-1: SerialNumber: syz
[ 2232.112706][T26327] usb 1-1: config 0 descriptor??
[ 2232.180295][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2232.186744][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2232.199506][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2232.753998][T26327] usb 3-1: USB disconnect, device number 107
[ 2234.722775][T26327] usb 1-1: USB disconnect, device number 112
[ 2235.863412][    C1] sd 0:0:1:0: [sda] tag#3705 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2235.873930][    C1] sd 0:0:1:0: [sda] tag#3705 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2235.961252][T29108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5459'.
[ 2235.983166][T29108] libceph: resolve '0..' (ret=-3): failed
[ 2237.079698][T29120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5462'.
[ 2237.117161][T29120] libceph: resolve '0..' (ret=-3): failed
[ 2237.416099][T29124] netlink: 'syz.5.5463': attribute type 3 has an invalid length.
[ 2237.766305][    C1] sd 0:0:1:0: [sda] tag#3654 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2237.776782][    C1] sd 0:0:1:0: [sda] tag#3654 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2238.580197][T29134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5464'.
[ 2238.604348][T29134] libceph: resolve '0..' (ret=-3): failed
[ 2238.810649][T29139] netlink: 'syz.0.5465': attribute type 3 has an invalid length.
[ 2239.024957][    C1] sd 0:0:1:0: [sda] tag#3659 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2239.035588][    C1] sd 0:0:1:0: [sda] tag#3659 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2239.861313][T29149] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5467'.
[ 2240.100321][T29149] libceph: resolve '0..' (ret=-3): failed
[ 2240.845256][T29165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5468'.
[ 2240.901291][T29164] libceph: resolve '0..' (ret=-3): failed
[ 2241.775519][T26327] usb 2-1: new low-speed USB device number 125 using dummy_hcd
[ 2241.834692][T29181] netlink: 'syz.5.5473': attribute type 3 has an invalid length.
[ 2241.846853][T29180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5472'.
[ 2241.911465][T29180] libceph: resolve '0..' (ret=-3): failed
[ 2241.954843][T26327] usb 2-1: device descriptor read/64, error -71
[ 2241.966791][    C1] sd 0:0:1:0: [sda] tag#3663 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2241.977503][    C1] sd 0:0:1:0: [sda] tag#3663 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2242.226179][T26327] usb 2-1: new low-speed USB device number 126 using dummy_hcd
[ 2242.595799][T26327] usb 2-1: device descriptor read/64, error -71
[ 2242.795514][T26327] usb usb2-port1: attempt power cycle
[ 2243.105682][T22975] usb 6-1: new low-speed USB device number 119 using dummy_hcd
[ 2243.245194][T26327] usb 2-1: new low-speed USB device number 127 using dummy_hcd
[ 2243.266094][T26327] usb 2-1: device descriptor read/8, error -71
[ 2243.274241][T22975] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2243.283753][T22975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2243.294503][T22975] usb 6-1: config 0 has no interface number 0
[ 2243.302939][T22975] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2243.316200][T22975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2243.336759][T22975] usb 6-1: config 0 descriptor??
[ 2243.348504][T22975] iowarrior 6-1:0.1: no interrupt-in endpoint found
[ 2243.555711][T26327] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[ 2243.575882][T26327] usb 2-1: device descriptor read/8, error -71
[ 2243.691778][T26327] usb usb2-port1: unable to enumerate USB device
[ 2244.326424][T26327] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 2244.495953][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2244.586479][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2244.597318][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2244.607954][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2244.645356][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2244.656760][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2244.667283][T26327] usb 1-1: Product: syz
[ 2244.671691][T26327] usb 1-1: Manufacturer: syz
[ 2244.678507][T26327] usb 1-1: SerialNumber: syz
[ 2244.709196][T26327] usb 1-1: config 0 descriptor??
[ 2244.737068][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2244.746624][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2244.761937][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2244.770286][    C1] sd 0:0:1:0: [sda] tag#3668 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2244.780799][    C1] sd 0:0:1:0: [sda] tag#3668 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2245.963398][T26327] usb 6-1: USB disconnect, device number 119
[ 2247.487023][T22975] usb 1-1: USB disconnect, device number 113
[ 2247.637252][    C1] sd 0:0:1:0: [sda] tag#3692 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2247.647892][    C1] sd 0:0:1:0: [sda] tag#3692 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2247.675173][T26327] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 2247.836422][T26327] usb 3-1: Using ep0 maxpacket: 32
[ 2247.852367][T26327] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2247.867539][T26327] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2247.877272][T26327] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2247.887027][T26327] usb 3-1: Product: syz
[ 2247.891220][T26327] usb 3-1: Manufacturer: syz
[ 2247.897501][T26327] usb 3-1: SerialNumber: syz
[ 2247.920385][T26327] usb 3-1: config 0 descriptor??
[ 2247.928657][T29234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2248.046771][T29244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5485'.
[ 2248.123280][T29244] libceph: resolve '0..' (ret=-3): failed
[ 2250.690865][T26327] usb 3-1: USB disconnect, device number 108
[ 2254.005194][T26327] usb 3-1: new low-speed USB device number 109 using dummy_hcd
[ 2254.308328][T26327] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2254.355179][T26327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2254.365770][T26327] usb 3-1: config 0 has no interface number 0
[ 2254.371985][T26327] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2254.421963][T26327] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2254.488479][T26327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2254.515973][T26327] usb 3-1: config 0 descriptor??
[ 2254.587286][T26327] iowarrior 3-1:0.1: no interrupt-in endpoint found
[ 2256.610749][T29340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5504'.
[ 2256.797967][T29340] libceph: resolve '0..' (ret=-3): failed
[ 2257.691446][    C1] sd 0:0:1:0: [sda] tag#3703 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2257.701972][    C1] sd 0:0:1:0: [sda] tag#3703 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2258.513196][T22975] usb 3-1: USB disconnect, device number 109
[ 2258.765516][T29360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5507'.
[ 2258.878559][T29360] libceph: resolve '0..' (ret=-3): failed
[ 2259.230009][    C1] sd 0:0:1:0: [sda] tag#3650 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2259.240699][    C1] sd 0:0:1:0: [sda] tag#3650 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2259.925185][T26327] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 2260.085382][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2260.092478][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2260.115249][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2260.131287][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2260.177077][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2260.189555][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2260.208089][T26327] usb 1-1: Product: syz
[ 2260.212367][T26327] usb 1-1: Manufacturer: syz
[ 2260.225060][T26327] usb 1-1: SerialNumber: syz
[ 2260.233455][T26327] usb 1-1: config 0 descriptor??
[ 2260.244208][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2260.256208][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2260.295312][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2261.142309][    C1] sd 0:0:1:0: [sda] tag#3651 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2261.152801][    C1] sd 0:0:1:0: [sda] tag#3651 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2261.216054][T29386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5512'.
[ 2261.238158][T29386] libceph: resolve '0..' (ret=-3): failed
[ 2262.762804][T26327] usb 1-1: USB disconnect, device number 114
[ 2263.007023][T29398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5514'.
[ 2263.033430][T29398] libceph: resolve '0..' (ret=-3): failed
[ 2263.362332][T29405] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5516'.
[ 2263.463934][T29407] libceph: resolve '0..' (ret=-3): failed
[ 2263.825136][T26327] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 2264.059447][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2264.077775][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2264.109356][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2264.134475][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2264.286499][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2264.295751][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2264.303821][T26327] usb 1-1: Product: syz
[ 2264.308647][T26327] usb 1-1: Manufacturer: syz
[ 2264.313889][T26327] usb 1-1: SerialNumber: syz
[ 2264.326005][T26327] usb 1-1: config 0 descriptor??
[ 2264.337845][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2264.357088][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2264.397717][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2264.487142][    C1] sd 0:0:1:0: [sda] tag#3659 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2264.497721][    C1] sd 0:0:1:0: [sda] tag#3659 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2266.601369][T26988] usb 1-1: USB disconnect, device number 115
[ 2267.275707][T26988] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 2267.379926][T29446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5524'.
[ 2267.407084][T29446] libceph: resolve '0..' (ret=-3): failed
[ 2267.452539][T26988] usb 2-1: Using ep0 maxpacket: 32
[ 2267.462048][T26988] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2267.478784][T26988] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2267.488382][T26988] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2267.498665][T26988] usb 2-1: Product: syz
[ 2267.502890][T26988] usb 2-1: Manufacturer: syz
[ 2267.511050][T26988] usb 2-1: SerialNumber: syz
[ 2267.533334][T26988] usb 2-1: config 0 descriptor??
[ 2267.539708][T29438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2267.653827][    C1] sd 0:0:1:0: [sda] tag#3668 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2267.664338][    C1] sd 0:0:1:0: [sda] tag#3668 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2269.629908][T29458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5526'.
[ 2269.665717][    C1] sd 0:0:1:0: [sda] tag#3673 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2269.676339][    C1] sd 0:0:1:0: [sda] tag#3673 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2269.711115][T29458] libceph: resolve '0..' (ret=-3): failed
[ 2270.081578][T26327] usb 2-1: USB disconnect, device number 3
[ 2271.498022][T15741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2271.596741][T15741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2271.608796][    C1] sd 0:0:1:0: [sda] tag#3674 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2271.619299][    C1] sd 0:0:1:0: [sda] tag#3674 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2271.634378][T15741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2271.694866][T15741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2271.715193][T15741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2271.755642][T12972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2271.769959][T12972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2271.803191][T12972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2271.828222][T12972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2271.867447][T12972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2272.280026][T26327] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 2272.420836][T29491] chnl_net:caif_netlink_parms(): no params data found
[ 2272.465115][T26327] usb 2-1: Using ep0 maxpacket: 8
[ 2272.479188][T26327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2272.491335][T26327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2272.594636][T26327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2272.612629][T26327] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2272.629356][T26327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2272.637553][T26327] usb 2-1: Product: syz
[ 2272.641839][T26327] usb 2-1: Manufacturer: syz
[ 2272.646514][T26327] usb 2-1: SerialNumber: syz
[ 2272.656617][T26327] usb 2-1: config 0 descriptor??
[ 2272.670412][T26327] radioshark 2-1:0.0: Invalid radioSHARK device
[ 2272.678402][T26327] radioshark 2-1:0.0: probe with driver radioshark failed with error -22
[ 2272.789208][T26327] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2273.006698][T29491] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2273.013885][T29491] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2273.085585][T29491] bridge_slave_0: entered allmulticast mode
[ 2273.105781][T29491] bridge_slave_0: entered promiscuous mode
[ 2273.121444][T29491] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2273.137607][T29491] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2273.152521][T29491] bridge_slave_1: entered allmulticast mode
[ 2273.169191][T29491] bridge_slave_1: entered promiscuous mode
[ 2273.267335][T29491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2273.288666][T29491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2273.378281][T29491] team0: Port device team_slave_0 added
[ 2273.387317][T29491] team0: Port device team_slave_1 added
[ 2273.437972][T29491] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2273.445492][T29491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2273.510632][T29491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2273.562638][T29491] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2273.577364][T29491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2273.605566][T29491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2273.699173][T29491] hsr_slave_0: entered promiscuous mode
[ 2273.708318][T29491] hsr_slave_1: entered promiscuous mode
[ 2273.719055][T29491] debugfs: 'hsr0' already exists in 'hsr'
[ 2273.727787][T29491] Cannot create hsr debugfs directory
[ 2273.905745][T15741] Bluetooth: hci5: command tx timeout
[ 2274.010535][T29491] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2274.049831][T29491] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2274.065963][T29491] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2274.081940][T29491] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2274.224553][T29491] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2274.352587][T29491] 8021q: adding VLAN 0 to HW filter on device team0
[ 2274.392019][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2274.399180][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2274.463810][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2274.471091][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2274.742601][T14789] usb 2-1: USB disconnect, device number 4
[ 2275.260029][T29491] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2275.364248][T29491] veth0_vlan: entered promiscuous mode
[ 2275.623427][T29491] veth1_vlan: entered promiscuous mode
[ 2275.876158][T10264] bond0: (slave netdevsim0): Releasing backup interface
[ 2275.943642][T29491] veth0_macvtap: entered promiscuous mode
[ 2275.954632][T29491] veth1_macvtap: entered promiscuous mode
[ 2275.991732][T15741] Bluetooth: hci5: command tx timeout
[ 2276.153517][T29491] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2276.209298][T29491] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2276.303456][T29507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2276.375662][T29507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2276.395728][T29507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2276.432399][T29507] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2276.771587][T10264] batadv0: left allmulticast mode
[ 2276.779330][T10264] batadv0: left promiscuous mode
[ 2276.784458][T10264] bridge0: port 1(batadv0) entered disabled state
[ 2277.239238][T10264] ip6gretap0 (unregistering): left promiscuous mode
[ 2277.801415][T10264] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 2278.048142][T10264] bridge0 (unregistering): left promiscuous mode
[ 2278.066745][T15741] Bluetooth: hci5: command tx timeout
[ 2278.321986][T10264] bond2 (unregistering): (slave bridge2): Releasing backup interface
[ 2279.130785][T10264] bond0 (unregistering): Released all slaves
[ 2279.162341][T10264] bond1 (unregistering): Released all slaves
[ 2279.461127][T10264] bond2 (unregistering): Released all slaves
[ 2279.637927][T29507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2279.657939][T29507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2279.752481][T29507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2279.767490][T29507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2279.851848][T10264] tipc: Disabling bearer <eth:syzkaller0>
[ 2279.889638][T10264] tipc: Left network mode
[ 2280.141327][T10264] IPVS: stopping master sync thread 13974 ...
[ 2280.149923][T15741] Bluetooth: hci5: command tx timeout
[ 2280.800914][    C1] sd 0:0:1:0: [sda] tag#3691 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2280.811567][    C1] sd 0:0:1:0: [sda] tag#3691 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2281.010958][T10264] hsr_slave_0: left promiscuous mode
[ 2281.208445][T10264] pimreg (unregistering): left allmulticast mode
[ 2281.315111][T14789] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 2281.515363][T14789] usb 3-1: Using ep0 maxpacket: 8
[ 2281.615466][T14789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2281.756565][T14789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2281.797528][T14789] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2281.833671][T14789] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2281.866101][T14789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2281.887634][T14789] usb 3-1: Product: syz
[ 2281.891861][T14789] usb 3-1: Manufacturer: syz
[ 2281.905586][T14789] usb 3-1: SerialNumber: syz
[ 2281.921542][T14789] usb 3-1: config 0 descriptor??
[ 2281.940500][T14789] radioshark 3-1:0.0: Invalid radioSHARK device
[ 2281.961437][T14789] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[ 2281.999669][T14789] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 2283.445871][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.460438][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2284.619656][    C1] sd 0:0:1:0: [sda] tag#3648 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2284.630211][    C1] sd 0:0:1:0: [sda] tag#3648 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2284.915840][T10264] team0 (unregistering): Port device veth0_to_bridge removed
[ 2285.487812][T29636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5552'.
[ 2285.505431][T29636] libceph: resolve '0..' (ret=-3): failed
[ 2286.490567][T22975] usb 3-1: USB disconnect, device number 110
[ 2288.370548][T10264] IPVS: stop unused estimator thread 0...
[ 2289.043844][    C1] sd 0:0:1:0: [sda] tag#3661 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2289.054356][    C1] sd 0:0:1:0: [sda] tag#3661 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2289.817038][    C1] sd 0:0:1:0: [sda] tag#3662 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2289.827582][    C1] sd 0:0:1:0: [sda] tag#3662 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2290.048039][T26327] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 2290.068851][T29685] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[ 2290.080679][T29700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5560'.
[ 2290.202498][T29700] libceph: resolve '0..' (ret=-3): failed
[ 2290.325911][T26327] usb 1-1: Using ep0 maxpacket: 8
[ 2290.402820][T26327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2290.448635][T26327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2290.543218][T26327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2290.675933][T26327] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2290.694655][T26327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2290.714061][T26327] usb 1-1: Product: syz
[ 2290.723367][T26327] usb 1-1: Manufacturer: syz
[ 2290.732952][T26327] usb 1-1: SerialNumber: syz
[ 2290.746011][T26327] usb 1-1: config 0 descriptor??
[ 2290.777117][T26327] radioshark 1-1:0.0: Invalid radioSHARK device
[ 2290.786734][T26327] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[ 2290.805929][T26327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2290.874495][T22975] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 2291.170905][T22975] usb 7-1: Using ep0 maxpacket: 8
[ 2291.213734][T22975] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 2291.274670][T22975] usb 7-1: config 179 has no interface number 0
[ 2291.285680][T22975] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2291.315685][T22975] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2291.350157][T22975] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2291.361390][T22975] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2291.385845][T22975] usb 7-1: config 179 interface 65 has no altsetting 0
[ 2291.397405][T22975] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2291.449953][T22975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2291.824655][T22975] usb 7-1: USB disconnect, device number 2
[ 2293.852735][    C1] sd 0:0:1:0: [sda] tag#3670 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2293.863838][    C1] sd 0:0:1:0: [sda] tag#3670 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2294.402380][T14789] usb 1-1: USB disconnect, device number 116
[ 2295.165112][T26327] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 2295.346184][T26327] usb 6-1: Using ep0 maxpacket: 8
[ 2295.358625][T26327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2295.395117][T26327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2295.447872][T26327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2295.546807][T26327] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2295.571227][T26327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2295.605480][T22975] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[ 2295.667504][T26327] usb 6-1: Product: syz
[ 2295.684836][T26327] usb 6-1: Manufacturer: syz
[ 2295.695590][T26327] usb 6-1: SerialNumber: syz
[ 2295.743151][T26327] usb 6-1: config 0 descriptor??
[ 2295.758286][T22975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2295.776543][T26327] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2295.792296][T22975] usb 2-1: config 0 has no interface number 0
[ 2295.805970][T22975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2295.819625][T26327] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2295.831117][T22975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2295.854424][T22975] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2295.854947][T26327] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2295.872346][T22975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2295.935642][T22986] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[ 2295.981823][T22975] usb 2-1: config 0 descriptor??
[ 2296.008764][T29766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2296.089014][T22975] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2296.376141][T22986] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 2296.384417][T22986] usb 7-1: config 0 has no interface number 0
[ 2296.396588][T22986] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2296.455967][T22986] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2296.469173][T22986] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2296.491598][T22986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2296.516130][T22986] usb 7-1: config 0 descriptor??
[ 2296.544798][T22986] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[ 2297.745993][T22986] usb 3-1: new low-speed USB device number 111 using dummy_hcd
[ 2297.875566][T22975] usb 6-1: USB disconnect, device number 120
[ 2298.110842][T22986] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2298.140393][T22986] usb 3-1: config 0 has no interface number 0
[ 2298.158596][T22986] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2298.191353][T22986] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2298.229199][T22986] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2298.239948][T22986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2298.256140][T22986] usb 3-1: config 0 descriptor??
[ 2298.263071][T29777] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 2298.279195][T22986] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2
[ 2299.288251][T22975] usb 2-1: USB disconnect, device number 5
[ 2299.581851][T22986] usb 7-1: USB disconnect, device number 3
[ 2299.869351][T29802] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5579'.
[ 2300.043080][T29803] libceph: resolve '0..' (ret=-3): failed
[ 2301.002844][T29808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5580'.
[ 2301.231619][T26327] usb 3-1: USB disconnect, device number 111
[ 2301.836289][    C1] sd 0:0:1:0: [sda] tag#3687 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2301.846773][    C1] sd 0:0:1:0: [sda] tag#3687 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2302.524008][    C1] sd 0:0:1:0: [sda] tag#3688 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2302.534524][    C1] sd 0:0:1:0: [sda] tag#3688 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2304.017921][    C1] sd 0:0:1:0: [sda] tag#3689 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 2304.017993][    C1] sd 0:0:1:0: [sda] tag#3689 CDB: Read(6) 08 16 00 00 0a 00 00 00 3d 48 00 00
[ 2305.272877][T29890] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5588'.
[ 2305.406359][T29891] libceph: resolve '0..' (ret=-3): failed
[ 2306.226455][T14789] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[ 2306.428637][T14789] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 2306.437886][T26327] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 2306.495561][T14789] usb 7-1: config 0 has no interface number 0
[ 2306.513531][T14789] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2306.562366][T14789] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2306.603677][T14789] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2306.639178][T14789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2306.665170][T26327] usb 6-1: Using ep0 maxpacket: 8
[ 2306.677231][T26327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2306.695888][T14789] usb 7-1: config 0 descriptor??
[ 2306.719276][T26327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2306.762916][T26327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2306.846031][T29913] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2306.901495][T26327] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 2306.911570][T14789] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2306.975593][T26327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2307.001708][T26327] usb 6-1: Product: syz
[ 2307.006212][T26327] usb 6-1: Manufacturer: syz
[ 2307.015467][T26327] usb 6-1: SerialNumber: syz
[ 2307.061598][T26327] usb 6-1: config 0 descriptor??
[ 2307.084179][T26327] radioshark 6-1:0.0: Invalid radioSHARK device
[ 2307.095049][T26327] radioshark 6-1:0.0: probe with driver radioshark failed with error -22
[ 2307.124239][T26327] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2309.152237][T14789] usb 7-1: USB disconnect, device number 4
[ 2309.346237][T22986] usb 6-1: USB disconnect, device number 121
[ 2344.868184][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.874536][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2398.145553][T12972] Bluetooth: hci5: command 0x0406 tx timeout
[ 2406.310062][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.317010][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2458.785387][   T31] INFO: task kworker/1:8:14485 blocked for more than 143 seconds.
[ 2458.793263][   T31]       Not tainted syzkaller #0
[ 2458.798293][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2458.807142][   T31] task:kworker/1:8     state:D stack:21480 pid:14485 tgid:14485 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 2458.819389][   T31] Workqueue: usb_hub_wq hub_event
[ 2458.824478][   T31] Call Trace:
[ 2458.827943][   T31]  <TASK>
[ 2458.830915][   T31]  __schedule+0x1798/0x4cc0
[ 2458.835534][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2458.840949][   T31]  ? __pfx___schedule+0x10/0x10
[ 2458.845966][   T31]  ? schedule+0x91/0x360
[ 2458.850260][   T31]  schedule+0x165/0x360
[ 2458.854478][   T31]  usb_kill_urb+0x1be/0x2d0
[ 2458.860099][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 2458.865398][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2458.871523][   T31]  usb_start_wait_urb+0x18c/0x4c0
[ 2458.876772][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2458.882371][   T31]  ? usb_alloc_urb+0x46/0x150
[ 2458.887204][   T31]  usb_control_msg+0x232/0x3e0
[ 2458.892123][   T31]  hub_port_init+0xbf9/0x2800
[ 2458.897015][   T31]  hub_event+0x2532/0x4a20
[ 2458.901632][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2458.906882][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2458.912665][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2458.917955][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2458.923806][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2458.929697][   T31]  process_scheduled_works+0xae1/0x17b0
[ 2458.935408][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2458.941447][   T31]  worker_thread+0x8a0/0xda0
[ 2458.948215][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2458.954611][   T31]  ? __kthread_parkme+0x7b/0x200
[ 2458.960179][   T31]  kthread+0x711/0x8a0
[ 2458.964278][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2458.969889][   T31]  ? __pfx_kthread+0x10/0x10
[ 2458.974496][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2458.980265][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2458.986025][   T31]  ? __pfx_kthread+0x10/0x10
[ 2458.990631][   T31]  ret_from_fork+0x4bc/0x870
[ 2458.995710][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2459.000848][   T31]  ? __switch_to_asm+0x39/0x70
[ 2459.006577][   T31]  ? __switch_to_asm+0x33/0x70
[ 2459.011371][   T31]  ? __pfx_kthread+0x10/0x10
[ 2459.016448][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2459.021285][   T31]  </TASK>
[ 2459.024385][   T31] 
[ 2459.024385][   T31] Showing all locks held in the system:
[ 2459.033074][   T31] 1 lock held by khungtaskd/31:
[ 2459.038467][   T31]  #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2459.048950][   T31] 2 locks held by getty/5596:
[ 2459.053669][   T31]  #0: ffff88802f5eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2459.064454][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 2459.075341][   T31] 5 locks held by kworker/1:8/14485:
[ 2459.080752][   T31]  #0: ffff88801d6fad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 2459.092394][   T31]  #1: ffffc90003bafba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 2459.104550][   T31]  #2: ffff888145f3d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 2459.114350][   T31]  #3: ffff8880285e0518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 2459.124833][   T31]  #4: ffff88802834d168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 2459.135278][   T31] 
[ 2459.137611][   T31] =============================================
[ 2459.137611][   T31] 
[ 2459.146472][   T31] NMI backtrace for cpu 1
[ 2459.146489][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2459.146512][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2459.146523][   T31] Call Trace:
[ 2459.146531][   T31]  <TASK>
[ 2459.146540][   T31]  dump_stack_lvl+0x189/0x250
[ 2459.146574][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2459.146601][   T31]  ? __pfx__printk+0x10/0x10
[ 2459.146635][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 2459.146660][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 2459.146685][   T31]  ? __pfx__printk+0x10/0x10
[ 2459.146720][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2459.146753][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2459.146777][   T31]  watchdog+0xf60/0xfa0
[ 2459.146803][   T31]  ? watchdog+0x1e2/0xfa0
[ 2459.146828][   T31]  kthread+0x711/0x8a0
[ 2459.146857][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2459.146877][   T31]  ? __pfx_kthread+0x10/0x10
[ 2459.146903][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2459.146927][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2459.146950][   T31]  ? __pfx_kthread+0x10/0x10
[ 2459.146975][   T31]  ret_from_fork+0x4bc/0x870
[ 2459.147000][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2459.147026][   T31]  ? __switch_to_asm+0x39/0x70
[ 2459.147043][   T31]  ? __switch_to_asm+0x33/0x70
[ 2459.147057][   T31]  ? __pfx_kthread+0x10/0x10
[ 2459.147083][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2459.147118][   T31]  </TASK>
[ 2459.147127][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 2459.299259][    C0] NMI backtrace for cpu 0
[ 2459.299278][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 2459.299297][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2459.299306][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 2459.299333][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 2459.299347][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[ 2459.299362][    C0] RAX: 59423bf712592a00 RBX: ffffffff81968b47 RCX: 59423bf712592a00
[ 2459.299374][    C0] RDX: 0000000000000001 RSI: ffffffff8d70db74 RDI: ffffffff8bbf0760
[ 2459.299385][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[ 2459.299396][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce370
[ 2459.299408][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[ 2459.299419][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[ 2459.299432][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2459.299443][    C0] CR2: 000055c619070660 CR3: 000000000dd38000 CR4: 00000000003526f0
[ 2459.299460][    C0] Call Trace:
[ 2459.299468][    C0]  <TASK>
[ 2459.299475][    C0]  default_idle+0x13/0x20
[ 2459.299490][    C0]  default_idle_call+0x73/0xb0
[ 2459.299505][    C0]  do_idle+0x1e7/0x510
[ 2459.299525][    C0]  ? __pfx_do_idle+0x10/0x10
[ 2459.299547][    C0]  cpu_startup_entry+0x44/0x60
[ 2459.299563][    C0]  rest_init+0x2de/0x300
[ 2459.299579][    C0]  start_kernel+0x3ae/0x410
[ 2459.299597][    C0]  x86_64_start_reservations+0x24/0x30
[ 2459.299616][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 2459.299634][    C0]  common_startup_64+0x13e/0x147
[ 2459.299661][    C0]  </TASK>
[ 2467.747834][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.754142][ T1302] ieee802154 phy1 wpan1: encryption failed: -22