last executing test programs:

11.331652472s ago: executing program 4 (id=1610):
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[0x0], 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0xffffffffffffffff})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept4(r0, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80, 0x80000)

10.26536172s ago: executing program 4 (id=1613):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000300)}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x4000, 0x0}) (async)
syz_clone3(&(0x7f0000000700)={0x23800000, &(0x7f0000000340), 0x0, 0x0, {0x37}, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x40}, 0x58) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x0, 0x0})

9.961535251s ago: executing program 4 (id=1615):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442})
socket(0x1d, 0x2, 0x6)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000279000/0x2000)=nil, 0x2000, 0x0)
read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1, 0x7daa}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7eef0ff0000000000000200000000", 0x58}], 0x1)

8.966208598s ago: executing program 3 (id=1620):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000500)={0x0, 0x23, 0x8, {0x8, 0xc, "47a468c1fb56"}}, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0x0)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)

7.795704199s ago: executing program 4 (id=1626):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109021b00"], 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)

6.814420333s ago: executing program 2 (id=1627):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d5, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401, 0x80000000}]}]}, 0xfc}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}, 0x8000000}], 0x1, 0x0)

6.606600495s ago: executing program 3 (id=1629):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x18}}, 0x4004094)

6.504378055s ago: executing program 3 (id=1630):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xa0000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0xffffffffffffffb7}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000)
r4 = dup(0xffffffffffffffff)
write$6lowpan_enable(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

6.451493826s ago: executing program 2 (id=1631):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x1014e2, 0x4, 0x8010000})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94)
unshare(0x28000600)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="000000000400000000000004055938adb814a17dc5345d4c83ee6e0cdf7b37c42baeb595e25937dc72dfd298d70918ad8fd60adf4b9e114e972df4b7276ccf8e944d63b4f98151eb23d47e1e0ff6e23364370f3daffd308e2398513d0f24ef0b3afa9984b96e4cd5187c8eb6274e34a72df75f2de29c20597af980dc7c7bedc8", @ANYRESHEX=r2, @ANYRES32, @ANYRES8], 0x50)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1)
ioctl$RTC_AIE_ON(r4, 0x7001)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x4007, 0x10, 0x6, 0xa0, 0x1})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000006, 0x110, 0xffffffffffffffff, 0x0)
r7 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0)

6.076668644s ago: executing program 0 (id=1633):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d50800044000000001080006400000000208000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12)
ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f0102030109021200"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x2004cfe9, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r6, &(0x7f0000000040)="ee", 0x1, 0x4040000, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
shutdown(r6, 0x1)
splice(r6, 0x0, r7, 0x0, 0x3, 0xc)

5.928276849s ago: executing program 1 (id=1634):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\x00'/12}, {0x20, '\x00\x00\x00\x00\x00[[`]zN\xd8ul\xc5X\xb9 #X\xc1W_\xd3*\x03P\x87\x98\x00\xa8\xe8\n\x96\xe3\xe5\x8b\xd7+\xaeq\x8bx7\x95u\xc5\xc3$j\xb2q\x1b\x9a\x8c\xcb\xb8\xbe\x02\x00\x00\x00\x9a?\x95s5\v:\xa20\v\x1f*}%\x9aB\xeb\xcd\xb9S6\xaaM\x83\x9d\x9c[\xa2A\f\x00\x00\x00\x00\x00\x00\x9cD\x16\x90\xf6[\xb9\xf3\x91\x91\x15\xd1\x9aD\x8bW\xde\x9c~\xc8\xb0r=\xd8\xd17k.\xbe\xe96W|\\S)af,\x88 \xd8\x1bY#\x84}F*\x14\x92/\x9dh!\x1ab\xca\xaa\x8a\xf4q\xb9\xde\x00\x00\x00\x00\x00\x00\xc0\xa9\x96:\xe5\x8chq\x8cB>\xc1\xaez\x1a\'\xa5\xc0\xca\x06Yc\xf8\xa2\x9cu.\xff\xcb\xca\xfd'}], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e3df3ced185b5cd8ab88f35d292428abfb13f16b96ea93fd0551e1d4f7b79160e9e98cd9a001d5f42d3fb166c612fe4ca8a"}, 0x12f)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000000, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})

5.482223956s ago: executing program 1 (id=1635):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r1 = openat$audio1(0xffffff9c, &(0x7f0000000100), 0x300, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfefc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000140))

5.25710629s ago: executing program 1 (id=1636):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002500010324bd7002fddbdf250500000008003e"], 0x1c}, 0x1, 0x0, 0x0, 0xd00}, 0x0)

4.940149929s ago: executing program 1 (id=1637):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
unshare(0x20000400)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000783afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000e4180100fffff271c08223af91f34006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e9f8d8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d00001392000100"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x2030000)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
r10 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
accept4(r10, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf25310000000c009900020000004a00000008005200", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3d4eb3aa6afcc55db7b22c0531f92d05410ebfb39df0a1f3b500931cabbbe9ac274d5580cd1e9fe12519ce93b9c80be6447d1bc61e82347b9fbae7d920cc584a87", @ANYRES16=r8, @ANYBLOB="08002cbd7000fedbdf25420000000a0006006a669277f97200000a0006005050505050500000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044040)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001)

4.169924953s ago: executing program 3 (id=1638):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0xc000)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x1, 0x2, 0x80, "da0b7d99d54b12e2c3ed73178dc926a31029c5b328f60dd5b3857e727ab6fd17", 0x4f424752})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1200, 0x4)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000437000/0x4000)=nil, 0x4000, 0xe, 0x28011, r5, 0x8ab1f000)
r6 = syz_open_dev$usbfs(0x0, 0x40000f, 0x8041)
ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0xc000) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x1, 0x2, 0x80, "da0b7d99d54b12e2c3ed73178dc926a31029c5b328f60dd5b3857e727ab6fd17", 0x4f424752}) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1200, 0x4) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) (async)
mmap(&(0x7f0000437000/0x4000)=nil, 0x4000, 0xe, 0x28011, r5, 0x8ab1f000) (async)
syz_open_dev$usbfs(0x0, 0x40000f, 0x8041) (async)
ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async)

3.734548404s ago: executing program 3 (id=1639):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, r5)
setpgid(0x0, r5)
tkill(r5, 0x7)
wait4(r5, 0x0, 0x0, 0x0)
capget(&(0x7f0000000080)={0x19980330, r5}, &(0x7f0000000100)={0x0, 0x8, 0xa44c, 0x2, 0x10000, 0x4})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac)
syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="120101026e694b109911039000d7010203010902290001fb0780020904000000ffd36b0505240600000000d10002004000"/59], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})

3.081552836s ago: executing program 1 (id=1640):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='loginuid\x00')
readv(r0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000005d40)={0x2020}, 0x2020)
pread64(r1, &(0x7f0000000000)=""/60, 0x3c, 0x7984e2f8)
read(r1, &(0x7f0000002140)=""/211, 0xd3)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0xe249, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x9}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffe, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x9, 0x2, 0x1}}]}, 0x40}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x1}, 0x20)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r8)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf252500000008000300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r10, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x30}}, 0x48000)

2.901495018s ago: executing program 2 (id=1641):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x500, 0x4}, 0x40cc040)

2.735735585s ago: executing program 4 (id=1642):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffff0000ff0180c200000086dd60000000000000000000aaff0200000000000000000000000000018900907800000000ff05000000000000000000000000000100000000000000000000ffffe00000022d188ab1e36ea42255605d109c0b3fd365e30a2c81f061cf53d9a63faaf8cc6c60992e68bc180dc034ddebc414134928e59e751e2c8ac6d452c697f60d45a8dd8f890f2bb7767a27f9220ca6786f95796d4a36c9697611139a6cb3b4416f4cc97cfc163eea763f9f7cf9f412020c8114b42bbd096a03d6edd2e4"], 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}]}}, 0xfb, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x00')
getdents(r1, &(0x7f0000000000)=""/35, 0x23)
getdents(r1, 0xffffffffffffffff, 0x5a)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1fb, 0x2)
r2 = socket$rds(0x15, 0x5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r3, 0x40f, &(0x7f0000000100)={0x2, 0x4, 0xffffffffffffffcf, 0xde})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000401c1b510a00000000000109022400010000e005090400048103000200092100002801220700090581030002090a1187de51b28391c3bb3623bc1256be7fc056c64763ef0e19c8591cbb575248b91b844ea152db93d3e72207f64c94284c0fe4cdb29215d60137a4b9f7c9d677c816507e0f4448a5a96e98916917c19bc72185e4f8adde3e0d69829e1c52789d2221a8944eb4a4f136a3317ab817310a1ef9dbf8193a18d81ca48dba4c7f61661b6a75c2dfef9caa60805a0608c39aea7e72f19d5eae12f16023200f365b3a617e051ab206bdeba63e065691d214098e73e386ea0b4a810172a2cddf4d"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x54c5b000)
write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6b5f3d10ce246fefb3fa1ee217588d7f5bb61f660d3f9023ce4f169d"], 0x6c}, 0x1, 0x0, 0x0, 0x4042804}, 0x24024090)

2.473066781s ago: executing program 2 (id=1643):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
unshare(0x2a020480)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x54a9, &(0x7f0000000380)={0x0, 0xb002, 0x0, 0x1, 0x2d}, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40000000, 0x100000}, 0x0, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000003c0)={0x1, r1})
ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000180)={0x3, 0x5})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000002c0)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000200)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x2000000000000000, 0x0, 0x100000})
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c9"], 0x0)

2.284885516s ago: executing program 0 (id=1644):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "00000000000000000000000000000500"}}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0)

2.202592931s ago: executing program 0 (id=1645):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000200c})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0x0, 0x0, 0x84000000], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

2.163521957s ago: executing program 0 (id=1646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000002c0)="92557aac2cf961b6e1", 0x9}, 0x1, 0x0, 0x0, 0x8046}, 0x4000000)
sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0xf5, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0xfffffffffffffff5, 0x10000000}, 0x40000)

1.897423675s ago: executing program 3 (id=1647):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x1c, 0x65, 0xcd, 0x40, 0x45e, 0x7a, 0x2bc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0xcb, 0x10, 0x1, "", [{{0x9, 0x4, 0xf4, 0x5, 0x1, 0x17, 0x11, 0xc0, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x6, 0xf}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x1c, 0x65, 0xcd, 0x40, 0x45e, 0x7a, 0x2bc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0xcb, 0x10, 0x1, "", [{{0x9, 0x4, 0xf4, 0x5, 0x1, 0x17, 0x11, 0xc0, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x6, 0xf}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a000000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000780)={<r0=>0xffffffffffffffff})
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
mbind(&(0x7f0000a88000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000002d00)=0x5, 0x7fffffff, 0x4)
fspick(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x1) (async)
r4 = fspick(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000080)=""/95, 0x5f}, {&(0x7f00000008c0)=""/4102, 0x1006}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f0000000840)=""/86, 0x56}, {&(0x7f0000001a40)=""/4084, 0xff4}], 0x8}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2020, 0x0)
ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000000, 0x1, 0x2, 0x7}})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) (async)
r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000040)={0x0, 0x1, 0x5, &(0x7f0000000200)={0x17, "14956544c8306b23afa7dd68fe132f1d0259da184039589d199f3db71c15606d95"}})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x9}}, 0xfffffffffffffdd5, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000700)="599f27b1fde4fda0e85781e528082c102f791e07cc92075418320f83e8304ac5ff2971543b64da373d61050de4cea21bb02634acfcdf71090072ecd2ce76293610ffd559127d095d57bdc607", 0x4c}], 0x4, 0x0, 0x0, 0x1}, 0x400c044)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)="64b45a667856c158b41021fac50fe3d5222c7a6be9c8e8d024fcb0e57d947cd23c0f1e418d4777c0fa2b8360d359da58e363891fc60ed2c9b989f85e8dfa1c2186dbb3d72501f53b98ced0d72654c5581e5068f1c40d0e45beac44ee92d8b6dc2955afb0d64cf16979653377783ebb495e85d4025943f44f73dbd6898665629b6cda36da63c16d2c6583f5584fbf8c95cb28efaae9938086e42ff6485e19f8177d2cd272c2b46fe4de3dc4124bad1c9e0859f719f90dc6183771a8e68334fb53eee8c87037b4239d8f08cf9c555201acbbe5d1a096ea1950ccb7ff7cf3a7cdcc7cc9e6bc6db96b8fbcb6e6dd0c638082", 0xf0}, {&(0x7f0000000240)="7cdd794e0d489c2b9d136114ebf2c270db6808b0e5d2cfa1de84ba6558a671f1382ce71298db4467ae500c1388a909f6d70525cd52250631280bb96d29d4095552f010eebbb467415ee7abdcfe0b5c9df7dbbfba91c224f0b27ace94598e26ebe90d95c579b57f584324ce67e5a1af47083d40d0b9832ad3471c074c6516ebc0f7c42f7d4c42c7170cec014f86a0611cf55bd2566315febb70b69555e33677359557dd2358fbc2adcbc8e12f722623bdd11bce8f58e0a68524d3be1b2827ed2f16f2d34494c7dae7b787b32a725b3dcdce34b9c45c9f852bc9ba1c6dc054546ef4f12c24d9bc9d0666463dc29fcacdbcd4a0e5d9", 0xf4}, {&(0x7f0000000400)="badda55585d3ca3a83ee1e235135f2a93334a0ced525e51221922ccf0c803f447da0d109ade579dc9ee7cd6e6a76bd9ed7e3d86f326107c4c41856f3bff88a9fb53474af2d89323214307531e3f937e9f7b211a20072d835ee00cb5576ac451d74a9d8152217ecc0ce8e1d8f3b70c405c6ca8818bff80de98d643fceee7989d67a1e5307a489111c1b31d12511f5b5341051db98d98975352d4d3e3bf07878c527ea66c65933e92981e2032e9c10ed0e5c496ad2b6dcbee94e5a96", 0xbb}, {&(0x7f00000004c0)="27cb9ad31f8e3a4ec38e1581df29134d04249517fd899a447dd69d0563e43cbdf9fa5260f542fc88f8303f271129083738750eb22f1cb7da9b8a2fd2b55f58895db1f55525d3d38ec7ba78a567206bbe1a270319f69e6d03009cac45a38d083072b6bb7fe1bc6dde7fdc2b1b9ff2e743f2e82b00d4cd5d9bce424cd69cf10cfa7e8d3b2d36da1cee46d8655b026f448caf891ca8dc427ca95319ee82eae1c0a0b01dc604169224ef86ccb1cc7a1a62bf4871bb870bec0114da5c9c36", 0xbc}, {&(0x7f0000000340)="0d3f65e34a85ee706669ff21b94c5167cabef085ca2a66904e9308f421569f7736fbe75c1b0a48c1ad93ca871e5d2df7a4e0ba230f9542c5659087205ca1bdc05e35ddc1d718fe2b4503aad35cf05bc5ce3c800ebea28674dcfe0b9752c2b0e39778d86bb11f4aefb1303dcd6235e1307e851006", 0x74}, {&(0x7f0000000580)="c89dea14259bf9688c1e35f4e5c44784ffee51d01f86afd9b8534c0a7cbe375546f9b1858c9374f7784c649f4cd7d711c694f12fb39f18e721cf0b5a6e42320c2fc81c4cab", 0x45}, {&(0x7f0000000600)="4f86c91eb1e51d428db2f03d363e02c0cac99785f3826af979e7bb03ac0540dc5a75476a66c2fd611646e3d6070ca53c16b349e35267d3ecb80a01a85fde9c869ba204c6118c91b8d27af1784469a5024432ab1749bcbab84f782a2e1777ad0b49f169", 0x63}], 0x7, &(0x7f0000006e80)=ANY=[@ANYBLOB="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"], 0x3410}, 0x8800)
syz_usb_control_io$uac1(r1, &(0x7f0000001980)={0x14, &(0x7f0000001900)={0x40, 0x31, 0x6c, {0x6c, 0x23, "8e5c8bd3fa7b5730c41e2c8aada79e38f8213f911e918a7dd93a808f6efaa38912b10188d32a44de464fed26f63f99fbfe4f533159875fd6d31f4034e9a85b7c62873d4edc33484d83b676ce72d59bc4194bdc7e95d7bd35586dc894ab8870fe115080ac0437ac7a0938"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000002c80)={0x44, &(0x7f00000019c0)={0x20, 0x12, 0x4d, "852c10be1b2965ff83692787cd7012772cc31bb34d0949fe283196e7c40e8ff2382867a8e20678347f1394c310c6c52c17797869aa97442615f231f9e4c8e0c4c9e2fe1e562c277910ff64bc0c"}, &(0x7f0000002ac0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000002b00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002b40)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000002b80)={0x20, 0x82, 0x1, "c1"}, &(0x7f0000002bc0)={0x20, 0x83, 0x3, "d3c28d"}, &(0x7f0000002c00)={0x20, 0x84, 0x2, "e85f"}, &(0x7f0000002c40)={0x20, 0x85, 0x3, "a9ee50"}})

1.553340821s ago: executing program 2 (id=1648):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x3) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async)
write$tun(r1, &(0x7f00000004c0)=ANY=[], 0xfdef) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020}, 0x2020)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a4"}]}], {0x14}}, 0x74}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_lt}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x36, 0x34, 0x66, 0x30, 0x65, 0x37], 0x2d, [0x31, 0x30, 0x36, 0x62], 0x2d, [0x65, 0x30, 0x32, 0x32], 0x2d, [0x30, 0x34, 0x38, 0x31], 0x2d, [0x66, 0x33, 0x65, 0x63, 0x36, 0x65, 0x38, 0x38]}}}, {@euid_eq}, {@euid_lt}, {@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\xae85+d\"\xdcR\x02\xf3\x00T\xe9C=f\xf2xC+\xdd\x86\x8a\xf7\xef\xfd\x85\x82\xe6\x9ecv\x00\x01\x04v=\a\xd9E\x8f\xff\x8c,<\x1f\x06\xcal\x1eE){\x9b\xf1Y\xc9C\x04\xdf\x8f\t4RYjQ\x00\x05\x15\xff`\x88\x9c\xb2\x0f\x8a\xc1\xb3\x00c@+.J,\x8b'}}]}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x10, 0x803, 0x0)

1.404899344s ago: executing program 2 (id=1649):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
r3 = openat(0xffffffffffffffff, 0x0, 0xd40, 0x82)
getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000400)={@local, @broadcast}, &(0x7f0000000200)=0xc)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="00fcdbcf250200060005000000140006007f00"/29], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x4bde)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x3, 0x1005)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f00000001c0))
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCFLSH(r5, 0x540b, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
socket$nl_generic(0x10, 0x3, 0x10)

1.177022745s ago: executing program 4 (id=1650):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
unshare(0x20000400)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000783afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000e4180100fffff271c08223af91f34006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e9f8d8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d00001392000100"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x2030000)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
accept4(r9, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf25310000000c009900020000004a00000008005200", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3d4eb3aa6afcc55db7b22c0531f92d05410ebfb39df0a1f3b500931cabbbe9ac274d5580cd1e9fe12519ce93b9c80be6447d1bc61e82347b9fbae7d920cc584a87", @ANYRES16=r7, @ANYBLOB="08002cbd7000fedbdf25420000000a0006006a669277f97200000a0006005050505050500000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044040)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r7, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001)

815.743045ms ago: executing program 0 (id=1651):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x806000000000000, &(0x7f0000000080)={0x11, 0x4, r1}, 0x14)

357.330123ms ago: executing program 0 (id=1652):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109021b00"], 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)

0s ago: executing program 1 (id=1653):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x19, 0x8, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x40801)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)

kernel console output (not intermixed with test programs):

] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.809951][ T9835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.820705][ T9835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.836513][ T9842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.852914][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  336.505798][ T9851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.529829][ T9847] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  336.587443][ T9852] netlink: 'syz.4.1152': attribute type 1 has an invalid length.
[  336.800654][ T9855] sg_write: data in/out 155612/57 bytes for SCSI command 0x0-- guessing data in;
[  336.800654][ T9855]    program syz.2.1155 not setting count and/or reply_len properly
[  336.820182][ T9852] bond3: entered allmulticast mode
[  336.832534][ T9852] 8021q: adding VLAN 0 to HW filter on device bond3
[  336.876280][ T9855] loop8: detected capacity change from 0 to 8
[  336.912548][ T9855] Dev loop8: unable to read RDB block 8
[  336.919581][ T9855]  loop8: unable to read partition table
[  336.938818][ T9852] syzkaller0: entered promiscuous mode
[  336.951701][ T9852] syzkaller0: entered allmulticast mode
[  336.980420][ T9855] loop8: partition table beyond EOD, truncated
[  337.006771][ T9855] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  337.109345][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'.
[  337.140047][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv1
[  337.154971][ T9847] bond3: (slave batadv1): making interface the new active one
[  337.172401][ T9847] batadv1: entered allmulticast mode
[  337.199994][ T9847] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  337.220041][   T24] usb 2-1: USB disconnect, device number 33
[  337.303569][ T9852] bond3 (unregistering): (slave batadv1): Releasing active interface
[  337.323479][ T9852] batadv1: left allmulticast mode
[  337.346473][ T9852] bond3 (unregistering): Released all slaves
[  337.897750][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'.
[  339.262255][   T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  339.468021][   T24] usb 2-1: Using ep0 maxpacket: 8
[  339.480100][   T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.492146][   T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.534666][   T24] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  339.568022][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  339.582273][   T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[  339.615112][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.657563][   T24] usb 2-1: config 0 descriptor??
[  340.095862][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.108517][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.121957][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.141807][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.150277][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.163753][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.175250][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.190619][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.198566][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.198694][ T9903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  340.206077][   T24] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0
[  340.212466][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  340.232655][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  340.258893][   T24] lenovo 0003:17EF:60FE.0012: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0
[  340.285663][   T29] audit: type=1800 audit(1774979158.338:31): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1172" name="bus" dev="tmpfs" ino=1181 res=0 errno=0
[  340.287558][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.347604][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.357339][ T9903] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13)
[  340.363992][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  340.387500][ T9912] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16)
[  340.394195][ T9912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  340.427496][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  340.471170][ T9912] vhci_hcd vhci_hcd.0: Device attached
[  340.472192][   T24] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  340.478499][ T9903] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15)
[  340.478534][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  340.478725][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  340.503545][ T9903] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19)
[  340.503576][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  340.503665][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  340.512344][ T9903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21)
[  340.512373][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  340.512445][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  340.513542][ T9903] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  340.524067][ T9903] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(27)
[  340.524099][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  340.525888][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  340.535109][ T9903] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(29)
[  340.535136][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  340.535212][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  340.536277][ T9903] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  340.629107][ T9927] vhci_hcd: connection closed
[  340.630714][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.631138][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.631467][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  340.631634][ T9904] vhci_hcd: connection reset by peer
[  340.631852][ T9913] vhci_hcd: connection closed
[  340.632030][ T9909] vhci_hcd: connection closed
[  340.632251][ T9917] vhci_hcd: connection closed
[  340.632370][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.632389][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.632434][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  340.632684][ T9919] vhci_hcd: connection closed
[  340.632718][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.632735][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.632783][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  340.633043][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.633058][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.633098][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  340.634514][ T9925] vhci_hcd: connection closed
[  340.635621][ T9922] vhci_hcd: connection closed
[  340.638454][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.638478][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.638532][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  340.638739][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.638761][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.638818][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  340.646866][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.646904][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.646961][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  340.647270][ T1168] vhci_hcd vhci_hcd.3: stop threads
[  340.647288][ T1168] vhci_hcd vhci_hcd.3: release socket
[  340.647307][ T1168] vhci_hcd vhci_hcd.3: disconnect device
[  342.060486][ T5921] usb 2-1: USB disconnect, device number 34
[  342.085472][  T796] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  342.152605][ T5899] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  342.252177][  T796] usb 3-1: Using ep0 maxpacket: 32
[  342.259652][  T796] usb 3-1: config 0 has no interfaces?
[  342.269513][  T796] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  342.279282][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.308231][  T796] usb 3-1: Product: syz
[  342.315437][  T796] usb 3-1: Manufacturer: syz
[  342.332233][ T5899] usb 1-1: Using ep0 maxpacket: 16
[  342.339701][  T796] usb 3-1: SerialNumber: syz
[  342.354617][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  342.369002][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.390484][  T796] usb 3-1: config 0 descriptor??
[  342.402409][ T5899] usb 1-1: Product: syz
[  342.454275][ T5899] usb 1-1: Manufacturer: syz
[  342.489671][ T5899] usb 1-1: SerialNumber: syz
[  342.584465][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'.
[  343.191048][ T5899] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  343.424688][ T9977] netlink: 'syz.3.1187': attribute type 5 has an invalid length.
[  343.440063][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'.
[  343.441145][ T5899] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  343.484314][ T5899] usb 1-1: USB disconnect, device number 43
[  343.539036][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  343.972358][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  344.148563][ T9990] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  344.771626][ T5899] usb 3-1: USB disconnect, device number 44
[  345.622274][   T24] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  345.676370][ T5899] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  346.064985][ T5899] usb 3-1: config 0 has no interfaces?
[  346.070563][ T5899] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  346.614291][T10015] IPVS: stopping backup sync thread 10019 ...
[  346.656246][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.668466][ T5899] usb 3-1: config 0 descriptor??
[  346.764602][T10011] usb usb7: usbfs: process 10011 (syz.3.1196) did not claim interface 0 before use
[  346.905593][ T9999] netlink: 'syz.2.1193': attribute type 12 has an invalid length.
[  346.935698][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'.
[  346.980881][ T9999] bond0: option primary_reselect: invalid value (172)
[  347.016966][ T5892] usb 3-1: USB disconnect, device number 45
[  347.067423][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'.
[  347.204384][ T5899] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  347.444807][ T5899] usb 4-1: not running at top speed; connect to a high speed hub
[  347.466676][ T5899] usb 4-1: config 243 has an invalid interface number: 69 but max is 0
[  347.476260][ T5899] usb 4-1: config 243 has no interface number 0
[  347.482908][ T5899] usb 4-1: config 243 interface 69 altsetting 177 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  347.502358][ T5899] usb 4-1: config 243 interface 69 has no altsetting 0
[  347.512381][  T796] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  347.527044][ T5899] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=2a.e0
[  347.536945][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.892426][ T5899] usb 4-1: Product: syz
[  347.920541][ T5899] usb 4-1: Manufacturer: syz
[  347.934108][ T5899] usb 4-1: SerialNumber: syz
[  347.942709][  T796] usb 2-1: Using ep0 maxpacket: 8
[  347.956487][  T796] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  348.111447][T10035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  348.166647][  T796] usb 2-1: string descriptor 0 read error: -22
[  348.174407][  T796] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  348.190689][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.331522][T10025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  348.390339][  T796] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  348.403475][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'.
[  348.556639][ T1551] usb 2-1: USB disconnect, device number 35
[  349.228897][T10050] team0: entered allmulticast mode
[  349.285755][T10050] team_slave_0: entered allmulticast mode
[  349.344084][T10050] team_slave_1: entered allmulticast mode
[  349.412570][T10053] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[  349.637271][T10056] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  349.717815][T10056] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  349.723161][T10062] fuse: Unknown parameter 'grou00000000000000000000'
[  349.735614][ T5899] kvaser_usb 4-1:243.69: error -ENODEV: Cannot get usb endpoint(s)
[  349.742386][ T5899] usb 4-1: USB disconnect, device number 46
[  349.912682][T10053] bond2: (slave gretap0): making interface the new active one
[  349.929582][T10053] bond2: (slave gretap0): Enslaving as an active interface with an up link
[  350.553167][T10083] input: syz0 as /devices/virtual/input/input17
[  351.128676][T10096] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  351.183459][ T1551] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  351.355206][ T1551] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  351.369319][ T1551] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  351.460115][ T1551] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  351.589114][ T1551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.664045][T10090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  351.676067][ T1551] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  351.918818][ T1551] usb 1-1: USB disconnect, device number 44
[  352.537944][T10115] FAULT_INJECTION: forcing a failure.
[  352.537944][T10115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.567378][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.4.1227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  352.567413][T10115] Tainted: [L]=SOFTLOCKUP
[  352.567420][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  352.567432][T10115] Call Trace:
[  352.567440][T10115]  <TASK>
[  352.567450][T10115]  dump_stack_lvl+0xe8/0x150
[  352.567485][T10115]  should_fail_ex+0x412/0x560
[  352.567519][T10115]  _copy_from_user+0x2d/0xb0
[  352.567545][T10115]  sg_io+0x29f/0x890
[  352.567574][T10115]  scsi_ioctl+0x148b/0x2130
[  352.567602][T10115]  ? __pfx_scsi_ioctl+0x10/0x10
[  352.567668][T10115]  ? kasan_quarantine_put+0xbb/0x1f0
[  352.567711][T10115]  ? scsi_block_when_processing_errors+0x3b6/0x480
[  352.567738][T10115]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[  352.567782][T10115]  sg_ioctl+0x112f/0x2220
[  352.567820][T10115]  ? __pfx_sg_ioctl+0x10/0x10
[  352.567850][T10115]  ? __fget_files+0x2a/0x420
[  352.567872][T10115]  ? __fget_files+0x2a/0x420
[  352.567889][T10115]  ? __fget_files+0x3a0/0x420
[  352.567906][T10115]  ? __fget_files+0x2a/0x420
[  352.567928][T10115]  ? bpf_lsm_file_ioctl+0x9/0x20
[  352.567955][T10115]  ? __pfx_sg_ioctl+0x10/0x10
[  352.567983][T10115]  __se_sys_ioctl+0xfc/0x170
[  352.568010][T10115]  do_syscall_64+0x14d/0xf80
[  352.568036][T10115]  ? trace_irq_disable+0x3b/0x150
[  352.568065][T10115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.568086][T10115]  ? clear_bhb_loop+0x40/0x90
[  352.568111][T10115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.568130][T10115] RIP: 0033:0x7fcd5df9c819
[  352.568150][T10115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.568168][T10115] RSP: 002b:00007fcd5edbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  352.568192][T10115] RAX: ffffffffffffffda RBX: 00007fcd5e215fa0 RCX: 00007fcd5df9c819
[  352.568207][T10115] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 000000000000000c
[  352.568221][T10115] RBP: 00007fcd5edbb090 R08: 0000000000000000 R09: 0000000000000000
[  352.568233][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.568246][T10115] R13: 00007fcd5e216038 R14: 00007fcd5e215fa0 R15: 00007fcd5e33fa48
[  352.568277][T10115]  </TASK>
[  353.313124][T10129] xt_addrtype: ipv6 does not support BROADCAST matching
[  353.562402][ T5899] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  353.622216][ T1551] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  353.715229][ T5899] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  353.723502][ T5899] usb 1-1: config 1 has no interface number 0
[  353.751341][ T5899] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  353.796332][ T5899] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  353.807196][ T5899] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.842393][ T5899] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  353.854633][ T1551] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  353.865358][ T1551] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  353.876221][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.876962][ T1551] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  353.894052][ T5899] usb 1-1: Product: syz
[  353.894306][ T1551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  353.907542][ T5899] usb 1-1: Manufacturer: syz
[  353.912539][ T5899] usb 1-1: SerialNumber: syz
[  353.933865][ T1551] usb 5-1: SerialNumber: syz
[  353.944010][T10127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  354.033608][  T796] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  354.156009][T10127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  354.168166][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'.
[  354.192285][  T796] usb 2-1: Using ep0 maxpacket: 32
[  354.200797][  T796] usb 2-1: config 0 has no interfaces?
[  354.211277][  T796] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  354.230937][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.242860][  T796] usb 2-1: Product: syz
[  354.247453][  T796] usb 2-1: Manufacturer: syz
[  354.256258][  T796] usb 2-1: SerialNumber: syz
[  354.269770][  T796] usb 2-1: config 0 descriptor??
[  354.278321][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1233'.
[  354.301979][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1233'.
[  354.332918][T10134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1233'.
[  354.389921][ T5899] usb 1-1: Incompatible driver and firmware versions
[  354.451055][ T5899] usb 1-1: USB disconnect, device number 45
[  354.861072][ T1551] usb 5-1: 0:2 : does not exist
[  355.294196][T10148] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  355.385560][ T1551] usb 5-1: USB disconnect, device number 46
[  355.398171][   T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  355.398739][T10149] Invalid logical block size (8704)
[  355.458695][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  355.705457][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.721225][   T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  355.745634][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  355.762255][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.776049][   T10] usb 3-1: Product: syz
[  355.785814][   T10] usb 3-1: Manufacturer: syz
[  355.790578][   T10] usb 3-1: SerialNumber: syz
[  355.813604][   T10] cdc_mbim 3-1:1.0: skipping garbage
[  356.013754][T10143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  356.071759][   T10] cdc_mbim 3-1:1.0: bind() failure
[  356.115771][   T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  356.136921][   T10] cdc_ncm 3-1:1.1: bind() failure
[  356.173154][   T10] usb 3-1: USB disconnect, device number 46
[  356.192257][ T5921] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  356.352362][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  356.360506][ T5921] usb 5-1: config 64 has an invalid interface number: 19 but max is 0
[  356.369492][ T5921] usb 5-1: config 64 has no interface number 0
[  356.376380][ T5921] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  356.388694][ T5921] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  356.399147][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.420927][ T5921] usb 5-1: probing VID:PID(2201:012C)   
[  356.446749][ T5921] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 02
[  356.462982][ T5921] usb 5-1: vub300 ignoring EndPoint(0) 02
[  356.475443][ T5921] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  356.484383][ T5921] vub300 5-1:64.19: probe with driver vub300 failed with error -22
[  356.522239][   T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  356.618846][ T1551] usb 5-1: USB disconnect, device number 47
[  356.684784][ T5921] usb 2-1: USB disconnect, device number 36
[  356.729364][   T10] usb 3-1: Using ep0 maxpacket: 32
[  356.742465][   T10] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  356.761115][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.771634][   T10] usb 3-1: Product: syz
[  356.776523][   T10] usb 3-1: Manufacturer: syz
[  356.783232][   T10] usb 3-1: SerialNumber: syz
[  356.791988][   T10] usb 3-1: config 0 descriptor??
[  356.803947][   T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  356.812800][   T10] dvb-usb: bulk message failed: -22 (4/0)
[  356.818764][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  356.842519][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  356.848406][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  356.867624][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  356.893322][   T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  356.900209][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b78dc00: rx timeout, send abort
[  356.902288][   T10] usb 3-1: media controller created
[  356.911098][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b78dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  356.938144][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  356.994384][   T10] usb 3-1: selecting invalid altsetting 3
[  357.007266][T10161] ttusb2: i2c wr len=75 too high
[  357.022517][   T10] ttusb2: set interface to alts=3 failed
[  357.133740][   T10] DVB: Unable to find symbol tda10086_attach()
[  357.148168][   T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  357.170854][   T10] dvb-usb: bulk message failed: -22 (4/0)
[  357.180015][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1247'.
[  357.205778][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  357.225420][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  357.238750][   T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  357.262242][   T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  357.293777][   T10] usb 3-1: USB disconnect, device number 47
[  357.427686][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1249'.
[  357.439678][   T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  357.548598][T10183] m1: entered promiscuous mode
[  357.563057][ T5899] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  357.920207][ T5899] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  357.952177][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.975638][ T5899] usb 5-1: config 0 has no interface number 0
[  357.992284][ T5899] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  358.022540][ T5899] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  358.149271][ T5899] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  358.233418][ T5899] usb 5-1: config 0 interface 52 has no altsetting 0
[  358.563535][ T5899] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  358.883116][ T5899] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  358.913641][ T5899] usb 5-1: Manufacturer: syz
[  358.971621][ T5899] usb 5-1: config 0 descriptor??
[  359.205063][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.247576][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.280204][ T5899] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  359.296099][T10207] binder: 10205:10207 unknown command 0
[  359.302138][T10207] binder: 10205:10207 ioctl c0306201 200000000080 returned -22
[  359.313699][   T29] audit: type=1326 audit(1774979177.378:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.341523][T10206] binder: 10205:10206 ioctl c0306201 200000000040 returned -22
[  359.414054][   T29] audit: type=1326 audit(1774979177.378:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.436964][   T29] audit: type=1326 audit(1774979177.378:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.459563][   T29] audit: type=1326 audit(1774979177.378:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.464759][ T5899] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5
[  359.484625][T10179] syz_tun: entered allmulticast mode
[  359.522773][T10177] syz_tun: left allmulticast mode
[  359.527922][   T29] audit: type=1326 audit(1774979177.378:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.670555][   T29] audit: type=1326 audit(1774979177.378:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.704017][   T29] audit: type=1326 audit(1774979177.378:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.748766][T10209] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  359.878622][   T29] audit: type=1326 audit(1774979177.378:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  359.890669][ T5899] usb 5-1: USB disconnect, device number 48
[  360.010306][   T29] audit: type=1326 audit(1774979177.378:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  360.051093][   T29] audit: type=1326 audit(1774979177.378:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd2e4f9c819 code=0x7ffc0000
[  360.612354][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  361.032243][ T5899] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  361.194851][ T5899] usb 1-1: Using ep0 maxpacket: 8
[  361.205019][ T5899] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[  361.215938][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.226342][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 65
[  361.393982][ T5899] usb 1-1: config 0 has no interface number 0
[  361.401167][ T5899] usb 1-1: too many endpoints for config 0 interface 1 altsetting 61: 142, using maximum allowed: 30
[  361.438892][ T5899] usb 1-1: config 0 interface 1 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 142
[  361.453464][ T5899] usb 1-1: config 0 interface 1 has no altsetting 0
[  361.460510][ T5899] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  361.478440][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.478571][T10252] netlink: 'syz.4.1269': attribute type 10 has an invalid length.
[  361.513279][ T5899] usb 1-1: config 0 descriptor??
[  361.518858][T10252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1269'.
[  361.538102][ T5899] usb 1-1: selecting invalid altsetting 0
[  361.780086][   T10] usb 1-1: USB disconnect, device number 46
[  362.772269][ T1551] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  362.952314][ T1551] usb 5-1: Using ep0 maxpacket: 32
[  362.959318][ T1551] usb 5-1: config 0 has no interfaces?
[  362.967789][ T1551] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  362.979288][ T1551] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  362.990501][ T1551] usb 5-1: Product: syz
[  362.999076][ T1551] usb 5-1: Manufacturer: syz
[  363.009124][ T1551] usb 5-1: SerialNumber: syz
[  363.029381][ T1551] usb 5-1: config 0 descriptor??
[  363.142177][ T5814] usb 2-1: new low-speed USB device number 37 using dummy_hcd
[  363.247410][T10258] vivid-004: disconnect
[  363.288085][T10258] vivid-004: reconnect
[  363.296276][ T5814] usb 2-1: config 7 has an invalid interface number: 209 but max is 0
[  363.305162][ T5814] usb 2-1: config 7 has no interface number 0
[  363.319822][ T5814] usb 2-1: config 7 interface 209 has no altsetting 0
[  363.337153][ T5814] usb 2-1: string descriptor 0 read error: -22
[  363.384386][ T5814] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=7c.f2
[  363.411708][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.898354][  T796] usb 5-1: USB disconnect, device number 49
[  364.208888][ T5899] usb 2-1: USB disconnect, device number 37
[  364.402624][ T1551] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  364.417073][T10295] Invalid logical block size (8704)
[  364.595355][ T1551] usb 1-1: Using ep0 maxpacket: 16
[  364.611695][ T1551] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  364.637532][ T1551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  364.682515][ T1551] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  364.777999][ T1551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.827307][ T1551] usb 1-1: Product: syz
[  364.838334][ T1551] usb 1-1: Manufacturer: syz
[  364.857013][ T1551] usb 1-1: SerialNumber: syz
[  364.899549][ T1551] usb 1-1: config 0 descriptor??
[  364.938254][ T1551] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  364.984055][ T1551] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  365.090314][T10309] netlink: 'syz.2.1286': attribute type 62 has an invalid length.
[  365.332267][ T1551] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  365.429247][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.441633][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.470297][ T1551] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  365.480764][ T1551] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  365.489330][ T1551] em28xx 1-1:0.0: No AC97 audio processor
[  365.505790][ T1551] usb 1-1: USB disconnect, device number 47
[  365.528349][ T1551] em28xx 1-1:0.0: Disconnecting em28xx
[  365.548252][ T1551] em28xx 1-1:0.0: Freeing device
[  365.662278][ T5899] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  365.822305][ T5899] usb 5-1: Using ep0 maxpacket: 16
[  365.834259][ T5899] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  365.846321][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.856171][ T5899] usb 5-1: Product: syz
[  365.860777][ T5899] usb 5-1: Manufacturer: syz
[  365.867181][ T5899] usb 5-1: SerialNumber: syz
[  365.874983][ T5899] usb 5-1: config 0 descriptor??
[  365.883481][ T5899] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  366.089755][ T5899] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71
[  366.114090][ T5899] usb 5-1: USB disconnect, device number 50
[  366.120215][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'.
[  366.330797][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880327c2000: rx timeout, send abort
[  366.339685][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880327c2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  368.113336][T10350] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  368.713250][T10359] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  369.088126][T10358] Cannot find add_set index 0 as target
[  369.302256][  T796] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  369.452799][  T796] usb 1-1: Using ep0 maxpacket: 32
[  369.470185][  T796] usb 1-1: unable to get BOS descriptor or descriptor too short
[  369.496115][  T796] usb 1-1: config 244 has an invalid interface number: 68 but max is 0
[  369.522193][ T5921] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  369.532178][  T796] usb 1-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  369.543681][  T796] usb 1-1: config 244 has no interface number 0
[  369.550447][  T796] usb 1-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  369.562714][  T796] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  369.577119][  T796] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  369.589612][  T796] usb 1-1: config 244 interface 68 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  369.603834][  T796] usb 1-1: config 244 interface 68 has no altsetting 0
[  369.614872][  T796] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  369.624230][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.633111][  T796] usb 1-1: Product: syz
[  369.637437][  T796] usb 1-1: Manufacturer: syz
[  369.642463][  T796] usb 1-1: SerialNumber: syz
[  369.704971][ T5921] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  369.715855][ T5921] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  369.736728][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0
[  369.786328][ T5921] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  369.798112][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  369.832254][ T5921] usb 5-1: Product: syz
[  369.836623][ T5921] usb 5-1: Manufacturer: syz
[  369.843495][ T5921] usb 5-1: SerialNumber: syz
[  369.866633][T10361] netlink: 'syz.0.1299': attribute type 4 has an invalid length.
[  369.875833][T10361] netlink: 'syz.0.1299': attribute type 4 has an invalid length.
[  369.906406][T10361] xt_CT: You must specify a L4 protocol and not use inversions on it
[  369.917148][ T5921] usb 5-1: config 0 descriptor??
[  369.927176][ T5921] hub 5-1:0.0: bad descriptor, ignoring hub
[  369.934219][ T5921] hub 5-1:0.0: probe with driver hub failed with error -5
[  370.014538][ T5921] usb 5-1: selecting invalid altsetting 0
[  370.414455][ T5921] usb 5-1: USB disconnect, device number 51
[  370.502539][ T1551] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  370.632183][ T1551] usb 3-1: device descriptor read/64, error -71
[  370.922205][ T1551] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  371.245635][T10390] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  371.373094][ T1551] usb 3-1: device descriptor read/64, error -71
[  371.503494][ T1551] usb usb3-port1: attempt power cycle
[  371.587150][  T796] comedi comedi5: Wrong number of endpoints
[  371.604592][  T796] dt9812 1-1:244.68: driver 'dt9812' failed to auto-configure device.
[  371.715032][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'.
[  371.895902][T10402] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  372.182388][ T1551] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  372.378548][ T1551] usb 3-1: device descriptor read/8, error -71
[  372.397431][  T796] usb 1-1: USB disconnect, device number 48
[  372.649391][ T1551] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  372.679250][ T1551] usb 3-1: device descriptor read/8, error -71
[  372.923488][ T1551] usb usb3-port1: unable to enumerate USB device
[  373.920781][T10424] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1319'.
[  374.634938][  T796] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  374.822170][  T796] usb 1-1: Using ep0 maxpacket: 32
[  374.853275][  T796] usb 1-1: unable to get BOS descriptor or descriptor too short
[  374.876403][  T796] usb 1-1: config 244 has an invalid interface number: 68 but max is 0
[  374.901282][  T796] usb 1-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  374.915667][  T796] usb 1-1: config 244 has no interface number 0
[  374.923578][  T796] usb 1-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  375.027428][T10449] netlink: 'syz.2.1324': attribute type 10 has an invalid length.
[  375.035841][  T796] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  375.123781][  T796] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  375.216073][  T796] usb 1-1: config 244 interface 68 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  375.266853][T10454] loop4: detected capacity change from 0 to 7
[  375.273959][T10454] Dev loop4: unable to read RDB block 7
[  375.280485][T10454]  loop4: unable to read partition table
[  375.290315][T10454] loop4: partition table beyond EOD, truncated
[  375.300413][T10454] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  375.340753][  T796] usb 1-1: config 244 interface 68 has no altsetting 0
[  375.485917][  T796] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  375.514493][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.561384][  T796] usb 1-1: Product: syz
[  375.591798][  T796] usb 1-1: Manufacturer: syz
[  375.628202][  T796] usb 1-1: SerialNumber: syz
[  375.892657][   T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  375.904643][T10434] netlink: 'syz.0.1321': attribute type 4 has an invalid length.
[  375.955213][T10437] netlink: 'syz.0.1321': attribute type 4 has an invalid length.
[  376.071699][   T24] usb 3-1: Using ep0 maxpacket: 8
[  376.105900][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  376.145730][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  376.159306][T10434] xt_CT: You must specify a L4 protocol and not use inversions on it
[  376.215200][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  376.222641][T10464] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1329'.
[  376.290415][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.341619][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  376.366281][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.670594][   T24] usb 3-1: GET_CAPABILITIES returned 0
[  376.676496][   T24] usbtmc 3-1:16.0: can't read capabilities
[  376.832293][ T5835] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  376.878346][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.889428][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.898569][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.907830][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.917139][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.927924][ T1551] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  376.939962][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.949133][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.958272][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.967477][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  376.995186][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  377.004353][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  377.013558][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  377.022812][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  377.044121][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  377.053879][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  377.062994][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  377.091404][ T5835] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  377.110630][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.126888][ T1551] usb 4-1: unable to get BOS descriptor or descriptor too short
[  377.135219][ T5835] usb 2-1: config 0 descriptor??
[  377.147966][ T1551] usb 4-1: not running at top speed; connect to a high speed hub
[  377.172703][ T1551] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  377.189410][ T1551] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00
[  377.199318][ T1551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.297584][ T1551] usb 4-1: Product: syz
[  377.305194][ T1551] usb 4-1: Manufacturer: syz
[  377.310112][ T1551] usb 4-1: SerialNumber: syz
[  377.329181][  T796] comedi comedi5: Wrong number of endpoints
[  377.335851][  T796] dt9812 1-1:244.68: driver 'dt9812' failed to auto-configure device.
[  377.386342][  T796] usb 1-1: USB disconnect, device number 49
[  377.560615][ T1551] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22
[  377.585090][   T10] usb 3-1: USB disconnect, device number 52
[  377.629798][ T1551] usb 4-1: USB disconnect, device number 47
[  377.785013][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.803061][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.855218][T10490] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  378.018476][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  378.018499][   T29] audit: type=1800 audit(1774979196.098:52): pid=10468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1331" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0
[  378.198066][T10496] loop8: detected capacity change from 0 to 8
[  378.208591][T10496] Dev loop8: unable to read RDB block 8
[  378.214971][T10496]  loop8: unable to read partition table
[  378.221156][T10496] loop8: partition table beyond EOD, truncated
[  378.226138][ T5835] usb 2-1: Cannot set autoneg
[  378.234083][ T5835] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[  378.247364][T10496] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  378.333085][T10499] loop8: detected capacity change from 0 to 8
[  378.395447][ T6338] Dev loop8: unable to read RDB block 8
[  378.406224][ T6338]  loop8: unable to read partition table
[  378.412529][ T6338] loop8: partition table beyond EOD, truncated
[  378.421988][T10499] Dev loop8: unable to read RDB block 8
[  378.431251][T10499]  loop8: unable to read partition table
[  378.438467][T10499] loop8: partition table beyond EOD, truncated
[  378.446381][T10499] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  378.764036][T10510] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000
[  379.205414][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  379.236364][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.356190][  T796] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  379.533071][  T796] usb 3-1: device descriptor read/64, error -71
[  379.553250][ T5835] usb 2-1: USB disconnect, device number 38
[  379.772327][  T796] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  379.912167][  T796] usb 3-1: device descriptor read/64, error -71
[  380.022457][  T796] usb usb3-port1: attempt power cycle
[  380.202632][ T5835] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  380.226624][T10527] xt_TCPMSS: Only works on TCP SYN packets
[  380.362282][  T796] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  380.392150][ T5835] usb 4-1: Using ep0 maxpacket: 32
[  380.410342][  T796] usb 3-1: device descriptor read/8, error -71
[  380.411848][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short
[  380.441910][ T5835] usb 4-1: config 244 has an invalid interface number: 68 but max is 0
[  380.461162][ T5835] usb 4-1: config 244 has no interface number 0
[  380.532372][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805b2dac00: rx timeout, send abort
[  380.540888][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b2dac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  380.567597][ T5835] usb 4-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  380.637399][ T5835] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  380.688693][T10525] loop6: detected capacity change from 0 to 2640
[  380.702356][  T796] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  380.720447][ T5835] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  380.731282][T10525] buffer_io_error: 14 callbacks suppressed
[  380.731303][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.757823][  T796] usb 3-1: device descriptor read/8, error -71
[  380.799044][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.812699][ T5835] usb 4-1: config 244 interface 68 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  380.817591][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.853210][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.872327][  T796] usb usb3-port1: unable to enumerate USB device
[  380.893229][ T5835] usb 4-1: config 244 interface 68 has no altsetting 0
[  380.919300][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.942919][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.962660][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.990111][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.990401][ T5835] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  381.044456][T10544] program syz.1.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  381.062281][T10525] ldm_validate_partition_table(): Disk read failed.
[  381.079735][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  381.082101][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.131148][T10525] Buffer I/O error on dev loop6, logical block 0, async page read
[  381.132007][ T5835] usb 4-1: Product: syz
[  381.143947][ T5835] usb 4-1: Manufacturer: syz
[  381.148719][ T5835] usb 4-1: SerialNumber: syz
[  381.155777][T10525] Dev loop6: unable to read RDB block 0
[  381.166233][T10525]  loop6: unable to read partition table
[  381.196270][T10525] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  381.411538][T10522] netlink: 'syz.3.1343': attribute type 4 has an invalid length.
[  381.462735][T10524] netlink: 'syz.3.1343': attribute type 4 has an invalid length.
[  381.536726][T10522] xt_CT: You must specify a L4 protocol and not use inversions on it
[  381.633522][T10564] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1357'.
[  382.863968][T10582] xt_CT: No such helper "syz0"
[  383.056172][ T5835] comedi comedi5: Wrong number of endpoints
[  383.113795][ T5835] dt9812 4-1:244.68: driver 'dt9812' failed to auto-configure device.
[  383.352764][ T5835] usb 4-1: USB disconnect, device number 48
[  383.392182][  T796] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  383.692210][  T796] usb 3-1: Using ep0 maxpacket: 32
[  383.704100][  T796] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  383.722452][  T796] usb 3-1: config 0 has no interface number 0
[  383.746766][  T796] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  383.784797][  T796] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  383.796244][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.820714][  T796] usb 3-1: Product: syz
[  383.836460][  T796] usb 3-1: Manufacturer: syz
[  383.925596][  T796] usb 3-1: SerialNumber: syz
[  383.946542][  T796] usb 3-1: config 0 descriptor??
[  383.952545][T10590] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  384.201294][T10590] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  384.293254][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  384.822782][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.833732][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.855991][  T796] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random
[  385.061290][  T796] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 135
[  385.138196][T10606] loop6: detected capacity change from 0 to 2640
[  385.154640][T10606] ldm_validate_partition_table(): Disk read failed.
[  385.161446][T10606] Dev loop6: unable to read RDB block 0
[  385.179459][T10606]  loop6: unable to read partition table
[  385.201900][T10606] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  385.249551][ T5195] ldm_validate_partition_table(): Disk read failed.
[  385.257152][ T5195] Dev loop6: unable to read RDB block 0
[  385.265960][ T5195]  loop6: unable to read partition table
[  385.302222][   T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  385.464196][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.477094][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.490271][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.501461][   T10] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  385.510818][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.530532][   T10] usb 5-1: config 0 descriptor??
[  385.584650][T10622] syz.1.1372 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  385.662227][ T1551] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  385.745975][  T796] usb 5-1: USB disconnect, device number 52
[  385.806892][T10625] syzkaller0: entered promiscuous mode
[  385.818937][ T1551] usb 4-1: Using ep0 maxpacket: 8
[  385.829848][ T1551] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32
[  385.841695][T10625] syzkaller0: entered allmulticast mode
[  385.851534][ T1551] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73
[  385.879544][ T1551] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  385.906337][ T1551] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  385.921565][ T1551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.930285][ T1551] usb 4-1: Product: syz
[  385.934580][ T1551] usb 4-1: Manufacturer: syz
[  385.939315][ T1551] usb 4-1: SerialNumber: syz
[  386.102298][ T5835] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  386.262278][ T5835] usb 1-1: Using ep0 maxpacket: 32
[  386.271212][ T5835] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  386.288155][ T5835] usb 1-1: config 0 has no interface number 0
[  386.318937][ T5835] usb 1-1: config 0 interface 184 has no altsetting 0
[  386.331308][   T10] usb 3-1: USB disconnect, device number 57
[  386.345786][ T5835] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  386.380261][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.389600][ T5835] usb 1-1: Product: syz
[  386.411769][ T5835] usb 1-1: Manufacturer: syz
[  386.477314][ T5835] usb 1-1: SerialNumber: syz
[  386.492490][ T5835] usb 1-1: config 0 descriptor??
[  386.510426][ T1551] snd-usb-audio 4-1:65.0: probe with driver snd-usb-audio failed with error -71
[  386.535932][ T1551] usb 4-1: USB disconnect, device number 49
[  386.882250][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  387.052246][   T10] usb 5-1: Using ep0 maxpacket: 32
[  387.079211][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  387.090141][   T10] usb 5-1: config 244 has an invalid interface number: 68 but max is 0
[  387.102645][   T10] usb 5-1: config 244 has no interface number 0
[  387.118215][   T10] usb 5-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  387.146010][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  387.167483][   T10] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  387.182268][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  387.208228][   T10] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  387.248830][   T10] usb 5-1: config 244 interface 68 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  387.296524][   T10] usb 5-1: config 244 interface 68 has no altsetting 0
[  387.320636][   T10] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  387.338909][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.358017][   T10] usb 5-1: Product: syz
[  387.372728][   T10] usb 5-1: Manufacturer: syz
[  387.428609][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  387.444130][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  387.454446][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  387.511081][   T10] usb 5-1: SerialNumber: syz
[  387.517308][ T5835] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[  387.761617][T10634] netlink: 'syz.4.1374': attribute type 4 has an invalid length.
[  387.794255][T10634] netlink: 'syz.4.1374': attribute type 4 has an invalid length.
[  388.050230][T10653] xt_CT: You must specify a L4 protocol and not use inversions on it
[  388.167074][T10656] syzkaller1: entered promiscuous mode
[  388.173640][T10656] syzkaller1: entered allmulticast mode
[  388.772473][ T5814] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  388.816092][T10667] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1110260093 (4441040372 ns) > initial count (1585815008 ns). Using initial count to start timer.
[  388.933656][ T5814] usb 4-1: not running at top speed; connect to a high speed hub
[  388.947292][ T5814] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34
[  388.957944][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.966462][ T5814] usb 4-1: Product: syz
[  388.970958][ T5814] usb 4-1: Manufacturer: syz
[  388.975931][ T5814] usb 4-1: SerialNumber: syz
[  389.072488][  T796] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  389.212330][  T796] usb 2-1: device descriptor read/64, error -71
[  389.272216][ T1551] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  389.422229][ T1551] usb 3-1: Using ep0 maxpacket: 16
[  389.429793][ T1551] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.441546][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0
[  389.449450][ T1551] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  389.459414][ T1551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.467755][  T796] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  389.471797][ T1551] usb 3-1: config 0 descriptor??
[  389.612155][  T796] usb 2-1: device descriptor read/64, error -71
[  389.722425][  T796] usb usb2-port1: attempt power cycle
[  389.754733][ T5835] usb 1-1: USB disconnect, device number 50
[  389.920922][ T1551] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  390.132104][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  390.292101][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  390.334179][  T796] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  390.377175][  T796] usb 2-1: device descriptor read/8, error -71
[  390.609132][   T10] comedi comedi5: Wrong number of endpoints
[  390.632424][   T10] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device.
[  390.632464][  T796] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  390.713313][  T796] usb 2-1: device descriptor read/8, error -71
[  390.753211][   T10] usb 5-1: USB disconnect, device number 53
[  390.843052][  T796] usb usb2-port1: unable to enumerate USB device
[  391.078918][T10683] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  391.342406][  T796] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  391.472185][  T796] usb 5-1: device descriptor read/64, error -71
[  391.665124][   T10] usb 3-1: USB disconnect, device number 58
[  391.782239][  T796] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  391.880549][ T5814] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22
[  391.923269][  T796] usb 5-1: device descriptor read/64, error -71
[  391.951334][ T5814] usb 4-1: USB disconnect, device number 50
[  392.042902][  T796] usb usb5-port1: attempt power cycle
[  392.223440][T10698] loop6: detected capacity change from 0 to 2640
[  392.236343][T10698] buffer_io_error: 43 callbacks suppressed
[  392.236357][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.334947][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.343907][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.354469][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.362811][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.392390][  T796] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  392.418789][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.428799][  T796] usb 5-1: device descriptor read/8, error -71
[  392.443444][T10699] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1394'.
[  392.446364][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.513614][ T5814] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  392.528727][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.564466][T10699] tipc: Invalid UDP bearer configuration
[  392.564504][T10699] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  392.593494][T10698] ldm_validate_partition_table(): Disk read failed.
[  392.605459][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.615510][T10698] Buffer I/O error on dev loop6, logical block 0, async page read
[  392.622372][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  392.625150][T10698] Dev loop6: unable to read RDB block 0
[  392.636491][T10699] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  392.647821][T10698]  loop6: unable to read partition table
[  392.652157][T10699] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  392.664183][T10699] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  392.857184][ T5814] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  392.880032][T10698] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  392.889009][ T5814] usb 2-1: config 0 has no interface number 0
[  392.903595][ T5814] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  392.918242][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.382215][  T796] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  393.442225][T10699] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  393.452282][  T796] usb 5-1: device descriptor read/8, error -71
[  393.454118][ T5814] usb 2-1: Product: syz
[  393.483187][ T5814] usb 2-1: Manufacturer: syz
[  393.491577][T10699] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[  393.530947][ T5814] usb 2-1: SerialNumber: syz
[  393.545211][ T5814] usb 2-1: config 0 descriptor??
[  393.562447][  T796] usb usb5-port1: unable to enumerate USB device
[  393.574384][T10699] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[  393.802977][T10708] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.1398'.
[  394.024494][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.033313][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.047643][ T5814] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  394.058868][ T5814] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  394.070444][ T5814] asix 2-1:0.251: probe with driver asix failed with error -5
[  394.147803][ T5814] usb 2-1: USB disconnect, device number 43
[  394.212291][   T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  394.373826][   T10] usb 1-1: Using ep0 maxpacket: 32
[  394.382600][T10720] netlink: 'syz.3.1403': attribute type 10 has an invalid length.
[  394.393941][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  394.403890][   T10] usb 1-1: config 244 has an invalid interface number: 68 but max is 0
[  394.412527][   T10] usb 1-1: config 244 has no interface number 0
[  394.422791][T10720] bond0: (slave wlan1): Opening slave failed
[  394.432380][   T10] usb 1-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  394.462180][   T10] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  394.493654][   T10] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  394.528138][   T10] usb 1-1: config 244 interface 68 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  394.598029][   T10] usb 1-1: config 244 interface 68 has no altsetting 0
[  394.626638][   T10] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  394.636239][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.648003][T10722] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3
[  394.658251][   T10] usb 1-1: Product: syz
[  394.668364][   T10] usb 1-1: Manufacturer: syz
[  394.678667][   T10] usb 1-1: SerialNumber: syz
[  394.751163][T10725] pim6reg: entered allmulticast mode
[  394.928693][T10714] netlink: 'syz.0.1399': attribute type 4 has an invalid length.
[  395.079895][T10735] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1407'.
[  395.145340][T10739] netlink: 'syz.0.1399': attribute type 4 has an invalid length.
[  395.339140][T10739] xt_CT: You must specify a L4 protocol and not use inversions on it
[  395.622469][ T5814] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  395.821178][ T5814] usb 4-1: device descriptor read/64, error -71
[  395.828245][T10749] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  395.884755][T10749] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  396.072185][ T5814] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  396.185630][ T5899] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  396.203919][ T5814] usb 4-1: device descriptor read/64, error -71
[  396.322424][ T5814] usb usb4-port1: attempt power cycle
[  396.362915][ T5899] usb 5-1: Using ep0 maxpacket: 16
[  396.389696][ T5899] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  396.507282][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.516902][ T5899] usb 5-1: Product: syz
[  396.521134][ T5899] usb 5-1: Manufacturer: syz
[  396.526142][ T5899] usb 5-1: SerialNumber: syz
[  396.547303][ T5899] usb 5-1: config 0 descriptor??
[  396.564975][T10759] tipc: Started in network mode
[  396.575155][T10759] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  396.618981][T10761] binder: 10755:10761 ioctl 4018620d 0 returned -22
[  396.627416][T10759] tipc: Enabled bearer <udp:syz0>, priority 10
[  396.692851][ T5814] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  396.713407][ T5814] usb 4-1: device descriptor read/8, error -71
[  396.766326][ T5899] ums-onetouch 5-1:0.0: USB Mass Storage device detected
[  396.886983][ T5899] usb 5-1: USB disconnect, device number 58
[  396.948820][   T10] comedi comedi5: Wrong number of endpoints
[  396.966023][   T10] dt9812 1-1:244.68: driver 'dt9812' failed to auto-configure device.
[  396.979786][ T5814] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  397.023186][ T5814] usb 4-1: device descriptor read/8, error -71
[  397.035593][   T10] usb 1-1: USB disconnect, device number 51
[  397.154361][ T5814] usb usb4-port1: unable to enumerate USB device
[  397.515290][   T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  397.742225][   T24] tipc: Node number set to 1
[  397.906068][   T10] usb 1-1: config 0 has no interfaces?
[  397.911876][   T10] usb 1-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[  397.922279][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.952190][   T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  397.956622][   T10] usb 1-1: config 0 descriptor??
[  398.156197][   T24] usb 3-1: config 4 has an invalid interface number: 88 but max is 0
[  398.165347][   T24] usb 3-1: config 4 has no interface number 0
[  398.180500][   T24] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  398.205048][   T24] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  398.229293][   T24] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  398.254417][   T10] usb 1-1: USB disconnect, device number 52
[  398.280398][   T24] usb 3-1: config 4 interface 88 has no altsetting 0
[  398.297188][   T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  398.298512][T10783] input: syz1 as /devices/virtual/input/input20
[  398.361478][   T24] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3
[  398.375084][   T24] usb 3-1: Manufacturer: syz
[  398.379749][   T24] usb 3-1: SerialNumber: syz
[  398.516737][T10776] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  398.881173][T10796] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  399.128840][T10801] netlink: 'syz.1.1427': attribute type 10 has an invalid length.
[  399.163720][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1427'.
[  399.672300][T10814] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1428'.
[  399.754280][   T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  400.001376][T10818] kAFS: unable to lookup cell '(,c��'
[  400.082208][   T24] usb 1-1: Using ep0 maxpacket: 32
[  400.117245][T10809] netlink: 'syz.0.1426': attribute type 4 has an invalid length.
[  400.211093][T10820] netlink: 'syz.0.1426': attribute type 4 has an invalid length.
[  400.514404][T10809] xt_CT: You must specify a L4 protocol and not use inversions on it
[  400.579453][ T1551] usb 3-1: USB disconnect, device number 59
[  401.328350][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'.
[  402.663220][T10836] xt_CT: No such helper "syz0"
[  402.915835][T10839] fuse: Invalid rootmode
[  403.025623][T10843] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1437'.
[  403.035401][T10841] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82
[  403.066590][T10839] batman_adv: batadv0: Adding interface: gretap2
[  403.077885][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'.
[  403.092500][T10839] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.129314][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'.
[  403.177891][T10839] batman_adv: batadv0: Interface activated: gretap2
[  403.232989][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  403.255456][   T24] usb 1-1: unable to read config index 0 descriptor/start: -71
[  403.263337][   T24] usb 1-1: can't read configurations, error -71
[  403.680792][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'.
[  403.690756][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'.
[  403.841139][T10868] bridge0: port 3(hsr0) entered blocking state
[  403.848205][T10868] bridge0: port 3(hsr0) entered disabled state
[  403.855714][T10868] hsr0: entered allmulticast mode
[  403.861016][T10868] hsr_slave_0: entered allmulticast mode
[  403.867127][T10868] hsr_slave_1: entered allmulticast mode
[  403.881439][T10868] hsr0: entered promiscuous mode
[  403.889043][T10868] bridge0: port 3(hsr0) entered blocking state
[  403.895496][T10868] bridge0: port 3(hsr0) entered forwarding state
[  404.232909][   T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  404.393804][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  404.445896][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  404.466496][T10876] netlink: 'syz.0.1446': attribute type 6 has an invalid length.
[  404.474406][T10876] netlink: 'syz.0.1446': attribute type 7 has an invalid length.
[  404.483443][T10876] netlink: 'syz.0.1446': attribute type 8 has an invalid length.
[  404.531614][   T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  404.568865][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.603592][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'.
[  404.619368][   T10] usb 4-1: config 0 descriptor??
[  404.843412][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  404.871105][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  404.907215][   T10] usb 4-1: USB disconnect, device number 55
[  405.351861][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1451'.
[  405.374627][   T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  405.382358][ T1551] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  405.429370][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1451'.
[  405.451780][T10891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1451'.
[  405.554856][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.571606][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.582754][ T1551] usb 3-1: Using ep0 maxpacket: 32
[  405.608715][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40
[  405.642210][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.672752][   T10] usb 4-1: config 0 descriptor??
[  405.780696][T10885] netlink: 'syz.2.1449': attribute type 4 has an invalid length.
[  406.004143][T10900] netlink: 'syz.2.1449': attribute type 4 has an invalid length.
[  406.136239][T10900] xt_CT: You must specify a L4 protocol and not use inversions on it
[  406.192974][   T10] plantronics 0003:047F:3333.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:3333] on usb-dummy_hcd.3-1/input0
[  406.255086][T10894] loop6: detected capacity change from 0 to 2640
[  406.284276][T10894] buffer_io_error: 6 callbacks suppressed
[  406.284297][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.452486][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.473667][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.482920][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.660398][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.792878][ T5899] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  406.853420][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.899782][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.942297][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.967481][T10894] ldm_validate_partition_table(): Disk read failed.
[  407.010001][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  407.021435][T10894] Buffer I/O error on dev loop6, logical block 0, async page read
[  407.137254][T10894] Dev loop6: unable to read RDB block 0
[  407.173365][T10894]  loop6: unable to read partition table
[  407.177448][ T5899] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  407.206140][ T5899] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  407.233606][T10894] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  407.245448][ T5899] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  407.257941][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.279980][ T5899] usb 2-1: Product: syz
[  407.289807][ T5899] usb 2-1: Manufacturer: syz
[  407.306729][ T5899] usb 2-1: SerialNumber: syz
[  407.340242][ T5899] usb 2-1: config 0 descriptor??
[  407.346042][T10911] ip6gre1: entered promiscuous mode
[  407.367625][T10911] ip6gre1: entered allmulticast mode
[  407.380307][ T5899] gspca_main: sunplus-2.14.0 probing 055f:c630
[  407.414498][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  407.434531][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  407.443700][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  407.453134][   T10] usb 4-1: reset high-speed USB device number 56 using dummy_hcd
[  407.645695][T10913] syzkaller0: entered promiscuous mode
[  407.655852][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  407.667474][T10913] syzkaller0: entered allmulticast mode
[  408.160192][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'.
[  408.260956][T10918] 8021q: adding VLAN 0 to HW filter on device bond4
[  408.382317][   T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  408.586749][T10921] bond4: (slave macvlan1): Enslaving as an active interface with an up link
[  408.599934][ T5835] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  408.639523][ T1551] usb 3-1: unable to get BOS descriptor or descriptor too short
[  408.655529][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.662186][ T1551] usb 3-1: unable to read config index 0 descriptor/start: -71
[  408.675631][ T1551] usb 3-1: can't read configurations, error -71
[  408.716927][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.779100][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  408.811085][ T5814] usb 4-1: USB disconnect, device number 56
[  408.848890][   T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  408.870587][T10926] ptrace attach of "./syz-executor exec"[5845] was attempted by " ��      ��      �      ��      ��      ��      ��              ��      ��      ��                 ����E                        \x09   B                                                                                             @   �B                                                                                                                                                                                                                                                                                                                                               /dev/kvm                                                                                                                        /dev/kvm                                                                                                                        /dev/kvm"[10926]
[  408.894679][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.119613][   T24] usb 1-1: config 0 descriptor??
[  409.270280][ T5892] usb 2-1: USB disconnect, device number 44
[  409.588093][   T24] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd
[  409.600630][   T24] hid_parser_main: 28 callbacks suppressed
[  409.600657][   T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  409.617172][   T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  409.625570][   T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  409.633698][   T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  409.641228][   T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  409.659396][   T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  409.792277][ T1551] usb 3-1: new low-speed USB device number 61 using dummy_hcd
[  409.808259][   T24] usb 1-1: USB disconnect, device number 55
[  410.063820][ T1551] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  410.259628][T10945] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  410.413228][ T1551] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  410.449208][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  410.476724][ T1551] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  410.488967][ T1551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  410.502847][ T1551] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  410.519946][ T1551] usb 3-1: language id specifier not provided by device, defaulting to English
[  410.534289][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'.
[  410.552197][ T1551] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  410.562300][ T1551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.576123][ T1551] usb 3-1: Manufacturer: 뾯땶㆗኷耆濬喰
[  410.591386][ T1551] usb 3-1: config 0 descriptor??
[  410.604010][T10936] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  410.614176][ T1551] hub 3-1:0.0: bad descriptor, ignoring hub
[  410.651197][ T1551] hub 3-1:0.0: probe with driver hub failed with error -5
[  410.675586][ T1551] input: 뾯땶㆗኷耆濬喰 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22
[  410.944248][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.955343][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.070213][ T5892] usb 3-1: USB disconnect, device number 61
[  411.092259][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  411.402377][   T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  411.570543][   T24] usb 1-1: config 0 has no interfaces?
[  411.577025][   T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  411.586205][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.608620][   T24] usb 1-1: config 0 descriptor??
[  411.828214][ T1551] usb 1-1: USB disconnect, device number 56
[  412.492124][   T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  412.782181][ T5814] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  412.813748][   T24] usb 1-1: config 0 has no interfaces?
[  412.819419][   T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  412.942326][ T5814] usb 2-1: device descriptor read/64, error -71
[  412.979697][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.004271][   T24] usb 1-1: config 0 descriptor??
[  413.182284][ T5814] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  413.251508][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'.
[  413.322190][ T5814] usb 2-1: device descriptor read/64, error -71
[  413.432891][ T5814] usb usb2-port1: attempt power cycle
[  413.628239][T11001] team_slave_1: Caught tx_queue_len zero misconfig
[  413.646772][T11001] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1485'.
[  413.772148][ T5814] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  413.802900][ T5814] usb 2-1: device descriptor read/8, error -71
[  413.972210][ T5892] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  414.130795][ T5814] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  414.202430][ T5892] usb 3-1: Using ep0 maxpacket: 16
[  414.221603][ T5892] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  414.223598][ T5814] usb 2-1: device descriptor read/8, error -71
[  414.304666][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.334647][ T5899] usb 1-1: USB disconnect, device number 57
[  414.340738][ T5892] usb 3-1: config 0 has no interface number 0
[  414.399726][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  414.415556][ T5814] usb usb2-port1: unable to enumerate USB device
[  414.428605][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.454902][ T5892] usb 3-1: Product: syz
[  414.472157][ T5892] usb 3-1: Manufacturer: syz
[  414.476908][ T5892] usb 3-1: SerialNumber: syz
[  414.557047][ T5892] usb 3-1: config 0 descriptor??
[  414.783477][ T5892] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  414.843909][ T5892] uvcvideo 3-1:0.105: No valid video chain found.
[  414.896403][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.906002][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.154436][ T5814] usb 3-1: USB disconnect, device number 62
[  415.409243][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'.
[  415.525364][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'.
[  416.055006][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'.
[  416.441431][ T5814] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  416.602157][ T5814] usb 1-1: Using ep0 maxpacket: 32
[  416.683892][ T5814] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  416.699728][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.712177][  T796] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  416.715508][ T5814] usb 1-1: Product: syz
[  416.739567][ T5814] usb 1-1: Manufacturer: syz
[  416.744634][T11047] netlink: 'syz.4.1498': attribute type 3 has an invalid length.
[  416.755797][ T5814] usb 1-1: SerialNumber: syz
[  416.773850][ T5814] usb 1-1: config 0 descriptor??
[  416.862173][  T796] usb 4-1: Using ep0 maxpacket: 32
[  416.869501][  T796] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  416.879377][  T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.928650][  T796] usb 4-1: config 0 descriptor??
[  416.955591][  T796] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  417.022344][ T5814] airspy 1-1:0.0: Board ID: 00
[  417.037545][ T5814] airspy 1-1:0.0: Firmware version: 
[  417.380744][ T5814] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e
[  417.401039][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'.
[  417.421121][ T5814] airspy 1-1:0.0: Registered as swradio24
[  417.461298][ T5814] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  417.521379][ T5814] usb 1-1: USB disconnect, device number 58
[  417.540021][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'.
[  417.702417][ T5931] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  417.853699][ T5931] usb 2-1: Using ep0 maxpacket: 8
[  417.876847][ T5931] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  417.900102][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.922092][ T5931] usb 2-1: Product: syz
[  417.926408][ T5931] usb 2-1: Manufacturer: syz
[  417.953260][ T5931] usb 2-1: SerialNumber: syz
[  417.964743][T11075] syzkaller1: entered promiscuous mode
[  417.970276][T11075] syzkaller1: entered allmulticast mode
[  417.988895][ T5931] usb 2-1: config 0 descriptor??
[  418.006216][ T5931] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  418.017552][T11077] netlink: 'syz.0.1509': attribute type 10 has an invalid length.
[  418.047845][T11077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1509'.
[  418.138108][T11082] Invalid logical block size (65025)
[  418.354455][T11090] netlink: 'syz.2.1514': attribute type 1 has an invalid length.
[  418.538044][T11090] bond2: entered promiscuous mode
[  418.552594][T11090] 8021q: adding VLAN 0 to HW filter on device bond2
[  418.572382][  T796] gspca_vc032x: reg_w err -110
[  418.577326][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.589858][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.622366][ T5814] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  418.632492][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.640125][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.646052][T11090] macvtap1: entered allmulticast mode
[  418.651544][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.657421][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.674882][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.691378][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.697622][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.739878][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.750895][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.760106][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.768417][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.776799][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.786131][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.792336][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.798000][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.804343][  T796] gspca_vc032x: I2c Bus Busy Wait 00
[  418.811203][  T796] gspca_vc032x: Unknown sensor...
[  418.826506][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.852275][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  418.879445][  T796] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  418.891167][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.922798][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  418.960776][ T5814] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  418.992115][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.052772][ T5814] usb 5-1: config 0 descriptor??
[  419.708280][T11104] capability: warning: `syz.4.1513' uses deprecated v2 capabilities in a way that may be insecure
[  419.724787][T11104] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.842216][ T5931] gspca_sonixj: i2c_w8 err -110
[  419.882278][ T5931] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  420.028297][ T5931] usb 4-1: USB disconnect, device number 57
[  420.316196][T11117] netlink: 'syz.3.1522': attribute type 4 has an invalid length.
[  420.325363][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'.
[  420.511895][T11122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1523'.
[  421.550308][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'.
[  421.756312][T11147] xt_CT: No such helper "syz0"
[  421.882254][   T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  422.020624][ T5892] usb 2-1: USB disconnect, device number 49
[  422.042535][   T24] usb 1-1: Using ep0 maxpacket: 16
[  422.068870][   T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  422.080896][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.098278][   T24] usb 1-1: config 0 has no interface number 0
[  422.138584][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  422.149154][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.182470][   T24] usb 1-1: Product: syz
[  422.193445][   T24] usb 1-1: Manufacturer: syz
[  422.200484][   T24] usb 1-1: SerialNumber: syz
[  422.222379][ T5899] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  422.238784][   T24] usb 1-1: config 0 descriptor??
[  422.326541][ T5814] usbhid 5-1:0.0: can't add hid device: -71
[  422.347259][ T5814] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  422.363304][ T5814] usb 5-1: USB disconnect, device number 59
[  422.380257][ T5899] usb 3-1: Using ep0 maxpacket: 16
[  422.406289][ T5899] usb 3-1: config 0 has an invalid interface number: 32 but max is 7
[  422.425943][ T5899] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  422.451909][ T5899] usb 3-1: config 0 has no interface number 0
[  422.469357][   T24] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  422.518748][ T5899] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  422.519048][T11160] loop4: detected capacity change from 0 to 7
[  422.534967][   T24] uvcvideo 1-1:0.105: No valid video chain found.
[  422.538170][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.626497][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'.
[  423.095260][T11160] buffer_io_error: 6 callbacks suppressed
[  423.095273][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.124263][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'.
[  423.134859][ T5899] usb 3-1: Product: syz
[  423.139086][ T5899] usb 3-1: Manufacturer: syz
[  423.144239][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.155856][ T5892] usb 1-1: USB disconnect, device number 59
[  423.163242][ T5899] usb 3-1: SerialNumber: syz
[  423.189222][ T5899] usb 3-1: config 0 descriptor??
[  423.205625][ T5899] ftdi_sio 3-1:0.32: FTDI USB Serial Device converter detected
[  423.217546][ T5899] usb 3-1: Detected FT232R
[  423.225580][T11164] Invalid logical block size (4)
[  423.250451][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.274206][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.286325][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.295379][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.303615][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.318188][T11160] ldm_validate_partition_table(): Disk read failed.
[  423.332796][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.351288][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.374587][T11160] Buffer I/O error on dev loop4, logical block 0, async page read
[  423.419243][ T5899] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  423.432690][T11160] Dev loop4: unable to read RDB block 0
[  423.439667][T11160]  loop4: unable to read partition table
[  423.452226][T11160] loop4: partition table beyond EOD, truncated
[  423.458800][T11160] loop_reread_partitions: partition scan of loop4 (���������S�j��	���%��`��ր����5) failed (rc=-5)
[  423.639948][ T5899] ftdi_sio 3-1:0.32: GPIO initialisation failed: -5
[  423.649877][ T5899] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  423.855970][ T5814] usb 3-1: USB disconnect, device number 63
[  423.879763][ T5814] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  423.921588][ T5814] ftdi_sio 3-1:0.32: device disconnected
[  424.066413][T11181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1542'.
[  424.108586][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'.
[  424.143036][T11181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1542'.
[  424.150970][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1541'.
[  424.177826][T11182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1542'.
[  424.254038][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  424.263325][T11187] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  424.278289][T11187] netlink: zone id is out of range
[  424.283954][T11187] netlink: zone id is out of range
[  424.300892][T11187] netlink: zone id is out of range
[  424.310714][T11187] netlink: zone id is out of range
[  424.316672][T11187] netlink: zone id is out of range
[  424.323437][T11187] netlink: zone id is out of range
[  424.328771][T11187] netlink: zone id is out of range
[  424.362918][T11187] netlink: zone id is out of range
[  424.368908][T11187] netlink: get zone limit has 4 unknown bytes
[  424.652173][ T5899] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  424.708230][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'.
[  424.932582][ T5899] usb 5-1: Using ep0 maxpacket: 32
[  425.012240][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  425.023451][ T5899] usb 5-1: config 0 has no interfaces?
[  425.041659][ T5899] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  425.057852][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.083059][ T5899] usb 5-1: Product: syz
[  425.099913][ T5899] usb 5-1: Manufacturer: syz
[  425.107274][T11218] FAULT_INJECTION: forcing a failure.
[  425.107274][T11218] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  425.140852][ T5899] usb 5-1: SerialNumber: syz
[  425.155991][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.3.1553 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.156027][T11218] Tainted: [L]=SOFTLOCKUP
[  425.156034][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  425.156046][T11218] Call Trace:
[  425.156054][T11218]  <TASK>
[  425.156063][T11218]  dump_stack_lvl+0xe8/0x150
[  425.156097][T11218]  should_fail_ex+0x412/0x560
[  425.156143][T11218]  _copy_to_user+0x31/0xb0
[  425.156171][T11218]  simple_read_from_buffer+0xe1/0x170
[  425.156205][T11218]  proc_fail_nth_read+0x1bb/0x230
[  425.156245][T11218]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  425.156279][T11218]  ? rw_verify_area+0x2a6/0x4d0
[  425.156300][T11218]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  425.156330][T11218]  vfs_read+0x20c/0xa70
[  425.156350][T11218]  ? fdget_pos+0x246/0x320
[  425.156373][T11218]  ? __pfx___mutex_lock+0x10/0x10
[  425.156401][T11218]  ? __pfx_vfs_read+0x10/0x10
[  425.156424][T11218]  ? __fget_files+0x2a/0x420
[  425.156446][T11218]  ? __fget_files+0x3a0/0x420
[  425.156464][T11218]  ? __fget_files+0x2a/0x420
[  425.156491][T11218]  ksys_read+0x150/0x270
[  425.156516][T11218]  ? __pfx_ksys_read+0x10/0x10
[  425.156550][T11218]  do_syscall_64+0x14d/0xf80
[  425.156574][T11218]  ? trace_irq_disable+0x3b/0x150
[  425.156593][T11218]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.156614][T11218]  ? clear_bhb_loop+0x40/0x90
[  425.156639][T11218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.156659][T11218] RIP: 0033:0x7f7fe2d5d04e
[  425.156679][T11218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  425.156697][T11218] RSP: 002b:00007f7fe3d23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  425.156720][T11218] RAX: ffffffffffffffda RBX: 00007f7fe3d246c0 RCX: 00007f7fe2d5d04e
[  425.156735][T11218] RDX: 000000000000000f RSI: 00007f7fe3d240a0 RDI: 0000000000000004
[  425.156749][T11218] RBP: 00007f7fe3d24090 R08: 0000000000000000 R09: 0000000000000000
[  425.156762][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.156774][T11218] R13: 00007f7fe3016038 R14: 00007f7fe3015fa0 R15: 00007f7fe313fa48
[  425.156808][T11218]  </TASK>
[  425.161540][ T5899] usb 5-1: config 0 descriptor??
[  426.088509][T11232] netlink: 'syz.2.1557': attribute type 62 has an invalid length.
[  426.355433][T11236] syzkaller0: entered promiscuous mode
[  426.377860][T11236] syzkaller0: entered allmulticast mode
[  426.745385][ T5931] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  426.782719][ T5814] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  426.822168][ T5892] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  426.942167][ T5814] usb 2-1: Using ep0 maxpacket: 8
[  426.947821][ T5931] usb 3-1: Using ep0 maxpacket: 16
[  426.965764][ T5931] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  426.974361][ T5814] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32
[  426.992106][ T5931] usb 3-1: config 0 has no interface number 0
[  426.998548][ T5814] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73
[  427.013887][ T5892] usb 1-1: Using ep0 maxpacket: 16
[  427.014211][ T5931] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  427.042350][ T5814] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  427.059555][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.061644][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  427.088185][ T5931] usb 3-1: Product: syz
[  427.088943][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  427.104315][ T5931] usb 3-1: Manufacturer: syz
[  427.107346][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  427.111991][ T5814] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  427.118938][ T5892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  427.144422][ T5931] usb 3-1: SerialNumber: syz
[  427.144416][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  427.168878][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.182869][ T5892] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  427.198156][ T5814] usb 2-1: Product: syz
[  427.198174][ T5892] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  427.198199][ T5892] usb 1-1: Manufacturer: syz
[  427.225137][ T5931] usb 3-1: config 0 descriptor??
[  427.225303][ T5892] usb 1-1: config 0 descriptor??
[  427.240487][ T5814] usb 2-1: Manufacturer: syz
[  427.249252][ T5814] usb 2-1: SerialNumber: syz
[  427.263468][ T5931] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  427.502284][ T5892] rc_core: IR keymap rc-hauppauge not found
[  427.508454][ T5892] Registered IR keymap rc-empty
[  427.534483][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.562880][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.596687][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  427.611827][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23
[  427.629328][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.652771][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.672310][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.743046][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.838025][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.872716][ T5814] snd-usb-audio 2-1:65.0: probe with driver snd-usb-audio failed with error -71
[  427.911660][ T5931] gspca_spca1528: reg_w err -71
[  427.922237][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.942378][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.960715][ T5931] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  427.974289][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  427.997624][ T5814] usb 2-1: USB disconnect, device number 50
[  428.007838][ T5931] usb 3-1: USB disconnect, device number 64
[  428.012291][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  428.165446][ T5892] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  428.197331][ T5892] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  428.205708][ T5892] mceusb 1-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[  428.277260][ T5892] usb 1-1: USB disconnect, device number 60
[  428.311990][ T5899] usb 5-1: USB disconnect, device number 60
[  428.651254][T11259] __nla_validate_parse: 1 callbacks suppressed
[  428.651277][T11259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1564'.
[  428.682386][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'.
[  428.702291][T11259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1564'.
[  428.962156][ T5814] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  429.093786][T11267] ip6gre1: entered promiscuous mode
[  429.099074][T11267] ip6gre1: entered allmulticast mode
[  429.122201][ T5814] usb 5-1: Using ep0 maxpacket: 16
[  429.139098][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.148551][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  429.182718][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.193029][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.203061][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 49, changing to 7
[  429.376600][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26209, setting to 1024
[  429.468295][ T5814] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  429.487896][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.505106][ T5814] usb 5-1: Product: syz
[  429.618539][ T5814] usb 5-1: Manufacturer: syz
[  429.624070][ T5814] usb 5-1: SerialNumber: syz
[  429.676453][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'.
[  429.799606][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  430.061126][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  430.150371][T11283] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  430.382234][ T5814] usb 5-1: config 0 descriptor??
[  430.421182][ T5814] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  430.446863][T11285] netlink: 'syz.3.1572': attribute type 29 has an invalid length.
[  430.485218][ T5814] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  430.486502][T11285] syzkaller0: entered promiscuous mode
[  430.510512][T11285] syzkaller0: entered allmulticast mode
[  431.117679][ T5814] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  431.127459][ T5814] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  431.278216][ T5931] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  431.341522][ T5814] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  431.349876][ T5814] em28xx 5-1:0.0: No AC97 audio processor
[  431.462433][ T5931] usb 3-1: Using ep0 maxpacket: 32
[  431.477571][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  431.490732][ T5931] usb 3-1: config 0 has no interfaces?
[  431.500680][ T5931] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  431.520493][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.538958][ T5931] usb 3-1: Product: syz
[  431.600014][ T5931] usb 3-1: Manufacturer: syz
[  431.618483][ T5931] usb 3-1: SerialNumber: syz
[  431.635706][ T5931] usb 3-1: config 0 descriptor??
[  432.039766][T11302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1576'.
[  432.555103][T11305] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  432.756522][ T5814] usb 5-1: USB disconnect, device number 61
[  432.763839][ T5814] em28xx 5-1:0.0: Disconnecting em28xx
[  432.875518][ T5814] em28xx 5-1:0.0: Freeing device
[  433.121313][T11311] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1580'.
[  433.252251][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  433.439918][ T5892] usb 3-1: USB disconnect, device number 65
[  433.472786][T11317] loop8: detected capacity change from 0 to 8
[  433.480222][T11317] Dev loop8: unable to read RDB block 8
[  433.512268][T11317]  loop8: unable to read partition table
[  433.532509][T11317] loop8: partition table beyond EOD, truncated
[  433.572325][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  433.572411][T11317] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  434.603934][ T5892] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  434.622402][ T5814] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  434.766786][T11360] FAULT_INJECTION: forcing a failure.
[  434.766786][T11360] name failslab, interval 1, probability 0, space 0, times 0
[  434.780479][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  434.795071][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short
[  434.806728][ T5892] usb 3-1: config 244 has an invalid interface number: 68 but max is 0
[  434.825605][ T5892] usb 3-1: config 244 has no interface number 0
[  434.835757][ T5892] usb 3-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  434.872896][ T5892] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  434.904358][T11360] CPU: 1 UID: 0 PID: 11360 Comm: syz.4.1598 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  434.904385][T11360] Tainted: [L]=SOFTLOCKUP
[  434.904390][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  434.904398][T11360] Call Trace:
[  434.904403][T11360]  <TASK>
[  434.904409][T11360]  dump_stack_lvl+0xe8/0x150
[  434.904431][T11360]  should_fail_ex+0x412/0x560
[  434.904452][T11360]  should_failslab+0xa8/0x100
[  434.904470][T11360]  __kmalloc_noprof+0xe8/0x760
[  434.904484][T11360]  ? format_decode+0xd0/0xe10
[  434.904495][T11360]  ? fib6_info_alloc+0x30/0xf0
[  434.904514][T11360]  fib6_info_alloc+0x30/0xf0
[  434.904527][T11360]  ip6_route_info_create+0x142/0x860
[  434.904541][T11360]  ? bpf_lsm_capable+0x9/0x20
[  434.904560][T11360]  ip6_route_add+0x49/0x1b0
[  434.904579][T11360]  ipv6_route_ioctl+0x3ac/0x4f0
[  434.904608][T11360]  ? __pfx_ipv6_route_ioctl+0x10/0x10
[  434.904659][T11360]  inet6_ioctl+0x246/0x2e0
[  434.904686][T11360]  ? __pfx_inet6_ioctl+0x10/0x10
[  434.904711][T11360]  ? tomoyo_path_number_perm+0x219/0x630
[  434.904747][T11360]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  434.904779][T11360]  sock_do_ioctl+0x101/0x320
[  434.904813][T11360]  ? __pfx_sock_do_ioctl+0x10/0x10
[  434.904839][T11360]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  434.904883][T11360]  sock_ioctl+0x5c6/0x7f0
[  434.904913][T11360]  ? __pfx_sock_ioctl+0x10/0x10
[  434.904941][T11360]  ? __fget_files+0x2a/0x420
[  434.904959][T11360]  ? __fget_files+0x3a0/0x420
[  434.904975][T11360]  ? __fget_files+0x2a/0x420
[  434.904996][T11360]  ? bpf_lsm_file_ioctl+0x9/0x20
[  434.905031][T11360]  ? __pfx_sock_ioctl+0x10/0x10
[  434.905058][T11360]  __se_sys_ioctl+0xfc/0x170
[  434.905085][T11360]  do_syscall_64+0x14d/0xf80
[  434.905110][T11360]  ? trace_irq_disable+0x3b/0x150
[  434.905128][T11360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.905149][T11360]  ? clear_bhb_loop+0x40/0x90
[  434.905174][T11360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.905194][T11360] RIP: 0033:0x7fcd5df9c819
[  434.905215][T11360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.905232][T11360] RSP: 002b:00007fcd5edbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  434.905255][T11360] RAX: ffffffffffffffda RBX: 00007fcd5e215fa0 RCX: 00007fcd5df9c819
[  434.905269][T11360] RDX: 0000200000000400 RSI: 000000000000890b RDI: 0000000000000003
[  434.905282][T11360] RBP: 00007fcd5edbb090 R08: 0000000000000000 R09: 0000000000000000
[  434.905295][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.905306][T11360] R13: 00007fcd5e216038 R14: 00007fcd5e215fa0 R15: 00007fcd5e33fa48
[  434.905339][T11360]  </TASK>
[  435.193473][ T5892] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  435.205152][ T5892] usb 3-1: config 244 interface 68 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  435.216647][ T5892] usb 3-1: config 244 interface 68 has no altsetting 0
[  435.250725][ T5892] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  435.260407][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.270190][ T5892] usb 3-1: Product: syz
[  435.276093][ T5892] usb 3-1: Manufacturer: syz
[  435.281383][ T5892] usb 3-1: SerialNumber: syz
[  435.679118][T11364] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  435.795327][   T29] audit: type=1400 audit(1774979253.858:53): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11361 comm="syz.4.1599"
[  436.202145][ T5814] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  436.383956][ T5814] usb 2-1: Using ep0 maxpacket: 32
[  436.563880][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.604554][ T5814] usb 2-1: config 0 has no interfaces?
[  436.696934][T11379] syzkaller0: entered promiscuous mode
[  436.702742][T11379] syzkaller0: entered allmulticast mode
[  436.812425][ T5814] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  436.848858][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.881507][ T5814] usb 2-1: Product: syz
[  436.892313][ T5814] usb 2-1: Manufacturer: syz
[  436.896994][ T5814] usb 2-1: SerialNumber: syz
[  436.955986][ T5814] usb 2-1: config 0 descriptor??
[  437.020112][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'.
[  437.065788][T11383] bond0: option arp_all_targets: invalid value (172)
[  437.745301][ T5892] comedi comedi5: Wrong number of endpoints
[  437.811249][ T5892] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device.
[  437.939305][ T5892] usb 3-1: USB disconnect, device number 66
[  438.051045][T11396] netlink: 'syz.4.1609': attribute type 11 has an invalid length.
[  438.063906][T11396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1609'.
[  438.110414][T11396] kAFS: unable to lookup cell '�'
[  438.132973][T11396] kAFS: unable to lookup cell '(,c��'
[  438.282553][ T5892] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  438.487018][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.546449][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  438.572237][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.611225][ T5892] usb 3-1: Product: syz
[  438.774487][T11406] netlink: 'syz.3.1611': attribute type 11 has an invalid length.
[  438.851174][ T5892] usb 3-1: Manufacturer: syz
[  438.893963][ T5892] usb 3-1: SerialNumber: syz
[  439.226405][ T5892] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[  439.233791][ T5892] cdc_ncm 3-1:1.0: bind() failure
[  439.267159][ T5892] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  439.295972][ T5892] cdc_ncm 3-1:1.1: bind() failure
[  439.316432][ T5892] usb 3-1: USB disconnect, device number 67
[  439.480690][T11414] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  439.545697][T11414] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  439.917787][ T5931] usb 2-1: USB disconnect, device number 52
[  440.238913][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'.
[  440.582610][T11438] lo: entered allmulticast mode
[  440.621812][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.632392][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.689255][T11436] lo: left allmulticast mode
[  441.236306][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'.
[  441.412735][ T5892] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  441.588974][ T5892] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  441.597490][ T5892] usb 4-1: config 0 has no interface number 0
[  441.614574][ T5892] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.656107][ T5892] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.696090][ T5892] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  441.710464][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.735229][ T5892] usb 4-1: config 0 descriptor??
[  441.892295][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  442.404981][T11464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1624'.
[  442.500665][ T5892] prodikeys 0003:041E:2801.0016: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[  442.514528][ T5892] hid_prodikeys: hid-prodikeys: failed to find output report
[  442.514528][ T5892] 
[  442.572535][ T5892] usb 4-1: USB disconnect, device number 58
[  442.641122][T11469] fido_id[11469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  443.090445][T11476] netlink: zone id is out of range
[  443.150935][T11476] netlink: zone id is out of range
[  443.211270][T11476] netlink: zone id is out of range
[  443.242596][T11476] netlink: zone id is out of range
[  443.248441][T11476] netlink: zone id is out of range
[  443.259201][T11476] netlink: zone id is out of range
[  443.267100][T11476] netlink: zone id is out of range
[  443.321683][T11476] netlink: zone id is out of range
[  443.333209][T11476] netlink: zone id is out of range
[  443.338462][T11476] netlink: zone id is out of range
[  443.472910][T11490] netlink: 'syz.2.1631': attribute type 7 has an invalid length.
[  443.472943][T11490] netlink: 'syz.2.1631': attribute type 8 has an invalid length.
[  443.535065][ T5892] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  443.692494][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  443.702370][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  443.788329][ T5892] usb 5-1: config 0 has no interfaces?
[  443.803945][ T5892] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  443.817837][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.832410][   T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  443.850121][ T5892] usb 5-1: Product: syz
[  443.859996][ T5892] usb 5-1: Manufacturer: syz
[  444.081110][   T24] usb 3-1: device descriptor read/64, error -71
[  444.102063][ T5892] usb 5-1: SerialNumber: syz
[  444.154294][ T5892] usb 5-1: config 0 descriptor??
[  444.298493][T11500] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  444.492470][   T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  444.572447][ T5892] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  444.602849][T11506] netlink: 'syz.1.1636': attribute type 62 has an invalid length.
[  444.632775][   T24] usb 3-1: device descriptor read/64, error -71
[  444.748082][ T5892] usb 1-1: Using ep0 maxpacket: 8
[  444.763961][   T24] usb usb3-port1: attempt power cycle
[  444.776344][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.791579][ T5892] usb 1-1: config 0 has no interfaces?
[  444.812005][ T5892] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  444.834021][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.853986][ T5892] usb 1-1: Product: syz
[  444.901417][ T5892] usb 1-1: Manufacturer: syz
[  444.914743][ T5892] usb 1-1: SerialNumber: syz
[  445.372176][   T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  445.601498][   T24] usb 3-1: device descriptor read/8, error -71
[  445.639474][   T29] audit: type=1800 audit(1774979263.708:54): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1638" name="[kvm-gmem]" dev="guest_memfd" ino=41725 res=0 errno=0
[  445.678852][ T5892] usb 1-1: config 0 descriptor??
[  446.021167][   T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  446.125409][   T24] usb 3-1: device descriptor read/8, error -71
[  446.242932][   T24] usb usb3-port1: unable to enumerate USB device
[  446.311352][T11523] binder: 11520:11523 ioctl c0306201 0 returned -14
[  446.594960][ T5931] usb 5-1: USB disconnect, device number 62
[  446.643764][   T24] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  446.815301][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'.
[  446.832592][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  446.842523][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  446.857565][   T24] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  446.885698][   T24] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00
[  446.898966][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.912178][  T796] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  446.952083][   T24] usb 4-1: Product: syz
[  446.958920][   T24] usb 4-1: Manufacturer: syz
[  446.969469][   T24] usb 4-1: SerialNumber: syz
[  447.042764][  T796] usb 2-1: device descriptor read/64, error -71
[  447.085980][T11527] 8021q: adding VLAN 0 to HW filter on device bond3
[  447.133605][T11529] bond3: (slave macvlan1): Enslaving as an active interface with an up link
[  447.228457][   T24] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22
[  447.254704][   T24] usb 4-1: USB disconnect, device number 59
[  447.303042][ T5931] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  447.312896][  T796] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  447.350846][ T5899] usb 1-1: USB disconnect, device number 61
[  447.452574][  T796] usb 2-1: device descriptor read/64, error -71
[  447.455295][ T5931] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30
[  447.471184][ T5931] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  447.482629][ T5931] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  447.498321][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0
[  447.506302][ T5931] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.00
[  447.516166][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.527637][ T5931] usb 5-1: config 0 descriptor??
[  447.539070][T11533] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  447.562564][  T796] usb usb2-port1: attempt power cycle
[  447.806683][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.820079][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.899653][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.909754][  T796] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  447.912738][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.932834][  T796] usb 2-1: device descriptor read/8, error -71
[  447.957832][ T5931] usbhid 5-1:0.0: can't add hid device: -71
[  447.968196][ T5931] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  447.981438][ T5931] usb 5-1: USB disconnect, device number 63
[  448.033405][ T5814] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  448.137718][T11551] syzkaller1: entered promiscuous mode
[  448.143417][T11551] syzkaller1: entered allmulticast mode
[  448.172885][ T5814] usb 4-1: device descriptor read/64, error -71
[  448.182519][  T796] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  448.203405][  T796] usb 2-1: device descriptor read/8, error -71
[  448.314021][  T796] usb usb2-port1: unable to enumerate USB device
[  448.412164][ T5814] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  448.552289][ T5814] usb 4-1: device descriptor read/64, error -71
[  448.667625][ T5814] usb usb4-port1: attempt power cycle
[  448.776021][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802b346400: rx timeout, send abort
[  448.785097][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b346400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  449.210338][ T5814] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  449.255653][ T5814] usb 4-1: device descriptor read/8, error -71
[  449.395751][T11566] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  449.552336][ T5814] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  449.573019][ T5814] usb 4-1: device descriptor read/8, error -71
[  449.689186][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'.
[  449.692585][ T5814] usb usb4-port1: unable to enumerate USB device
[  449.698809][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'.
[  449.753853][T11568] bridge0: entered promiscuous mode
[  449.760363][T11568] ip6gretap0: entered promiscuous mode
[  449.770835][   T13] 
[  449.773224][   T13] ============================================
[  449.779476][   T13] WARNING: possible recursive locking detected
[  449.785834][   T13] syzkaller #0 Tainted: G             L     
[  449.791915][   T13] --------------------------------------------
[  449.798225][   T13] kworker/u8:1/13 is trying to acquire lock:
[  449.804316][   T13] ffff888034194fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  449.813573][   T13] 
[  449.813573][   T13] but task is already holding lock:
[  449.821040][   T13] ffff888034eacfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  449.830108][   T13] 
[  449.830108][   T13] other info that might help us debug this:
[  449.838419][   T13]  Possible unsafe locking scenario:
[  449.838419][   T13] 
[  449.846058][   T13]        CPU0
[  449.849373][   T13]        ----
[  449.852860][   T13]   lock(&hsr->seqnr_lock);
[  449.857389][   T13]   lock(&hsr->seqnr_lock);
[  449.861916][   T13] 
[  449.861916][   T13]  *** DEADLOCK ***
[  449.861916][   T13] 
[  449.870064][   T13]  May be due to missing lock nesting notation
[  449.870064][   T13] 
[  449.878407][   T13] 13 locks held by kworker/u8:1/13:
[  449.883624][   T13]  #0: ffff888032a39948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  449.895298][   T13]  #1: ffffc90000127c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  449.909227][   T13]  #2: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  449.918853][   T13]  #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670
[  449.928471][   T13]  #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  449.937563][   T13]  #5: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[  449.947779][   T13]  #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  449.957031][   T13]  #7: ffff888034eacfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  449.966622][   T13]  #8: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860
[  449.976423][   T13]  #9: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[  449.987004][   T13]  #10: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980
[  449.996340][   T13]  #11: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[  450.006768][   T13]  #12: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  450.016717][   T13] 
[  450.016717][   T13] stack backtrace:
[  450.023519][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  450.023542][   T13] Tainted: [L]=SOFTLOCKUP
[  450.023547][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  450.023556][   T13] Workqueue: ipv6_addrconf addrconf_dad_work
[  450.023575][   T13] Call Trace:
[  450.023583][   T13]  <TASK>
[  450.023588][   T13]  dump_stack_lvl+0xe8/0x150
[  450.023611][   T13]  print_deadlock_bug+0x279/0x290
[  450.023630][   T13]  __lock_acquire+0x253f/0x2cf0
[  450.023647][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  450.023661][   T13]  ? unwind_next_frame+0xa5/0x23c0
[  450.023677][   T13]  ? unwind_next_frame+0x1aaf/0x23c0
[  450.023694][   T13]  lock_acquire+0xf0/0x2e0
[  450.023708][   T13]  ? hsr_dev_xmit+0x237/0x360
[  450.023726][   T13]  ? hsr_dev_xmit+0x237/0x360
[  450.023742][   T13]  _raw_spin_lock_bh+0x36/0x50
[  450.023757][   T13]  ? hsr_dev_xmit+0x237/0x360
[  450.023773][   T13]  hsr_dev_xmit+0x237/0x360
[  450.023789][   T13]  ? hsr_dev_xmit+0x2d/0x360
[  450.023805][   T13]  dev_hard_start_xmit+0x2d8/0x870
[  450.023823][   T13]  __dev_queue_xmit+0x16d1/0x3890
[  450.023839][   T13]  ? __dev_queue_xmit+0x277/0x3890
[  450.023854][   T13]  ? lockdep_hardirqs_on+0x7a/0x110
[  450.023868][   T13]  ? ebt_do_table+0x2665/0x2830
[  450.023878][   T13]  ? __local_bh_enable_ip+0xd0/0x130
[  450.023893][   T13]  ? ebt_do_table+0x2665/0x2830
[  450.023904][   T13]  ? __pfx___dev_queue_xmit+0x10/0x10
[  450.023930][   T13]  ? br_nf_post_routing+0x219/0xfe0
[  450.023949][   T13]  br_dev_queue_push_xmit+0x370/0x4a0
[  450.023965][   T13]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  450.023980][   T13]  NF_HOOK+0x360/0x3f0
[  450.023995][   T13]  ? NF_HOOK+0xa2/0x3f0
[  450.024009][   T13]  ? __pfx_NF_HOOK+0x10/0x10
[  450.024023][   T13]  ? ret_from_fork+0x51e/0xb90
[  450.024038][   T13]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  450.024055][   T13]  br_forward_finish+0xd3/0x130
[  450.024069][   T13]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  450.024084][   T13]  ? __pfx_br_forward_finish+0x10/0x10
[  450.024098][   T13]  NF_HOOK+0x360/0x3f0
[  450.024114][   T13]  ? NF_HOOK+0xa2/0x3f0
[  450.024127][   T13]  ? __pfx_NF_HOOK+0x10/0x10
[  450.024142][   T13]  ? __pfx_br_forward_finish+0x10/0x10
[  450.024157][   T13]  ? __skb_clone+0x483/0x7a0
[  450.024173][   T13]  ? br_handle_vlan+0x61/0x530
[  450.024191][   T13]  __br_forward+0x397/0x540
[  450.024205][   T13]  ? __pfx_br_forward_finish+0x10/0x10
[  450.024220][   T13]  br_flood+0x6ee/0xb80
[  450.024238][   T13]  ? br_dev_xmit+0x193/0x1980
[  450.024249][   T13]  br_dev_xmit+0x12bd/0x1980
[  450.024260][   T13]  ? br_dev_xmit+0x193/0x1980
[  450.024272][   T13]  ? __pfx_br_dev_xmit+0x10/0x10
[  450.024283][   T13]  ? __skb_get_hash_net+0x13f/0x2e0
[  450.024297][   T13]  ? __pfx___skb_get_hash_net+0x10/0x10
[  450.024311][   T13]  ? qdisc_pkt_len_segs_init+0x2c4/0x970
[  450.024327][   T13]  ? skb_network_protocol+0x23d/0x3f0
[  450.024342][   T13]  ? __pfx_passthru_features_check+0x10/0x10
[  450.024358][   T13]  dev_hard_start_xmit+0x2d8/0x870
[  450.024375][   T13]  __dev_queue_xmit+0x16d1/0x3890
[  450.024392][   T13]  ? __dev_queue_xmit+0x277/0x3890
[  450.024407][   T13]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  450.024422][   T13]  ? __pfx___dev_queue_xmit+0x10/0x10
[  450.024437][   T13]  ? __asan_memcpy+0x40/0x70
[  450.024448][   T13]  ? __pskb_copy_fclone+0x9c8/0xff0
[  450.024463][   T13]  ? __asan_memcpy+0x40/0x70
[  450.024473][   T13]  ? __pskb_copy_fclone+0x9c8/0xff0
[  450.024489][   T13]  ? hsr_create_tagged_frame+0x500/0xe10
[  450.024501][   T13]  ? __asan_memmove+0x40/0x70
[  450.024512][   T13]  ? hsr_create_tagged_frame+0x8cd/0xe10
[  450.024524][   T13]  ? hsr_addr_subst_dest+0x30d/0xa90
[  450.024542][   T13]  hsr_forward_skb+0x157b/0x2860
[  450.024554][   T13]  ? ret_from_fork_asm+0x1a/0x30
[  450.024572][   T13]  ? hsr_forward_skb+0xb3/0x2860
[  450.024584][   T13]  ? __pfx_hsr_forward_skb+0x10/0x10
[  450.024595][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.024607][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  450.024620][   T13]  ? hsr_dev_xmit+0x237/0x360
[  450.024636][   T13]  hsr_dev_xmit+0x242/0x360
[  450.024652][   T13]  ? hsr_dev_xmit+0x2d/0x360
[  450.024668][   T13]  dev_hard_start_xmit+0x2d8/0x870
[  450.024685][   T13]  __dev_queue_xmit+0x16d1/0x3890
[  450.024702][   T13]  ? __dev_queue_xmit+0x277/0x3890
[  450.024717][   T13]  ? ___neigh_create+0x1c5f/0x2280
[  450.024734][   T13]  ? __local_bh_enable_ip+0xd0/0x130
[  450.024749][   T13]  ? __pfx___dev_queue_xmit+0x10/0x10
[  450.024764][   T13]  ? neigh_connected_output+0x1ea/0x460
[  450.024776][   T13]  ? eth_header+0x11b/0x200
[  450.024790][   T13]  ? __asan_memcpy+0x40/0x70
[  450.024800][   T13]  ? eth_header+0x11b/0x200
[  450.024812][   T13]  ? __pfx_eth_header+0x10/0x10
[  450.024825][   T13]  ? neigh_connected_output+0x3b6/0x460
[  450.024838][   T13]  ? ip6_output+0x126/0x550
[  450.024850][   T13]  ip6_output+0x340/0x550
[  450.024862][   T13]  ? __pfx_ip6_output+0x10/0x10
[  450.024872][   T13]  ndisc_send_skb+0xd0b/0x1670
[  450.024888][   T13]  ? ndisc_send_skb+0x215/0x1670
[  450.024904][   T13]  ? __pfx_ndisc_send_skb+0x10/0x10
[  450.024925][   T13]  ? __pfx_dst_output+0x10/0x10
[  450.024940][   T13]  ? __asan_memcpy+0x40/0x70
[  450.024952][   T13]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  450.024965][   T13]  ? __mod_timer+0xb37/0xf30
[  450.024978][   T13]  ndisc_send_ns+0xd7/0x160
[  450.024994][   T13]  ? __pfx_ndisc_send_ns+0x10/0x10
[  450.025009][   T13]  ? addrconf_dad_work+0xa15/0x14c0
[  450.025020][   T13]  ? __local_bh_enable_ip+0xd0/0x130
[  450.025035][   T13]  addrconf_dad_work+0xac4/0x14c0
[  450.025047][   T13]  ? __pfx_addrconf_dad_work+0x10/0x10
[  450.025060][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  450.025075][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  450.025089][   T13]  process_scheduled_works+0xb6e/0x18c0
[  450.025109][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  450.025125][   T13]  ? assign_work+0x3d5/0x5e0
[  450.025140][   T13]  worker_thread+0xa53/0xfc0
[  450.025160][   T13]  kthread+0x388/0x470
[  450.025171][   T13]  ? __pfx_worker_thread+0x10/0x10
[  450.025185][   T13]  ? __pfx_kthread+0x10/0x10
[  450.025196][   T13]  ret_from_fork+0x51e/0xb90
[  450.025211][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  450.025225][   T13]  ? __switch_to+0xc7d/0x1450
[  450.025238][   T13]  ? __pfx_kthread+0x10/0x10
[  450.025248][   T13]  ret_from_fork_asm+0x1a/0x30
[  450.025268][   T13]  </TASK>
[  451.212297][ T5814] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  451.372171][ T5814] usb 1-1: Using ep0 maxpacket: 32
[  451.379042][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.389324][ T5814] usb 1-1: config 0 has no interfaces?
[  451.396740][ T5814] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  451.405903][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.414005][ T5814] usb 1-1: Product: syz
[  451.418200][ T5814] usb 1-1: Manufacturer: syz
[  451.423088][ T5814] usb 1-1: SerialNumber: syz
[  451.428966][ T5814] usb 1-1: config 0 descriptor??
[  452.756203][   T10] usb 1-1: USB disconnect, device number 62
[  455.982263][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  458.532236][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!