last executing test programs:

4m27.385304647s ago: executing program 3 (id=1758):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0xebe0c000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x0, 0xde5f, 0x6, 0x8, 0x0, 0xfffffffc, 0x80}, 0x9c)
r1 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}})

4m27.350960088s ago: executing program 3 (id=1759):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0xa0200)
dup3(r1, r0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x2000000, 0x0, 0x2}])

4m26.328194686s ago: executing program 3 (id=1765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fcc000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000000)="66baa00066b8006066efc4c2193bf9b805000000b97f0000000f01c1660fc7319ab40000008f00c744240000780000c744240200000080c7442406000000000f011c240f01cf66ba4100b8cb3c0000ef66ba210066b80b0066ef643e0f09", 0x5e}], 0x1, 0x43, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m26.153244924s ago: executing program 3 (id=1766):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
process_mrelease(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05404, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xf, 0x5, 0xc2ed, 0xfff9, 0x9, 0x7, 0xf51d, {0x0, @in6={{0xa, 0x4e20, 0x5, @empty, 0x9}}, 0x83, 0x8001, 0x2890, 0x2, 0xda5}}, &(0x7f0000000140)=0xb0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

4m26.137894015s ago: executing program 3 (id=1767):
mount$9p_virtio(0x0, 0x0, 0x0, 0x2, &(0x7f0000000000))
chroot(&(0x7f0000000040)='./file0\x00') (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r9, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000003700)=""/4080, 0xff0}, {&(0x7f0000001d40)=""/4090, 0xffa}], 0x7}, 0x32120) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) (async)
r10 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0)
renameat2(0xffffffffffffffff, 0x0, r10, 0x0, 0x2)

4m25.78091291s ago: executing program 3 (id=1770):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x54, 0x0, 0xffffffffffffffff, 0x78, 0x1000000000004, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x400000002, 0x2, 0x1000000000000000, 0x8000, 0x8})
syz_pidfd_open(r0, 0x0)
capset(&(0x7f0000000780)={0x19980330, r0}, &(0x7f00000007c0)={0x0, 0x806, 0x922, 0x4, 0xb, 0xffff})
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x20, 0x4, 0x9e, {0x9e, 0x10, "d21df7645a50da52fe4b8d3623253ae9fc1dcd087388a158158456683fb75d412ed4bfa7262ac9543b2506c6fe4f24bebcd6832f3bdb5925cc13091d5eb5c83fbefe22686382a41ec7f771ab48178c48bd456f8a6885f160caa34d47a7fd0f84efa506c2683cc957968182cd897ef0d1f251e76870725b131b0582e518b4d4de6184c09f398cfdd786783e2640f2c5eef5e18ccbb9803b8c08126245"}}, &(0x7f0000000800)=ANY=[@ANYBLOB="f40204000004030f04c24528a321a8903d2e709b8abba8407dbb3e15f2dd9dd8eb31b293cd0f2ef0e977ffe82282760600aa7e86041324352b7d3dcd2931ab1c955d1381bfba"], &(0x7f0000000140)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x54, 0xc, 0x0, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x4, 0xf000, 0x6, [0xff003f]}, @generic={0xe, 0x10, 0x1, "9133d5115194251dcd1df9"}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "c4e656a486c51be346ae977150dd3c11"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x10, 0x0, "10cdd39a", "3d9fdddf"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0x3, 0x6, 0x3, 0x0, 0x4}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x40, 0xe, 0x4d, "2dc42ab0ff5fc1d03d8f7cfeb76c3dea566d71a84ede7cd42cf42bb4dcdac3e8af53e06f24e667f0a9f87df32eabac2afe4f6ab43f7c95ef180a959146cfad2343e55b0a2bc5b9260ad5464d0a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1c00, 0xe0}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'kE'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="283a5475a04b"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x19, 0x2, "d1b6"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0x1e, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r5, 0x407, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r7, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b"], 0x114}}, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

4m25.607588886s ago: executing program 32 (id=1770):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x54, 0x0, 0xffffffffffffffff, 0x78, 0x1000000000004, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x400000002, 0x2, 0x1000000000000000, 0x8000, 0x8})
syz_pidfd_open(r0, 0x0)
capset(&(0x7f0000000780)={0x19980330, r0}, &(0x7f00000007c0)={0x0, 0x806, 0x922, 0x4, 0xb, 0xffff})
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x20, 0x4, 0x9e, {0x9e, 0x10, "d21df7645a50da52fe4b8d3623253ae9fc1dcd087388a158158456683fb75d412ed4bfa7262ac9543b2506c6fe4f24bebcd6832f3bdb5925cc13091d5eb5c83fbefe22686382a41ec7f771ab48178c48bd456f8a6885f160caa34d47a7fd0f84efa506c2683cc957968182cd897ef0d1f251e76870725b131b0582e518b4d4de6184c09f398cfdd786783e2640f2c5eef5e18ccbb9803b8c08126245"}}, &(0x7f0000000800)=ANY=[@ANYBLOB="f40204000004030f04c24528a321a8903d2e709b8abba8407dbb3e15f2dd9dd8eb31b293cd0f2ef0e977ffe82282760600aa7e86041324352b7d3dcd2931ab1c955d1381bfba"], &(0x7f0000000140)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x54, 0xc, 0x0, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x4, 0xf000, 0x6, [0xff003f]}, @generic={0xe, 0x10, 0x1, "9133d5115194251dcd1df9"}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "c4e656a486c51be346ae977150dd3c11"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x10, 0x0, "10cdd39a", "3d9fdddf"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0x3, 0x6, 0x3, 0x0, 0x4}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x40, 0xe, 0x4d, "2dc42ab0ff5fc1d03d8f7cfeb76c3dea566d71a84ede7cd42cf42bb4dcdac3e8af53e06f24e667f0a9f87df32eabac2afe4f6ab43f7c95ef180a959146cfad2343e55b0a2bc5b9260ad5464d0a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1c00, 0xe0}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'kE'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="283a5475a04b"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x19, 0x2, "d1b6"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0x1e, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r5, 0x407, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r7, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b"], 0x114}}, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

2m38.061562814s ago: executing program 0 (id=2339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x4}, 0x7}], 0x3, 0x2000, 0x0)

2m37.914562581s ago: executing program 0 (id=2342):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x642c03, 0x1, 0xf}, 0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20002, 0x100}, 0x18)
statx(r0, 0x0, 0x1000, 0x8, &(0x7f00000002c0))
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x80000000)
syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})

2m37.743092476s ago: executing program 0 (id=2344):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f0000000080)=[{0x20, 0x7f}, {0x6}]})
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0xc, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x40800)

2m36.740229952s ago: executing program 0 (id=2351):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x40000000000, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580), 0x2000040, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m36.692356941s ago: executing program 0 (id=2352):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x642c03, 0x1, 0xf}, 0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20002, 0x100}, 0x18)
statx(r0, 0x0, 0x1000, 0x8, &(0x7f00000002c0))
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x80000000)
syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})

2m35.671880108s ago: executing program 0 (id=2359):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
close_range(r0, 0xffffffffffffffff, 0x0)

2m35.401325419s ago: executing program 33 (id=2359):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
close_range(r0, 0xffffffffffffffff, 0x0)

48.200719826s ago: executing program 2 (id=2960):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x260, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x13, 0x6, "48281a41b0a550b4cf8748aa474f4e"}, @NFTA_TABLE_USERDATA={0xc3, 0x6, "da5d0b9926b76139ff2a3b9d89807a44af8054160dfb6d61f434545c35bbb89dbd865aa55a92b13a1240145244800b6c8b338a1772e568636491fde0c7e5b141e588ba8c0cf5b0f9708b8a21aa9ce1c707dcac2fe1ac9f23fa5d08601aabb1900edf541ff56b2cce797d8383c1e0b3a98380e664ff1064c5767011fac8ab5981d92bb33681f7857d9bc47383be76c6901ce10f7aa9f5a635be46a72a44354a964ce9e8176843a3c67adf05dea9db6158ff03e82a93cb7a324afae7434cb47f"}, @NFTA_TABLE_USERDATA={0x104, 0x6, "4a120144885ad848c3dff1a294fbfd14b8edd1e1b7fab4523627dbf4fb452668d069d2a7f09ea3934b6de329c301a6a24ff5592eb8f56d8c4cc86bba295b4f9c3ab8f040689df3bb7a549f1f3955866a4b3cc6931c1507f1d53427f210ed856274ad63d142657cea523e0f1c42c5f5dc380f63abd0acef2e2dff030000f7883b69de3a722aa499a37fbf06911141c8062a2fb71bad975d1c8bcbba117cc319b23865ff1aba8e49baadf4a37920540f169b794128c8e7cf52da5471b81dbf68891dd471ceeb80f97d38c96d3a5fe8feb740d305deb29831c0046fb94643e6f7ce92d83f9e134a7100"/256}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x66, 0x6, "80bd8580a5399753c299d24739d290fc0276f5fb2c704de1dc4e10654ec2810a133b55fbee96cbfc84a90bb7e36bdb663a59bf327d6c155cdb5f5755a8c9634779427d6f53160dfefab99a49a71ad8a0d753ff6f34934fb7e4c6f30cbd776402cf5d"}]}, @NFT_MSG_DELOBJ={0x118, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xcd, 0x8, "5531be2c918cedc13ac4c3dd644ce16c13156ba1125a749d091de6c324d850dff0d5aac35543d0295277d18f30377a31c402715f41e08bc55e9ce63dd6e75379486de5350ab40bf674cecc1da8c5290f387cd9ea19d92b83fcac9909e67a70fbfb4ccf911ab6f973dd2d5afec4dabade51693e6c140b105092c106253baa737f26de52e1ccdab8afbfb2313999e44908ebfcdf8925d1a04b728fc91784315a54b517d291a7b41e0586da56a8cdfb5bd4a506e36b86ae6fc1c49de30857afc40026fcaeb3bcb048853d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540)
r4 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0xffff, 0x400})
getsockname$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000380)=0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

47.435224559s ago: executing program 2 (id=2962):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
sendfile(r0, r2, &(0x7f0000000300)=0x5, 0xd25)
syz_open_dev$rtc(&(0x7f00000000c0), 0x7fff, 0x311801)
r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r4 = fcntl$dupfd(r3, 0x0, r0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494c)
write$binfmt_elf32(r5, &(0x7f00000003c0)=ANY=[], 0xffffffffffffff3d)
close(r5)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xa}, 0x6, 0x0, &(0x7f0000000540)="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", 0x1000, 0x1, 0xc, 0x0, 0x4, 0x0, &(0x7f0000000400)=':y%'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0)
flock(r1, 0x0)
mq_open(0x0, 0x42, 0x0, 0x0)
mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="6d2caaff899db11c2f8cab9c1b875b793c7b93b64d14f9da37c755ca9d6ebc268ce25288c224f6bbe801551ce0e89c528671304fc9fd3895ad1cb5e5fb9763e975a3b20b451c2780c2f6ee64a33b6877f7d4137e1a1d723e8c13d65914696893fc5d00467454e5247ec1f53857ab9c3d75160ca6443fec955e5067098fcd660ac79a13a44135055a09ee45fa7ed475b3624ac515425864d55014315d9cc18ca10529db31e2a81c9d7a77598bbc48ab9c4ebb627e8a4ca0a66f9bdf48b4bb0a7ff04db552c8206c04aa080e02032dd9f3aab62390b244f381f9dc6adf4343501273dd57bc3fde4e76f69a3b210f904ca99b", @ANYRES32=r0], 0x32600)
r8 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$sierra_net(r8, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000340)={{{0x5, 0x1}}, 0x4c, 0x1000, &(0x7f0000000200)="4549effa56a8703b70f8df81ffae204000c406c3e682f176b3f1f44a9b84eb7de41959054f935409cd493ebe2a47453346a4fd9f2ec09e55e20a1fc49ebc767399b42810e31e905c6fc88399"})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x8008af83, &(0x7f0000000000)={0x1})

43.921203699s ago: executing program 2 (id=2976):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="40161a00000004dd678e3d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
unshare(0x2020600)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, &(0x7f0000000080), 0x18)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x0, 0x98, {0x98, 0x23, "7804a34f6fc76eeaa11075fd5fb726588ca67e7d7fd4ac340a5cd43ba7b8bed1ae7bc580b15e4280f83addb32c0ba3a93930ce422f85ff53d3bb024451a107c742434e06c1e2d18d6e54d30bf29c04bb3baec08d87ea018f4f4a92c0027655a0d5fe2a3b822ab8007a3472eb44ce0189db72dfecf66954f4eccdd5d366b866112beba870c71dfde0be495e18719fb9a46159ed69cda7"}}, &(0x7f0000000100)={0x0, 0x3, 0x93, @string={0x93, 0x3, "cd6aef442e2f0f71d87c9292592d51c724660b8d348dc7e5c5f891029c25bd6a20845299e6701caebfb6e7f48e7896b9b719b25b06a39de1244d1f8de6eb983685bbebb17941e43dfbd0b9eae782cfe40ba92cff6d3cd69621cd50f7b7c4e059d181272cac4a2188a19ccad86997905a487a3131baacf71d9ea01f817a16d364c41be1fdd3b2b2f3786a10c8ca42574017"}}, &(0x7f00000001c0)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x10, 0x7, 0x1, 0xa}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x8, 0x40, 0x0, 0xca}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x81, 0x6, "d23ad528", "811e890f"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x0, 0x4, 0x4, 0xc0, 0x9, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f0000000340)={0x0, 0x8, 0x39, "d0c19333c785d6099ff8a59b9da4d6303f7cdad73a101f5b7a7cc272ce7764aa6383ff1cfe12193d875460357440cb530e9cddeaa762ee0f57"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x20, 0x1, [0xf000]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x95}, &(0x7f0000000640)={0x40, 0xb, 0x2, "27e5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0xfffa}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "9d1e"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x1e, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}})

41.683786389s ago: executing program 2 (id=2998):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a0101000000000000000007000000140000001000260000000000000000000084000a"], 0x3c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0xfe, 0xc9, 0x81ad}}}, 0x8)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x29, 0x8, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')
connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
move_mount(0xffffffffffffffff, 0x0, r4, &(0x7f0000000080)='./mnt\x00', 0x116)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x124, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x722531e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e9169fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b452734}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e7d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2908ffb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ef9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31accf92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f61e64a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x494ec697}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3751}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe772}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62ac1290}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d78d995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1451dffa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe684}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
umount2(&(0x7f0000000400)='./mnt\x00', 0xa)
r8 = socket$kcm(0x10, 0x2, 0x0)
fstat(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@empty, @in=@remote, 0x4e22, 0x0, 0x4e22, 0x200, 0x2, 0x20, 0x20, 0x11, 0x0, r9}, {0x2a, 0xffffffff, 0x7, 0x4, 0x8aa, 0x1, 0x1, 0x68}, {0x3, 0x2, 0x7f, 0x5}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x33}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x1, 0x1, 0x6, 0xc, 0x2b4e, 0xe10f}}, 0xe8)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000000a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x8880)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x5)

41.360749928s ago: executing program 2 (id=2999):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5247424f81422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"})
r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r2 = dup(r1)
read(r2, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f046})
r3 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r3, &(0x7f0000006480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000c00)=""/4088, 0xff8}, {&(0x7f0000000480)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0)
ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000000))
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="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", 0x10d}, {&(0x7f0000000300)="d150bc07c958211931a67d0c07dcbb95c56014d98e80082dd337c2b9887a3b89fb75d7de44dd542c84c55b86b56e109be8a2d5d2d9aa3cf91c8cafa96087da8a00a97710cd623ab7ab1f8ded712e0a52d2d845612b96b78491756690048ad9e0bdaaeff3d7e63ff180713fb1deb96ec05c6fa307bfd393abcd08f877d9100100f951a6b8f084666b33979e07500eda05c4b56aa36d6ebc0521895dcbf202c1973fec78888c4d7b60746581", 0xab}], 0x2}, 0x24000804)

40.382507597s ago: executing program 2 (id=3001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x24000008)

23.950091669s ago: executing program 34 (id=3001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x24000008)

5.640745244s ago: executing program 1 (id=3149):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

5.570866067s ago: executing program 1 (id=3150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000004e40)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x7, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

5.507059121s ago: executing program 1 (id=3151):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x400500)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, 0xfffffffffffffffe)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x1a003})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

5.318344151s ago: executing program 1 (id=3152):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x3a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0xfffffffc, 0xdc67}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000f40)={0x2, 0x4e23, @broadcast}, 0x10)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x36, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000260000/0x1000)=nil, 0x1000, 0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1d9, 0x0, 0x2}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="03c800a5d45d291a46b2098de3ce5645e256287640b8b983ef2aabaf1ca96dd6158af8674552e654af7d53c90e82c83528d9edca4da2b58bd59b8a6774dda80220d6126f29779c81bf3af3d5a015524da60c9efb747a4ff4aebd70362b13faf41b26d6917755758faf075f736ce765cf2e37fd09232780cfda69cc388f7229252f96747ae99e58d48d6b3aebba2628250a57228cacdf88157d57147da551ae7cf6600a6e7329ced648f3da2f2b0bc36283979b431d81ce4e47df79d8f92f4c52ce7a29c4748ea8a9f8077673951c10fdfb1a3ba9a312cbeae82b658e7af3c386"], 0xa9)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000f80)=""/33, 0x21, 0x2, &(0x7f0000001100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x24)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.753393283s ago: executing program 1 (id=3162):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4bfa, &(0x7f0000000000))
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="0038ec29f26e87dd54064224000000230037"], 0x0, 0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f00000005c0)={@val={0x3, 0x800}, @val={0x2, 0x0, 0x0, 0x0, 0x0, 0x2000}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x1, 0x1a, 0x5, 0x65, 0x101, 0x0, 0xff, 0x7, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0xcc, 0x0, 0x1, [0x200, 0x5, 0xffff, 0x3, 0xffffffff]}, @lsrr={0x83, 0x7, 0x6e, [@multicast2]}]}}}}}, 0x5e)

2.636452168s ago: executing program 6 (id=3163):
mq_unlink(&(0x7f0000000000)='\x00')
mq_unlink(&(0x7f0000000040)=']:(%)\\[,h\x00')
mq_unlink(&(0x7f0000000080)='-[(*\x00')
mq_unlink(&(0x7f00000000c0)='\x00')
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
close(r0)
rt_sigprocmask(0x1, &(0x7f0000000100)={[0x46eecc51]}, 0x0, 0x8)
mq_unlink(&(0x7f0000000140)='\x00')
rt_sigprocmask(0x1, &(0x7f0000000180)={[0x1]}, &(0x7f00000001c0), 0x8)
pselect6(0x40, &(0x7f0000000200)={0xdb8e, 0x3, 0x8, 0x7, 0x800, 0xd3, 0x0, 0x2}, &(0x7f0000000240)={0x8, 0xeb2, 0x2, 0x64a29e7a, 0x66, 0x4d, 0xfadd, 0xffff}, &(0x7f0000000280)={0x5, 0x5, 0x8001, 0x5f9a, 0xfffffffffffffffa, 0x6, 0x8, 0x100000000}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x1]}, 0x8})
mq_unlink(&(0x7f0000000380)='\x00')
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000003c0), 0x4380, 0x0)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
ppoll(&(0x7f0000000440)=[{r1, 0x10}, {r0, 0x12}, {r0, 0x200}, {r2, 0x4}, {r0, 0x20}, {r0, 0x4800}, {r0, 0x90}, {r4, 0x8000}, {r0, 0x405}], 0x9, &(0x7f00000004c0), &(0x7f0000000500)={[0x4]}, 0x8)
r5 = fcntl$getown(r2, 0x9)
r6 = syz_open_procfs(r5, &(0x7f0000000540)='net/route\x00')
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r4)
sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r7, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000)
readv(r4, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/161, 0xa1}], 0x1)
setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000007c0)=0x3, 0x4)
close(r3)
close(r0)
mq_unlink(&(0x7f0000000800)='(%8*,/]\x00')
r8 = dup(r6)
ioctl$VT_ACTIVATE(r8, 0x5606, 0x5)
close(r0)
ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f0000000840)={r2})
close(r2)
rt_sigtimedwait(&(0x7f0000000880)={[0x7]}, &(0x7f00000008c0), &(0x7f0000000940), 0x8)

2.608018593s ago: executing program 6 (id=3165):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x300345a0, 0x2, 0x2, 0x5, 0xfffffff6, 0x0, 0x0, 0x8, 0x500}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) (fail_nth: 1)
close(r0)

2.023099432s ago: executing program 4 (id=3169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prctl$PR_SET_SECUREBITS(0x1c, 0x1a)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xa, 0x0, 0x9, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x8000)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffc4b}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

1.771886814s ago: executing program 4 (id=3171):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x3a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0xfffffffc, 0xdc67}})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000f40)={0x2, 0x4e23, @broadcast}, 0x10)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x36, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

1.666518754s ago: executing program 6 (id=3172):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="02007f000980ffff", 0x8)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x400c804)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, r2, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)

1.611578745s ago: executing program 6 (id=3173):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_RESET(r0, 0x5100)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7}, @raw32={[0x2, 0x66704740, 0x8000000]}}, {0x2, 0xff, 0x5, 0x83, @tick=0x1, {0xfd, 0x1}, {0x3}, @note={0x81, 0x0, 0xe}}, {0xf2, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0x1, 0x3}, {0x6, 0xb}}}, {0x0, 0x80, 0x0, 0x0, @tick=0xf791, {0xfb, 0x9}, {0x8, 0x4}, @ext={0x0, 0x0}}], 0x70)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000504006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

1.500820723s ago: executing program 6 (id=3174):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.216584342s ago: executing program 4 (id=3175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x40000)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="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"/272, 0x110}], 0x1)

1.12307474s ago: executing program 4 (id=3176):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="200cc3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="4003020000002bec"], 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x4e24, 0x10001, @loopback, 0x4}}}, 0x88)

859.160228ms ago: executing program 1 (id=3178):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x1b}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "0ffc55", 0xec, 0x6, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @remote}, {[], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xdd4, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x4e23, 0x4e21, 0x2, 0x3}, [{0x8, 0x10000, 0x1ddc, 0x3, 0x66a, 0xffffffc7, 0x1, 0xa}, {0x1ff, 0x5, 0x1, 0xcebe, 0xf, 0x887, 0x0, 0x3ff}, {0x7, 0x4, 0x7, 0x7, 0x3, 0x2, 0x7, 0x1}, {0x8, 0x2, 0x2, 0x0, 0x5, 0x1, 0xf, 0x7}, {0x2, 0x2, 0x5, 0x1333e00, 0xf, 0x400, 0xf, 0x39c}, {0x1, 0x6, 0x4, 0x1, 0x5, 0x5, 0x5}, {0x52, 0x4, 0x80000000, 0x6, 0x3, 0xe846, 0xe, 0x7}]}}}}}}}, 0x126)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
eventfd2(0x6, 0x1) (async)
r4 = eventfd2(0x6, 0x1)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000000c0)={0x0, r4}) (async)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000000c0)={0x0, r4})
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) (async)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)

738.128641ms ago: executing program 5 (id=3180):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'caif0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x1c}}, 0x2404c841)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001600)={<r4=>0x0})
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x400c010)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000600)={r4, 0xfffffffffffffff8})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000fedbdf2536000000081035dd0300", @ANYRES32=r6, @ANYBLOB="0c009900070000003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c891}, 0x805)
move_pages(0x0, 0x43, 0x0, 0x0, 0x0, 0x6)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000018f3ced124c0e2b4f28f49cebf9a4a697cb3013ab7fc2344c7ffacd09974b434e85ae9a74ed4590b120e17311253e44fde232b527b58fbe40f794f2bdc890624c99a484de570bc46e94ec915c88b00707cfaa0b057cc5269dd", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf253700000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3})
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0), 0x8)
socket$inet6_udp(0xa, 0x2, 0x0)

672.384121ms ago: executing program 5 (id=3181):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x9, 0x0, 0x8014}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0xfc0, 0x64, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010104, @broadcast}, "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"}}, 0xfce)
write$tun(r2, &(0x7f0000001240)={@val={0x0, 0x600}, @void, @mpls={[{0x7, 0x0, 0x1}], @ipv4=@tipc={{0x5, 0x4, 0x2, 0x0, 0x2e, 0x66, 0x0, 0x9, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101}, @payload_conn={{{0x1a, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0x100, 0x0, 0x3, 0x4, 0x1, 0x0, 0x4, 0xd3b3, 0x3, 0x4e23, 0x4e24}}, [0x0, 0x0]}}}}, 0x36)
sendto$inet(r1, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x1}, {}, {}, 0x70bd27, 0x3502, 0x2}, [@etimer_thresh={0x8, 0xc, 0x6}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x144}}, 0x0)

460.899879ms ago: executing program 5 (id=3182):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x220c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x7)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

460.589343ms ago: executing program 4 (id=3183):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

409.508167ms ago: executing program 5 (id=3184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x40000)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="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"/272, 0x110}], 0x1)

351.151909ms ago: executing program 4 (id=3185):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) (async)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r1, 0x5385, 0x1000000000000) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async)
syz_usb_control_io$sierra_net(r3, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async)
recvmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x40003, 0x1, 0x3, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x40000000, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000004, 0x0, 0x100000], [0x800000, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x7fff, 0x0, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00001000000000140005"], 0x40}], 0x1}, 0x0)

244.975957ms ago: executing program 5 (id=3186):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)="4e0a03226a5896bbe24872dd5b7accf8d75a9767691dbddf0f0fc40691129f9e26c36bb16cc52925001bbc5bc24c14eacd146c20cf419aef3e6aa989ddb53841161a4e3ba64046ed6eaa16f81c03987f77f859320f5257ca4cd64cb2ef4ff531c7987e3a882a9aef8330f6cf1db9d76449ad9b8c581b2ec25dd417b3ffe44caca580623ad9f1f0b0954714918fe75501dc92b31d14798f8bbf89cba639a89a1df088720e02d733b60212a0c0a7d2286f66842f972060", 0xb6}, {&(0x7f00000006c0)="4a5a284ab592ab029c5118ea9906f4dbc4f93877ec6168eb1ec57788f2549119427a491e62e9b484a512008c528aa20029230ff2d1fd067204ec26a3c006ae4885cf80bd50d3d3005244678a0f2fe03f2333b3627f33201ae4f863b493701684f212a308036db1442dfd104c734414abc0554887cc4a3aa517ac5765af38d58e685fa055127b81c4dc446bddf22430f8fde7e2f48c7272ec42890f68120f819349e9c895571022a9bc27efc0dd8572f6cab050dad10683d511098bf5f0c5e4da5a26fd70c61b38a13d335767de0e19a7c97f43b7dbfd887a914213d973daa0fc1dfa37ee2f256636c13f240ee4cc48edd95a0e216df37d77c85a9e5c512b", 0xfe}, {&(0x7f0000000380)="94d09b487655bcf0bf47c01bb0fc192f5e36f3893de291ab0312fca1481976", 0x1f}, {&(0x7f0000001180)="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", 0x622}], 0x4}, 0x7000000}], 0x1, 0x0)

218.980245ms ago: executing program 5 (id=3187):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4bfa, &(0x7f0000000000))
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="0038ec29f26e87dd54064224000000230037"], 0x0, 0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f00000005c0)={@val={0x3, 0x800}, @val={0x2, 0x0, 0x0, 0x0, 0x0, 0x2000}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x1, 0x1a, 0x5, 0x65, 0x101, 0x0, 0xff, 0x7, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0xcc, 0x0, 0x1, [0x200, 0x5, 0xffff, 0x3, 0xffffffff]}, @lsrr={0x83, 0x7, 0x6e, [@multicast2]}]}}}}}, 0x5e)

0s ago: executing program 6 (id=3188):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x99, 0x4, 0xfffff020}, {0x6, 0x0, 0x1, 0x5}]}, 0x10) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x6f2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x18) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x134, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa7}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd4c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x2000040}, 0x40891)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0)
read$dsp(r3, &(0x7f0000000000)=""/120, 0x78)
syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501"], &(0x7f0000000640)={0x0, 0x0, 0x8, 0x0})

kernel console output (not intermixed with test programs):

] usb 3-1: SerialNumber: syz
[  704.991840][T13442] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  705.000963][T14321] overlayfs: failed to clone upperpath
[  705.017965][T13442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.034764][T13442] usb 2-1: Product: syz
[  705.039168][T13442] usb 2-1: Manufacturer: syz
[  705.043869][T13442] usb 2-1: SerialNumber: syz
[  705.055295][T13442] usb 2-1: config 0 descriptor??
[  705.107373][T14323] sctp: [Deprecated]: syz.4.2738 (pid 14323) Use of struct sctp_assoc_value in delayed_ack socket option.
[  705.107373][T14323] Use struct sctp_sack_info instead
[  705.248058][ T5947] usb 3-1: USB disconnect, device number 68
[  705.276676][T13442] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  705.602877][ T1636] usbhid 6-1:0.0: can't add hid device: -71
[  705.613731][ T1636] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  705.631648][ T1636] usb 6-1: USB disconnect, device number 20
[  705.941804][T14309] fuse: Unknown parameter '0x0000000000000007'
[  706.150078][ T5930] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  706.333731][ T5930] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  706.348208][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  706.360473][ T5930] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  706.380723][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.389289][ T5930] usb 6-1: Product: syz
[  706.393521][ T5930] usb 6-1: Manufacturer: syz
[  706.399468][ T5930] usb 6-1: SerialNumber: syz
[  706.407700][ T5930] usb 6-1: config 0 descriptor??
[  706.420507][ T5930] gspca_main: sunplus-2.14.0 probing 055f:c630
[  706.547918][  T808] usb 3-1: new full-speed USB device number 69 using dummy_hcd
[  706.635209][T14334] netlink: 'syz.5.2742': attribute type 4 has an invalid length.
[  706.736242][  T808] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  706.745646][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.754321][  T808] usb 3-1: Product: syz
[  706.758764][  T808] usb 3-1: Manufacturer: syz
[  706.764024][  T808] usb 3-1: SerialNumber: syz
[  706.772797][  T808] usb 3-1: config 0 descriptor??
[  706.805338][T13442] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  707.008117][  T808] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  707.235206][T13184] usb 2-1: USB disconnect, device number 60
[  707.731552][T13184] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  707.902620][T13184] usb 2-1: Using ep0 maxpacket: 8
[  707.911265][T13184] usb 2-1: config 127 has an invalid interface number: 171 but max is 1
[  707.919884][T13184] usb 2-1: config 127 has an invalid descriptor of length 47, skipping remainder of the config
[  707.930423][T13184] usb 2-1: config 127 has no interface number 1
[  707.936983][T13184] usb 2-1: config 127 interface 171 has no altsetting 0
[  707.947342][T13184] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  707.956660][T13184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.964835][T13184] usb 2-1: Product: syz
[  707.969116][T13184] usb 2-1: Manufacturer: syz
[  707.973816][T13184] usb 2-1: SerialNumber: syz
[  708.209108][T14360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  708.226835][T13184] xr_serial 2-1:127.171: xr_serial converter detected
[  708.236704][T13184] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  708.243105][T13184] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  708.257889][T13184] usb 2-1: USB disconnect, device number 61
[  708.275678][T13184] xr_serial 2-1:127.171: device disconnected
[  709.184871][ T5845] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  709.244878][ T1636] usb 6-1: USB disconnect, device number 21
[  709.349001][ T5845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  709.364652][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  709.376719][ T5845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  709.389959][ T5845] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  709.399574][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.409661][ T5845] usb 2-1: Product: syz
[  709.414117][ T5845] usb 2-1: Manufacturer: syz
[  709.418794][ T5845] usb 2-1: SerialNumber: syz
[  709.432886][ T5845] usb 2-1: config 0 descriptor??
[  709.439763][T14371] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  709.451165][T14371] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  709.461212][ T5845] usb 2-1: ucan: probing device on interface #0
[  709.805248][  T808] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  709.892928][ T5845] usb 2-1: ucan: device reported invalid device info
[  709.914004][ T5845] usb 2-1: ucan: probe failed; try to update the device firmware
[  710.115066][T14371] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  710.157370][  T808] usb 2-1: USB disconnect, device number 62
[  710.230504][    T9] usb 3-1: USB disconnect, device number 69
[  710.403829][   T30] kauditd_printk_skb: 91 callbacks suppressed
[  710.403848][   T30] audit: type=1800 audit(1773953533.650:168): pid=14385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2757" name="bus" dev="overlay" ino=464 res=0 errno=0
[  710.551631][T14387] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2758'.
[  710.640661][T14395] netlink: 'syz.4.2761': attribute type 4 has an invalid length.
[  710.839547][T14404] ptrace attach of "./syz-executor exec"[13016] was attempted by ""[14404]
[  710.886898][T14405] team0: No ports can be present during mode change
[  711.183180][  T808] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  711.225943][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  711.364847][  T808] usb 6-1: Using ep0 maxpacket: 8
[  711.384587][  T808] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  711.394095][  T808] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  711.421333][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  711.434229][  T808] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  711.444683][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  711.457899][  T808] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  711.470337][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  711.491022][  T808] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  711.516248][    T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  711.538874][  T808] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  711.538940][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.557786][  T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.575032][    T9] usb 2-1: Product: syz
[  711.580731][    T9] usb 2-1: Manufacturer: syz
[  711.585500][    T9] usb 2-1: SerialNumber: syz
[  711.645373][    T9] usb 2-1: config 0 descriptor??
[  711.664422][T14409] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  711.678113][T14409] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  711.709029][    T9] usb 2-1: ucan: probing device on interface #0
[  711.811334][  T808] usb 6-1: usb_control_msg returned -32
[  711.821096][  T808] usbtmc 6-1:16.0: can't read capabilities
[  712.385331][    T9] ucan 2-1:0.0: probe with driver ucan failed with error -22
[  712.403173][T14429] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  712.411245][T14429] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  712.421598][T14429] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  712.428082][T14429] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  712.436077][T14429] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  712.442547][T14429] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  712.450931][T14429] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  712.457409][T14429] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  712.464258][T14429] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  712.481094][ T1636] usb 6-1: USB disconnect, device number 22
[  712.487303][T14431] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71
[  714.021827][T14451] fuse: fd is not a fuse device
[  714.081452][T14453] netlink: 'syz.4.2778': attribute type 10 has an invalid length.
[  714.217056][    T9] usb 2-1: USB disconnect, device number 63
[  714.565585][T14479] sg_write: data in/out 393693/256 bytes for SCSI command 0x0-- guessing data in;
[  714.565585][T14479]    program syz.1.2786 not setting count and/or reply_len properly
[  714.966144][ T5845] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  715.139669][ T5845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  715.170474][ T5845] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  715.201138][ T5845] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  715.232251][ T5845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  715.241655][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  715.251668][ T5845] usb 3-1: Product: syz
[  715.267063][ T5845] usb 3-1: Manufacturer: syz
[  715.271765][ T5845] usb 3-1: SerialNumber: syz
[  715.361388][T13442] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  715.509523][T14500] random: crng reseeded on system resumption
[  715.518658][ T5845] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  715.542327][T13442] usb 6-1: unable to get BOS descriptor or descriptor too short
[  715.559064][T13442] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.589992][T13442] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  715.605447][T13442] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  715.627781][T13442] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  715.647245][T13442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.655843][T13442] usb 6-1: Product: syz
[  715.660144][T13442] usb 6-1: Manufacturer: syz
[  715.665081][T13442] usb 6-1: SerialNumber: syz
[  715.723487][T14483] afs: Unknown parameter 'ÿÿÿÿ'
[  715.815771][T14504] gfs2: gfs2 mount does not exist
[  715.948027][T14507] netlink: 'syz.1.2793': attribute type 1 has an invalid length.
[  715.956583][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2793'.
[  716.199139][T13442] usb 6-1: Can't get UAC3 power state for id 10
[  716.210730][T13442] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[  716.222639][T13442] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  716.230864][T13442] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  716.240749][T13442] usb 6-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[  716.289378][T13442] usb 6-1: USB disconnect, device number 23
[  716.952564][T14514] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0
[  717.051179][T14518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2797'.
[  717.061517][T14518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2797'.
[  717.172626][T14520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  717.542220][ T5845] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  717.562165][T14050] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  717.607713][T14537] netlink: 'syz.5.2805': attribute type 3 has an invalid length.
[  717.616671][T14537] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2805'.
[  717.709552][T14539] kvm: kvm [14538]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18
[  717.718959][T14539] kvm: kvm [14538]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18
[  717.730341][ T5845] usb 2-1: Using ep0 maxpacket: 32
[  717.738868][T14539] kvm: kvm [14538]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18
[  717.738965][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short
[  717.757678][T14539] kvm: kvm [14538]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18
[  717.765107][ T5845] usb 2-1: config 1 has an invalid interface number: 210 but max is 2
[  717.770921][T14539] kvm: kvm [14538]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18
[  717.778125][ T5845] usb 2-1: config 1 has an invalid interface number: 151 but max is 2
[  717.794475][ T5845] usb 2-1: config 1 has an invalid interface number: 122 but max is 2
[  717.813077][ T5845] usb 2-1: config 1 has no interface number 0
[  717.837025][ T5845] usb 2-1: config 1 has no interface number 1
[  717.845205][ T5845] usb 2-1: config 1 has no interface number 2
[  717.853878][ T5947] usb 3-1: USB disconnect, device number 70
[  717.868504][ T5845] usb 2-1: config 1 interface 210 has no altsetting 0
[  717.886054][ T5947] usblp0: removed
[  717.893550][ T5845] usb 2-1: config 1 interface 151 has no altsetting 0
[  717.911613][ T5845] usb 2-1: config 1 interface 122 has no altsetting 0
[  717.935896][ T5845] usb 2-1: New USB device found, idVendor=045e, idProduct=0479, bcdDevice=48.98
[  717.947489][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.955610][ T5845] usb 2-1: Product: syz
[  717.960667][ T5845] usb 2-1: Manufacturer: syz
[  717.965408][ T5845] usb 2-1: SerialNumber: syz
[  718.214660][ T5845] usb 2-1: USB disconnect, device number 64
[  718.289789][    T9] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  718.310989][ T5947] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  718.439182][    T9] usb 6-1: device descriptor read/64, error -71
[  718.459798][   T30] audit: type=1326 audit(1773953541.183:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14555 comm="syz.4.2813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ee059c799 code=0x0
[  718.478325][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short
[  718.493800][ T5947] usb 3-1: not running at top speed; connect to a high speed hub
[  718.505128][ T5947] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  718.515398][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.523452][ T5947] usb 3-1: Product: syz
[  718.527924][ T5947] usb 3-1: Manufacturer: syz
[  718.532809][ T5947] usb 3-1: SerialNumber: syz
[  718.695388][    T9] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  718.765880][ T5947] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  718.774950][ T5947] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  718.838411][ T5947] usb 3-1: USB disconnect, device number 71
[  718.846030][    T9] usb 6-1: device descriptor read/64, error -71
[  718.908834][ T8339] udevd[8339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  718.995217][    T9] usb usb6-port1: attempt power cycle
[  719.144223][ T5842] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  719.304585][ T5842] usb 2-1: Using ep0 maxpacket: 8
[  719.314055][ T5842] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  719.333613][ T5842] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  719.345245][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  719.356773][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  719.367596][ T5842] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  719.381090][    T9] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  719.388867][ T5842] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  719.400904][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.424017][    T9] usb 6-1: device descriptor read/8, error -71
[  719.636177][ T5842] usb 2-1: usb_control_msg returned -32
[  719.641950][ T5842] usbtmc 2-1:16.0: can't read capabilities
[  719.689485][    T9] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  719.712785][    T9] usb 6-1: device descriptor read/8, error -71
[  719.829321][    T9] usb usb6-port1: unable to enumerate USB device
[  719.849600][ T1636] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  720.009992][ T1636] usb 3-1: Using ep0 maxpacket: 8
[  720.017606][ T1636] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  720.027762][ T1636] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  720.037775][ T1636] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  720.047895][ T1636] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  720.058218][ T1636] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.073565][ T1636] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  720.087139][ T1636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.098228][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.112214][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.145550][T14567] syzkaller1: entered promiscuous mode
[  720.151153][T14567] syzkaller1: entered allmulticast mode
[  720.337579][ T1636] usb 3-1: usb_control_msg returned -32
[  720.343537][ T1636] usbtmc 3-1:16.0: can't read capabilities
[  721.256920][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  721.272895][ T5845] usb 2-1: USB disconnect, device number 65
[  722.071970][ T5845] IPVS: starting estimator thread 0...
[  722.099230][T14595] net_ratelimit: 4 callbacks suppressed
[  722.099310][T14595] IPVS: sh: FWM 3 0x00000003 - no destination available
[  722.232554][T14591] IPVS: using max 29 ests per chain, 69600 per kthread
[  722.794784][ T5845] usb 3-1: USB disconnect, device number 72
[  722.849615][T14612] tmpfs: Bad value for 'mpol'
[  723.290523][ T5845] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  723.311805][T13442] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  723.373619][T14620] netlink: 'syz.1.2833': attribute type 21 has an invalid length.
[  723.382213][T14620] IPv6: NLM_F_CREATE should be specified when creating new route
[  723.390374][T14620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  723.400038][T14620] IPv6: NLM_F_CREATE should be set when creating new route
[  723.407371][T14620] IPv6: NLM_F_CREATE should be set when creating new route
[  723.414726][T14620] IPv6: NLM_F_CREATE should be set when creating new route
[  723.434571][T14620] sctp: [Deprecated]: syz.1.2833 (pid 14620) Use of int in max_burst socket option.
[  723.434571][T14620] Use struct sctp_assoc_value instead
[  723.507304][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  723.520603][T13442] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.548165][T13442] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  723.558298][ T5845] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  723.567752][T13442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.575995][ T5845] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  723.595991][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  723.607420][T13442] usb 6-1: config 0 descriptor??
[  723.625489][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  723.637531][T13442] pwc: Askey VC010 type 2 USB webcam detected.
[  723.656633][ T5845] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  723.670677][ T5845] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  723.680136][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.745279][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2834'.
[  723.927333][ T5845] usb 3-1: usb_control_msg returned -32
[  723.934800][ T5845] usbtmc 3-1:16.0: can't read capabilities
[  724.106691][T13442] pwc: recv_control_msg error -32 req 02 val 2b00
[  724.125703][T13442] pwc: recv_control_msg error -32 req 02 val 2700
[  724.137816][T13442] pwc: recv_control_msg error -32 req 02 val 2c00
[  724.150211][T14629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2836'.
[  724.159679][T13442] pwc: recv_control_msg error -32 req 04 val 1000
[  724.182397][T13442] pwc: recv_control_msg error -32 req 04 val 1300
[  724.190664][T13442] pwc: recv_control_msg error -32 req 04 val 1400
[  724.212425][T13442] pwc: recv_control_msg error -32 req 02 val 2000
[  724.368100][T14632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.385390][T14632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.406998][T14632] syzkaller1: entered promiscuous mode
[  724.412934][T14632] syzkaller1: entered allmulticast mode
[  724.435427][T13442] pwc: recv_control_msg error -71 req 04 val 1500
[  724.444043][T13442] pwc: recv_control_msg error -71 req 02 val 2500
[  724.453656][T13442] pwc: recv_control_msg error -71 req 02 val 2400
[  724.461449][T13442] pwc: recv_control_msg error -71 req 02 val 2600
[  724.468595][T13442] pwc: recv_control_msg error -71 req 02 val 2900
[  724.475391][T13442] pwc: recv_control_msg error -71 req 02 val 2800
[  724.482648][T13442] pwc: recv_control_msg error -71 req 04 val 1100
[  724.490567][T13442] pwc: recv_control_msg error -71 req 04 val 1200
[  724.500604][T13442] pwc: Registered as video103.
[  724.512116][T13442] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61
[  724.533703][T13442] usb 6-1: USB disconnect, device number 28
[  724.918583][T14639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2840'.
[  726.337379][    T9] usb 3-1: USB disconnect, device number 73
[  726.428814][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'.
[  726.439794][T14659] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2855'.
[  726.498655][T14663] syz.5.2848 (14663): attempted to duplicate a private mapping with mremap.  This is not supported.
[  726.521487][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2848'.
[  726.583289][T14666] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  726.913625][T13442] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  727.073337][ T5947] usb 3-1: new full-speed USB device number 74 using dummy_hcd
[  727.083958][T13442] usb 6-1: Using ep0 maxpacket: 8
[  727.090746][T13442] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  727.099051][T13442] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  727.108899][T13442] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  727.118784][T13442] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  727.128803][T13442] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  727.143513][T13442] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  727.154530][T13442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.236754][ T5947] usb 3-1: not running at top speed; connect to a high speed hub
[  727.247367][ T5947] usb 3-1: config 13 has an invalid interface number: 18 but max is 0
[  727.255764][ T5947] usb 3-1: config 13 has no interface number 0
[  727.262039][ T5947] usb 3-1: config 13 interface 18 has no altsetting 0
[  727.272215][ T5947] usb 3-1: New USB device found, idVendor=0403, idProduct=dd20, bcdDevice=16.a8
[  727.281392][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.289592][ T5947] usb 3-1: Product: syz
[  727.293823][ T5947] usb 3-1: Manufacturer: syz
[  727.298730][ T5947] usb 3-1: SerialNumber: syz
[  727.382376][T13442] usb 6-1: usb_control_msg returned -32
[  727.388312][T13442] usbtmc 6-1:16.0: can't read capabilities
[  727.530502][ T5947] ftdi_sio 3-1:13.18: FTDI USB Serial Device converter detected
[  727.554642][ T5947] ftdi_sio ttyUSB0: unknown device type: 0x16a8
[  727.573390][ T5947] usb 3-1: USB disconnect, device number 74
[  727.582917][ T5947] ftdi_sio 3-1:13.18: device disconnected
[  727.800067][ T5842] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  727.973165][ T5842] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  727.983046][T14686] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71
[  727.989738][ T5842] usb 2-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config
[  728.004556][    T9] usb 6-1: USB disconnect, device number 29
[  728.011292][ T5842] usb 2-1: config 220 has no interface number 2
[  728.028258][ T5842] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  728.047934][ T5842] usb 2-1: config 220 interface 0 has no altsetting 0
[  728.056871][ T5842] usb 2-1: config 220 interface 76 has no altsetting 0
[  728.063808][ T5842] usb 2-1: config 220 interface 1 has no altsetting 0
[  728.074796][ T5842] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  728.083930][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.093303][ T5842] usb 2-1: Product: syz
[  728.100377][ T5842] usb 2-1: Manufacturer: syz
[  728.105039][ T5842] usb 2-1: SerialNumber: syz
[  728.354598][ T5842] usb 2-1: selecting invalid altsetting 0
[  728.375496][ T5842] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  728.388191][ T5842] uvcvideo 2-1:220.0: No valid video chain found.
[  728.411579][ T5842] usb 2-1: selecting invalid altsetting 0
[  728.420513][ T5842] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  728.435284][ T5842] usb 2-1: USB disconnect, device number 66
[  729.081753][ T5842] hid_parser_main: 452 callbacks suppressed
[  729.081779][ T5842] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  729.261193][ T5842] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  729.302717][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2862'.
[  729.339748][T14715] fuse: fd is not a fuse device
[  729.595205][ T5842] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  729.773179][ T5842] usb 6-1: config 15 has an invalid interface number: 163 but max is 3
[  729.797424][ T5842] usb 6-1: config 15 has an invalid interface number: 208 but max is 3
[  729.829507][ T5842] usb 6-1: config 15 contains an unexpected descriptor of type 0x1, skipping
[  729.853003][ T5842] usb 6-1: config 15 has an invalid interface number: 151 but max is 3
[  729.879144][ T5842] usb 6-1: config 15 has an invalid interface number: 162 but max is 3
[  729.909948][ T5842] usb 6-1: config 15 has an invalid interface number: 217 but max is 3
[  729.937157][ T5842] usb 6-1: config 15 has 5 interfaces, different from the descriptor's value: 4
[  729.965599][ T5842] usb 6-1: config 15 has no interface number 0
[  729.984109][ T5842] usb 6-1: config 15 has no interface number 1
[  730.011898][ T5842] usb 6-1: config 15 has no interface number 2
[  730.018215][ T5842] usb 6-1: config 15 has no interface number 3
[  730.027856][ T5842] usb 6-1: config 15 has no interface number 4
[  730.044470][ T5842] usb 6-1: config 15 interface 163 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64
[  730.069153][ T5842] usb 6-1: config 15 interface 163 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  730.080909][ T5842] usb 6-1: config 15 interface 208 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  730.093129][ T5842] usb 6-1: config 15 interface 208 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  730.104284][ T5842] usb 6-1: config 15 interface 208 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  730.115722][ T5842] usb 6-1: config 15 interface 208 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  730.126892][ T5842] usb 6-1: config 15 interface 208 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  730.137987][ T5842] usb 6-1: config 15 interface 208 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  730.156404][ T5842] usb 6-1: config 15 interface 208 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023
[  730.166788][ T5842] usb 6-1: config 15 interface 208 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  730.178140][ T5842] usb 6-1: config 15 interface 208 altsetting 7 has a duplicate endpoint with address 0xE, skipping
[  730.189448][ T5842] usb 6-1: config 15 interface 151 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64
[  730.201900][ T5842] usb 6-1: config 15 interface 151 altsetting 4 endpoint 0x5 has an invalid bInterval 128, changing to 7
[  730.213488][ T5842] usb 6-1: config 15 interface 151 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[  730.224460][ T5842] usb 6-1: config 15 interface 162 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  730.236302][ T5842] usb 6-1: config 15 interface 162 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  730.247307][ T5842] usb 6-1: config 15 interface 162 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  730.258590][ T5842] usb 6-1: config 15 interface 162 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  730.271878][ T5842] usb 6-1: config 15 interface 162 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  730.285388][ T5842] usb 6-1: config 15 interface 162 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  730.298070][ T5842] usb 6-1: config 15 interface 162 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  730.311966][T14728] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  730.323561][ T5842] usb 6-1: config 15 interface 162 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  730.338681][ T5842] usb 6-1: config 15 interface 162 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14
[  730.353835][ T5842] usb 6-1: too many endpoints for config 15 interface 217 altsetting 92: 123, using maximum allowed: 30
[  730.375388][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has an invalid descriptor for endpoint zero, skipping
[  730.388427][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has an endpoint descriptor with address 0x93, changing to 0x83
[  730.401535][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has a duplicate endpoint with address 0x83, skipping
[  730.413130][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has a duplicate endpoint with address 0xC, skipping
[  730.431462][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has a duplicate endpoint with address 0x8, skipping
[  730.442918][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has an endpoint descriptor with address 0x5B, changing to 0xB
[  730.455398][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has a duplicate endpoint with address 0xB, skipping
[  730.467648][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has a duplicate endpoint with address 0x3, skipping
[  730.479933][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has an invalid descriptor for endpoint zero, skipping
[  730.494054][ T5842] usb 6-1: config 15 interface 217 altsetting 92 has 7 endpoint descriptors, different from the interface descriptor's value: 123
[  730.509680][ T5842] usb 6-1: config 15 interface 163 has no altsetting 0
[  730.518189][ T5842] usb 6-1: config 15 interface 208 has no altsetting 0
[  730.527215][ T5842] usb 6-1: config 15 interface 151 has no altsetting 0
[  730.534323][ T5842] usb 6-1: config 15 interface 217 has no altsetting 0
[  730.544587][ T5842] usb 6-1: New USB device found, idVendor=04b3, idProduct=4016, bcdDevice=97.70
[  730.554085][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.562407][ T5842] usb 6-1: Product: ᆣ쮋齰瀡�潙阯�஖ᜊ챋맑�谂떎ᣛ⸫鎼楫�녒�㡋璭Ἃᒨ䃛꬗�ᵙ髞幱쒇頲ᢽ䣵��薱迀쩪㈑팑ꑕ꘻社姃표�뼬겻훖䳔弒�縈壥핯홳�숶樢퀤䫹࡙㛿ꘛ謋烘淢腴䄒෻༢铘ᓼ⾺熱蕑웓㦽☆娰虣�㸴㭂�浕渡�㈰䞥扰ꪆ柧�㦀�仴촨텴↨麨羄⌑
[  730.597086][ T5842] usb 6-1: Manufacturer: Ჩ洿딛沊ﾻ韛⃙�曥ⰴ튺瘊瞼⺇㽈꨺阤銘�̪�틭
[  730.607907][ T5842] usb 6-1: SerialNumber: ꂅ䷧肺抙♬Η왡౑箎웥�艡꿂Ӕ쫻꣢䨔䕴�䜒㇜㵇ᗓ̘⢬媋斡쪔쉛�ᙽ邎ꭄ賿꩔ꪱŞ�꧌䀎믔�鲥棑➻ᫀ�䉂⠙觻ꒅ祾撫뿿㭋쾮푣ޣ繳풖�ґ⦲㈬댒ᷦ࠼悘脉�꒬墨ﲩ绵䧖藶酞邸뽓魀�䌥䖱ↂ뭅딑떬車킵裂�酠淎쉱
[  730.664172][  T808] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  730.813502][  T808] usb 2-1: device descriptor read/64, error -71
[  730.870533][ T5842] pl2303 6-1:15.163: required endpoints missing
[  730.883533][ T5842] pl2303 6-1:15.208: required endpoints missing
[  730.899643][ T5842] pl2303 6-1:15.151: required endpoints missing
[  730.911303][ T5842] pl2303 6-1:15.162: required endpoints missing
[  730.922873][ T5842] pl2303 6-1:15.217: required endpoints missing
[  730.937324][ T5842] usb 6-1: USB disconnect, device number 30
[  731.069968][  T808] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  731.230186][  T808] usb 2-1: device descriptor read/64, error -71
[  731.349345][  T808] usb usb2-port1: attempt power cycle
[  731.480855][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2871'.
[  731.494542][T14741] netlink: 'syz.4.2871': attribute type 10 has an invalid length.
[  731.710990][  T808] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  731.734190][  T808] usb 2-1: device descriptor read/8, error -71
[  732.010296][  T808] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  732.032154][  T808] usb 2-1: device descriptor read/8, error -71
[  732.149558][  T808] usb usb2-port1: unable to enumerate USB device
[  732.392866][T14757] net veth1_virt_wifi : renamed from virt_wifi0
[  732.405255][T14757] virtiofs: Unknown parameter 'always'
[  732.491178][ T5947] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  732.610665][T14761] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  732.653710][ T5947] usb 6-1: config index 0 descriptor too short (expected 2084, got 36)
[  732.662172][ T5947] usb 6-1: config 0 has an invalid interface number: 240 but max is 0
[  732.670413][ T5947] usb 6-1: config 0 has no interface number 0
[  732.677695][ T5947] usb 6-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.689159][ T5947] usb 6-1: config 0 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  732.703723][ T5947] usb 6-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  732.720493][ T5947] usb 6-1: config 0 interface 240 has no altsetting 0
[  732.727493][ T5947] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  732.736565][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.748787][ T5947] usb 6-1: config 0 descriptor??
[  732.813396][   T30] audit: type=1326 audit(1773953554.621:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  732.841677][   T30] audit: type=1326 audit(1773953554.621:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  732.864255][   T30] audit: type=1326 audit(1773953554.621:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  732.891530][   T30] audit: type=1326 audit(1773953554.621:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  732.914369][   T30] audit: type=1326 audit(1773953554.621:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  732.938439][   T30] audit: type=1326 audit(1773953554.621:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  732.962175][   T30] audit: type=1326 audit(1773953554.621:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  732.984967][   T30] audit: type=1326 audit(1773953554.621:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  733.000935][ T5947] uclogic 0003:5543:004D.001D: interface is invalid, ignoring
[  733.009525][   T30] audit: type=1326 audit(1773953554.621:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  733.043608][   T30] audit: type=1326 audit(1773953554.621:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3539c799 code=0x7ff00000
[  733.230399][ T5947] usb 6-1: USB disconnect, device number 31
[  733.349131][T14775] fuse: fd is not a fuse device
[  733.623835][ T5947] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[  733.640635][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'.
[  733.793045][T14789] overlayfs: failed to resolve './file0/file0': -2
[  733.818032][ T5947] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  733.843781][ T5947] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  733.866788][ T5947] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  733.876191][ T5947] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  733.888145][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  733.904826][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  733.922732][ T5947] usb 6-1: string descriptor 0 read error: -22
[  733.929400][ T5947] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  733.938723][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.955593][ T5947] usb 6-1: config 0 descriptor??
[  733.964252][T14773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  733.985319][ T5947] hub 6-1:0.0: bad descriptor, ignoring hub
[  733.999059][ T5947] hub 6-1:0.0: probe with driver hub failed with error -5
[  734.010912][ T5947] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input62
[  734.199670][ T5947] usb 6-1: USB disconnect, device number 32
[  734.564440][  T808] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  734.747345][  T808] usb 3-1: Using ep0 maxpacket: 8
[  734.760689][  T808] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  734.774923][  T808] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  734.786485][  T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  734.798028][  T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  734.812903][  T808] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  734.826462][  T808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  734.836066][  T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.070544][  T808] usb 3-1: usb_control_msg returned -32
[  735.076533][  T808] usbtmc 3-1:16.0: can't read capabilities
[  735.119263][T14815] netlink: 'syz.4.2897': attribute type 21 has an invalid length.
[  735.128134][T14815] netlink: 'syz.4.2897': attribute type 1 has an invalid length.
[  735.184614][ T5947] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  735.322898][ T5947] usb 6-1: device descriptor read/64, error -71
[  735.459489][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.471858][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.579416][ T5947] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  735.722829][T14822] atomic_op ffff88805b00b198 conn xmit_atomic 0000000000000000
[  735.729761][ T5947] usb 6-1: device descriptor read/64, error -71
[  735.846839][ T5947] usb usb6-port1: attempt power cycle
[  736.209974][ T5947] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  736.233438][ T5947] usb 6-1: device descriptor read/8, error -71
[  736.487854][ T5947] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  736.509752][ T5947] usb 6-1: device descriptor read/8, error -71
[  736.627069][ T5947] usb usb6-port1: unable to enumerate USB device
[  737.464199][T14846] netlink: zone id is out of range
[  737.469467][T14846] netlink: zone id is out of range
[  737.474965][T14846] netlink: zone id is out of range
[  737.480349][T14846] netlink: zone id is out of range
[  737.485633][T14846] netlink: zone id is out of range
[  737.490969][T14846] netlink: zone id is out of range
[  737.496524][T14846] netlink: zone id is out of range
[  737.501698][T14846] netlink: zone id is out of range
[  737.507023][T14846] netlink: zone id is out of range
[  737.512619][T14846] netlink: zone id is out of range
[  737.594348][ T1636] usb 3-1: USB disconnect, device number 75
[  737.606327][T14848] fuse: fd is not a fuse device
[  737.679164][T14850] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2908'.
[  738.246643][T14865] overlayfs: conflicting lowerdir path
[  738.466869][T14874] netlink: 'syz.5.2918': attribute type 3 has an invalid length.
[  738.550051][ T1636] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  738.569783][ T5947] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  738.731716][ T1636] usb 3-1: Using ep0 maxpacket: 8
[  738.740679][ T1636] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  738.749179][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  738.754801][ T1636] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  738.764807][ T1636] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  738.775326][ T1636] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  738.785380][ T1636] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  738.799336][ T1636] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  738.808972][ T1636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.820016][ T5947] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  738.835339][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.858266][ T5947] usb 2-1: Product: syz
[  738.869641][ T5947] usb 2-1: Manufacturer: syz
[  738.874816][ T5947] usb 2-1: SerialNumber: syz
[  738.904324][ T5947] usb 2-1: config 0 descriptor??
[  738.928780][ T5947] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  738.949565][ T5947] dvb-usb: bulk message failed: -22 (2/0)
[  738.971428][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  738.982864][ T5947] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  738.991219][ T5947] usb 2-1: media controller created
[  739.137962][ T1636] usb 3-1: usb_control_msg returned -32
[  739.143632][ T1636] usbtmc 3-1:16.0: can't read capabilities
[  739.182006][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  739.218897][ T5947] usb 2-1: selecting invalid altsetting 7
[  739.224804][ T5947] cxusb: set interface failed
[  739.229522][ T5947] dvb-usb: bulk message failed: -22 (1/0)
[  739.278968][ T5947] DVB: Unable to find symbol lgdt330x_attach()
[  739.290248][ T5947] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  739.362271][ T5947] rc_core: IR keymap rc-dvico-portable not found
[  739.373529][ T5947] Registered IR keymap rc-empty
[  739.385208][ T5947] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  739.426105][ T5947] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input63
[  739.468282][ T5947] dvb-usb: schedule remote query interval to 100 msecs.
[  739.476297][ T5947] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  739.527384][ T5947] usb 2-1: USB disconnect, device number 71
[  739.549767][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  739.592764][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  739.757957][ T5947] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  739.790204][T13442] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  739.971502][T13442] usb 6-1: Using ep0 maxpacket: 16
[  739.979000][T13442] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  739.990493][T13442] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  740.005902][T13442] usb 6-1: config 0 interface 0 has no altsetting 0
[  740.021311][T13442] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  740.030621][T13442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.041736][T13442] usb 6-1: config 0 descriptor??
[  740.285874][T14890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  740.300703][T14890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.334869][ T5947] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  740.496826][ T5947] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  740.505283][ T5947] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  740.514068][ T5947] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.524392][ T5947] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  740.533457][ T5947] usb 2-1: config 1 has no interface number 0
[  740.539772][ T5947] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  740.549045][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.568186][ T5947] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  740.578461][T13442] hid (null): report_id 41995 is invalid
[  740.586203][T13442] hid (null): unknown global tag 0xc
[  740.592131][T13442] hid (null): unknown global tag 0x37
[  740.600677][T13442] hid (null): unknown global tag 0xe
[  740.607090][T13442] hid (null): unknown global tag 0x5a
[  740.613400][T13442] hid (null): global environment stack underflow
[  740.619954][T13442] hid (null): bogus close delimiter
[  740.632694][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.640110][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.647265][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.654275][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.661632][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.668896][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.675925][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.683314][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.690419][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.697442][T13442] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  740.708324][T13442] cougar 0003:060B:500A.001E: report_id 41995 is invalid
[  740.715716][T13442] cougar 0003:060B:500A.001E: item 0 2 1 8 parsing failed
[  740.723781][T13442] cougar 0003:060B:500A.001E: parse failed
[  740.729708][T13442] cougar 0003:060B:500A.001E: probe with driver cougar failed with error -22
[  740.782043][ T5947] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  740.790833][ T5947] snd_usb_pod 2-1:1.1: invalid control EP
[  740.796917][ T5947] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  740.803708][ T5947] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  740.814264][ T5947] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  740.816993][    T9] usb 6-1: USB disconnect, device number 37
[  741.000429][ T5947] usb 2-1: USB disconnect, device number 72
[  741.629035][    T9] usb 3-1: USB disconnect, device number 76
[  741.714620][T14924] netlink: 1030 bytes leftover after parsing attributes in process `syz.5.2935'.
[  741.724051][T14924] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  741.739271][T14924] netlink: 'syz.5.2935': attribute type 1 has an invalid length.
[  741.785699][T14926] binder: 14925:14926 ioctl c018620c 200000000380 returned -22
[  741.959964][ T5842] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  742.154219][ T5842] usb 2-1: Using ep0 maxpacket: 32
[  742.172831][ T5842] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  742.181876][ T5842] usb 2-1: config 0 has no interface number 0
[  742.194894][ T5842] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  742.204260][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.214087][ T5842] usb 2-1: Product: syz
[  742.219444][ T5842] usb 2-1: Manufacturer: syz
[  742.224527][ T5842] usb 2-1: SerialNumber: syz
[  742.234721][ T5842] usb 2-1: config 0 descriptor??
[  742.253536][ T5842] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  742.267275][T14937] NFSD: Failed to start, no listeners configured.
[  742.501044][T14944] netlink: 'syz.5.2940': attribute type 4 has an invalid length.
[  742.508963][T14944] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2940'.
[  742.521988][T14944] ªªªªªª: renamed from vlan0 (while UP)
[  742.573107][ T5842] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  742.593542][ T5842] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  742.856571][T13442] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  742.985440][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  742.995782][ T5842] usb 2-1: USB disconnect, device number 73
[  743.014728][ T5842] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  743.017182][T13442] usb 6-1: Using ep0 maxpacket: 32
[  743.034047][T13442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.049856][T13442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.060923][T13442] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  743.071884][T13442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.085336][T13442] usb 6-1: config 0 descriptor??
[  743.087494][ T5842] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  743.123289][ T5842] quatech2 2-1:0.51: device disconnected
[  743.455109][ T5947] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  743.615302][ T5947] usb 3-1: Using ep0 maxpacket: 8
[  743.622280][ T5947] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  743.631266][ T5947] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  743.641352][ T5947] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  743.652135][ T5947] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  743.664018][ T5947] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  743.678110][ T5947] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  743.687608][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.754431][T13442] ft260 0003:0403:6030.001F: chip code: 0000 0000
[  743.918944][ T5947] usb 3-1: usb_control_msg returned -32
[  743.924758][ T5947] usbtmc 3-1:16.0: can't read capabilities
[  743.971441][T13442] ft260 0003:0403:6030.001F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  744.187060][T13442] ft260 0003:0403:6030.001F: failed to retrieve status: -71, no wakeup
[  744.197497][T13442] ft260 0003:0403:6030.001F: failed to retrieve status: -71
[  744.209241][T13442] ft260 0003:0403:6030.001F: failed to reset I2C controller: -71
[  744.243157][T13442] usb 6-1: USB disconnect, device number 38
[  744.307055][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  744.327715][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.344103][T14952] syzkaller1: entered promiscuous mode
[  744.349771][T14952] syzkaller1: entered allmulticast mode
[  744.788115][T14954] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2944'.
[  746.744560][ T5842] usb 3-1: USB disconnect, device number 77
[  746.828581][T14969] netlink: 'syz.5.2951': attribute type 21 has an invalid length.
[  746.838507][T14969] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2951'.
[  746.859370][T14969] netlink: 'syz.5.2951': attribute type 4 has an invalid length.
[  746.868208][T14969] netlink: 'syz.5.2951': attribute type 3 has an invalid length.
[  746.876651][T14969] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2951'.
[  747.162098][T14980] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  747.265787][T13442] usb 2-1: new low-speed USB device number 74 using dummy_hcd
[  747.440890][T13442] usb 2-1: Invalid ep0 maxpacket: 16
[  747.456160][T14996] netlink: 'syz.2.2959': attribute type 11 has an invalid length.
[  747.485466][T14996] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.2959'.
[  747.517739][T14996] netlink: 'syz.2.2959': attribute type 1 has an invalid length.
[  747.612010][T13442] usb 2-1: new low-speed USB device number 75 using dummy_hcd
[  747.742612][T14999] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2960'.
[  747.753547][T14999] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2960'.
[  747.766167][T14999] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2960'.
[  747.775393][T13442] usb 2-1: Invalid ep0 maxpacket: 16
[  747.781666][T13442] usb usb2-port1: attempt power cycle
[  748.156809][T13442] usb 2-1: new low-speed USB device number 76 using dummy_hcd
[  748.212057][T13442] usb 2-1: Invalid ep0 maxpacket: 16
[  748.353971][T13442] usb 2-1: new low-speed USB device number 77 using dummy_hcd
[  748.403237][T13442] usb 2-1: Invalid ep0 maxpacket: 16
[  748.422079][T13442] usb usb2-port1: unable to enumerate USB device
[  748.872798][  T808] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  748.905012][T13442] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  749.022423][  T808] usb 3-1: device descriptor read/64, error -71
[  749.065165][T13442] usb 6-1: Using ep0 maxpacket: 8
[  749.073389][T13442] usb 6-1: config 5 has an invalid interface number: 71 but max is 2
[  749.081717][T13442] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  749.090494][T13442] usb 6-1: config 5 has an invalid interface number: 160 but max is 2
[  749.098759][T13442] usb 6-1: config 5 has an invalid interface number: 122 but max is 2
[  749.106949][T13442] usb 6-1: config 5 has an invalid interface number: 69 but max is 2
[  749.115156][T13442] usb 6-1: config 5 has an invalid interface number: 131 but max is 2
[  749.124256][T13442] usb 6-1: config 5 has 5 interfaces, different from the descriptor's value: 3
[  749.134798][T13442] usb 6-1: config 5 has no interface number 0
[  749.141121][T13442] usb 6-1: config 5 has no interface number 1
[  749.147313][T13442] usb 6-1: config 5 has no interface number 2
[  749.153514][T13442] usb 6-1: config 5 has no interface number 3
[  749.159643][T13442] usb 6-1: config 5 has no interface number 4
[  749.165913][T13442] usb 6-1: config 5 interface 71 altsetting 6 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  749.176928][T13442] usb 6-1: config 5 interface 71 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64
[  749.187823][T13442] usb 6-1: config 5 interface 71 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64
[  749.198913][T13442] usb 6-1: config 5 interface 71 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  749.209912][T13442] usb 6-1: config 5 interface 160 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  749.221136][T13442] usb 6-1: config 5 interface 160 altsetting 8 has a duplicate endpoint with address 0x6, skipping
[  749.232087][T13442] usb 6-1: config 5 interface 160 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  749.244422][T13442] usb 6-1: too many endpoints for config 5 interface 122 altsetting 82: 176, using maximum allowed: 30
[  749.255720][T13442] usb 6-1: config 5 interface 122 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 176
[  749.269270][T13442] usb 6-1: config 5 interface 69 altsetting 129 has an invalid descriptor for endpoint zero, skipping
[  749.280325][T13442] usb 6-1: config 5 interface 69 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  749.289854][  T808] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  749.294751][T13442] usb 6-1: config 5 interface 69 altsetting 129 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  749.311829][T13442] usb 6-1: config 5 interface 69 altsetting 129 endpoint 0x8A has an invalid bInterval 145, changing to 7
[  749.323270][T13442] usb 6-1: config 5 interface 69 altsetting 129 endpoint 0x8A has invalid maxpacket 18349, setting to 1024
[  749.335217][T13442] usb 6-1: config 5 interface 69 altsetting 129 has a duplicate endpoint with address 0x4, skipping
[  749.346214][T13442] usb 6-1: too many endpoints for config 5 interface 131 altsetting 106: 47, using maximum allowed: 30
[  749.358970][T13442] usb 6-1: config 5 interface 131 altsetting 106 has a duplicate endpoint with address 0xB, skipping
[  749.370065][T13442] usb 6-1: config 5 interface 131 altsetting 106 has 1 endpoint descriptor, different from the interface descriptor's value: 47
[  749.383510][T13442] usb 6-1: config 5 interface 71 has no altsetting 0
[  749.390978][T13442] usb 6-1: config 5 interface 160 has no altsetting 0
[  749.397910][T13442] usb 6-1: config 5 interface 122 has no altsetting 0
[  749.404718][T13442] usb 6-1: config 5 interface 69 has no altsetting 0
[  749.411523][T13442] usb 6-1: config 5 interface 131 has no altsetting 0
[  749.422332][T13442] usb 6-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=14.2e
[  749.431576][T13442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.439681][T13442] usb 6-1: Product: 빬稡﵅묣튽몎筳Ҋ翵�ꩭᓚ�Ⱨ�냿䫀ꋤ씎壇妭홎㨕鵾ힵ꙾箦䯀䞚蜉�牆ꗨ翓繧뫉匮ꢇ覚㨮ᗢ쥂鴃轄숊�싼Ჶ掑첧뉋ﯠ��软⸷鳮⢯ꬲ攆
[  749.469195][T13442] usb 6-1: Manufacturer: 躪㣣ꤩ湬䗨���鮙Ԧ硪湎飣ꎭ෕薈㎾圞濣鲹嫱
[  749.473167][  T808] usb 3-1: device descriptor read/64, error -71
[  749.479502][T13442] usb 6-1: SerialNumber: 㢕�⪹费臨ꋩ䃔�教퀊�䬾�⯸蘼��ㆭ촊㳳�㰿؋梢Ҩ฻謄₌櫄ڃ긅꘭藈�涀ꤡ�
[  749.633116][  T808] usb usb3-port1: attempt power cycle
[  750.017877][  T808] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  750.035750][T15005] could not allocate digest TFM handle blake2s-128-arm
[  750.046931][T13442] hub 6-1:5.71: Invalid hub with more than one config or interface
[  750.060708][  T808] usb 3-1: device descriptor read/8, error -71
[  750.069698][T13442] hub 6-1:5.71: probe with driver hub failed with error -22
[  750.111608][T13442] usb 6-1: USB disconnect, device number 39
[  750.315508][  T808] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  750.338339][  T808] usb 3-1: device descriptor read/8, error -71
[  750.465384][  T808] usb usb3-port1: unable to enumerate USB device
[  750.648250][T13442] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  750.807052][T13442] usb 2-1: Using ep0 maxpacket: 8
[  750.818943][T13442] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  750.827176][T13442] usb 2-1: config 2 has no interface number 0
[  750.834936][T13442] usb 2-1: config 2 interface 31 has no altsetting 0
[  750.844417][T13442] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  750.853715][T13442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.861835][T13442] usb 2-1: Product: syz
[  750.866070][T13442] usb 2-1: Manufacturer: syz
[  750.870757][T13442] usb 2-1: SerialNumber: syz
[  751.767625][T13442] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[  751.797280][T13442] usb 2-1: USB disconnect, device number 78
[  752.228292][ T1636] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  752.353664][T15046] netlink: 'syz.1.2977': attribute type 10 has an invalid length.
[  752.361760][T15046] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2977'.
[  752.390266][ T1636] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  752.409843][ T1636] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  752.436285][ T1636] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  752.464048][ T1636] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  752.479298][ T1636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.510566][ T1636] usb 3-1: Product: syz
[  752.524051][ T1636] usb 3-1: Manufacturer: syz
[  752.534654][ T1636] usb 3-1: SerialNumber: syz
[  752.556224][ T1636] usb 3-1: config 0 descriptor??
[  752.574497][T15043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  752.584134][T15043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  752.595336][ T1636] usb 3-1: ucan: probing device on interface #0
[  752.619041][T15056] xt_nfacct: accounting object `\�$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist
[  752.775117][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2983'.
[  752.796538][T15061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2983'.
[  752.803086][ T5947] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  752.813565][T15061] nbd: must specify at least one socket
[  752.963928][T15069] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value
[  752.997645][ T5947] usb 2-1: Using ep0 maxpacket: 8
[  753.012805][ T5947] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  753.026871][ T5947] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  753.037595][ T5947] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  753.054267][ T5947] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  753.066163][ T5947] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  753.082552][ T5947] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  753.092160][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.285196][ T1636] ucan 3-1:0.0: probe with driver ucan failed with error -22
[  753.334271][ T5947] usb 2-1: usb_control_msg returned -32
[  753.344472][ T5947] usbtmc 2-1:16.0: can't read capabilities
[  753.377579][T15087] netlink: 'syz.4.2995': attribute type 12 has an invalid length.
[  753.387331][T15087] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2995'.
[  753.521255][ T5947] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  753.681543][ T5947] usb 6-1: Using ep0 maxpacket: 32
[  753.688521][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  753.700353][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  753.710219][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  753.723210][ T5947] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  753.736502][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.750105][ T5947] usb 6-1: config 0 descriptor??
[  753.761860][T15092] syzkaller1: entered promiscuous mode
[  753.771070][T15092] syzkaller1: entered allmulticast mode
[  754.072488][ T1636] usb 3-1: USB disconnect, device number 82
[  754.210633][  T146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.229450][ T5947] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0020/input/input64
[  754.291759][T15096] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2998'.
[  754.337220][ T5947] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0020/input/input65
[  754.441911][  T146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.518602][ T5947] kye 0003:0458:5011.0020: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0
[  754.659894][  T146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.746737][  T146] batman_adv: batadv0: Removing interface: netdevsim0
[  754.755942][  T146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.984986][  T146] bridge_slave_1: left allmulticast mode
[  754.991404][  T146] bridge_slave_1: left promiscuous mode
[  754.997473][  T146] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.010088][  T146] bridge_slave_0: left allmulticast mode
[  755.015860][  T146] bridge_slave_0: left promiscuous mode
[  755.022636][  T146] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.038771][  T146] dvmrp1: left allmulticast mode
[  755.271606][  T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  755.284803][  T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  755.297483][  T146] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  755.312044][  T146] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  755.327631][  T146] bond0 (unregistering): Released all slaves
[  755.440071][  T146] tipc: Left network mode
[  755.499783][  T146] IPVS: stopping master sync thread 7338 ...
[  755.948886][ T5842] usb 2-1: USB disconnect, device number 79
[  756.085098][  T146] hsr_slave_0: left promiscuous mode
[  756.091731][  T146] hsr_slave_1: left promiscuous mode
[  756.098381][  T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  756.106023][  T146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.114916][  T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  756.122761][  T146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.145085][  T146] veth1_macvtap: left promiscuous mode
[  756.157555][  T146] veth0_macvtap: left promiscuous mode
[  756.165441][  T146] veth1_vlan: left promiscuous mode
[  756.170984][  T146] veth0_vlan: left promiscuous mode
[  756.529641][ T5947] usb 6-1: USB disconnect, device number 40
[  756.733831][  T146] team0 (unregistering): Port device team_slave_1 removed
[  756.753455][  T146] team0 (unregistering): Port device team_slave_0 removed
[  756.926789][T15140] bridge0: port 3(ipvlan1) entered blocking state
[  756.933666][T15140] bridge0: port 3(ipvlan1) entered disabled state
[  756.940493][T15140] ipvlan1: entered allmulticast mode
[  756.945949][T15140] veth0_vlan: entered allmulticast mode
[  756.957977][T15140] ipvlan1: left allmulticast mode
[  756.963342][T15140] veth0_vlan: left allmulticast mode
[  757.229742][T15152] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  757.275377][T15152] CIFS mount error: No usable UNC path provided in device string!
[  757.275377][T15152] 
[  757.289656][T15156] nfs: Unknown parameter 'smb3'
[  757.306918][T15155] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  757.316699][T15152] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  757.613988][  T808] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  757.688774][ T5909] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  757.809290][  T808] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  757.817835][  T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.828750][  T808] usb 6-1: config 0 has no interface number 0
[  757.835000][  T808] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  757.846230][  T808] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.860958][ T5909] usb 2-1: Using ep0 maxpacket: 8
[  757.866157][  T808] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  757.875977][  T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.885183][  T808] usb 6-1: Product: syz
[  757.889626][  T808] usb 6-1: Manufacturer: syz
[  757.895188][  T808] usb 6-1: SerialNumber: syz
[  757.901331][ T5909] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  757.912288][  T808] usb 6-1: config 0 descriptor??
[  757.924815][ T5909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  757.935117][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  757.944980][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  757.955715][ T5909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.971142][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  757.981878][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.141007][  T808] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71
[  758.163691][  T808] usb 6-1: USB disconnect, device number 41
[  758.216701][ T5909] usb 2-1: usb_control_msg returned -32
[  758.225670][ T5909] usbtmc 2-1:16.0: can't read capabilities
[  758.623880][T15190] syzkaller1: entered promiscuous mode
[  758.630640][T15190] syzkaller1: entered allmulticast mode
[  759.027620][  T808] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  759.490033][  T808] usb 6-1: unable to get BOS descriptor or descriptor too short
[  759.498794][  T808] usb 6-1: unable to read config index 0 descriptor/start: -71
[  759.506588][  T808] usb 6-1: can't read configurations, error -71
[  760.079863][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3016'.
[  760.363027][T15231] Bluetooth: MGMT ver 1.23
[  760.414710][T15234] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.3020'.
[  760.433674][T15234] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.3020'.
[  760.599007][T15244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3025'.
[  760.720473][T15248] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3027'.
[  760.731156][T15248] bridge_slave_1: default FDB implementation only supports local addresses
[  760.793025][T15250] pim6reg: entered allmulticast mode
[  760.820693][    T9] usb 2-1: USB disconnect, device number 80
[  760.881191][T14050] Bluetooth: hci4: ACL packet for unknown connection handle 172
[  760.886560][  T808] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  761.074433][  T808] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  761.084667][  T808] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  761.100485][  T808] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  761.110893][  T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.119872][  T808] usb 6-1: Product: syz
[  761.124205][  T808] usb 6-1: Manufacturer: syz
[  761.128878][  T808] usb 6-1: SerialNumber: syz
[  761.138631][  T808] usb 6-1: config 0 descriptor??
[  761.155006][  T808] gspca_main: sunplus-2.14.0 probing 055f:c630
[  761.172576][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3031'.
[  761.373018][T15240] netlink: 'syz.5.3023': attribute type 4 has an invalid length.
[  761.530736][T15273] netlink: 'syz.4.3032': attribute type 1 has an invalid length.
[  761.631246][T15240] syzkaller1: entered promiscuous mode
[  761.653666][T15240] syzkaller1: entered allmulticast mode
[  761.764036][  T808] usb 6-1: USB disconnect, device number 44
[  762.336213][T15301] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3034'.
[  762.356938][   T30] kauditd_printk_skb: 2492 callbacks suppressed
[  762.356957][   T30] audit: type=1326 audit(1773953582.264:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15300 comm="syz.4.3035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ee059c799 code=0x0
[  762.378810][T15301] bridge_slave_1: default FDB implementation only supports local addresses
[  762.501775][T15308] tmpfs: Unknown parameter 'usrquota
'
[  762.612545][T15314] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  762.625219][T15314] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock
[  762.633512][T15314] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  762.642823][T15314] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock
[  762.700813][ T1636] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  762.871572][ T1636] usb 2-1: Using ep0 maxpacket: 8
[  762.878422][ T1636] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  762.891056][ T1636] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  762.906710][ T1636] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  762.918227][ T1636] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  762.928261][ T1636] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  762.941340][ T1636] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  762.950482][ T1636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.969311][ T5909] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  763.140927][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  763.152131][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  763.165049][ T5909] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  763.174296][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.187033][ T5909] usb 6-1: config 0 descriptor??
[  763.194916][ T1636] usb 2-1: usb_control_msg returned -32
[  763.200803][ T1636] usbtmc 2-1:16.0: can't read capabilities
[  763.584230][T15318] syzkaller1: entered promiscuous mode
[  763.589826][T15318] syzkaller1: entered allmulticast mode
[  763.644928][ T5909] saitek 0003:06A3:0621.0021: ignoring exceeding usage max
[  763.654207][ T5909] hid_parser_main: 123 callbacks suppressed
[  763.654226][ T5909] saitek 0003:06A3:0621.0021: unknown main item tag 0x1
[  763.667376][ T5909] saitek 0003:06A3:0621.0021: collection stack underflow
[  763.674522][ T5909] saitek 0003:06A3:0621.0021: item 0 4 0 12 parsing failed
[  763.684561][ T5909] saitek 0003:06A3:0621.0021: parse failed
[  763.690535][ T5909] saitek 0003:06A3:0621.0021: probe with driver saitek failed with error -22
[  763.858159][ T5909] usb 6-1: USB disconnect, device number 45
[  764.784377][ T5909] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  764.946725][ T5909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  764.956821][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  764.968375][ T5909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  764.980776][ T5909] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  764.989910][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.999605][ T5909] usb 6-1: Product: syz
[  765.003827][ T5909] usb 6-1: Manufacturer: syz
[  765.008453][ T5909] usb 6-1: SerialNumber: syz
[  765.015833][ T5909] usb 6-1: config 0 descriptor??
[  765.026329][T15322] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  765.033810][T15322] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  765.043591][ T5909] usb 6-1: ucan: probing device on interface #0
[  765.728240][T15332] netlink: 'syz.4.3044': attribute type 4 has an invalid length.
[  765.742944][ T5909] ucan 6-1:0.0: probe with driver ucan failed with error -22
[  765.792980][ T5909] usb 2-1: USB disconnect, device number 81
[  765.867604][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'.
[  765.933673][T15339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3046'.
[  765.943171][T15339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3046'.
[  766.344519][ T5909] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  766.504762][ T5909] usb 2-1: Using ep0 maxpacket: 8
[  766.512297][ T5909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  766.517930][  T808] usb 6-1: USB disconnect, device number 46
[  766.531505][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  766.544440][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  766.554614][ T5909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  766.571767][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  766.581204][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.675948][T15345] netlink: 'syz.5.3049': attribute type 4 has an invalid length.
[  766.710531][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3049'.
[  766.770486][T15348] FAULT_INJECTION: forcing a failure.
[  766.770486][T15348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  766.784018][T15348] CPU: 0 UID: 0 PID: 15348 Comm: syz.5.3050 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  766.784048][T15348] Tainted: [L]=SOFTLOCKUP
[  766.784057][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  766.784069][T15348] Call Trace:
[  766.784078][T15348]  <TASK>
[  766.784087][T15348]  dump_stack_lvl+0xe8/0x150
[  766.784123][T15348]  should_fail_ex+0x412/0x560
[  766.784150][T15348]  _copy_from_user+0x2d/0xb0
[  766.784178][T15348]  do_sock_getsockopt+0x165/0x3f0
[  766.784225][T15348]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  766.784250][T15348]  ? __fget_files+0x3a0/0x420
[  766.784276][T15348]  ? __fget_files+0x2a/0x420
[  766.784309][T15348]  __x64_sys_getsockopt+0x1a4/0x240
[  766.784332][T15348]  do_syscall_64+0x14d/0xf80
[  766.784349][T15348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.784385][T15348]  ? clear_bhb_loop+0x40/0x90
[  766.784410][T15348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.784430][T15348] RIP: 0033:0x7fb66e19c799
[  766.784450][T15348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  766.784469][T15348] RSP: 002b:00007fb66f10e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  766.784486][T15348] RAX: ffffffffffffffda RBX: 00007fb66e415fa0 RCX: 00007fb66e19c799
[  766.784497][T15348] RDX: 0000000000000013 RSI: 0000000000000112 RDI: 0000000000000004
[  766.784528][T15348] RBP: 00007fb66f10e090 R08: 0000200000000180 R09: 0000000000000000
[  766.784542][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  766.784555][T15348] R13: 00007fb66e416038 R14: 00007fb66e415fa0 R15: 00007ffc555b6458
[  766.784586][T15348]  </TASK>
[  766.829555][ T5909] usb 2-1: GET_CAPABILITIES returned 0
[  766.972725][ T5909] usbtmc 2-1:16.0: can't read capabilities
[  767.057770][T15352] Invalid option length (1048467) for dns_resolver key
[  767.109217][    C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  767.131227][ T5909] usb 2-1: USB disconnect, device number 82
[  767.413199][T13442] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  767.573364][T13442] usb 6-1: Using ep0 maxpacket: 8
[  767.582472][T13442] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  767.591683][T13442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  767.600041][T13442] usb 6-1: Product: syz
[  767.604236][T13442] usb 6-1: Manufacturer: syz
[  767.608949][T13442] usb 6-1: SerialNumber: syz
[  767.616056][T13442] usb 6-1: config 0 descriptor??
[  767.627798][T13442] gspca_main: sq905-2.14.0 probing 2770:9120
[  767.796760][T15363] netlink: 'syz.4.3056': attribute type 4 has an invalid length.
[  768.064484][T13442] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  768.072320][T13442] sq905 6-1:0.0: probe with driver sq905 failed with error -71
[  768.082312][T13442] usb 6-1: USB disconnect, device number 47
[  768.171763][  T808] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  768.344603][  T808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  768.356468][  T808] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  768.366569][  T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.378378][  T808] usb 2-1: config 0 descriptor??
[  768.389680][  T808] pwc: Askey VC010 type 2 USB webcam detected.
[  768.816375][  T808] pwc: recv_control_msg error -32 req 02 val 2b00
[  768.825628][  T808] pwc: recv_control_msg error -32 req 02 val 2700
[  768.833409][  T808] pwc: recv_control_msg error -32 req 02 val 2c00
[  768.841025][  T808] pwc: recv_control_msg error -32 req 04 val 1000
[  768.848409][  T808] pwc: recv_control_msg error -32 req 04 val 1300
[  768.855838][  T808] pwc: recv_control_msg error -32 req 04 val 1400
[  768.863675][  T808] pwc: recv_control_msg error -32 req 02 val 2000
[  768.871520][  T808] pwc: recv_control_msg error -32 req 02 val 2100
[  768.878789][  T808] pwc: recv_control_msg error -32 req 04 val 1500
[  768.886010][  T808] pwc: recv_control_msg error -32 req 02 val 2500
[  768.893348][  T808] pwc: recv_control_msg error -32 req 02 val 2400
[  768.983953][T13442] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[  769.115073][T15366] netlink: 984 bytes leftover after parsing attributes in process `syz.1.3057'.
[  769.146268][T13442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 128, setting to 64
[  769.176255][T13442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  769.188866][T13442] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  769.198686][T13442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.206943][T13442] usb 6-1: Product: syz
[  769.211557][T13442] usb 6-1: Manufacturer: syz
[  769.216220][T13442] usb 6-1: SerialNumber: syz
[  769.225157][T13442] usb 6-1: config 0 descriptor??
[  769.233149][T15377] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  769.242509][  T808] pwc: recv_control_msg error -71 req 02 val 2900
[  769.250897][  T808] pwc: recv_control_msg error -71 req 02 val 2800
[  769.258131][  T808] pwc: recv_control_msg error -71 req 04 val 1100
[  769.267601][  T808] pwc: recv_control_msg error -71 req 04 val 1200
[  769.285725][  T808] pwc: Registered as video103.
[  769.292146][T13442] mcba_usb 6-1:0.0 can0: couldn't setup read URBs
[  769.298684][  T808] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67
[  769.322603][T13442] mcba_usb 6-1:0.0 can0: couldn't start device: -90
[  769.324848][  T808] usb 2-1: USB disconnect, device number 83
[  769.403434][T13442] mcba_usb 6-1:0.0: probe with driver mcba_usb failed with error -90
[  769.903642][T15395] dvmrp12: entered allmulticast mode
[  770.014956][T15398] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3062'.
[  770.036093][T15398] tipc: Enabling <ib:lo> not permitted
[  770.041953][T15398] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  770.166123][T15401] netlink: 'syz.1.3063': attribute type 4 has an invalid length.
[  770.201092][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'.
[  770.555423][  T808] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  770.768594][  T808] usb 2-1: Using ep0 maxpacket: 8
[  770.778131][  T808] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  770.796758][  T808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  770.808221][  T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  770.818418][  T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  770.828687][  T808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  770.842196][  T808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  770.851682][  T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  771.083734][  T808] usb 2-1: usb_control_msg returned -32
[  771.093826][  T808] usbtmc 2-1:16.0: can't read capabilities
[  771.470503][T15443] syzkaller1: entered promiscuous mode
[  771.479144][T15443] syzkaller1: entered allmulticast mode
[  771.906326][T15459] netlink: 'syz.4.3066': attribute type 4 has an invalid length.
[  771.943288][ T5909] usb 6-1: USB disconnect, device number 48
[  772.173989][T14086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  772.191094][T14086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  772.203854][T14086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  772.213063][T14086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  772.223049][T14086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  772.547020][T15468] chnl_net:caif_netlink_parms(): no params data found
[  772.706755][T15468] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.720534][T14050] Bluetooth: hci3: command 0x2016 tx timeout
[  772.727818][T15468] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.736713][T15468] bridge_slave_0: entered allmulticast mode
[  772.745493][T15468] bridge_slave_0: entered promiscuous mode
[  772.758409][T15468] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.768789][T15468] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.776271][T15468] bridge_slave_1: entered allmulticast mode
[  772.791946][T15468] bridge_slave_1: entered promiscuous mode
[  772.895737][T15493] overlayfs: failed to clone lowerpath
[  772.919738][T15493] netlink: 'syz.4.3069': attribute type 30 has an invalid length.
[  772.961112][T15468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  772.996747][T15468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  773.063949][T15468] team0: Port device team_slave_0 added
[  773.086619][T15468] team0: Port device team_slave_1 added
[  773.109214][ T5947] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  773.192223][T15468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  773.199294][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.228603][T15468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  773.243547][T15468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  773.250596][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.277017][T15468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  773.290465][ T5947] usb 6-1: Using ep0 maxpacket: 8
[  773.298906][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  773.315233][ T5947] usb 6-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30
[  773.326721][ T5947] usb 6-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  773.338504][ T5947] usb 6-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0
[  773.350160][ T5947] usb 6-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36
[  773.364783][ T5947] usb 6-1: config 0 interface 0 has no altsetting 0
[  773.373383][ T5947] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00
[  773.383148][ T5947] usb 6-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  773.392693][ T5947] usb 6-1: Manufacturer: syz
[  773.404708][ T5947] usb 6-1: config 0 descriptor??
[  773.406985][T15468] hsr_slave_0: entered promiscuous mode
[  773.418788][T15468] hsr_slave_1: entered promiscuous mode
[  773.427772][T15468] debugfs: 'hsr0' already exists in 'hsr'
[  773.436417][T15468] Cannot create hsr debugfs directory
[  773.625604][    T9] usb 2-1: USB disconnect, device number 84
[  773.707676][T15490] netdevsim netdevsim5: Direct firmware load for . failed with error -2
[  773.724908][T15490] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  773.950998][ T5947] itetech 0003:06CB:73F5.0022: unknown main item tag 0x0
[  773.975916][ T5947] itetech 0003:06CB:73F5.0022: unknown main item tag 0x0
[  773.990672][ T5947] itetech 0003:06CB:73F5.0022: item fetching failed at offset 3/5
[  774.015616][T15468] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  774.023579][ T5947] itetech 0003:06CB:73F5.0022: probe with driver itetech failed with error -22
[  774.049401][T15468] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  774.082845][T15468] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  774.103152][T15468] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  774.191017][   T30] audit: type=1326 audit(1773953593.344:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.4.3075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ee059c799 code=0x0
[  774.266059][T15468] 8021q: adding VLAN 0 to HW filter on device bond0
[  774.294278][T15468] 8021q: adding VLAN 0 to HW filter on device team0
[  774.313569][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.320855][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.342189][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.349438][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  774.402200][    T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  774.423240][ T5850] Bluetooth: hci1: command tx timeout
[  774.602058][    T9] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  774.626127][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  774.636072][T15468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  774.649902][    T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  774.660058][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.668174][    T9] usb 2-1: Product: syz
[  774.673045][    T9] usb 2-1: Manufacturer: syz
[  774.677794][    T9] usb 2-1: SerialNumber: syz
[  774.685811][    T9] usb 2-1: config 0 descriptor??
[  774.698465][    T9] gspca_main: sunplus-2.14.0 probing 055f:c630
[  774.910402][T15515] netlink: 'syz.1.3076': attribute type 4 has an invalid length.
[  775.055946][T15468] veth0_vlan: entered promiscuous mode
[  775.077536][T15468] veth1_vlan: entered promiscuous mode
[  775.142695][T15536] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3077'.
[  775.162449][T15515] syzkaller1: entered promiscuous mode
[  775.168521][T15515] syzkaller1: entered allmulticast mode
[  775.180088][T15468] veth0_macvtap: entered promiscuous mode
[  775.249168][T15468] veth1_macvtap: entered promiscuous mode
[  775.275787][T15468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.288422][    T9] usb 2-1: USB disconnect, device number 85
[  775.307795][T15468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  775.331016][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  775.341065][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  775.358391][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  775.368250][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.538425][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.549698][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.589950][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.597864][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.885805][T15545] binder: BC_ACQUIRE_RESULT not supported
[  775.891836][T15545] binder: 15544:15545 ioctl c0306201 200000000580 returned -22
[  775.995555][ T1636] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  776.108449][ T5909] usb 6-1: USB disconnect, device number 49
[  776.160780][T15556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  776.169791][ T1636] usb 7-1: Using ep0 maxpacket: 8
[  776.182477][ T1636] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  776.195057][ T1636] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  776.206290][ T1636] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  776.216541][ T1636] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  776.244484][ T1636] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  776.259115][ T1636] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  776.274209][ T1636] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.509048][ T1636] usb 7-1: usb_control_msg returned -32
[  776.515144][ T1636] usbtmc 7-1:16.0: can't read capabilities
[  776.515313][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3087'.
[  776.537746][T15568] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3087'.
[  776.646534][ T5850] Bluetooth: hci1: command tx timeout
[  776.848940][ T1636] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  776.894791][T15571] syzkaller1: entered promiscuous mode
[  776.900458][T15571] syzkaller1: entered allmulticast mode
[  777.014915][ T1636] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  777.038101][ T1636] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  777.059429][ T1636] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  777.070409][ T1636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.079585][ T1636] usb 6-1: Product: syz
[  777.084615][ T1636] usb 6-1: Manufacturer: syz
[  777.089750][ T1636] usb 6-1: SerialNumber: syz
[  777.101444][ T1636] usb 6-1: config 0 descriptor??
[  777.121534][T15575] netlink: 'syz.1.3090': attribute type 61 has an invalid length.
[  777.132276][ T1636] gspca_main: sunplus-2.14.0 probing 055f:c630
[  777.569959][T15570] syzkaller1: entered promiscuous mode
[  777.575735][T15570] syzkaller1: entered allmulticast mode
[  777.685542][T15539] usb 6-1: USB disconnect, device number 50
[  777.725354][ T5909] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  777.885407][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  777.893266][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short
[  777.902471][ T5909] usb 2-1: config 15 has an invalid interface number: 223 but max is 0
[  777.912447][ T5909] usb 2-1: config 15 has no interface number 0
[  777.919264][ T5909] usb 2-1: config 15 interface 223 altsetting 195 endpoint 0x5 has invalid maxpacket 1576, setting to 1024
[  777.931164][ T5909] usb 2-1: config 15 interface 223 altsetting 195 bulk endpoint 0x5 has invalid maxpacket 1024
[  777.942100][ T5909] usb 2-1: config 15 interface 223 altsetting 195 bulk endpoint 0xC has invalid maxpacket 8
[  777.952532][ T5909] usb 2-1: config 15 interface 223 has no altsetting 0
[  777.964564][ T5909] usb 2-1: New USB device found, idVendor=0fcf, idProduct=1003, bcdDevice=d1.1d
[  777.973759][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.984805][ T5909] usb 2-1: Product: syz
[  777.989064][ T5909] usb 2-1: Manufacturer: syz
[  777.995075][ T5909] usb 2-1: SerialNumber: syz
[  778.004775][T15586] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  778.012199][T15586] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  778.242416][T15586] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3094'.
[  778.281630][ T5909] cp210x 2-1:15.223: cp210x converter detected
[  778.292864][ T5909] cp210x 2-1:15.223: failed to get vendor val 0x370b size 1: -71
[  778.300866][ T5909] cp210x 2-1:15.223: querying part number failed
[  778.315880][ T5909] usb 2-1: cp210x converter now attached to ttyUSB0
[  778.333785][ T5909] usb 2-1: USB disconnect, device number 86
[  778.357633][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  778.368351][ T5909] cp210x 2-1:15.223: device disconnected
[  778.590930][    T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  778.753291][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  778.763413][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  778.775858][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  778.791985][    T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  778.801290][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.810174][    T9] usb 6-1: Product: syz
[  778.814405][    T9] usb 6-1: Manufacturer: syz
[  778.820431][    T9] usb 6-1: SerialNumber: syz
[  778.828100][    T9] usb 6-1: config 0 descriptor??
[  778.834973][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3098'.
[  778.847993][T15593] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  778.858501][T15593] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  778.871229][ T5850] Bluetooth: hci1: command tx timeout
[  778.880606][    T9] usb 6-1: ucan: probing device on interface #0
[  779.058501][T13184] usb 7-1: USB disconnect, device number 2
[  779.189221][ T1636] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  779.363972][ T1636] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  779.387346][ T1636] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  779.416540][ T1636] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  779.446244][ T1636] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  779.467327][ T1636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.488278][ T1636] usb 2-1: Product: syz
[  779.492533][ T1636] usb 2-1: Manufacturer: syz
[  779.497166][ T1636] usb 2-1: SerialNumber: syz
[  779.514401][ T1636] usb 2-1: config 0 descriptor??
[  779.534033][T15598] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  779.538131][    T9] ucan 6-1:0.0: probe with driver ucan failed with error -71
[  779.552204][T15598] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  779.579109][    T9] usb 6-1: USB disconnect, device number 51
[  779.587572][ T1636] usb 2-1: ucan: probing device on interface #0
[  780.249394][ T1636] ucan 2-1:0.0: probe with driver ucan failed with error -71
[  780.277129][ T1636] usb 2-1: USB disconnect, device number 87
[  780.410516][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3108'.
[  780.471868][ T5947] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  780.645514][ T5947] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  780.664164][ T5947] usb 6-1: config 0 has no interface number 0
[  780.677457][ T5947] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.726765][ T5947] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.759917][ T5947] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  780.790925][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.820277][ T5947] usb 6-1: config 0 descriptor??
[  780.973113][T15646] FAULT_INJECTION: forcing a failure.
[  780.973113][T15646] name failslab, interval 1, probability 0, space 0, times 0
[  781.002078][T15646] CPU: 1 UID: 0 PID: 15646 Comm: syz.1.3115 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  781.002113][T15646] Tainted: [L]=SOFTLOCKUP
[  781.002122][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  781.002135][T15646] Call Trace:
[  781.002144][T15646]  <TASK>
[  781.002153][T15646]  dump_stack_lvl+0xe8/0x150
[  781.002194][T15646]  should_fail_ex+0x412/0x560
[  781.002225][T15646]  should_failslab+0xa8/0x100
[  781.002248][T15646]  ? vm_area_dup+0x2b/0x680
[  781.002269][T15646]  kmem_cache_alloc_noprof+0x87/0x650
[  781.002299][T15646]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  781.002326][T15646]  ? arch_stack_walk+0xfb/0x150
[  781.002353][T15646]  vm_area_dup+0x2b/0x680
[  781.002379][T15646]  __split_vma+0x1dc/0xa40
[  781.002419][T15646]  ? __pfx___split_vma+0x10/0x10
[  781.002444][T15646]  ? ima_match_policy+0x2146/0x21e0
[  781.002481][T15646]  ? ima_match_policy+0x112/0x21e0
[  781.002513][T15646]  vms_gather_munmap_vmas+0x32d/0x1370
[  781.002553][T15646]  ? mtree_range_walk+0x6f9/0x8b0
[  781.002580][T15646]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  781.002615][T15646]  ? mas_find+0xa7d/0xd30
[  781.002641][T15646]  mmap_region+0x85b/0x2240
[  781.002692][T15646]  ? __pfx_mmap_region+0x10/0x10
[  781.002725][T15646]  ? ktime_get+0x45/0x220
[  781.002753][T15646]  ? ktime_get+0x45/0x220
[  781.002777][T15646]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  781.002806][T15646]  ? ktime_get+0x1f5/0x220
[  781.002912][T15646]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  781.002945][T15646]  ? __lock_acquire+0x6b5/0x2cf0
[  781.002979][T15646]  ? aa_file_perm+0x192/0x15e0
[  781.003003][T15646]  ? cap_mmap_addr+0xaf/0x100
[  781.003030][T15646]  ? bpf_lsm_mmap_addr+0x9/0x50
[  781.003050][T15646]  ? security_mmap_addr+0x71/0x240
[  781.003077][T15646]  ? shmem_mapping+0xd/0x50
[  781.003128][T15646]  ? memfd_check_seals_mmap+0xc5/0x200
[  781.003160][T15646]  do_mmap+0xc39/0x10c0
[  781.003201][T15646]  ? __pfx_do_mmap+0x10/0x10
[  781.003226][T15646]  ? down_write_killable+0x180/0x240
[  781.003255][T15646]  ? __pfx_down_write_killable+0x10/0x10
[  781.003281][T15646]  ? apparmor_mmap_file+0x2da/0x3e0
[  781.003381][T15646]  vm_mmap_pgoff+0x2c9/0x4f0
[  781.003413][T15646]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  781.003443][T15646]  ? __fget_files+0x2a/0x420
[  781.003475][T15646]  ? __fget_files+0x3a0/0x420
[  781.003501][T15646]  ? __fget_files+0x2a/0x420
[  781.003533][T15646]  ksys_mmap_pgoff+0x51e/0x760
[  781.003568][T15646]  do_syscall_64+0x14d/0xf80
[  781.003589][T15646]  ? trace_irq_disable+0x3b/0x150
[  781.003613][T15646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.003635][T15646]  ? clear_bhb_loop+0x40/0x90
[  781.003755][T15646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.003786][T15646] RIP: 0033:0x7f832699c799
[  781.003807][T15646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  781.003825][T15646] RSP: 002b:00007f8324bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  781.003847][T15646] RAX: ffffffffffffffda RBX: 00007f8326c15fa0 RCX: 00007f832699c799
[  781.003862][T15646] RDX: 00000000000001a0 RSI: 0000000000004000 RDI: 0000200000ffc000
[  781.003875][T15646] RBP: 00007f8324bf6090 R08: 0000000000000003 R09: 00000000db542000
[  781.003889][T15646] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[  781.003901][T15646] R13: 00007f8326c16038 R14: 00007f8326c15fa0 R15: 00007ffe83408f18
[  781.003934][T15646]  </TASK>
[  781.527931][ T5850] Bluetooth: hci1: command tx timeout
[  781.820425][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'.
[  782.705100][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  782.868484][    T9] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  782.877604][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  782.907013][    T9] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  782.916688][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.925953][    T9] usb 7-1: Product: syz
[  782.931080][    T9] usb 7-1: Manufacturer: syz
[  782.936015][    T9] usb 7-1: SerialNumber: syz
[  782.952594][    T9] usb 7-1: config 0 descriptor??
[  782.986445][    T9] gspca_main: sunplus-2.14.0 probing 055f:c630
[  783.468353][T15672] syzkaller1: entered promiscuous mode
[  783.474175][ T5947] usbhid 6-1:0.1: can't add hid device: -71
[  783.495604][ T5947] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[  783.518922][T15672] syzkaller1: entered allmulticast mode
[  783.550435][ T5947] usb 6-1: USB disconnect, device number 52
[  783.654577][T15691] net_ratelimit: 333 callbacks suppressed
[  783.654598][T15691] openvswitch: netlink: Multiple metadata blocks provided
[  783.674933][T13184] usb 7-1: USB disconnect, device number 3
[  783.827463][ T5850] Bluetooth: hci4: command 0x2016 tx timeout
[  783.838186][T15704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3131'.
[  783.944421][ T5947] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  784.062082][ T1636] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  784.108780][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  784.119195][ T5947] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  784.128503][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.139438][ T5947] usb 6-1: config 0 descriptor??
[  784.151603][ T5947] pwc: Askey VC010 type 2 USB webcam detected.
[  784.222348][ T1636] usb 2-1: Using ep0 maxpacket: 32
[  784.237405][ T1636] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  784.245758][ T1636] usb 2-1: config 0 has no interface number 0
[  784.257500][ T1636] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  784.267270][ T1636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.275458][ T1636] usb 2-1: Product: syz
[  784.279934][ T1636] usb 2-1: Manufacturer: syz
[  784.284616][ T1636] usb 2-1: SerialNumber: syz
[  784.294984][ T1636] usb 2-1: config 0 descriptor??
[  784.584058][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00
[  784.593488][ T5947] pwc: recv_control_msg error -32 req 02 val 2700
[  784.600834][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00
[  784.607235][T13184] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  784.615717][ T5947] pwc: recv_control_msg error -32 req 04 val 1000
[  784.622884][ T5947] pwc: recv_control_msg error -32 req 04 val 1300
[  784.630349][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  784.639672][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  784.740880][ T1636] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  784.752086][ T1636] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  784.772918][T13184] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  784.782670][T13184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.791063][T13184] usb 7-1: Product: syz
[  784.795338][T13184] usb 7-1: Manufacturer: syz
[  784.800046][T13184] usb 7-1: SerialNumber: syz
[  784.862506][ T5947] pwc: recv_control_msg error -32 req 04 val 1400
[  784.871488][ T5947] pwc: recv_control_msg error -32 req 02 val 2000
[  784.879127][ T5947] pwc: recv_control_msg error -32 req 02 val 2100
[  784.887803][ T5947] pwc: recv_control_msg error -32 req 04 val 1500
[  784.895001][ T5947] pwc: recv_control_msg error -32 req 02 val 2500
[  784.903761][ T5947] pwc: recv_control_msg error -32 req 02 val 2400
[  784.913953][ T5947] pwc: recv_control_msg error -32 req 02 val 2600
[  784.921362][ T5947] pwc: recv_control_msg error -32 req 02 val 2900
[  784.928964][ T5947] pwc: recv_control_msg error -32 req 02 val 2800
[  784.939353][ T5947] pwc: recv_control_msg error -32 req 04 val 1100
[  784.951219][ T5947] pwc: Registered as video103.
[  784.961152][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68
[  785.204039][T15539] usb 6-1: USB disconnect, device number 53
[  785.253323][T13184] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  785.285333][T13184] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  786.028216][T13442] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  786.066604][ T1636] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  786.082628][ T1636] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61
[  786.191416][T13442] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  786.202828][T13442] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  786.257241][T13442] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  786.298374][T13442] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  786.314003][T13184] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  786.327821][T13184] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  786.342676][T13442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.352690][T13442] usb 6-1: Product: syz
[  786.357251][T13442] usb 6-1: Manufacturer: syz
[  786.364036][T13442] usb 6-1: SerialNumber: syz
[  786.383431][T13442] usb 6-1: config 0 descriptor??
[  786.390110][T15726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  786.403602][T15726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  786.410824][T13184] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  786.423118][T13442] usb 6-1: ucan: probing device on interface #0
[  786.436193][T13184] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  786.467725][T13184] usb 7-1: USB disconnect, device number 4
[  786.915969][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  787.079608][T13442] ucan 6-1:0.0: probe with driver ucan failed with error -71
[  787.129808][T13442] usb 6-1: USB disconnect, device number 54
[  787.448636][T13442] usb 2-1: USB disconnect, device number 88
[  787.567238][T13184] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  787.705957][T13184] usb 7-1: device descriptor read/64, error -71
[  787.962383][T13184] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  788.005311][   T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  788.122713][T13184] usb 7-1: device descriptor read/64, error -71
[  788.179396][   T10] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  788.192101][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  788.207924][   T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  788.217631][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.226342][   T10] usb 6-1: Product: syz
[  788.231570][   T10] usb 6-1: Manufacturer: syz
[  788.236434][   T10] usb 6-1: SerialNumber: syz
[  788.242565][T13184] usb usb7-port1: attempt power cycle
[  788.266002][   T10] usb 6-1: config 0 descriptor??
[  788.282599][   T10] gspca_main: sunplus-2.14.0 probing 055f:c630
[  788.357953][T13442] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  788.544570][T13442] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  788.601571][T13442] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  788.606479][T13184] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  788.619241][T13442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  788.635005][T13442] usb 2-1: Product: syz
[  788.640668][T13442] usb 2-1: Manufacturer: syz
[  788.645589][T13442] usb 2-1: SerialNumber: syz
[  788.670146][T13184] usb 7-1: device descriptor read/8, error -71
[  788.753223][T15749] syzkaller1: entered promiscuous mode
[  788.758994][T15749] syzkaller1: entered allmulticast mode
[  788.885381][T13442] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  788.906706][ T5947] usb 6-1: USB disconnect, device number 55
[  788.935994][T13184] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  788.990384][T13184] usb 7-1: device descriptor read/8, error -71
[  789.119145][T13184] usb usb7-port1: unable to enumerate USB device
[  789.160841][    C0] usblp0: nonzero write bulk status received: -71
[  789.161978][ T1636] usb 2-1: USB disconnect, device number 89
[  789.192801][ T1636] usblp0: removed
[  789.736712][ T5947] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  789.912787][ T5947] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  789.923760][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  789.936378][ T5947] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  789.950624][ T5947] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  789.959790][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.968367][ T5947] usb 6-1: Product: syz
[  789.972716][ T5947] usb 6-1: Manufacturer: syz
[  789.977351][ T5947] usb 6-1: SerialNumber: syz
[  789.985862][ T5947] usb 6-1: config 0 descriptor??
[  789.992545][T15760] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  790.000193][T15760] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  790.009912][ T5947] usb 6-1: ucan: probing device on interface #0
[  790.234884][T15772] netlink: 'syz.1.3150': attribute type 3 has an invalid length.
[  790.449609][ T5947] usb 6-1: ucan: device reported invalid tx-fifo size
[  790.459919][ T5947] usb 6-1: ucan: probe failed; try to update the device firmware
[  790.687364][ T5947] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  790.858466][ T5947] usb 2-1: Using ep0 maxpacket: 16
[  790.866118][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  790.878752][ T5947] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  790.887987][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  790.890582][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  790.896223][ T5947] usb 2-1: Product: syz
[  790.907836][ T5947] usb 2-1: Manufacturer: syz
[  790.912630][ T5947] usb 2-1: SerialNumber: syz
[  790.919580][ T5947] usb 2-1: config 0 descriptor??
[  790.932642][ T5947] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  790.942120][ T5947] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  791.063534][    T9] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  791.073658][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  791.086304][    T9] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  791.096555][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.106104][    T9] usb 7-1: Product: syz
[  791.110464][    T9] usb 7-1: Manufacturer: syz
[  791.115155][    T9] usb 7-1: SerialNumber: syz
[  791.123618][    T9] usb 7-1: config 0 descriptor??
[  791.133784][    T9] gspca_main: sunplus-2.14.0 probing 055f:c630
[  791.154390][T15779] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3152'.
[  791.577662][T15781] syzkaller1: entered promiscuous mode
[  791.583246][T15781] syzkaller1: entered allmulticast mode
[  791.609088][ T5947] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  791.675534][T13442] usb 7-1: USB disconnect, device number 9
[  791.854639][T15779] kvm_intel: kvm [15778]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2
[  792.087870][ T5850] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  792.374761][ T5947] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  792.414241][ T5947] em28xx 2-1:0.0: board has no eeprom
[  792.483206][ T5947] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  792.501202][ T5947] em28xx 2-1:0.0: dvb set to bulk mode.
[  792.513882][T13442] em28xx 2-1:0.0: Binding DVB extension
[  792.541341][ T5947] usb 2-1: USB disconnect, device number 90
[  792.563408][ T5947] em28xx 2-1:0.0: Disconnecting em28xx
[  792.651676][T13442] em28xx 2-1:0.0: Registering input extension
[  792.658774][ T5947] em28xx 2-1:0.0: Closing input extension
[  792.694007][T15794] usb usb8: usbfs: process 15794 (syz.6.3157) did not claim interface 6 before use
[  792.758196][T13442] usb 6-1: USB disconnect, device number 56
[  792.836375][ T5947] em28xx 2-1:0.0: Freeing device
[  792.886715][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  792.962375][T15801] rdma_op ffff88802b9909f0 conn xmit_rdma 0000000000000000
[  793.054876][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3161'.
[  793.243525][T15815] FAULT_INJECTION: forcing a failure.
[  793.243525][T15815] name failslab, interval 1, probability 0, space 0, times 0
[  793.256516][T15815] CPU: 1 UID: 0 PID: 15815 Comm: syz.6.3165 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  793.256548][T15815] Tainted: [L]=SOFTLOCKUP
[  793.256557][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  793.256571][T15815] Call Trace:
[  793.256579][T15815]  <TASK>
[  793.256588][T15815]  dump_stack_lvl+0xe8/0x150
[  793.256625][T15815]  should_fail_ex+0x412/0x560
[  793.256655][T15815]  should_failslab+0xa8/0x100
[  793.256677][T15815]  ? do_getname+0x2e/0x250
[  793.256702][T15815]  kmem_cache_alloc_noprof+0x87/0x650
[  793.256741][T15815]  do_getname+0x2e/0x250
[  793.256763][T15815]  ? getname_flags+0x11/0x20
[  793.256790][T15815]  do_sys_openat2+0xca/0x200
[  793.256820][T15815]  ? __pfx_do_sys_openat2+0x10/0x10
[  793.256849][T15815]  ? ksys_write+0x242/0x270
[  793.256870][T15815]  ? __pfx_ksys_write+0x10/0x10
[  793.256893][T15815]  __x64_sys_openat+0x138/0x170
[  793.256926][T15815]  do_syscall_64+0x14d/0xf80
[  793.256946][T15815]  ? trace_irq_disable+0x3b/0x150
[  793.256970][T15815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.256991][T15815]  ? clear_bhb_loop+0x40/0x90
[  793.257016][T15815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.257036][T15815] RIP: 0033:0x7fb51619c799
[  793.257056][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  793.257071][T15815] RSP: 002b:00007fb517109028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  793.257094][T15815] RAX: ffffffffffffffda RBX: 00007fb516416090 RCX: 00007fb51619c799
[  793.257109][T15815] RDX: 0000000000040242 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  793.257124][T15815] RBP: 00007fb517109090 R08: 0000000000000000 R09: 0000000000000000
[  793.257137][T15815] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  793.257149][T15815] R13: 00007fb516416128 R14: 00007fb516416090 R15: 00007ffc0d5488e8
[  793.257181][T15815]  </TASK>
[  793.519413][ T5947] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  793.714537][ T5947] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  793.723565][ T5947] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  793.736140][ T5947] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  793.747192][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.755423][ T5947] usb 2-1: Product: syz
[  793.759810][ T5947] usb 2-1: Manufacturer: syz
[  793.764651][ T5947] usb 2-1: SerialNumber: syz
[  793.772559][ T5947] usb 2-1: config 0 descriptor??
[  793.789166][ T5947] gspca_main: sunplus-2.14.0 probing 055f:c630
[  793.990729][T15832] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3171'.
[  794.128235][    T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  794.189378][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3173'.
[  794.233500][T15807] syzkaller1: entered promiscuous mode
[  794.239229][T15807] syzkaller1: entered allmulticast mode
[  794.299229][    T9] usb 6-1: Using ep0 maxpacket: 8
[  794.308913][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  794.318867][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[  794.329412][    T9] usb 6-1: can't read configurations, error -71
[  794.339034][   T10] usb 2-1: USB disconnect, device number 91
[  794.502213][T13442] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  794.664591][T13442] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  794.674863][T13442] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  794.686884][T13442] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  794.701244][T13442] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  794.710787][T13442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.719096][T13442] usb 7-1: Product: syz
[  794.723455][T13442] usb 7-1: Manufacturer: syz
[  794.728259][T13442] usb 7-1: SerialNumber: syz
[  794.735174][T13442] usb 7-1: config 0 descriptor??
[  794.741172][T15839] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  794.750469][T15839] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  794.764323][T13442] usb 7-1: ucan: probing device on interface #0
[  794.916223][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3177'.
[  794.990130][T15851] Bluetooth: MGMT ver 1.23
[  795.206554][T13442] usb 7-1: ucan: failed to retrieve device info
[  795.221275][T13442] usb 7-1: ucan: probe failed; try to update the device firmware
[  795.237444][T13442] usb 7-1: USB disconnect, device number 10
[  795.838167][ T5947] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  795.853853][T15853] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI
[  795.865872][T15853] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[  795.874298][T15853] CPU: 0 UID: 0 PID: 15853 Comm: syz.1.3178 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  795.885236][T15853] Tainted: [L]=SOFTLOCKUP
[  795.889569][T15853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  795.899626][T15853] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0
[  795.905098][T15853] Code: 01 00 74 08 4c 89 f7 e8 74 d8 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be
[  795.924702][T15853] RSP: 0018:ffffc90007ae7860 EFLAGS: 00010006
[  795.930770][T15853] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000
[  795.938760][T15853] RDX: 1ffff92000f5cf18 RSI: ffffffff8e4d2edc RDI: ffffffff8c4a8700
[  795.946733][T15853] RBP: ffffc90007ae7960 R08: 0000000000000003 R09: 0000000000000004
[  795.954701][T15853] R10: dffffc0000000000 R11: fffff52000f5cf28 R12: 0000000000000000
[  795.962669][T15853] R13: ffff888037e534d0 R14: 0000000000000018 R15: ffffc90007ae7ae0
[  795.970636][T15853] FS:  00007f8324bb46c0(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000
[  795.979560][T15853] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  795.986138][T15853] CR2: 00007fb517128fd0 CR3: 000000004d732000 CR4: 00000000003526f0
[  795.994111][T15853] Call Trace:
[  795.997393][T15853]  <TASK>
[  796.000325][T15853]  ? __pfx_rwsem_mark_wake+0x10/0x10
[  796.005615][T15853]  ? do_raw_spin_lock+0x12b/0x2f0
[  796.010731][T15853]  rwsem_del_wake_waiter+0x25d/0x2e0
[  796.016030][T15853]  rwsem_down_write_slowpath+0xa6f/0x1080
[  796.021776][T15853]  ? rwsem_down_write_slowpath+0x4a3/0x1080
[  796.027674][T15853]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  796.033830][T15853]  ? css_rstat_updated+0x23a/0x530
[  796.038942][T15853]  ? __pfx_css_rstat_updated+0x10/0x10
[  796.044421][T15853]  ? __se_sys_mremap+0x473/0x11d0
[  796.049471][T15853]  down_write_killable+0x1eb/0x240
[  796.054622][T15853]  ? __pfx_down_write_killable+0x10/0x10
[  796.060266][T15853]  ? handle_mm_fault+0x275c/0x3170
[  796.065406][T15853]  __se_sys_mremap+0x473/0x11d0
[  796.070272][T15853]  ? __pfx___se_sys_mremap+0x10/0x10
[  796.075562][T15853]  ? _raw_spin_unlock_irq+0x23/0x50
[  796.080769][T15853]  ? lockdep_hardirqs_on+0x7a/0x110
[  796.085965][T15853]  ? _raw_spin_unlock_irq+0x2e/0x50
[  796.091165][T15853]  ? __se_sys_rt_sigprocmask+0x22f/0x2a0
[  796.096821][T15853]  ? __pfx___se_sys_rt_sigprocmask+0x10/0x10
[  796.102811][T15853]  ? exc_page_fault+0x6a/0xc0
[  796.107491][T15853]  ? __x64_sys_mremap+0x20/0xc0
[  796.112350][T15853]  do_syscall_64+0x14d/0xf80
[  796.116947][T15853]  ? trace_irq_disable+0x3b/0x150
[  796.122073][T15853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.128149][T15853]  ? clear_bhb_loop+0x40/0x90
[  796.132841][T15853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.138737][T15853] RIP: 0033:0x7f832699c799
[  796.143157][T15853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.162763][T15853] RSP: 002b:00007f8324bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  796.171181][T15853] RAX: ffffffffffffffda RBX: 00007f8326c16180 RCX: 00007f832699c799
[  796.179151][T15853] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ffd000
[  796.187120][T15853] RBP: 00007f8326a32c99 R08: 0000200000ff5000 R09: 0000000000000000
[  796.195090][T15853] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  796.203069][T15853] R13: 00007f8326c16218 R14: 00007f8326c16180 R15: 00007ffe83408f18
[  796.211092][T15853]  </TASK>
[  796.214132][T15853] Modules linked in:
[  796.218047][T15853] ---[ end trace 0000000000000000 ]---
[  796.223532][T15853] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0
[  796.229012][T15853] Code: 01 00 74 08 4c 89 f7 e8 74 d8 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be
[  796.248636][T15853] RSP: 0018:ffffc90007ae7860 EFLAGS: 00010006
[  796.254718][T15853] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000
[  796.262692][T15853] RDX: 1ffff92000f5cf18 RSI: ffffffff8e4d2edc RDI: ffffffff8c4a8700
[  796.270662][T15853] RBP: ffffc90007ae7960 R08: 0000000000000003 R09: 0000000000000004
[  796.278638][T15853] R10: dffffc0000000000 R11: fffff52000f5cf28 R12: 0000000000000000
[  796.286610][T15853] R13: ffff888037e534d0 R14: 0000000000000018 R15: ffffc90007ae7ae0
[  796.294578][T15853] FS:  00007f8324bb46c0(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000
[  796.303507][T15853] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  796.310087][T15853] CR2: 00007fb517128fd0 CR3: 000000004d732000 CR4: 00000000003526f0
[  796.318123][T15853] Kernel panic - not syncing: Fatal exception
[  797.431274][T15853] Shutting down cpus with NMI
[  797.436663][T15853] Kernel Offset: disabled
[  797.441011][T15853] Rebooting in 86400 seconds..