last executing test programs:

2m46.522592631s ago: executing program 2 (id=3039):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
syz_open_dev$sg(0x0, 0x0, 0x202001)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001680)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x2a, "8f4c6c1ee008e6b7fb0000e60080b8785de0000100000000000000000000000000000000002100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f40000000000000000fea216070000168757b77f852aa600", [0x18000000000000, 0x22000000000002]}})
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x20000010)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
close(r2)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0)
pipe(&(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

2m44.681540134s ago: executing program 2 (id=3043):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
socket(0x3, 0x4, 0x20040035)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1f, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280})
chdir(&(0x7f0000000540)='./cgroup\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r5, 0x7ffffffc, 0x0)
getdents64(r5, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x1)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000a9c000/0x1000)=nil, 0x1000)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2)
socket$inet6(0xa, 0x2, 0x0)

2m42.315398948s ago: executing program 2 (id=3046):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30"], 0x5c}}, 0x44001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r1, 0x0, {0x2a00, 0x80010000, 0x55, 0x3, 0x48e0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8db4afac10087539797902d00050020a1a903fe01177d3d058dd228008300000000000000000000000000000000000000000000000000000800", "642c083a63d46b4ad07f346003d8a0a9453fa47138cd000000000200", [0x0, 0x8]}})

2m42.148249831s ago: executing program 2 (id=3047):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x5000000)

2m41.938317007s ago: executing program 2 (id=3050):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
syz_open_dev$sg(0x0, 0x0, 0x202001)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001680)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x2a, "8f4c6c1ee008e6b7fb0000e60080b8785de0000100000000000000000000000000000000002100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f40000000000000000fea216070000168757b77f852aa600", [0x18000000000000, 0x22000000000002]}})
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x20000010)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
close(r2)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0)
pipe(&(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

2m40.778720412s ago: executing program 2 (id=3056):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)
fsync(r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000004980), 0x1, 0x2)
ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000004a00)={0x0, 0x2, 0x8, '\x00', &(0x7f00000049c0)=0xc})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112640000000000bf201000800000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20400)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000180), 0x9, 0x688c0)
getsockopt$inet6_tcp_int(r9, 0x6, 0x2a, 0x0, &(0x7f0000002000))
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat2(r10, &(0x7f0000000380)='./cgroup\x00', r10, &(0x7f00000003c0)='./mnt\x00', 0x2)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {0x2}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x40004)

2m25.653295593s ago: executing program 32 (id=3056):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)
fsync(r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000004980), 0x1, 0x2)
ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000004a00)={0x0, 0x2, 0x8, '\x00', &(0x7f00000049c0)=0xc})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112640000000000bf201000800000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20400)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000180), 0x9, 0x688c0)
getsockopt$inet6_tcp_int(r9, 0x6, 0x2a, 0x0, &(0x7f0000002000))
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat2(r10, &(0x7f0000000380)='./cgroup\x00', r10, &(0x7f00000003c0)='./mnt\x00', 0x2)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {0x2}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x40004)

5.613784968s ago: executing program 4 (id=3903):
unshare(0x28020980)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x34, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000003c0)={0x28, 0x0, r7, r5, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000000)={0x10, 0x0, r9})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdc, 0xf5, 0x1e, 0x10, 0x93a, 0x2601, 0xffbc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xa6, 0x40, 0xd, [{{0x9, 0x4, 0xdd, 0x1, 0x0, 0x7d, 0x36, 0x2f, 0x2}}]}}]}}, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
poll(0x0, 0x0, 0x6)
syz_io_uring_setup(0x48ba, &(0x7f0000000180)={0x0, 0xfffffffc, 0x20, 0x0, 0x333}, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0500, 0x0)
r10 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000)
recvfrom$l2tp6(r10, &(0x7f00000002c0)=""/192, 0xc0, 0x2100, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0}, 0x20)

5.494322127s ago: executing program 3 (id=3905):
ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f00000000c0)={{&(0x7f0000000640)={'Accelerator\x00'}}, 0x80})
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="4e9374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000})

5.276887333s ago: executing program 3 (id=3907):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {r1, r2/1000+10000}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0)
setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x1})
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x0, 0xe, 0xeb, {0xeb, 0x0, "d5c3923c680963e1622a357431380f69d8a5e54d9e9c90f7183e3a338a5dd05993063ea5216f55f9a376507902a16b19bd491e8aa937872d844580658e163c25473e5e83baa42eafb7c56e1e7c99a0e153540a81a002f10cf25853e350643d8c9a423c7ed66a909ed7a3c918377c7c1c15428f8e3b91a32a8d7c4347cffb821f40c8beac7fafbd41dbeef15fa7e95bc62fd624fd87f5d992dcec1f5b8b59d7bf204e4ebcbdd9c0f9fadb5a663d0f864c9145c091790d369868e9e005994a1dc40b759158a1dbe9fe20b4093425f3cb40631f37e159e0cf54474eb5f4b79398bd34dbb3548847393e2b"}}, &(0x7f0000000200)={0x0, 0x3, 0x73, @string={0x73, 0x3, "4a90065a4f3862a808bddb3898971f7ac32791c091a0558617e989c704f668fd3591d596e27ab892e8e792c0375261c8c3ed37711d65bd80264b29fef5f1653cb820df5a6956a4573f6e8b0cfce3cbf080a05cce7ba4b4cd5c3153b03fc8b5c658b8d836f0f6d8c797a91110a032b81d1e"}}, &(0x7f0000000000)={0x0, 0x22, 0x24, {[@global=@item_4={0x3, 0x1, 0x0, "0d1a1d2b"}, @global=@item_4={0x3, 0x1, 0x7, "4fd1471a"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x2, 0x1, 0x1, "cc9b"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0xb, "cb4f913c"}, @global=@item_4={0x3, 0x1, 0x4, "702666a8"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x1, "c6f84989"}, @local=@item_4={0x3, 0x2, 0x9, "226bdebc"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x8e1}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x10, 0x5a, "7dae03cdacb4a9d20f945cb811d81222cc428e7bb785ad5091788f1e45c2b0f158931a115b38f0483567bb48320c959f86adc42667d47c031dbd3ec14073f4173325a7256cc9628c415daecd72586f7fe88b1fc10919a20079a7"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x1, 0x6b, "22447c6a7359003ca9fad34685d16ac886f7dc6434433aea088fb4474ea789016356153f2900e2da4975be6b318f80f7aac96d2954afc0b183f43f3ef181e3d707f740d7431b16d80ff66df62550fc7a9823205a13e3c447781fe4abc6097baeb200ea175d1d9faeb45775"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x19, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0}, 0x0)

3.955652577s ago: executing program 4 (id=3910):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=@raw=[@generic={0x6, 0x0, 0x9, 0x0, 0xffffffff}], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25}, 0x94)

3.7578619s ago: executing program 4 (id=3912):
socket$inet6(0xa, 0x3, 0xff)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socket$netlink(0x10, 0x3, 0xa)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioprio_get$pid(0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000006d9000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xc0001, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
syz_emit_ethernet(0x96, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@llc={0x4, {@snap={0x1, 0x0, '\a', "c570f9", 0xf9, "7c3476943e1fa3f934c4d9b15d8192d03c283ff4d0a60017dc29a6530b384d6bab11d2ec9c7869403b2ff16040b5e48bd91e7828ee3dc2e31c761b5c56161a3c3d995f596d4e4074875d3b123c25ce2a0b88579eb4f519acc486e98d3ba90cc0295ee7a96dfd03c1e30f88aa2141c59276a5ff02f97760ac2445a4f395450aea"}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
mkdirat$cgroup(r3, &(0x7f0000001e40)='syz0\x00', 0x1ff)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000002c0))
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x3})
socket(0x2a, 0x2, 0xfffffffc)
unshare(0x26020480)

2.645464366s ago: executing program 4 (id=3920):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0, 0x4000}, 0x10001}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/234, 0xea}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000100)=""/26, 0x1a}], 0x5}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000004e40)=""/4088, 0xff8}, {&(0x7f0000000340)=""/113, 0x71}], 0x4}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0)

2.591043568s ago: executing program 4 (id=3922):
setfsgid(0xee00)
syz_emit_ethernet(0x78, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff64871cf8e66999a2bed3d688a848008100340008004dbc00620065000002899078e0000001ac141439f45ff1ad36219383c505095b44db95f9b43e440481609153406d0cc1186ea415801738eaec1a87e9e55e34a4ea24723295d24d2d8b099079dbb2f734ff900a35dd6ae0811b86f1928fde63880fce"], 0x0)
socket$packet(0x11, 0xa, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
socket$netlink(0x10, 0x3, 0xb)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1, 0x0, 0x0, 0x2000000}, 0x40002001)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x10, 0x6, @link_local}, 0x14)
syz_emit_ethernet(0x2bf, &(0x7f0000000b80)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x289, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x80}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x100, {0x9, 0x6, "506380", 0x1, 0x6c, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [@routing={0x21, 0xe, 0x2, 0xb, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @rand_addr=' \x01\x00', @private1, @remote, @rand_addr=' \x01\x00', @private0, @local]}, @fragment={0x6, 0x0, 0x9, 0x1, 0x0, 0x1c, 0x66}, @fragment={0x33, 0x0, 0x4, 0x0, 0x0, 0x6, 0x68}, @srh={0x8, 0x12d, 0x4, 0x0, 0x1, 0x28, 0x23}, @dstopts={0x11, 0x0, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x1c}]}, @routing={0x1, 0x2, 0x1, 0x52, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x2c, 0x2, 0x4, 0x1, 0x8, 0x0, 0x7, [@private0]}, @fragment={0x87, 0x0, 0x15, 0x1, 0x0, 0x12, 0x67}, @hopopts={0x33, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}, @generic={0x80, 0xa3, "1fc852f8dce71c70100aea0769c534b46c353210c5ac8e7bd876a89c7a6e061b8b34ee556a9deefcaf6a1e2b6c7aa2501d9c6b05c4e58be1bdd4a280a97cc44a4131ebca806d1d15f70d9619238bf93a77199e1d82a4115cb7fee84df3245e0b14ee09ab03ca41ad6690a33d81c2c6d3db6a1d7578bd71640cb4b533ce476b90b50d3a8c886bf71d3737ddaf1e5a64c8691531730b8d4ff1c7bc214a9596b1c668dcaf"}, @pad1, @enc_lim={0x4, 0x1, 0xa}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x38, {0x1, 0x4131, 0x6f, 0xfffd, [0x100, 0x5, 0x409, 0x6, 0x1ab, 0x2]}}]}, @fragment={0x0, 0x0, 0xf, 0x0, 0x0, 0xa, 0x64}], "65b82cde127df42f8db1e934ff3a0226815d86596997fb7579e19575e5c01083f3d446fd8352572bd717e47d1d45c0bc4906b97ac4e751c7412a0948719655785c31356727d749415f20e20ab20d3822d967888107205e8da5a8b6832e0eacb65114d18962b7dba265"}}}}}}}, 0x0)

2.192975941s ago: executing program 3 (id=3925):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @empty}, 0x2a0})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f00000001c0))
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
connect$unix(r6, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYRES16=r9, @ANYRES32=r5, @ANYRESOCT=r9, @ANYRES16=r9, @ANYRES64=r8])
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006001b00d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8000000000020104000000000000000002000005240002801400018008000100000c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001800c0002800500010088000000140001800800010064010102080002007f00000100"/128], 0x80}}, 0x0)

1.562715888s ago: executing program 0 (id=3927):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xc, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x0, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x10, 0xc, 0xfc, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x8, 0x11, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x0, 0x1}, {0x4000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x3, 0x6e, 0x2, 0xff, 0x4, 0x80, 0x3, 0xfc}, {0xeeee8000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x52, 0x2, 0x2, 0x7}, {0xeeef0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8000, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x7, 0x10800000000000c5]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000f08"])
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3010, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]})

1.549381021s ago: executing program 4 (id=3928):
unshare(0x20000400)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1}, 0x7, 0x80, &(0x7f0000000580)="28580182dd73c7c50cda47d0bc0d9b7a9e23ec172d9fca406c90cca7f8727ad9398ad6dd75364c44f205c4d65d777ce8f3439cb497d5325d3e8671a00eba2922705f12ec7bff11ae2f44aef6e2a8de8a38677e3dfab8b6961ac57bf0942fe3b48ee52bee934b50878b1a9a8698508196e7824140937c185abe5c5c45532387ef51f963b60d382a3a2c9a71bf9514b8398194bdfce3b1ffa3bc04336b7a73da1c896c4a609fa81d79c5a85df8c5ed15ae39a6c52539a8c25f0e", 0xb9, 0x7, 0x4, 0x4, 0x4, 0x9, &(0x7f0000000300)="41a6e931e9da019c4dba86d210752c4b5577fa6ef1e155b980382c2dc7a47537240e454d5ca2fb6ed7dcfa89d710a8b204c1840f534d72f16bdb4c38a5b9666f9a5a85cf51644d33310b527fb91a3ff2c47e5cfd5331be9ede59616b1bfe61e59b26e9a8be2463db2b54e9818c4f1606cc62e16aa38664d5dab6"})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca746d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000380)='\'', 0x1)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28}, 0x28)
unshare(0x800)
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c6, 0x800, 0x1000, 0x5cc, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

1.357628353s ago: executing program 0 (id=3931):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000010000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0)

1.241931691s ago: executing program 5 (id=3932):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf248}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r6 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000080)={0x801, 0x8080000, 0x0, r6})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0x1a000, 0x8})
r7 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef)
r8 = timerfd_create(0x0, 0x80000)
timerfd_settime(r8, 0x3, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0)
r9 = timerfd_create(0x0, 0x80000)
timerfd_settime(r9, 0x3, &(0x7f0000000540)={{}, {0x77359400}}, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x3)
r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/561, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23d)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r11, 0xc0285629, &(0x7f0000000180)={0x0, 0x1, 0x7, '\x00', &(0x7f00000000c0)=0x6})
sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000340), 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x154}}, 0x0)

1.241807619s ago: executing program 0 (id=3933):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x10, 0x5})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010)

993.850781ms ago: executing program 0 (id=3936):
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c000680050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xfffffffc}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000580)={{r1}, "cd9d7ca7e6dcbcba98cca6bfd4fa917efe1fe719a3f63d085c643fdde38b1442f3d6f607bb2aea4238072d6b39e1b5e47acbe528e774989ecd73aa72aa140c876e2caa8e125e16517f48217a46cd74aad7153dbe867bc7488d24190798615f9393b936b1b7909858efed4ad8a52ce7ff4737f359b508970edcf87f9f2736e1eae84adc7286cff7f1c540b0cafc737dc9059e448b5c434cfc5c31000368e2fe5861d804254138ed51929e161ac111d05184aaaaca85b03e3b5bf5379180ced39f5713f5f7d33110084b07c2c7a33e43bb8dfb5dc86d8c53fd4e7a5b8aef7937c11058b5ff10518263f4c9d83cdfa3dcd30b3f325f33a3324673598de76cc5fcbb8d930681410c4a76a948fcf2338588fa65d9ea9f1e47fdc041dfed658abc097fcfd8f3f2e3393831dd475d2ce5bc23e6d217c13450f70abf5beac8e1b7488d6cfae9413cc8c4f593fcf82b2b5828e4f2e114702096ef79bd94203b46edecb880ead64fd9e80aad3084b738737216f309834c96297ce25e5eb0bbfa79481f1cbbe977d7bc2a66d3ab9754b314174abf46b20524da9ae3590596cc31f7c8b65841965b280f980eedd39dac0b303d113656cdfd21d8cf6ecee2061bbbccaadaecfe703fccc892e64eed4b52bc4235fbead083b3ac838d1a045039a1bea02e506a47419e8e3cbbd77cfa1cc7bafb613b6d35345dbb59542a90737349f145a448c8a29456ad6c3233ef5fa7486754666edeb280ddafa669577ff6921dc3a74c072101f8931568fb8153a4627c579f7bacd22ba9326deef142545541d83730d4d590868ca2e5775e589984d920d24304df4cc700e50c93618227ce5745f24e54f572b18f5ebc57fc52a912893adf0f407e6bb7a0d2eff2cf25120995c4951bff8659e6e07954525366249765de26335bfe049687ce9fbe30c305a01f41c75d2823d12d735d943639b035d94db74777c53d612f56d419af8a60577af7b6b3a3929da4c91003aed86868c7becf51f360f992da3336649981d029f42be5cbf2e47817e5d21a60253252840cca90ea6cbb14ab1a70e6862aea8008d4d92c1cca23dd6094cf0d3983fd92427b23118a63b357749a4d4c3e21321c706e4a55dedae7233a0e36c676d483d87960cbfd54e466e58fc2aefc565c82f54f7fa11ebe064718b26de2835e317e4074a5491f191417d3b1a99cc5bf02181b919f0ddd66083f08019ada5b06674e9facf9d117543826d4ddefd88a7afdda9ff913eaf177a069cc4afe3a8f93c4d32c0856f051f2f07ad8226d2bfea1aea54a5e2680812ebfde7be86afe80c80b6883265701984a6c20850d15b342e47d2a26b26ec9f989fe34637ebe4c05a6ad01b93891db32302a26b985a62716a72c2abbc7c67879caca3c80164dc3aa0d20c3e8a3d58b8098df092f375e98d83e3abf16ac89a296c1e235726cecb0cb0f95c3f86ddb7285374d083413b661cc2e11526c6024823fcd560e8e43730a8d1907b3196b5eb99d112110e30d0b92e972f9619edcc9996dbcf512b750d7044d8b92175a72499b68d9b9688286e7a23f3fb786a8d0e71993115eb85f9c533df2732b344c0af0465644bb6eade7b31ab70badd0a51fa38beedafb842df5dee86c9fe3f95cf29e766648161c169e76a76dfd82b615815e98c88822c44f68a9f9cee3190dfde3e3ffa05371c4bdc8b06ae38d5c6deaabf5ae468b98c115f8bea511fe3b797dcfc5f704d8983fb3cf355e1ef5987d27cc4126a0c74b29ac136b86a16af98090e05e2c56a0fe253a84add5924acc5187ed44f4cc48f6082c0165d1f56c7573704b85d75add39a772d39c4385e4bf20234fe8d32839dbdfa5d9ddc6657a067abb331ef4d4322d50a16876a96e269bd7dc0d97438590f69928c9e025f20ea54ce5aaa75a84da7709bed1c0bd8a7775131f2f4b75b833fc97c81655f5dbc23d49c824f4f8a3f6c5b62dfaeaa07b13a648a5ba544525302cdea9bc1e79908b8e854a05eba0e0d341e113f0a4db3ec822d949db93bc346d8f2ece8380fa069f7bc22abbca7db1dca0f675f8056fb9d0fc349e9df1c065a8927ac558a30b714bdbfc1ae37d0c037eb16d9e04d049200fd9db7391bab76fa542658ab109c4f2e2c9c4857ebd92189042244c1a3e69284f0f43dfb760e05a157e7a0ea4832e9e9eb24f77deeedc3e38687b1642b4a7b673979b26de157f6059129c25311fa1ea32e67858b52b1b03535f95644c00f36d91a5c24182ab98bf9e6eae66ef2c21b78fea837bb19917dc649925d18661b9642ccebbf96f4d3d1c660fe975ab828ccd203a6e80fba1d1ad063c31ab7f782123ed15a9aaeda733c5f90553f9a10477b982c6bfb30374f25746410fecb44e07ec8aed2c62149f585cd5e5f832eaf5f166d1e07d4b9277fc95eed612b5b626c03abd25249311d45d8f1095ff93c935f7e2e405483e8fe347052117406278725a161f1c811bbd6f6be7ff03df627ded3de9030835cd1107210085c15803005877c27599df45e316851b3b55918df5140c4d425c0d27c2b60033ccda3c42be0f67bbfa0b9dfb6c8d3568d7f97d73d4e7c5a6f2ed146bebd61958f999c56b5a8f3d9782af0e459adbcbe34f7d0ba8d0d3a15e671236a2a0ae0138bdc4a93313c4bf6c83e07171bfa66660d26dc62636585725d9a03e077f47a81b550e82bd11ee07708c415ebe69cfca0a88e5e20a8846dd9c2a67d1dcc9e27b65f349a6bc704a739d545aa3cc4a47f9824de069d8cdda401692d6d2d7096e2332d4dfa4c9f3a88069dbe4ffac9608303091859f280aab01837707ee48870a775454c6c3f97d69b10b882caa0393d5097831ffc0fc80f203e6a4a46687065d4f3f28e116cf06582b050bdc511161ce3b8f90b48fdc84fb5f163e38c39a1061c862bb31cb8a9265cddd4a77fbaa18821ca9c6479f94e5ca80b297f62580787990b419449882441e07d57fcd60a625a345be9b5f2376751f82206047358c032df45c2574ca26e63afcf16eabf1ed02800917b737d34eb641625e1ed3584f609ce59fc84e8309dbde0ecabd74c71c1cfea8012df233b3dcb3d93957059a13e984d31e691e4a2e0a7cb46f41eca8538861a219d4a1b095e991020288d8d5556662245e1c73b1ef39863e6de44dd04224478b8a42be544f4b7f76a0a34a65fb4e67b6366cc2301ea12ccfef9921b2dcefbad0715aa7c064fef42334d247e0ad77862c50b940ec754a88df8dd3d1077a265fba2525201301c5f8bffde58828e4885e632965a269460245351d3c62ccd56f6ef0d8f8bbc495c08a47b1e292b58a8e60883dc007a9180640e09fce1912e2f0e46090b7f9a7156f81070bddb49a72ad47a3ca80f36223cfede2f7ba408d19a388492fb2b702bf3af3883e4e7bd2b3a303b3d6f1f37a915d1dfd5d69bbcec5dc9504bc9846c258f0a18400b8d2e0b3f33657a29af35e8e421a4a5be9664b35efb567239b75c61b02acda1b81778f48028a9a5fde7ed4c35aa8fd85e2f94995fbccc3f7cbe39ae84891ac170d23554f8acc62e098c47c663e52f002e20208ceca19723f1c4eccb9657ec8fa566afe7bbf6a20c3bb016430af7192778e75142bf471087a302318b94f8b9e7164a6a810e94a928f04c9ea07aa45619be1e535beedb98ff5af05cb73f204c9ad242aab53e0e7c3449fbbb542ff7195d0de8d95496097d9b93d81032a0a0a26854434a019403f238971cec8ad6e9b8712e82fc5fc40e8d6337e0fd0e71f2e0320307edb9e7a6bea04607e42942507d1d2b54a26eb36c0ad7a1e9187605cdecf95538f3c463e6d4a1e0131c90776f87603ce1878055638f5f201be6ad4aec53baba31ff24e62e3128c97659bad55fe9d48c6736492c90ba25297b1cc8a05bc071c583b49a931e06b8b454fec75c7575c6a8cd440724d33ce90d3cc775819178c48087d15f2529e37db5d677dd73519ed0ae6ffbe86dd6184f5656b974dc2b1731a5064cb7a8d19cf25eee11352408ef883bf34e9cd5774d5d44e5818368620e604e547e08326a3f0fbb8e0246ca0c1f362ced6079a0eb0591dec6020b33622a66718be3b0dd08de792fa29f74eb2ea98f9574bafc779fb6448a984cf8da52d986d9b10144e5ba4123cd5e756d32c544c3f82fc544a0c6b44e2c02513021f6cb9b4646bd5b44bbffd6e81c8a98ea03c7d9eae66722c2a9ffd0117a84739897e0354b8688b254df90375e664e239c190bdf5eb303895d6ab13c5449925d5a1de3decc4992608967ce29345124329a8031a70d82600253f359d04d208a7dd164b58143c6c8733a8a5d56983315aba73647376ae53b205a7bac1d3502382808310346f827648c01077c163743a2ff1f6c03756149af9c74750109b0888ca5be4eda506a61484739aba556e98cabf56887723c807ed15ab9d98e30c4a859989eb69bb49cdcc52c6052f74141e5091d025c99a34dd2ce92f7ed90817b613e347d9515bfda0ff5b98110b8b6811948b79d306c87a52d0cf0108ea99c141a15b48d7f502706a2d503432cfb0e39e75671274b43d9741fab5354c25783aef85f2b499c7c1c2d34e7fb36c4e286ed0e056b5d51090ec837e65cb0e232c8285b64b0168c4b0ed74c6ceb301c1b07443862e4add72b0f336ea845dc843f70025cd729f0778986dff146d3f9389539f359b0f1ed58c4f262db572dd6c9e97d727ed05087faf101696a0a215e9ba475938ebd0d87f2159fbe2e60811ccb2ca581440c535aefddc8f915d432aa7b2dc55eaf5fd91b3405732dbe786d1a6694a283a1023d96e15bf2b451ddf684ad5744074c85ccfa2d974a2498b532f288a25d97fb59e548299e4ea99a8a777494efef6f9c96524d5d2d51b3289cdb30de7e0d9c12aca1299b90badc13354f5a5f8e651a2650dfc0acb58d14772c85ee58bed9d44bf299e351a1c55557c0885c234b87264e7d3a59e31c1180d8215f8aed196d2f39f6dfce26d7d2cfc97cdc070215f026adb897856b40433eac811db1f45a4719957884db79626145e0b9fd01cc5b178c8ce5c12dc851646d4724198df908b6a477cd5989cd9e1088fb8dabfd76f137d3b0a27c6993ca5fc47ce3679c0fc7f8bf35ec171b6bc0d1d9409ef9e8eae46106a586a6d38c86eb5b69283836045b6af5d92d214dd0b55949f621a2f777cd2cd5995ca963de18c6d7ff72287230ba8c463f648e0dfd748f619914c63a7e9ed9914afa79414b9f0f884926feec859e9077ec3254a117bd87c30b6fc676d625578a481815389bc81139bd7dff28e880530d63beef965c515269e9938ce8e599f0ceed58f4f68cf4ff9823fac865eca4c6e85482eadf6fa2f6118691b27043a3aa8667f194103abe8d0fdcb99d5aa09e3a1a3c524616e58256f613afc43abcf2943e7016afd02f42e680f1340ecf59500a1feba82f5d99e47e9955325ade608fe5b4a9e32aaa92dc56486f484e9e303f19933870b908b492a19c31582373a7171c31121a99ee466af43081967b7e185ae6bddddf872e5d0366eca23d2160cb3e4ec4a6db1a8a12c318249124086ce0e53fabb5e9e4a464ef7220e210c0b426a65e1b034cfc70138d22bdc21a21816714202d9d9e45592f1498256c8bd17a1a4aed4fc7c55d88a69adb363b788a3d1b78a9089c75aef6849e8c7307b4029c702c979f9330b91d2d9685eb2f1c96058b3331fc28c2911e84cbae8a229b6f5d55dc04537eb6c037fcc1661eae61c280ee413fbd23091b3fa0f58aa0351c13fcd905b8506b1c22e2cc7296de12a99e1cf986c"})
syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x68801, 0x124)
pwritev2(r5, &(0x7f00000004c0)=[{&(0x7f0000000380)='HJ', 0x2}], 0x1, 0x8, 0x3ff, 0x11)
syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = fsopen(&(0x7f0000000000)='nilfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f00000000c0)='3', 0x0)
io_setup(0x3ff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)

984.726695ms ago: executing program 3 (id=3937):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4, 0x580}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

932.26292ms ago: executing program 3 (id=3938):
r0 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00')
read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x2020)
ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000000c0)={0x1, 0x169})
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000600))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x30}], 0x1}, 0x0)
preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/190, 0xbe}], 0x1, 0x7, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x27, 0x800004, 0x3, 0x1b, 0x6, 0x0, 0x4, 0xdd, 0x1})

837.952926ms ago: executing program 3 (id=3939):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x48, 0x1, "7150c3092614c35ffbce7d236b379afee2a8f0e78eb88213b6167b7c62b16be9712897c0e1228c7aeb7f85ae898dd528d1c031f11039ecce27622b6f7d062dd156583e40"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00')
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8)
sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8)
listen(r3, 0x100101)
accept4(r3, 0x0, 0x0, 0x80800)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r5 = dup(r1)
write$UHID_INPUT(r5, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006)

825.968216ms ago: executing program 1 (id=3940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x4000000000000000)

776.66467ms ago: executing program 1 (id=3941):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000000002000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0)

706.020503ms ago: executing program 1 (id=3942):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000001800010025bd7000000000000a0000000003000600000000140007003f000000000000000000000000000001"], 0x6c}}, 0x0)

694.429336ms ago: executing program 1 (id=3943):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x9, 0x0, 0x2, 0x0, 'syz1\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x7, 0x100000001, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd, 0x0, 0x2, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0x0, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x7ff, 0x4, 0x100000000000, 0xa, 0x0, 0x0, 0x0, 0x38d, 0x0, 0x0, 0x4010000000000, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x3a98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]})

663.0092ms ago: executing program 1 (id=3944):
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)="01f1", 0x2}], 0x1)

289.661591ms ago: executing program 5 (id=3945):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24)

279.982321ms ago: executing program 5 (id=3946):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x24, 0x5a, 0xcfb1b0de919feb77, 0x0, 0x80, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20044816)
r2 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="080039000300000005082be37a4f66e672380000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r4=>0xffffffffffffffff})
dup3(r0, r4, 0x80000)

221.96463ms ago: executing program 5 (id=3947):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_ethernet(0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaccaaaaaaaaaaaaaa1c0806030460050602000301000100de836e320f0cc6edf5"], 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffdaf}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x4600000000000000)

66.005874ms ago: executing program 1 (id=3948):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x88, 0x18, 0x6f, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"})

65.735873ms ago: executing program 0 (id=3949):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbf, &(0x7f0000000e80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "0100007f0000e2e7000000000000"}, {0x6, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x22}]}}, "ef"}}}}}, 0x0)

65.653208ms ago: executing program 5 (id=3950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a0300000000000000000001000000090001f573797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)

21.791579ms ago: executing program 0 (id=3951):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
socket$packet(0x11, 0x3, 0x300)
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0xf, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x80}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x100, {0x9, 0x6, "506380", 0x1, 0x6c, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1}}}}}}}, 0x0)

0s ago: executing program 5 (id=3952):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x2000000000000000, 0x4000}, 0x4000)

kernel console output (not intermixed with test programs):

T16881] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  639.213430][T16881] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  639.221242][T16881] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  639.227767][T16881] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  639.235169][T16881] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  639.252764][T16902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3364'.
[  639.427649][T16908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3367'.
[  639.584167][   T44] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  639.610909][T16921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3369'.
[  639.813256][   T44] usb 6-1: device descriptor read/64, error -71
[  639.997397][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3372'.
[  640.011424][T16927] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  640.018659][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout
[  640.033611][ T5931] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  640.063863][   T44] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  640.204301][T13097] vhci_hcd: vhci_device speed not set
[  640.213843][   T44] usb 6-1: device descriptor read/64, error -71
[  640.224557][ T5931] usb 4-1: Using ep0 maxpacket: 16
[  640.234522][ T5931] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  640.246628][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.344621][   T44] usb usb6-port1: attempt power cycle
[  640.400715][T16929] block device autoloading is deprecated and will be removed.
[  640.414015][T16929] syz.1.3373: attempt to access beyond end of device
[  640.414015][T16929] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  640.429686][ T5931] usb 4-1: Product: syz
[  640.445456][ T5931] usb 4-1: Manufacturer: syz
[  640.450124][ T5931] usb 4-1: SerialNumber: syz
[  640.475418][ T5931] usb 4-1: config 0 descriptor??
[  640.683844][T13092] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  640.695460][   T44] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  640.763872][   T44] usb 6-1: device descriptor read/8, error -71
[  640.844365][T13092] usb 1-1: not running at top speed; connect to a high speed hub
[  640.854056][T13092] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  640.876173][T13092] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  640.886174][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout
[  640.916486][T13092] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  640.927637][T13092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.946763][T13092] usb 1-1: Product: syz
[  640.950983][T13092] usb 1-1: Manufacturer: 㐊⦶ꂼ纂蹈痌ꃤ鞺锓롺姅⃟ꀼ㧙᪀쇽疡띨掓뮂똓ꕍ玀籾楔㣪䌻闸蓽쨳딌↚査ጪ蟔㎯෴ᶫੈꞭ☴옮㧮譴뷿ᯒꮒ蛄萝믡꘣丸鑍⬁퐬㙍薐领㕿뽐ီ敮뻦牗茚贈뜅श筸꫈뎰稽蘎흚娑넙ꩪ⒦䔩秊냉됺셡
[  640.979083][    C1] vkms_vblank_simulate: vblank timer overrun
[  640.986657][T13092] usb 1-1: SerialNumber: syz
[  641.043822][   T44] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  641.085177][   T44] usb 6-1: device descriptor read/8, error -71
[  641.120979][T16943] veth1: entered promiscuous mode
[  641.127472][T16943] macvtap1: entered allmulticast mode
[  641.133251][T16943] veth1: entered allmulticast mode
[  641.153667][T16943] veth1: left allmulticast mode
[  641.159741][T16943] veth1: left promiscuous mode
[  641.194134][   T44] usb usb6-port1: unable to enumerate USB device
[  641.204164][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout
[  641.212984][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout
[  641.229087][T13092] usb 1-1: 0:2 : does not exist
[  641.271928][T13092] usb 1-1: USB disconnect, device number 75
[  641.283771][T15219] Bluetooth: hci5: command 0x0c1a tx timeout
[  641.404642][ T8408] udevd[8408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  641.773824][T13091] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  641.954419][T13091] usb 2-1: Using ep0 maxpacket: 16
[  641.964228][T13091] usb 2-1: config 8 has no interfaces?
[  641.972403][T13091] usb 2-1: New USB device found, idVendor=05cc, idProduct=3353, bcdDevice=d6.bc
[  641.986996][T13091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.014736][T13091] usb 2-1: Product: syz
[  642.020776][T13091] usb 2-1: Manufacturer: syz
[  642.029408][T13091] usb 2-1: SerialNumber: syz
[  642.095296][T15219] Bluetooth: hci3: command 0x0c1a tx timeout
[  642.444440][T13091] usb 2-1: USB disconnect, device number 70
[  642.856219][ T5931] speedtch 4-1:0.0: speedtch_bind: data interface not found!
[  642.865873][ T5931] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  642.977339][T15219] Bluetooth: hci0: command 0x0c1a tx timeout
[  642.997451][ T5931] usb 4-1: USB disconnect, device number 83
[  643.043708][   T44] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  643.051338][T13093] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  643.070044][T16977] ip6erspan0: entered allmulticast mode
[  643.206413][T16984] netlink: 'syz.3.3390': attribute type 27 has an invalid length.
[  643.265165][   T44] usb 1-1: Using ep0 maxpacket: 16
[  643.277765][T13093] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  643.292170][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout
[  643.292210][T15219] Bluetooth: hci2: command 0x0c1a tx timeout
[  643.310283][T13093] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  643.363609][T15219] Bluetooth: hci5: command 0x0c1a tx timeout
[  643.383703][T13091] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  643.394691][T16984] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.402079][T16984] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.435974][   T44] usb 1-1: config 0 has no interfaces?
[  643.441972][T13093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  643.483893][   T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  643.499558][T13093] usb 5-1: Product: syz
[  643.512622][   T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  643.521028][T13093] usb 5-1: Manufacturer: syz
[  643.542075][T13093] usb 5-1: SerialNumber: syz
[  643.553675][   T44] usb 1-1: Manufacturer: syz
[  643.629249][T13091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  643.645465][T16984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.663632][T16984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.701784][T16984] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  643.714158][   T44] usb 1-1: config 0 descriptor??
[  643.719309][T13091] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  643.732358][T13091] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  643.741552][T13091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.751770][T13091] usb 2-1: config 0 descriptor??
[  643.858880][T13097] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  643.910640][T13093] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  643.955239][T16977] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  644.000129][T16969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.044635][T13097] usb 4-1: Using ep0 maxpacket: 16
[  644.054920][T16969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  644.098000][T13097] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  644.119265][T13097] usb 4-1: config 0 has no interface number 0
[  644.159736][T13097] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  644.169260][T15219] Bluetooth: hci3: command 0x0c1a tx timeout
[  644.189590][T13097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.199752][T13097] usb 4-1: Product: syz
[  644.205656][T13097] usb 4-1: Manufacturer: syz
[  644.213748][T13097] usb 4-1: SerialNumber: syz
[  644.254717][T16989] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.263122][T16989] 8021q: adding VLAN 0 to HW filter on device team0
[  644.270479][T13097] usb 4-1: config 0 descriptor??
[  644.280216][T16989] net_ratelimit: 32 callbacks suppressed
[  644.280229][T16989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  644.324562][   T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.335451][T13097] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  644.342390][   T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.352032][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.368405][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.465463][T16994] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  644.475369][T13091] hid (null): unknown global tag 0xe
[  644.488337][T13091] asus 0003:0B05:18C6.002E: reserved main item tag 0xe
[  644.495938][T13091] hid_parser_main: 34 callbacks suppressed
[  644.495961][T13091] asus 0003:0B05:18C6.002E: unknown main item tag 0x4
[  644.518596][T13091] asus 0003:0B05:18C6.002E: unknown main item tag 0x1
[  644.561511][T13091] asus 0003:0B05:18C6.002E: unknown global tag 0xe
[  644.569738][T13091] asus 0003:0B05:18C6.002E: item 0 0 1 14 parsing failed
[  644.579247][T13091] asus 0003:0B05:18C6.002E: Asus hid parse failed: -22
[  644.586883][T13091] asus 0003:0B05:18C6.002E: probe with driver asus failed with error -22
[  645.056107][T15219] Bluetooth: hci0: command 0x0c1a tx timeout
[  645.363627][T15219] Bluetooth: hci2: command 0x0c1a tx timeout
[  645.363735][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout
[  645.380115][T13091] usb 1-1: USB disconnect, device number 76
[  645.448405][ T5865] Bluetooth: hci5: command 0x0c1a tx timeout
[  645.692476][T17006] syzkaller0: entered promiscuous mode
[  645.698858][T17006] syzkaller0: entered allmulticast mode
[  645.736094][T13093] usb 5-1: USB disconnect, device number 73
[  645.751267][T13093] usblp0: removed
[  645.763905][T13091] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[  645.855371][T13097] gspca_spca1528: reg_w err -110
[  645.862753][T13097] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  645.904003][T13091] usb 1-1: device descriptor read/64, error -71
[  645.944505][T17012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3399'.
[  646.057723][T13097] usb 2-1: USB disconnect, device number 71
[  646.153711][T13091] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  646.293803][T13091] usb 1-1: device descriptor read/64, error -71
[  646.744973][T13098] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  646.745260][T13091] usb usb1-port1: attempt power cycle
[  646.790866][T13089] usb 4-1: USB disconnect, device number 84
[  646.853010][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  646.853049][   T30] audit: type=1326 audit(1755840348.157:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.3.3404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6120f8ebe9 code=0x0
[  646.953774][T13098] usb 6-1: Using ep0 maxpacket: 16
[  647.081684][T13098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.113760][T13091] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  647.143815][T13098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.154519][T13091] usb 1-1: device descriptor read/8, error -71
[  647.198355][T13098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  647.246578][T13098] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  647.272888][T13098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.305146][T13098] usb 6-1: config 0 descriptor??
[  647.393703][T13091] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  647.425558][T13091] usb 1-1: device descriptor read/8, error -71
[  647.554009][T13091] usb usb1-port1: unable to enumerate USB device
[  647.563628][T17027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3405'.
[  647.573116][T17027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3405'.
[  647.661802][T17029] fuse: Bad value for 'fd'
[  647.732140][T13098] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  647.741158][T13098] microsoft 0003:045E:07DA.002F: item fetching failed at offset 30/34
[  647.750281][T13098] microsoft 0003:045E:07DA.002F: parse failed
[  647.756785][T13098] microsoft 0003:045E:07DA.002F: probe with driver microsoft failed with error -22
[  647.806912][T17037] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode
[  647.818252][T17037] macvtap1: entered promiscuous mode
[  647.826650][T17037] mac80211_hwsim hwsim31 wlan1: left promiscuous mode
[  647.906608][T17041] tipc: Invalid UDP bearer configuration
[  647.906635][T17041] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  648.083878][   T44] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  648.183693][T13091] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  648.244040][   T44] usb 4-1: Using ep0 maxpacket: 32
[  648.250819][   T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  648.266401][   T44] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  648.278245][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.289687][   T44] usb 4-1: Product: syz
[  648.295767][   T44] usb 4-1: Manufacturer: syz
[  648.300533][   T44] usb 4-1: SerialNumber: syz
[  648.307469][   T44] usb 4-1: config 0 descriptor??
[  648.313924][T17033] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  648.326014][   T44] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61
[  648.345666][T13091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  648.356979][T13091] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  648.366717][T13091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.385677][T13091] usb 5-1: config 0 descriptor??
[  648.478030][T13098] usb 6-1: USB disconnect, device number 13
[  648.538325][   T44] usb 4-1: USB disconnect, device number 85
[  648.544400][    C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  648.597295][T17043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.628541][T17043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.658815][T13091] usbhid 5-1:0.0: can't add hid device: -71
[  648.675798][T13091] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  648.715791][T13091] usb 5-1: USB disconnect, device number 74
[  648.768862][T17065] FAULT_INJECTION: forcing a failure.
[  648.768862][T17065] name failslab, interval 1, probability 0, space 0, times 0
[  648.809312][T17065] CPU: 1 UID: 0 PID: 17065 Comm: syz.5.3418 Not tainted syzkaller #0 PREEMPT(full) 
[  648.809341][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  648.809362][T17065] Call Trace:
[  648.809369][T17065]  <TASK>
[  648.809378][T17065]  dump_stack_lvl+0x189/0x250
[  648.809406][T17065]  ? __pfx____ratelimit+0x10/0x10
[  648.809433][T17065]  ? __pfx_dump_stack_lvl+0x10/0x10
[  648.809457][T17065]  ? __pfx__printk+0x10/0x10
[  648.809484][T17065]  ? __pfx___might_resched+0x10/0x10
[  648.809502][T17065]  ? lock_acquire+0x5f/0x360
[  648.809531][T17065]  should_fail_ex+0x414/0x560
[  648.809557][T17065]  should_failslab+0xa8/0x100
[  648.809584][T17065]  __kmalloc_noprof+0xcb/0x4f0
[  648.809608][T17065]  ? __pfx_dmabuffs_dname+0x10/0x10
[  648.809630][T17065]  ? tomoyo_encode+0x28b/0x550
[  648.809651][T17065]  tomoyo_encode+0x28b/0x550
[  648.809671][T17065]  tomoyo_realpath_from_path+0x58d/0x5d0
[  648.809692][T17065]  ? tomoyo_domain+0xd9/0x130
[  648.809713][T17065]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  648.809738][T17065]  tomoyo_path_number_perm+0x1e8/0x5a0
[  648.809763][T17065]  ? clear_bhb_loop+0x60/0xb0
[  648.809784][T17065]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  648.809811][T17065]  ? __seccomp_filter+0x765/0x1a40
[  648.809835][T17065]  ? __pfx___seccomp_filter+0x10/0x10
[  648.809869][T17065]  security_file_ioctl+0xcb/0x2d0
[  648.809896][T17065]  __se_sys_ioctl+0x47/0x170
[  648.809920][T17065]  do_syscall_64+0xfa/0x3b0
[  648.809949][T17065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.809970][T17065]  ? clear_bhb_loop+0x60/0xb0
[  648.809990][T17065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.810008][T17065] RIP: 0033:0x7fb86cf8ebe9
[  648.810026][T17065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  648.810043][T17065] RSP: 002b:00007fb86de96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  648.810065][T17065] RAX: ffffffffffffffda RBX: 00007fb86d1b5fa0 RCX: 00007fb86cf8ebe9
[  648.810080][T17065] RDX: 0000000000000000 RSI: 0000000040086200 RDI: 0000000000000004
[  648.810093][T17065] RBP: 00007fb86de96090 R08: 0000000000000000 R09: 0000000000000000
[  648.810106][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.810117][T17065] R13: 00007fb86d1b6038 R14: 00007fb86d1b5fa0 R15: 00007fb86d2dfa28
[  648.810140][T17065]  </TASK>
[  648.810159][T17065] ERROR: Out of memory at tomoyo_realpath_from_path.
[  648.992447][    C1] vkms_vblank_simulate: vblank timer overrun
[  649.076048][T17070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3420'.
[  649.085436][T13098] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  649.266189][   T44] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  649.306714][T17074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3422'.
[  649.375876][T13098] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  649.389055][T13098] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  649.400455][T13098] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  649.428346][T13098] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  649.441158][   T44] usb 4-1: config 0 has no interfaces?
[  649.447838][T13098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.450418][   T44] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  649.482693][T17067] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  649.502646][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.612955][T17081] program syz.5.3424 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  649.627479][T17081] 
@�: renamed from bond_slave_0 (while UP)
[  649.673061][   T44] usb 4-1: config 0 descriptor??
[  649.803778][T13089] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  649.894116][T17066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.905011][T17066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.966085][T13089] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  649.979305][T13089] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  649.995529][T13089] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  650.004990][T13089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.104437][T13089] usb 5-1: config 0 descriptor??
[  650.125423][T13089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  650.142489][T13093] usb 4-1: USB disconnect, device number 86
[  650.203639][T13097] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  650.402602][T13097] usb 1-1: device descriptor read/64, error -71
[  650.726617][T13089] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  650.735571][T13097] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  650.893612][T13097] usb 1-1: device descriptor read/64, error -71
[  650.903409][T13089] usb 4-1: device descriptor read/64, error -71
[  651.026286][T13097] usb usb1-port1: attempt power cycle
[  651.163842][T13089] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  651.308084][T13089] usb 4-1: device descriptor read/64, error -71
[  651.373574][T13097] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[  651.399401][T13097] usb 1-1: device descriptor read/8, error -71
[  651.423930][T13089] usb usb4-port1: attempt power cycle
[  651.570942][T17098] netlink: 'syz.5.3428': attribute type 11 has an invalid length.
[  651.644372][T13097] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  651.675058][T13097] usb 1-1: device descriptor read/8, error -71
[  651.748799][T17062] delete_channel: no stack
[  651.794047][T13097] usb usb1-port1: unable to enumerate USB device
[  651.954491][T13089] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[  652.084001][T13089] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  652.115814][T13089] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  652.127088][T13089] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  652.137061][T13089] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  652.146331][T13089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.158323][T17111] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  652.171296][T13089] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  652.431481][T13089] usb 4-1: USB disconnect, device number 90
[  652.483860][T13098] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  652.491755][T13098] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input62
[  652.528646][T13098] usb 2-1: USB disconnect, device number 72
[  652.528709][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  652.563354][T17115] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  652.579976][T17115] team0: Device syz_tun is up. Set it down before adding it as a team port
[  652.716480][T17121] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  652.753012][   T44] usb 5-1: USB disconnect, device number 75
[  653.005255][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'.
[  653.046133][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3438'.
[  653.523327][T17146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3442'.
[  654.258906][T17153] netlink: 'syz.0.3444': attribute type 1 has an invalid length.
[  654.274611][T17151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.304410][T17151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.394580][T13089] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  654.413253][T17153] 8021q: adding VLAN 0 to HW filter on device bond1
[  654.605434][T13089] usb 6-1: Using ep0 maxpacket: 8
[  654.648893][T13089] usb 6-1: unable to get BOS descriptor or descriptor too short
[  654.659711][T13089] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  654.743668][T13089] usb 6-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  654.813734][T13089] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  654.838138][T13089] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0
[  654.856322][T13089] usb 6-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  654.880689][T13089] usb 6-1: config 8 interface 0 has no altsetting 0
[  654.893271][T13089] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  654.902536][T13089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.922693][T13089] usb 6-1: Product: syz
[  654.943624][T13089] usb 6-1: Manufacturer: syz
[  654.962548][T13089] usb 6-1: SerialNumber: syz
[  655.054943][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3446'.
[  655.328257][T13089] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  655.376735][T17168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  655.386418][T17168] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  655.413639][   T44] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  655.431422][T13089] usb 6-1: selecting invalid altsetting 0
[  655.456967][T17163] tipc: Disabling bearer <eth:syzkaller0>
[  655.595477][T17171] netlink: 'syz.3.3449': attribute type 10 has an invalid length.
[  655.643695][T17171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3449'.
[  655.661495][T17171] batman_adv: batadv0: Interface activated: virt_wifi0
[  655.721717][T13089] snd-usb-audio 6-1:8.0: probe with driver snd-usb-audio failed with error -12
[  655.752031][T13089] usb 6-1: USB disconnect, device number 14
[  655.828657][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  656.144364][T13089] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  656.305068][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'.
[  656.317928][T13089] usb 6-1: device descriptor read/64, error -71
[  656.563656][T13089] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  656.669654][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3456'.
[  656.679461][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3456'.
[  656.718000][T13089] usb 6-1: device descriptor read/64, error -71
[  656.792079][  T610] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  656.800962][   T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  656.821013][   T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  656.839719][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  656.869024][T13089] usb usb6-port1: attempt power cycle
[  657.214065][T13089] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  657.283413][T13089] usb 6-1: device descriptor read/8, error -71
[  657.294063][T17201] random: crng reseeded on system resumption
[  657.400467][T17207] netlink: 'syz.0.3460': attribute type 1 has an invalid length.
[  657.432201][T17207] 8021q: adding VLAN 0 to HW filter on device bond2
[  657.466166][T17207] bond2: (slave gretap1): making interface the new active one
[  657.482510][T17207] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  657.525727][T13089] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  657.582804][T13089] usb 6-1: device descriptor read/8, error -71
[  657.714444][T13089] usb usb6-port1: unable to enumerate USB device
[  657.729476][T17216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3461'.
[  658.176184][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3466'.
[  658.194404][T17225] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  658.626649][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'.
[  658.638122][T17221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.810357][T17232] FAULT_INJECTION: forcing a failure.
[  658.810357][T17232] name failslab, interval 1, probability 0, space 0, times 0
[  658.823034][T17232] CPU: 1 UID: 0 PID: 17232 Comm: syz.0.3467 Not tainted syzkaller #0 PREEMPT(full) 
[  658.823060][T17232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  658.823073][T17232] Call Trace:
[  658.823080][T17232]  <TASK>
[  658.823088][T17232]  dump_stack_lvl+0x189/0x250
[  658.823116][T17232]  ? __pfx____ratelimit+0x10/0x10
[  658.823143][T17232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  658.823166][T17232]  ? __pfx__printk+0x10/0x10
[  658.823199][T17232]  should_fail_ex+0x414/0x560
[  658.823236][T17232]  should_failslab+0xa8/0x100
[  658.823264][T17232]  kmem_cache_alloc_noprof+0x73/0x3c0
[  658.823290][T17232]  ? skb_clone+0x212/0x3a0
[  658.823311][T17232]  skb_clone+0x212/0x3a0
[  658.823331][T17232]  ? packet_rcv+0x567/0x1590
[  658.823353][T17232]  packet_rcv+0x6d6/0x1590
[  658.823381][T17232]  ? __pfx_packet_rcv+0x10/0x10
[  658.823402][T17232]  __netif_receive_skb_core+0xa53/0x4020
[  658.823431][T17232]  ? __pfx___skb_flow_dissect+0x10/0x10
[  658.823454][T17232]  ? __kernel_text_address+0xd/0x40
[  658.823482][T17232]  ? unwind_get_return_address+0x4d/0x90
[  658.823505][T17232]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  658.823533][T17232]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  658.823560][T17232]  ? stack_trace_save+0x9c/0xe0
[  658.823582][T17232]  ? __pfx_stack_trace_save+0x10/0x10
[  658.823606][T17232]  ? stack_depot_save_flags+0x40/0x860
[  658.823632][T17232]  ? tomoyo_check_open_permission+0x2a1/0x3b0
[  658.823663][T17232]  ? kasan_save_track+0x4f/0x80
[  658.823688][T17232]  ? netif_receive_skb+0x115/0x790
[  658.823711][T17232]  ? rcu_is_watching+0x15/0xb0
[  658.823731][T17232]  ? lock_acquire+0x5f/0x360
[  658.823760][T17232]  __netif_receive_skb+0x72/0x380
[  658.823789][T17232]  ? netif_receive_skb+0x115/0x790
[  658.823812][T17232]  netif_receive_skb+0x1cb/0x790
[  658.823837][T17232]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  658.823857][T17232]  ? __pfx_netif_receive_skb+0x10/0x10
[  658.823884][T17232]  ? tun_rx_batched+0x160/0x730
[  658.823904][T17232]  tun_rx_batched+0x1b9/0x730
[  658.823926][T17232]  ? __pfx_tun_rx_batched+0x10/0x10
[  658.823945][T17232]  ? tun_get_user+0x266c/0x3e20
[  658.823962][T17232]  ? rcu_is_watching+0x15/0xb0
[  658.823982][T17232]  ? lock_acquire+0x5f/0x360
[  658.824009][T17232]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  658.824034][T17232]  tun_get_user+0x2aa2/0x3e20
[  658.824056][T17232]  ? tun_get_user+0x6f6/0x3e20
[  658.824074][T17232]  ? tun_get_user+0x266c/0x3e20
[  658.824095][T17232]  ? aa_file_perm+0x44d/0x1550
[  658.824116][T17232]  ? __pfx_tun_get_user+0x10/0x10
[  658.824138][T17232]  ? kstrtoull+0x12f/0x1d0
[  658.824170][T17232]  ? ref_tracker_alloc+0x318/0x460
[  658.824196][T17232]  ? get_pid_task+0x20/0x1f0
[  658.824228][T17232]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  658.824257][T17232]  ? tun_get+0x1c/0x2f0
[  658.824274][T17232]  ? tun_get+0x1c/0x2f0
[  658.824292][T17232]  ? rcu_is_watching+0x15/0xb0
[  658.824310][T17232]  ? tun_get+0x1c/0x2f0
[  658.824327][T17232]  ? lock_release+0x4b/0x3e0
[  658.824354][T17232]  ? common_file_perm+0x1b5/0x230
[  658.824386][T17232]  ? tun_get+0x1c/0x2f0
[  658.824405][T17232]  tun_chr_write_iter+0x113/0x200
[  658.824438][T17232]  vfs_write+0x5c9/0xb30
[  658.824466][T17232]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  658.824497][T17232]  ? __pfx_vfs_write+0x10/0x10
[  658.824527][T17232]  ? __fget_files+0x2a/0x420
[  658.824561][T17232]  ksys_write+0x145/0x250
[  658.824588][T17232]  ? __pfx_ksys_write+0x10/0x10
[  658.824613][T17232]  ? rcu_is_watching+0x15/0xb0
[  658.824634][T17232]  ? rcu_is_watching+0x15/0xb0
[  658.824666][T17232]  do_syscall_64+0xfa/0x3b0
[  658.824694][T17232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.824714][T17232]  ? clear_bhb_loop+0x60/0xb0
[  658.824735][T17232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.824754][T17232] RIP: 0033:0x7f0b1118d69f
[  658.824772][T17232] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  658.824789][T17232] RSP: 002b:00007f0b0f3f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  658.824809][T17232] RAX: ffffffffffffffda RBX: 00007f0b113b6090 RCX: 00007f0b1118d69f
[  658.824840][T17232] RDX: 0000000000000066 RSI: 0000200000000b80 RDI: 00000000000000c8
[  658.824853][T17232] RBP: 00007f0b0f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  658.824866][T17232] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001
[  658.824879][T17232] R13: 00007f0b113b6128 R14: 00007f0b113b6090 R15: 00007f0b114dfa28
[  658.824902][T17232]  </TASK>
[  659.257646][    C1] vkms_vblank_simulate: vblank timer overrun
[  659.755825][T17240] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3468'.
[  659.837105][T17242] netlink: 'syz.3.3471': attribute type 4 has an invalid length.
[  660.066922][T17250] tipc: Invalid UDP bearer configuration
[  660.067160][T17250] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  660.155232][   T44] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  660.335446][   T44] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  660.376517][   T44] usb 1-1: config 0 has no interface number 0
[  660.393764][   T44] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  660.416134][   T44] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59853, setting to 64
[  660.427466][T13093] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  660.437601][   T44] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  660.447454][   T44] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  660.485139][   T44] usb 1-1: Product: syz
[  660.489360][   T44] usb 1-1: SerialNumber: syz
[  660.512818][   T44] usb 1-1: config 0 descriptor??
[  660.523379][T17239] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  660.539887][   T44] cm109 1-1:0.8: invalid payload size 64, expected 4
[  660.555975][   T44] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input63
[  660.608684][T13093] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  660.618619][T13093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.640718][T13093] usb 4-1: Product: syz
[  660.649272][T13093] usb 4-1: Manufacturer: syz
[  660.660862][T13093] usb 4-1: SerialNumber: syz
[  660.691363][T13093] usb 4-1: config 0 descriptor??
[  660.744743][    C1] cm109_urb_ctl_callback: 9 callbacks suppressed
[  660.744770][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  660.744932][T13098] usb 1-1: USB disconnect, device number 85
[  660.751257][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  660.783417][T13098] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  660.908566][T13093] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[  660.920163][T17267] vlan2: entered promiscuous mode
[  660.925592][T17267] batadv0: entered promiscuous mode
[  660.983755][T13091] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  661.109085][T17255] IPVS: Error connecting to the multicast addr
[  661.124518][T13091] usb 6-1: device descriptor read/64, error -71
[  661.323634][T13093] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  661.401184][T13091] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  661.443277][T17281] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3485'.
[  661.459510][T17281] kvm: user requested TSC rate below hardware speed
[  661.553764][T13091] usb 6-1: device descriptor read/64, error -71
[  661.685361][T13091] usb usb6-port1: attempt power cycle
[  662.033883][T13091] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  662.096665][T13091] usb 6-1: device descriptor read/8, error -71
[  662.110150][   T44] usb 4-1: USB disconnect, device number 91
[  662.455672][T13091] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  662.720000][T13091] usb 6-1: device descriptor read/8, error -71
[  662.875543][T13091] usb usb6-port1: unable to enumerate USB device
[  662.939885][T17300] delete_channel: no stack
[  663.180759][T17315] fuse: Bad value for 'fd'
[  663.625125][T17323] loop9: detected capacity change from 0 to 7
[  663.664231][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  663.685665][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  663.706647][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  663.733859][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  663.856881][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  664.094295][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  664.114053][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  664.122107][T17323] ldm_validate_partition_table(): Disk read failed.
[  664.130981][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  664.139057][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  664.147652][T17323] Buffer I/O error on dev loop9, logical block 0, async page read
[  664.157448][T17323] Dev loop9: unable to read RDB block 0
[  664.163975][T17323]  loop9: unable to read partition table
[  664.171760][T17323] loop9: partition table beyond EOD, truncated
[  664.183824][T13089] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  664.199770][T17323] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  664.199770][T17323] 
) failed (rc=-5)
[  664.356376][T13089] usb 4-1: Using ep0 maxpacket: 16
[  664.397321][T13089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.710883][T17337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3501'.
[  664.932432][T13089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  665.003435][T13089] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00
[  665.033767][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'.
[  665.297607][T13089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.339914][T13089] usb 4-1: config 0 descriptor??
[  665.462240][T13089] usbhid 4-1:0.0: can't add hid device: -22
[  665.509184][T13089] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  666.333644][T13089] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  666.475211][T13089] usb 1-1: device descriptor read/64, error -71
[  666.504936][T17364] ptm ptm51: ldisc open failed (-12), clearing slot 51
[  666.731218][T13089] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  666.806571][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'.
[  666.953592][T13089] usb 1-1: device descriptor read/64, error -71
[  667.078160][T13089] usb usb1-port1: attempt power cycle
[  667.352556][T13091] usb 4-1: USB disconnect, device number 92
[  667.559221][T13089] usb 1-1: new full-speed USB device number 88 using dummy_hcd
[  667.580772][T13089] usb 1-1: device descriptor read/8, error -71
[  667.599741][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3517'.
[  668.093735][T13089] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  668.114896][T13089] usb 1-1: device descriptor read/8, error -71
[  668.243762][T13089] usb usb1-port1: unable to enumerate USB device
[  668.397845][T17392] netlink: 'syz.1.3519': attribute type 27 has an invalid length.
[  668.651680][T17403] loop4: detected capacity change from 0 to 7
[  668.667431][T17403] Dev loop4: unable to read RDB block 7
[  668.673117][T17403]  loop4: unable to read partition table
[  668.681775][T17403] loop4: partition table beyond EOD, truncated
[  668.688092][T17403] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  668.749450][T17392] ip6erspan0: left allmulticast mode
[  669.706846][T17404] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  669.763892][T17397] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.772068][T17397] 8021q: adding VLAN 0 to HW filter on device team0
[  669.898779][T17397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  669.925139][T13097] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  669.932864][T15489] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  669.942629][T15489] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  670.106356][T15489] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  670.123016][T15489] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  670.153633][T13097] usb 2-1: Using ep0 maxpacket: 16
[  670.163604][T13097] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  670.171636][T13097] usb 2-1: config 0 has no interface number 0
[  670.224832][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3527'.
[  670.418470][T13097] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  670.485108][T13097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.568739][T13097] usb 2-1: Product: syz
[  670.603842][T13097] usb 2-1: Manufacturer: syz
[  670.650541][T13097] usb 2-1: SerialNumber: syz
[  670.714751][T13097] usb 2-1: config 0 descriptor??
[  670.790397][T13097] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  671.601585][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3530'.
[  672.364050][T13097] gspca_spca1528: reg_w err -110
[  672.369282][T13097] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[  673.072041][T13089] usb 2-1: USB disconnect, device number 73
[  673.220051][T17452] FAULT_INJECTION: forcing a failure.
[  673.220051][T17452] name failslab, interval 1, probability 0, space 0, times 0
[  673.232711][T17452] CPU: 0 UID: 0 PID: 17452 Comm: syz.5.3534 Not tainted syzkaller #0 PREEMPT(full) 
[  673.232730][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  673.232740][T17452] Call Trace:
[  673.232746][T17452]  <TASK>
[  673.232752][T17452]  dump_stack_lvl+0x189/0x250
[  673.232772][T17452]  ? __pfx____ratelimit+0x10/0x10
[  673.232792][T17452]  ? __pfx_dump_stack_lvl+0x10/0x10
[  673.232808][T17452]  ? __pfx__printk+0x10/0x10
[  673.232829][T17452]  ? rcu_read_lock_held+0xa/0x50
[  673.232843][T17452]  ? __rt6_find_exception_rcu+0x127/0x4c0
[  673.232867][T17452]  should_fail_ex+0x414/0x560
[  673.232888][T17452]  should_failslab+0xa8/0x100
[  673.232908][T17452]  ? __pfx_ip6_dst_gc+0x10/0x10
[  673.232921][T17452]  kmem_cache_alloc_noprof+0x73/0x3c0
[  673.232940][T17452]  ? dst_alloc+0x105/0x170
[  673.232956][T17452]  ? __pfx_ip6_dst_gc+0x10/0x10
[  673.232969][T17452]  dst_alloc+0x105/0x170
[  673.232986][T17452]  ip6_pol_route+0xa21/0x1180
[  673.233001][T17452]  ? ip6_pol_route+0x162/0x1180
[  673.233016][T17452]  ? __pfx_ip6_pol_route+0x10/0x10
[  673.233036][T17452]  fib6_rule_lookup+0x52f/0x6f0
[  673.233052][T17452]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  673.233067][T17452]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  673.233083][T17452]  ? run_filter+0x23/0x270
[  673.233098][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.233111][T17452]  ? run_filter+0x23/0x270
[  673.233126][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.233139][T17452]  ? run_filter+0x23/0x270
[  673.233154][T17452]  ? lock_release+0x4b/0x3e0
[  673.233173][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.233189][T17452]  ip6_route_input+0x6ce/0xa50
[  673.233206][T17452]  ? __pfx_ip6_route_input+0x10/0x10
[  673.233227][T17452]  ? NF_HOOK+0x9a/0x3a0
[  673.233250][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.233265][T17452]  ? ip6_rcv_finish_core+0x222/0x420
[  673.233285][T17452]  ip6_rcv_finish+0x141/0x2e0
[  673.233305][T17452]  NF_HOOK+0x309/0x3a0
[  673.233323][T17452]  ? skb_orphan+0x4c/0xd0
[  673.233342][T17452]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  673.233361][T17452]  ? NF_HOOK+0x9a/0x3a0
[  673.233378][T17452]  ? __pfx_NF_HOOK+0x10/0x10
[  673.233404][T17452]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  673.233426][T17452]  __netif_receive_skb+0xd3/0x380
[  673.233447][T17452]  ? netif_receive_skb+0x115/0x790
[  673.233465][T17452]  netif_receive_skb+0x1cb/0x790
[  673.233482][T17452]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  673.233496][T17452]  ? __pfx_netif_receive_skb+0x10/0x10
[  673.233523][T17452]  ? tun_rx_batched+0x160/0x730
[  673.233543][T17452]  tun_rx_batched+0x1b9/0x730
[  673.233564][T17452]  ? __pfx_tun_rx_batched+0x10/0x10
[  673.233582][T17452]  ? tun_get_user+0x266c/0x3e20
[  673.233599][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.233617][T17452]  ? lock_acquire+0x5f/0x360
[  673.233645][T17452]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  673.233668][T17452]  tun_get_user+0x2aa2/0x3e20
[  673.233689][T17452]  ? tun_get_user+0x6f6/0x3e20
[  673.233707][T17452]  ? tun_get_user+0x266c/0x3e20
[  673.233727][T17452]  ? aa_file_perm+0x44d/0x1550
[  673.233748][T17452]  ? __pfx_tun_get_user+0x10/0x10
[  673.233770][T17452]  ? kstrtoull+0x12f/0x1d0
[  673.233801][T17452]  ? ref_tracker_alloc+0x318/0x460
[  673.233828][T17452]  ? get_pid_task+0x20/0x1f0
[  673.233853][T17452]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  673.233881][T17452]  ? tun_get+0x1c/0x2f0
[  673.233898][T17452]  ? tun_get+0x1c/0x2f0
[  673.233915][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.233933][T17452]  ? tun_get+0x1c/0x2f0
[  673.233950][T17452]  ? lock_release+0x4b/0x3e0
[  673.233977][T17452]  ? common_file_perm+0x1b5/0x230
[  673.234007][T17452]  ? tun_get+0x1c/0x2f0
[  673.234027][T17452]  tun_chr_write_iter+0x113/0x200
[  673.234059][T17452]  vfs_write+0x5c9/0xb30
[  673.234087][T17452]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  673.234119][T17452]  ? __pfx_vfs_write+0x10/0x10
[  673.234149][T17452]  ? __fget_files+0x2a/0x420
[  673.234182][T17452]  ksys_write+0x145/0x250
[  673.234209][T17452]  ? __pfx_ksys_write+0x10/0x10
[  673.234233][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.234260][T17452]  ? rcu_is_watching+0x15/0xb0
[  673.234281][T17452]  do_syscall_64+0xfa/0x3b0
[  673.234310][T17452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.234330][T17452]  ? clear_bhb_loop+0x60/0xb0
[  673.234353][T17452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.234372][T17452] RIP: 0033:0x7fb86cf8d69f
[  673.234391][T17452] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  673.234409][T17452] RSP: 002b:00007fb86de75000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  673.234430][T17452] RAX: ffffffffffffffda RBX: 00007fb86d1b6090 RCX: 00007fb86cf8d69f
[  673.234446][T17452] RDX: 0000000000000066 RSI: 0000200000000b80 RDI: 00000000000000c8
[  673.234460][T17452] RBP: 00007fb86de75090 R08: 0000000000000000 R09: 0000000000000000
[  673.234473][T17452] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001
[  673.234485][T17452] R13: 00007fb86d1b6128 R14: 00007fb86d1b6090 R15: 00007fb86d2dfa28
[  673.234508][T17452]  </TASK>
[  674.103355][T17456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3537'.
[  674.112481][T17456] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.123016][T17456] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.143148][T17459] macvtap1: entered promiscuous mode
[  674.148980][T17459] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  674.160433][T17459] mac80211_hwsim hwsim33 wlan1: left promiscuous mode
[  674.362423][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3540'.
[  674.372179][T17469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  674.379440][T17469] IPv6: NLM_F_CREATE should be set when creating new route
[  674.459915][T13097] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  674.521149][T17472] fuse: Bad value for 'fd'
[  674.737737][T13097] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  674.748492][T13097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.766437][T13097] usb 2-1: Product: syz
[  674.776512][T13097] usb 2-1: Manufacturer: syz
[  674.796316][T13097] usb 2-1: SerialNumber: syz
[  674.822358][T13097] usb 2-1: config 0 descriptor??
[  674.841931][T13097] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 074
[  674.935183][T17410] syz.3.3522 (17410): drop_caches: 1
[  675.044939][T17462] netlink: 'syz.1.3538': attribute type 1 has an invalid length.
[  675.100454][T17480] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3544'.
[  675.620774][T17485] macvtap1: entered allmulticast mode
[  675.633604][T17485] veth1: entered allmulticast mode
[  675.649794][T17485] veth1: left allmulticast mode
[  675.709347][T13097] i2c i2c-1: failure reading functionality
[  675.722272][T13097] i2c i2c-1: connected i2c-tiny-usb device
[  675.751110][T13097] usb 2-1: USB disconnect, device number 74
[  675.796657][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3548'.
[  675.821550][T17489] erspan0: entered promiscuous mode
[  675.829504][T17489] erspan0: left promiscuous mode
[  675.923724][T13091] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  676.063613][   T44] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  676.087174][T13091] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  676.097829][T13091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.106094][T13091] usb 5-1: Product: syz
[  676.110277][T13091] usb 5-1: Manufacturer: syz
[  676.115034][T13091] usb 5-1: SerialNumber: syz
[  676.121443][T13091] usb 5-1: config 0 descriptor??
[  676.129417][T13091] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  676.137685][T13091] usb 5-1: setting power ON
[  676.142223][T13091] dvb-usb: bulk message failed: -22 (2/0)
[  676.150069][T13091] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  676.163009][T13091] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  676.172714][T13091] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  676.223905][   T44] usb 4-1: Using ep0 maxpacket: 32
[  676.250310][   T44] usb 4-1: config 0 interface 0 has no altsetting 0
[  676.259245][   T44] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  676.268969][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.277352][   T44] usb 4-1: Product: syz
[  676.281627][   T44] usb 4-1: Manufacturer: syz
[  676.286724][   T44] usb 4-1: SerialNumber: syz
[  676.292773][   T44] usb 4-1: config 0 descriptor??
[  676.307979][T17507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  676.314528][T17507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  676.323332][T17507] vhci_hcd vhci_hcd.0: Device attached
[  676.345226][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.354327][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.363133][T17504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  676.376377][T13098] usb 5-1: USB disconnect, device number 77
[  676.392871][T17507] netlink: 'syz.1.3553': attribute type 4 has an invalid length.
[  676.408855][T17507] netlink: 'syz.1.3553': attribute type 4 has an invalid length.
[  676.503700][T13097] vhci_hcd: vhci_device speed not set
[  676.564792][T13097] usb 35-1: new full-speed USB device number 6 using vhci_hcd
[  676.701059][   T44] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  676.902343][   T44] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  676.912695][   T44] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  677.136735][T13098] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  677.296395][T13098] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.307505][T13098] usb 6-1: config 0 interface 0 has no altsetting 0
[  677.314484][T13098] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  677.330324][T13098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.347455][T13098] usb 6-1: config 0 descriptor??
[  677.958937][T13098] usbhid 6-1:0.0: can't add hid device: -71
[  677.968533][T13098] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  677.986169][T13098] usb 6-1: USB disconnect, device number 23
[  678.097188][T13089] IPVS: starting estimator thread 0...
[  678.116190][T17538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3564'.
[  678.125373][T17538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3564'.
[  678.134457][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3564'.
[  678.183770][T17539] IPVS: using max 40 ests per chain, 96000 per kthread
[  678.521285][T17561] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3572'.
[  678.672060][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'.
[  678.738672][T17571] tipc: Started in network mode
[  678.774548][T17571] tipc: Node identity 1677f140d305, cluster identity 4711
[  678.782069][T17571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  678.795928][T17571] syzkaller0: entered promiscuous mode
[  678.802387][T17571] syzkaller0: entered allmulticast mode
[  678.841339][   T44] usb 4-1: USB disconnect, device number 93
[  678.872901][T17571] tipc: Resetting bearer <eth:syzkaller0>
[  678.880791][T17570] tipc: Resetting bearer <eth:syzkaller0>
[  678.893037][T17570] tipc: Disabling bearer <eth:syzkaller0>
[  679.278161][T17508] vhci_hcd: connection reset by peer
[  679.326690][   T13] vhci_hcd: stop threads
[  679.384806][   T13] vhci_hcd: release socket
[  679.392871][   T13] vhci_hcd: disconnect device
[  679.633767][   T44] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  679.684789][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3580'.
[  679.743663][T13091] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  679.757980][T17592] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  679.771860][T17592] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  679.784607][T17592] bond1: (slave ipvlan2): Error -95 calling set_mac_address
[  679.805776][   T44] usb 2-1: not running at top speed; connect to a high speed hub
[  679.815504][   T44] usb 2-1: config 5 has an invalid interface number: 167 but max is 1
[  679.823962][   T44] usb 2-1: config 5 has an invalid interface number: 189 but max is 1
[  679.832388][   T44] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  679.842625][   T44] usb 2-1: config 5 has no interface number 0
[  679.852702][   T44] usb 2-1: config 5 has no interface number 1
[  679.862897][   T44] usb 2-1: config 5 interface 167 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64
[  679.874122][T13091] usb 1-1: device descriptor read/64, error -71
[  679.883729][   T44] usb 2-1: config 5 interface 189 altsetting 1 endpoint 0x1 has an invalid bInterval 158, changing to 4
[  679.913629][   T44] usb 2-1: config 5 interface 189 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  679.926379][   T44] usb 2-1: config 5 interface 189 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  679.943736][   T44] usb 2-1: config 5 interface 189 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  679.963664][   T44] usb 2-1: config 5 interface 189 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  680.007626][   T44] usb 2-1: config 5 interface 189 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  680.033575][   T44] usb 2-1: config 5 interface 167 has no altsetting 0
[  680.073810][   T44] usb 2-1: config 5 interface 189 has no altsetting 0
[  680.113744][T13091] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  680.133874][   T44] usb 2-1: New USB device found, idVendor=0403, idProduct=e0f1, bcdDevice= 8.77
[  680.143073][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.154015][   T44] usb 2-1: Product: ∎갊㑀⎥㼼ꨐ櫉寞ᮁ⇂銒퇖탽᭭厷ꓛ曳紾칦텄圩嚺ꪘ譺굍魺﯏硍傹鬽ꠡ๔쟉姳굧䍽ꃊゐ괿ਿ쮅ᙵﾌ娅퓭鷭⨒磋惿㷅␎ᡓພ뵭ﬤ 뇒祀㳮㸠ᆑᇪᠱ㘸ኧᖮ百蠀ࢸ罗嶧敍좓妾侤ਾ鶚㼈칠⏴Ṻ闒溺欏襇꒍ﻦ詑
[  680.184490][   T44] usb 2-1: Manufacturer: 䀊
[  680.189631][   T44] usb 2-1: SerialNumber: 銄ⲋ磡ਘ嫨黠ꃡ䔘腓朤㲡瑋钨㺃㶩᩿䭷컆甐齭⭼㿺홈빓폔鍋꠳ꁳ㟩Թ챴즢憮鏑ᅨꪹ❜䆋ᔷ씨巙龐쩀擓嫤ⷄ탾逜쀛Ꮳ଩멽믂燲珴룦Ꮴ췷곝ᕪůꣁ퍉㯲襏ꎩ㬖矼濳삜뵒榪ﲺ䑱鲺咖
[  680.294277][T13091] usb 1-1: device descriptor read/64, error -71
[  680.413826][T13091] usb usb1-port1: attempt power cycle
[  680.522048][T17609] tipc: Invalid UDP bearer configuration
[  680.522089][T17609] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  680.538729][T17603] netlink: 'syz.3.3584': attribute type 2 has an invalid length.
[  680.660361][   T44] ftdi_sio 2-1:5.167: FTDI USB Serial Device converter detected
[  680.677204][   T44] ftdi_sio ttyUSB0: unknown device type: 0x877
[  680.734073][   T44] ftdi_sio 2-1:5.189: FTDI USB Serial Device converter detected
[  680.757367][   T44] ftdi_sio ttyUSB1: unknown device type: 0x877
[  680.765213][T13091] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  680.778430][   T44] usb 2-1: USB disconnect, device number 75
[  680.792594][   T44] ftdi_sio 2-1:5.167: device disconnected
[  680.800870][T13091] usb 1-1: device descriptor read/8, error -71
[  680.816443][   T44] ftdi_sio 2-1:5.189: device disconnected
[  680.829099][T17618] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  680.835651][T17618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  680.847532][T17618] vhci_hcd vhci_hcd.0: Device attached
[  680.861594][T17618] netlink: 'syz.1.3588': attribute type 4 has an invalid length.
[  680.876230][T17618] netlink: 'syz.1.3588': attribute type 4 has an invalid length.
[  681.044008][T13091] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  681.065084][T13091] usb 1-1: device descriptor read/8, error -71
[  681.176620][T13091] usb usb1-port1: unable to enumerate USB device
[  681.552197][T17635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  682.334533][T13089] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  682.517259][T13089] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  682.529973][T13089] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  682.541145][ T5947] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  682.567243][T13089] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  682.638333][T13089] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  682.657943][T13089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.688688][T17652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  682.703653][ T5947] usb 5-1: Using ep0 maxpacket: 8
[  682.710796][ T5947] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=de.7b
[  682.720426][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.740505][ T5947] gspca_main: spca501-2.14.0 probing 040a:0002
[  683.083772][T13098] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  683.136869][ T5947] gspca_spca501: reg write: error -71
[  683.152660][ T5947] spca501 5-1:2.0: Reg write failed for 0x00,0x02,0x01
[  683.161823][ T5947] spca501 5-1:2.0: probe with driver spca501 failed with error -22
[  683.171609][ T5947] usb 5-1: USB disconnect, device number 78
[  683.243587][T13098] usb 1-1: Using ep0 maxpacket: 16
[  683.251538][T13098] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.261834][T13098] usb 1-1: config 0 interface 0 has no altsetting 0
[  683.270234][T13098] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  683.279343][T13098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.287410][T13098] usb 1-1: Product: syz
[  683.291591][T13098] usb 1-1: Manufacturer: syz
[  683.296920][T13098] usb 1-1: SerialNumber: syz
[  683.302870][T13098] usb 1-1: config 0 descriptor??
[  683.310290][T13098] hub 1-1:0.0: bad descriptor, ignoring hub
[  683.316316][T13098] hub 1-1:0.0: probe with driver hub failed with error -5
[  683.326331][T13098] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  683.339654][T15489] usb 1-1: Failed to submit usb control message: -71
[  683.347275][T15489] usb 1-1: unable to send the bmi data to the device: -71
[  683.356489][T15489] usb 1-1: unable to get target info from device
[  683.363381][T15489] usb 1-1: could not get target info (-71)
[  683.372264][T15489] usb 1-1: could not probe fw (-71)
[  683.512481][T17658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.523878][T17658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.653857][T13098] usb 1-1: USB disconnect, device number 94
[  683.759046][T17619] vhci_hcd: connection reset by peer
[  683.771595][ T3008] vhci_hcd: stop threads
[  683.780188][ T3008] vhci_hcd: release socket
[  683.786623][ T3008] vhci_hcd: disconnect device
[  683.863712][T13097] vhci_hcd: vhci_device speed not set
[  683.878049][T17671] kvm: pic: non byte write
[  684.727764][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'.
[  684.743438][T17687] erspan0: entered promiscuous mode
[  684.751794][T17687] erspan0: left promiscuous mode
[  685.096987][T17693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3610'.
[  685.302718][T13089] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  685.367739][T13089] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input64
[  685.399688][   T30] audit: type=1326 audit(1755840386.707:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.3.3616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6120f8ebe9 code=0x0
[  685.445456][T13089] usb 4-1: USB disconnect, device number 94
[  685.445507][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  686.073704][T13089] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  686.248971][T13089] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  686.260787][T13089] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  686.281704][T13089] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  686.310631][T13089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 26232, setting to 64
[  686.368054][T13089] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  686.381076][T13089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.404819][T13089] usb 4-1: Product: syz
[  686.409772][T13089] usb 4-1: Manufacturer: syz
[  686.423652][T13089] usb 4-1: SerialNumber: syz
[  686.436709][T13089] usb 4-1: config 0 descriptor??
[  686.443952][T17712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  686.457192][T13089] usb 4-1: ucan: probing device on interface #0
[  686.464531][T13089] usb 4-1: ucan: invalid endpoint configuration
[  686.471598][T13089] usb 4-1: ucan: probe failed; try to update the device firmware
[  686.823711][T13091] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  686.977030][T13091] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  686.988198][T13091] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  686.999481][T13091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.009383][T13091] usb 5-1: config 0 descriptor??
[  687.019701][T13091] pwc: Askey VC010 type 2 USB webcam detected.
[  687.133220][T17729] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3622'.
[  687.181163][T17733] netlink: 'syz.5.3624': attribute type 10 has an invalid length.
[  687.191356][T17733] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3624'.
[  687.202296][T17733] batman_adv: batadv0: Adding interface: virt_wifi0
[  687.211210][T17733] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  687.238014][T17733] batman_adv: batadv0: Interface activated: virt_wifi0
[  687.563640][T13089] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  687.713644][T13089] usb 6-1: Using ep0 maxpacket: 16
[  687.726116][T13089] usb 6-1: config index 0 descriptor too short (expected 42, got 18)
[  687.736279][T13089] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  687.749513][T13089] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  687.766585][T13089] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  687.780766][T13089] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  687.791108][T13089] usb 6-1: Product: syz
[  687.796407][T13089] usb 6-1: SerialNumber: syz
[  687.816959][T13089] r8152-cfgselector 6-1: Unknown version 0x0000
[  687.823731][T13089] r8152-cfgselector 6-1: config 0 descriptor??
[  687.834863][T13089] hub 6-1:0.0: bad descriptor, ignoring hub
[  687.843106][T13089] hub 6-1:0.0: probe with driver hub failed with error -5
[  687.991243][T17745] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3629'.
[  688.034718][T17737] program syz.5.3626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  688.135209][T17754] netlink: 'syz.0.3630': attribute type 27 has an invalid length.
[  688.177164][T13089] r8152-cfgselector 6-1: USB disconnect, device number 24
[  688.204343][T13091] pwc: recv_control_msg error -71 req 02 val 2700
[  688.235935][T13091] pwc: recv_control_msg error -71 req 02 val 2c00
[  688.258627][T13091] pwc: recv_control_msg error -71 req 04 val 1000
[  688.278942][T13091] pwc: recv_control_msg error -71 req 04 val 1300
[  688.311301][T13091] pwc: recv_control_msg error -71 req 04 val 1400
[  688.448935][ T6745] usb 4-1: USB disconnect, device number 95
[  688.470926][T13091] pwc: recv_control_msg error -71 req 02 val 2000
[  688.612207][T13091] pwc: recv_control_msg error -71 req 02 val 2100
[  688.638331][T13091] pwc: recv_control_msg error -71 req 04 val 1500
[  688.650412][T13091] pwc: recv_control_msg error -71 req 02 val 2500
[  688.669040][T13091] pwc: recv_control_msg error -71 req 02 val 2400
[  688.677848][T17754] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  688.743173][T17756] 8021q: adding VLAN 0 to HW filter on device bond0
[  688.767337][T17756] 8021q: adding VLAN 0 to HW filter on device team0
[  688.792009][T13091] pwc: recv_control_msg error -71 req 02 val 2600
[  688.828620][T13091] pwc: recv_control_msg error -71 req 02 val 2900
[  688.845506][T13091] pwc: recv_control_msg error -71 req 02 val 2800
[  688.854565][T13091] pwc: recv_control_msg error -71 req 04 val 1100
[  688.887135][T13094] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  688.898053][T13091] pwc: recv_control_msg error -71 req 04 val 1200
[  688.931771][T17756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  689.054302][T13091] pwc: Registered as video103.
[  689.092664][T13091] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65
[  689.173634][   T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  689.187888][T13094] usb 2-1: Using ep0 maxpacket: 8
[  689.203798][T13091] usb 5-1: USB disconnect, device number 79
[  689.336964][T13094] usb 2-1: config 0 has no interfaces?
[  689.370778][T17775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3635'.
[  689.375105][T13094] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  689.403586][   T10] usb 1-1: Using ep0 maxpacket: 16
[  689.440383][T13094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.453136][T13094] usb 2-1: config 0 descriptor??
[  689.493661][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  689.573954][   T10] usb 1-1: config 0 has no interface number 0
[  689.888493][   T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  690.003453][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.027682][   T10] usb 1-1: Product: syz
[  690.036770][   T10] usb 1-1: Manufacturer: syz
[  690.081668][   T10] usb 1-1: SerialNumber: syz
[  690.129418][   T10] usb 1-1: config 0 descriptor??
[  690.261381][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  690.512744][T17784] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3637'.
[  690.529764][T17784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  690.556462][T17784] syzkaller0: entered promiscuous mode
[  690.571074][T17784] syzkaller0: entered allmulticast mode
[  690.706558][T17784] tipc: Resetting bearer <eth:syzkaller0>
[  690.807139][T17783] tipc: Resetting bearer <eth:syzkaller0>
[  690.817131][T17783] tipc: Disabling bearer <eth:syzkaller0>
[  691.136953][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  691.143419][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  691.223860][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3638'.
[  691.455779][T13096] usb 2-1: USB disconnect, device number 76
[  691.756441][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3639'.
[  691.771482][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'.
[  691.813915][   T10] gspca_spca1528: reg_w err -110
[  691.819087][   T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[  692.101076][T17806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  692.107616][T17806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  692.125839][T17806] vhci_hcd vhci_hcd.0: Device attached
[  692.172498][T17806] netlink: 'syz.1.3642': attribute type 4 has an invalid length.
[  692.223041][T17809] netlink: 'syz.1.3642': attribute type 4 has an invalid length.
[  692.313784][   T10] vhci_hcd: vhci_device speed not set
[  692.399278][   T10] usb 35-1: new full-speed USB device number 7 using vhci_hcd
[  692.544696][T13091] usb 1-1: USB disconnect, device number 95
[  692.791231][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3644'.
[  692.834584][T17818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3645'.
[  692.887817][T17816] vlan3: entered promiscuous mode
[  693.345612][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3647'.
[  693.354616][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  693.366380][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3647'.
[  693.375564][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  693.501542][T17825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3648'.
[  694.569751][T17770] Set syz1 is full, maxelem 65536 reached
[  695.270335][T17807] vhci_hcd: connection reset by peer
[  695.363493][   T13] vhci_hcd: stop threads
[  695.502197][   T13] vhci_hcd: release socket
[  695.510091][   T13] vhci_hcd: disconnect device
[  695.763996][ T5941] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[  695.955286][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  696.012040][ T5941] usb 5-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85
[  696.038241][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.062603][ T5941] usb 5-1: Product: syz
[  696.068137][ T5941] usb 5-1: Manufacturer: syz
[  696.078437][ T5941] usb 5-1: SerialNumber: syz
[  696.097226][ T5941] usb 5-1: config 0 descriptor??
[  696.110046][ T5941] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  696.143930][ T5941] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  696.151689][ T5941] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  696.313244][ T5941] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  696.330644][ T5941] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  696.348305][T17883] _�Z`Ԁ@��: entered promiscuous mode
[  696.413986][ T5941] usb 5-1: dvb_usb_v2: found a 'DVBSky T330' in warm state
[  696.422737][ T5941] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  696.445359][ T5941] usb 5-1: USB disconnect, device number 80
[  697.525085][   T10] vhci_hcd: vhci_device speed not set
[  697.873591][   T44] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  697.967711][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3673'.
[  698.028637][   T44] usb 2-1: config 3 has an invalid interface number: 161 but max is 0
[  698.037281][   T44] usb 2-1: config 3 has no interface number 0
[  698.045832][   T44] usb 2-1: config 3 interface 161 has no altsetting 0
[  698.056157][   T44] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08
[  698.065557][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.074311][   T44] usb 2-1: Product: syz
[  698.078671][   T44] usb 2-1: Manufacturer: syz
[  698.083354][   T44] usb 2-1: SerialNumber: syz
[  698.295697][   T44] go7007 2-1:3.161: probe with driver go7007 failed with error -12
[  698.322369][   T44] usb 2-1: USB disconnect, device number 77
[  698.655819][T17922] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3674'.
[  698.683296][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3674'.
[  698.748072][T17922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3674'.
[  698.916737][T17925] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3675'.
[  699.279723][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3678'.
[  699.914922][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'.
[  699.994463][T17953] erspan0: entered promiscuous mode
[  700.214360][T17953] erspan0: left promiscuous mode
[  700.908433][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'.
[  701.296810][T17967] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  701.866977][T17981] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  701.950918][T17983] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  702.034957][ T5941] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  702.224780][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  702.245030][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.322685][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.345113][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3697'.
[  702.387927][ T5941] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  702.412549][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.431468][ T5941] usb 2-1: config 0 descriptor??
[  702.616118][T18001] syzkaller0: entered promiscuous mode
[  702.625171][T18001] syzkaller0: entered allmulticast mode
[  702.655140][ T5941] usbhid 2-1:0.0: can't add hid device: -71
[  702.686979][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  702.748522][ T5941] usb 2-1: USB disconnect, device number 78
[  702.899990][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3700'.
[  702.974888][T18022] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  702.987584][T18022] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  702.999689][T18022] bond2: (slave ipvlan3): Error -95 calling set_mac_address
[  703.230449][T18029] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  703.514171][T13094] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  703.819971][T13094] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[  703.832899][T13094] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  703.849661][T13094] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  703.892389][T13094] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  703.902171][T13094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.945482][T13094] usb 2-1: Product: syz
[  703.970694][T13094] usb 2-1: Manufacturer: syz
[  703.993842][T13094] usb 2-1: SerialNumber: syz
[  704.102659][T18047] netlink: 'syz.3.3713': attribute type 27 has an invalid length.
[  704.250185][T13094] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  704.282286][T13094] cdc_ncm 2-1:1.0: bind() failure
[  704.313019][T13094] usb 2-1: USB disconnect, device number 79
[  704.334344][T18051] netlink: 'syz.0.3714': attribute type 10 has an invalid length.
[  704.364641][T18047] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  704.446634][T18047] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  704.487719][T18049] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.497401][T18049] 8021q: adding VLAN 0 to HW filter on device team0
[  704.558450][T18049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  704.603675][T18051] team0: Device syz_tun is up. Set it down before adding it as a team port
[  704.673620][   T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  704.696485][T18055] __nla_validate_parse: 1 callbacks suppressed
[  704.696500][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'.
[  704.849268][   T10] usb 4-1: Using ep0 maxpacket: 16
[  704.861862][T18064] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3719'.
[  704.890609][T18066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3718'.
[  704.937564][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  704.964640][   T10] usb 4-1: config 0 has no interface number 0
[  705.014201][T18061] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3718'.
[  705.182062][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  705.200132][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.240376][   T10] usb 4-1: Product: syz
[  705.250780][   T10] usb 4-1: Manufacturer: syz
[  705.268201][   T10] usb 4-1: SerialNumber: syz
[  705.285534][   T10] usb 4-1: config 0 descriptor??
[  705.293094][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  705.699453][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3720'.
[  705.873628][T13096] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  706.053558][T13096] usb 6-1: Using ep0 maxpacket: 32
[  706.086585][T13096] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  706.103067][T13096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.136003][T13096] usb 6-1: Product: syz
[  706.151175][T13096] usb 6-1: Manufacturer: syz
[  706.173582][T13096] usb 6-1: SerialNumber: syz
[  706.205671][T18047] fuse: Bad value for 'group_id'
[  706.210665][T18047] fuse: Bad value for 'group_id'
[  706.244541][T13096] usb 6-1: config 0 descriptor??
[  706.474360][   T10] gspca_spca1528: reg_w err -110
[  706.503856][   T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  706.582343][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'.
[  706.895291][T13096] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  706.932306][T13096] peak_usb 6-1:0.0 can0: sending command failure: -22
[  707.000277][T13096] peak_usb 6-1:0.0 can0: sending command failure: -22
[  707.114131][T13096] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22
[  707.126280][T13096] usb 6-1: USB disconnect, device number 25
[  707.219640][T18107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3734'.
[  707.253605][T13091] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  707.413654][T13091] usb 1-1: Using ep0 maxpacket: 8
[  707.425032][T13091] usb 1-1: config index 0 descriptor too short (expected 20241, got 36)
[  707.435114][T13091] usb 1-1: config 38 has too many interfaces: 130, using maximum allowed: 32
[  707.447612][T13091] usb 1-1: config 38 has an invalid descriptor of length 238, skipping remainder of the config
[  707.466408][T13091] usb 1-1: config 38 has 0 interfaces, different from the descriptor's value: 130
[  707.478479][T13091] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  707.488582][T13091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.573813][   T44] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  707.712710][T13091] usb 1-1: string descriptor 0 read error: -71
[  707.733988][   T44] usb 5-1: Using ep0 maxpacket: 16
[  707.749380][T13091] usb 1-1: USB disconnect, device number 96
[  707.785503][   T44] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  707.797404][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3739'.
[  707.809806][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  707.836581][   T44] usb 5-1: config 0 has no interface number 0
[  707.842991][   T44] usb 5-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  707.855265][   T44] usb 5-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  707.868096][   T44] usb 5-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  707.881928][   T44] usb 5-1: config 0 interface 223 has no altsetting 0
[  707.887190][T18125] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  707.901470][T18125] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  707.933243][T18125] bond2: (slave ipvlan2): Error -95 calling set_mac_address
[  707.982626][   T44] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  707.992057][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.000441][   T44] usb 5-1: Product: syz
[  708.007469][   T44] usb 5-1: Manufacturer: syz
[  708.013900][   T44] usb 5-1: SerialNumber: syz
[  708.027852][   T44] usb 5-1: config 0 descriptor??
[  708.208676][T13096] usb 4-1: USB disconnect, device number 96
[  708.443872][T18113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.467697][T18113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.479786][T13096] usb 5-1: USB disconnect, device number 81
[  708.497964][T18134] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  708.593591][   T10] usb 1-1: new full-speed USB device number 97 using dummy_hcd
[  708.733878][   T10] usb 1-1: device descriptor read/64, error -71
[  708.759678][T18139] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 18139 comm: syz.1.3744)
[  708.779922][   T30] audit: type=1800 audit(1755840410.087:3899): pid=18139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3744" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=68259 res=0 errno=0
[  708.811811][    C1] vkms_vblank_simulate: vblank timer overrun
[  709.004334][   T10] usb 1-1: new full-speed USB device number 98 using dummy_hcd
[  709.143288][   T10] usb 1-1: device descriptor read/64, error -71
[  709.264519][   T10] usb usb1-port1: attempt power cycle
[  709.343595][T13096] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  709.496384][T13096] usb 6-1: Using ep0 maxpacket: 16
[  709.516698][T13096] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  709.549935][T13096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.581952][T13096] usb 6-1: Product: syz
[  709.590494][T13096] usb 6-1: Manufacturer: syz
[  709.603580][   T10] usb 1-1: new full-speed USB device number 99 using dummy_hcd
[  709.619040][T13096] usb 6-1: SerialNumber: syz
[  709.634559][   T10] usb 1-1: device descriptor read/8, error -71
[  709.650419][T13096] usb 6-1: config 0 descriptor??
[  709.910203][T18164] vlan2: entered promiscuous mode
[  709.963819][   T10] usb 1-1: new full-speed USB device number 100 using dummy_hcd
[  709.996668][   T10] usb 1-1: device descriptor read/8, error -71
[  710.018421][T18167] binder: 18166:18167 ioctl c00c6211 0 returned -14
[  710.104272][   T10] usb usb1-port1: unable to enumerate USB device
[  710.137615][T13096] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  710.153216][T13096] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  710.176151][T13096] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  710.193973][T13096] usb 6-1: media controller created
[  710.218429][T13096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  710.403622][   T44] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  711.083598][T13096] zl10353_read_register: readreg error (reg=127, ret==0)
[  711.105848][T13096] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  711.131345][T13096] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  711.174811][T13096] usb 6-1: USB disconnect, device number 26
[  711.189794][   T44] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  711.223688][   T44] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  711.239985][T13096] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  711.244089][   T44] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  711.293187][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.322069][T18173] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  711.332689][   T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  711.783603][T13096] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  711.940806][T13096] usb 1-1: Using ep0 maxpacket: 32
[  711.961125][T18205] macsec0: entered promiscuous mode
[  711.966902][T18205] macsec0: entered allmulticast mode
[  711.969882][T13096] usb 1-1: config 0 interface 0 has no altsetting 0
[  711.973187][T18205] veth1_macvtap: entered allmulticast mode
[  712.002662][T13096] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  712.022014][T13096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.049650][T13096] usb 1-1: Product: syz
[  712.054280][T13096] usb 1-1: Manufacturer: syz
[  712.059710][T13096] usb 1-1: SerialNumber: syz
[  712.071910][T13096] usb 1-1: config 0 descriptor??
[  712.102910][T18208] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3762'.
[  712.291327][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3763'.
[  712.351423][T18210] vlan2: entered promiscuous mode
[  712.369855][T18210] team0: entered promiscuous mode
[  712.399856][T18210] team_slave_0: entered promiscuous mode
[  712.420104][T18210] team_slave_1: entered promiscuous mode
[  712.671396][T13096] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  712.856966][T18222] binder: 18214:18222 ioctl c0306201 200000000100 returned -11
[  712.866938][T18222] fuse: Bad value for 'fd'
[  712.969998][T13096] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  712.985786][T13096] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  713.029923][T13096] usb 1-1: USB disconnect, device number 101
[  713.220604][T13091] usb 5-1: USB disconnect, device number 82
[  713.778936][   T30] audit: type=1326 audit(1755840415.087:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6120f8ebe9 code=0x0
[  713.800898][   T44] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  713.814872][T18232] gre1: entered promiscuous mode
[  713.820411][T18232] gre1: entered allmulticast mode
[  713.943678][T13096] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  713.976538][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.986950][   T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  714.114949][T13096] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  714.125095][   T44] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  714.128446][T13096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.135266][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.166899][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3772'.
[  714.177600][T13096] usb 5-1: config 0 descriptor??
[  714.183871][   T44] usb 6-1: config 0 descriptor??
[  714.197041][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  714.204052][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  714.222217][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  714.231820][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  714.239770][   T44] usb 6-1: media controller created
[  714.250207][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  714.274950][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  714.286656][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  714.296306][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input66
[  714.316970][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  714.324806][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  714.397303][   T10] usb 6-1: USB disconnect, device number 27
[  714.409599][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  714.696083][T18247] tipc: Invalid UDP bearer configuration
[  714.696130][T18247] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  715.077080][T18261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  715.200265][T18262] syzkaller0: entered promiscuous mode
[  715.211366][T18262] syzkaller0: entered allmulticast mode
[  715.279110][T18262] tipc: Resetting bearer <eth:syzkaller0>
[  715.290164][T18262] tipc: Disabling bearer <eth:syzkaller0>
[  715.418719][T18272] netlink: 'syz.5.3782': attribute type 1 has an invalid length.
[  715.562059][T18277] fuse: Unknown parameter '000000000000000000030x0000000000000003'
[  715.574152][T18272] 8021q: adding VLAN 0 to HW filter on device bond3
[  715.598419][T18275] bond3: (slave gretap2): making interface the new active one
[  715.610060][T18275] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  715.807093][T18230] fuse: Invalid gid '0x0000000000000008'
[  715.820234][T13096] pegasus 5-1:0.0: can't reset MAC
[  715.826064][T13096] pegasus 5-1:0.0: probe with driver pegasus failed with error -5
[  715.837113][T13096] usb 5-1: USB disconnect, device number 83
[  716.293914][T13091] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  716.460078][T18288] macvtap1: entered allmulticast mode
[  716.465569][T18288] veth1: entered allmulticast mode
[  716.493167][T18288] veth1: left allmulticast mode
[  716.503616][T13091] usb 6-1: Using ep0 maxpacket: 8
[  716.519039][T13091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  716.530731][T13091] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  716.550453][T13091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  716.575455][T13091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  716.587423][T13091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  716.614677][T13091] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  716.624083][T13091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.644960][T13091] usb 6-1: Product: syz
[  716.662844][T13091] usb 6-1: Manufacturer: syz
[  716.678714][T13091] usb 6-1: SerialNumber: syz
[  716.699579][T13091] usb 6-1: config 0 descriptor??
[  716.712997][T13091] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8
[  716.914257][ T5941] usb 6-1: USB disconnect, device number 28
[  716.953871][T13096] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  717.063723][   T10] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  717.064724][T13091] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  717.105494][T13096] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  717.164232][T13096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  717.175496][T13096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  717.188206][T13096] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  717.205475][T13096] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  717.216542][T13096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.228893][T13096] usb 5-1: config 0 descriptor??
[  717.236055][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  717.247598][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  717.258140][T13091] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  717.260410][   T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  717.268276][T13091] usb 4-1: config 0 interface 0 has no altsetting 0
[  717.279705][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.346928][   T10] usb 2-1: config 0 descriptor??
[  717.359151][T13091] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  717.361403][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  717.368689][T13091] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  717.368717][T13091] usb 4-1: Product: syz
[  717.368734][T13091] usb 4-1: Manufacturer: syz
[  717.368752][T13091] usb 4-1: SerialNumber: syz
[  717.398867][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  717.407586][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  717.416249][T13091] usb 4-1: config 0 descriptor??
[  717.423437][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  717.429502][T13091] usb 4-1: selecting invalid altsetting 0
[  717.431097][   T10] usb 2-1: media controller created
[  717.506792][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  717.583068][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  717.602180][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  717.640976][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68
[  717.699037][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  717.807326][T13096] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  717.835167][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  717.898601][   T10] usb 2-1: USB disconnect, device number 80
[  717.909236][T18310] netlink: 'syz.5.3794': attribute type 10 has an invalid length.
[  718.021535][T18310] team0: Device syz_tun is up. Set it down before adding it as a team port
[  718.045862][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  718.070702][T18312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.079696][T18312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.438590][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'.
[  718.495014][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3795'.
[  718.560723][T18317] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3795'.
[  718.580707][   T30] audit: type=1326 audit(1755840419.887:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  718.673775][T18324] kvm: MWAIT instruction emulated as NOP!
[  718.709183][   T30] audit: type=1326 audit(1755840419.887:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  718.746096][   T30] audit: type=1326 audit(1755840419.887:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  718.792218][   T30] audit: type=1326 audit(1755840419.887:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  718.816537][   T30] audit: type=1326 audit(1755840419.887:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  718.988153][   T30] audit: type=1326 audit(1755840419.887:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  718.988420][T18334] loop9: detected capacity change from 0 to 7
[  719.012542][   T30] audit: type=1326 audit(1755840419.887:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  719.051284][T18336] buffer_io_error: 14 callbacks suppressed
[  719.051331][T18336] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.075678][   T30] audit: type=1326 audit(1755840419.887:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  719.101162][   T30] audit: type=1326 audit(1755840419.887:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  719.139415][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.141318][   T30] audit: type=1326 audit(1755840419.887:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18320 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa77b8ebe9 code=0x50000
[  719.188024][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.206054][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.214418][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.222429][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.232462][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.242120][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.253412][T18334] ldm_validate_partition_table(): Disk read failed.
[  719.260264][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.271098][T18334] Buffer I/O error on dev loop9, logical block 0, async page read
[  719.281324][T18334] Dev loop9: unable to read RDB block 0
[  719.289697][T18334]  loop9: unable to read partition table
[  719.296013][T18334] loop9: partition table beyond EOD, truncated
[  719.302318][T18334] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  719.302318][T18334] 
) failed (rc=-5)
[  719.995162][T18353] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  720.278782][T13094] usb 5-1: USB disconnect, device number 84
[  720.368822][T18360] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  720.375386][T18360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  720.420989][ T6023] usb 4-1: USB disconnect, device number 97
[  720.470928][T18360] vhci_hcd vhci_hcd.0: Device attached
[  720.744793][T18357] netlink: 'syz.5.3807': attribute type 4 has an invalid length.
[  720.772963][T18357] netlink: 'syz.5.3807': attribute type 4 has an invalid length.
[  720.783640][T13091] vhci_hcd: vhci_device speed not set
[  720.853639][T13091] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  721.124345][T13095] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  721.245928][T18377] netlink: 'syz.1.3813': attribute type 1 has an invalid length.
[  721.334975][T13095] usb 1-1: config 3 has an invalid interface number: 38 but max is 1
[  721.340036][T18377] 8021q: adding VLAN 0 to HW filter on device bond1
[  721.350507][T13095] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  721.381766][T13095] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2
[  721.652790][T13095] usb 1-1: config 3 has no interface number 0
[  721.729305][T13095] usb 1-1: config 3 interface 38 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  721.809711][T13095] usb 1-1: config 3 interface 38 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 13
[  721.840130][T13095] usb 1-1: config 3 interface 38 has no altsetting 0
[  721.853256][T18393] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  721.859809][T18393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  721.870151][T13095] usb 1-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=98.56
[  721.886721][T18393] vhci_hcd vhci_hcd.0: Device attached
[  721.894682][T13095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.896853][T18393] netlink: 'syz.1.3817': attribute type 4 has an invalid length.
[  721.966267][T13095] usb 1-1: Product: 瀾鳥灤萃传镽螝䥻㰚㹎≒࿐窀૘ⰳᕽ⦽潧☨应桰ཟ湚烔껧࣓姿먋䘩휨ᰫﲗ懠싀颹婂겊髛⏫䄽샦옉춽ⴗ礦㸂ꗩ夲䉈쟒䫽뀰쒓ꂥ걽元ᤋ򈭃挏穜䙀艱詜髥䢤껢ଃ濱½綠ㅕ稱⨯媏苛ڞ←❟ﯵ畎ﮘ焇껠䏩褋뢆沈Ỳ團佉⥧캟䆓宻칫格㼜
[  722.091745][T13096] vhci_hcd: vhci_device speed not set
[  722.102083][T18398] netlink: 'syz.1.3817': attribute type 4 has an invalid length.
[  722.163833][T13096] usb 35-1: new full-speed USB device number 8 using vhci_hcd
[  722.181522][T13095] usb 1-1: Manufacturer: ⍉䭥㣭╮孌칤ʁ⮃樯ꇲᓟᠾꏎ樌긙챣ᗙ笏ꙋ儒삵╰飁裉壔亊螫濩ꚣ⧀纠⯥꒾掹惿嘃徎뫶Ⲳ䧏⯠箞ჵ⺦㗎腵癎㘮쨒Ⅱ觳旾텆㢇ᕿ謋죺텒᥻従ӏʂ逐菾ꫫ⮗ⷧ࠹彋띑㩍㒒眃扯뉙捫暊䘞ㄩ
[  722.263687][T13095] usb 1-1: SerialNumber: syz
[  722.303598][T13095] r8152-cfgselector 1-1: Unknown version 0x0000
[  722.524796][T13095] r8152-cfgselector 1-1: USB disconnect, device number 102
[  722.989340][T18361] vhci_hcd: connection reset by peer
[  722.995610][   T36] vhci_hcd: stop threads
[  723.000044][   T36] vhci_hcd: release socket
[  723.006537][   T36] vhci_hcd: disconnect device
[  723.087524][T18404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3819'.
[  723.235895][T18407] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3820'.
[  723.245853][T18407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3820'.
[  723.444283][ T6023] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  723.569239][T18412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3822'.
[  723.609980][ T6023] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  723.618405][ T6023] usb 5-1: config 0 has no interface number 0
[  723.628490][ T6023] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  723.637905][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.646925][ T6023] usb 5-1: Product: syz
[  723.655182][ T6023] usb 5-1: Manufacturer: syz
[  723.673589][ T6023] usb 5-1: SerialNumber: syz
[  723.760017][ T6023] usb 5-1: config 0 descriptor??
[  724.253654][ T5947] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  724.395699][ T5947] usb 4-1: device descriptor read/64, error -71
[  724.606981][T18422] netlink: 'syz.5.3826': attribute type 1 has an invalid length.
[  724.769120][T18395] vhci_hcd: connection reset by peer
[  724.779287][ T2971] vhci_hcd: stop threads
[  724.785604][ T2971] vhci_hcd: release socket
[  724.790822][ T2971] vhci_hcd: disconnect device
[  724.833671][ T5947] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[  725.104491][ T5947] usb 4-1: device descriptor read/64, error -71
[  725.391350][T18434] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  725.404265][T18434] syzkaller0: entered promiscuous mode
[  725.410061][T18434] syzkaller0: entered allmulticast mode
[  725.425593][T18434] tipc: Resetting bearer <eth:syzkaller0>
[  725.434157][ T5947] usb usb4-port1: attempt power cycle
[  725.446247][T18433] tipc: Resetting bearer <eth:syzkaller0>
[  725.457087][T18433] tipc: Disabling bearer <eth:syzkaller0>
[  725.763070][T18438] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3833' resets device
[  725.773697][ T5947] usb 4-1: new full-speed USB device number 100 using dummy_hcd
[  725.823102][T18440] macvtap1: entered allmulticast mode
[  725.831356][T18440] veth1: entered allmulticast mode
[  725.844613][T18440] veth1: left allmulticast mode
[  725.864141][ T5947] usb 4-1: device descriptor read/8, error -71
[  726.015206][T13091] vhci_hcd: vhci_device speed not set
[  726.113598][ T5947] usb 4-1: new full-speed USB device number 101 using dummy_hcd
[  726.131053][T18448] netlink: 'syz.1.3838': attribute type 1 has an invalid length.
[  726.160221][ T6023] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  726.170613][ T6023] asix 5-1:0.239: probe with driver asix failed with error -71
[  726.194388][ T5947] usb 4-1: device descriptor read/8, error -71
[  726.210124][T18448] 8021q: adding VLAN 0 to HW filter on device bond2
[  726.220408][ T6023] usb 5-1: USB disconnect, device number 85
[  726.251922][T18448] bond2: (slave gretap1): making interface the new active one
[  726.282993][T18448] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  726.307458][ T5947] usb usb4-port1: unable to enumerate USB device
[  726.788367][T18482] tipc: Enabled bearer <udp:s>, priority 10
[  726.953741][T13094] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  727.113649][T13094] usb 1-1: Using ep0 maxpacket: 32
[  727.114052][ T5947] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  727.121968][T13094] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  727.138420][T13094] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  727.147282][T13094] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  727.157039][T13094] usb 1-1: config 1 has no interface number 0
[  727.163156][T13094] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  727.175151][T13094] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  727.188112][T13094] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  727.213813][T13094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.228005][T13094] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  727.261571][T18493] random: crng reseeded on system resumption
[  727.273694][T13096] vhci_hcd: vhci_device speed not set
[  727.283826][ T5947] usb 5-1: Using ep0 maxpacket: 8
[  727.291538][ T5947] usb 5-1: config 0 has no interfaces?
[  727.298842][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  727.308377][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.320189][ T5947] usb 5-1: config 0 descriptor??
[  727.449800][T13094] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  727.597610][T18511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3864'.
[  727.625830][ T5947] usb 5-1: USB disconnect, device number 86
[  727.793639][T13090] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  727.857944][T13091] usb 1-1: USB disconnect, device number 103
[  727.883776][T13094] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  727.900040][T13091] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  727.943607][ T6023] tipc: Node number set to 1318124200
[  727.965212][T13090] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  727.985068][T13090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  728.003748][T13090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  728.013877][T13090] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  728.026985][T13090] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  728.036126][T13090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.046612][T13090] usb 2-1: config 0 descriptor??
[  728.055317][T13094] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  728.071393][T13094] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  728.224106][T13094] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  728.233344][T13094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.253381][T18513] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  728.268770][T13094] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  728.464047][T18520] netlink: 'syz.4.3867': attribute type 2 has an invalid length.
[  728.473942][T13090] plantronics 0003:047F:FFFF.0031: ignoring exceeding usage max
[  728.489181][T13090] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  728.695466][T18523] netlink: 'syz.0.3868': attribute type 10 has an invalid length.
[  728.709021][T18523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3868'.
[  728.913979][T18528] netlink: 'syz.4.3869': attribute type 27 has an invalid length.
[  729.095489][T18528] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.102868][T18528] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.252615][T18528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.266990][T18528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  729.299367][T13095] usb 2-1: USB disconnect, device number 81
[  729.413986][T13096] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  729.423585][T13091] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  729.442196][T18528] syzkaller0: left promiscuous mode
[  729.447803][T18528] syzkaller0: left allmulticast mode
[  729.518207][T18531] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.531156][T18531] 8021q: adding VLAN 0 to HW filter on device team0
[  729.552442][T18531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  729.569354][   T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.580092][   T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.589458][T13091] usb 5-1: Using ep0 maxpacket: 16
[  729.594793][   T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.605673][T13096] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  729.605689][   T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.620080][T13096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  729.644195][T13096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  729.644336][   T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.656566][T13096] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  729.679500][T13096] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  729.679557][T13091] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  729.709531][T13096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.748903][T13096] usb 4-1: config 0 descriptor??
[  729.758165][T13091] usb 5-1: config 0 has no interface number 0
[  729.779459][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.878362][   T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.887411][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.913055][T13091] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  729.930674][T13091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.939454][T13091] usb 5-1: Product: syz
[  729.946446][T13091] usb 5-1: Manufacturer: syz
[  729.951088][T13091] usb 5-1: SerialNumber: syz
[  729.964185][T13091] usb 5-1: config 0 descriptor??
[  729.986164][T13091] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  730.173893][T13096] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  730.317185][T18566] netlink: 'syz.0.3882': attribute type 1 has an invalid length.
[  730.338777][T18566] 8021q: adding VLAN 0 to HW filter on device bond3
[  730.652357][T13095] usb 6-1: USB disconnect, device number 29
[  731.095621][T18571] delete_channel: no stack
[  731.402127][T13091] gspca_spca1528: reg_w err -110
[  731.410980][T13091] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110
[  731.833792][T13096] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  732.068184][T13096] usb 1-1: Using ep0 maxpacket: 16
[  732.071800][T13091] usb 5-1: USB disconnect, device number 87
[  732.094063][T13096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  732.112802][T13096] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  732.133007][T13096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.182091][T13096] usb 1-1: config 0 descriptor??
[  732.624772][T13090] usb 4-1: USB disconnect, device number 102
[  732.777958][T18605] IPVS: set_ctl: invalid protocol: 255 172.20.20.36:20002
[  732.823900][T18607] netlink: 'syz.3.3893': attribute type 10 has an invalid length.
[  733.153807][T13091] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  733.212848][T18618] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3898'.
[  733.326798][T13091] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  733.387463][T13091] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  733.397526][T13091] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  733.414319][T13091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.569008][T18610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  733.582439][T13091] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  733.590730][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3900'.
[  733.728376][T18623] team_slave_0: left promiscuous mode
[  733.742132][T18623] team0 (unregistering): Port device team_slave_0 removed
[  733.766066][T18623] team_slave_1: left promiscuous mode
[  733.825600][T18623] team0 (unregistering): Port device team_slave_1 removed
[  733.997965][T18635] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  734.020749][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3900'.
[  734.304189][T13091] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  734.433609][   T44] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  734.457938][T13091] usb 5-1: Using ep0 maxpacket: 16
[  734.475469][T13091] usb 5-1: config 7 has an invalid interface number: 221 but max is 0
[  734.484018][T13094] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  734.506955][T13091] usb 5-1: config 7 has no interface number 0
[  734.507340][T13096] usbhid 1-1:0.0: can't add hid device: -71
[  734.513221][T13091] usb 5-1: config 7 interface 221 has no altsetting 0
[  734.536248][T13091] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=ff.bc
[  734.536277][T13096] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  734.548032][T13091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.562032][T13096] usb 1-1: USB disconnect, device number 104
[  734.584062][T13091] usb 5-1: Product: syz
[  734.589098][T13091] usb 5-1: Manufacturer: syz
[  734.593889][   T44] usb 6-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[  734.604899][   T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  734.620490][T13091] usb 5-1: SerialNumber: syz
[  734.627158][   T44] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  734.646856][   T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  734.658650][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.666880][T13094] usb 4-1: Using ep0 maxpacket: 16
[  734.673444][   T44] usb 6-1: Product: syz
[  734.680706][   T44] usb 6-1: Manufacturer: syz
[  734.685671][T13094] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  734.700191][T13094] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  734.710033][   T44] usb 6-1: SerialNumber: syz
[  734.715829][T13094] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  734.733702][T13094] usb 4-1: config 0 interface 0 has no altsetting 0
[  734.740413][T13094] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  734.749726][T13094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.759894][T13094] usb 4-1: config 0 descriptor??
[  734.929002][T13091] gspca_main: pac7311-2.14.0 probing 093a:2601
[  734.936852][T13091] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71
[  734.945464][T13091] pac7311 5-1:7.221: probe with driver pac7311 failed with error -71
[  734.958207][T13091] usb 5-1: USB disconnect, device number 88
[  734.999209][   T44] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  735.010507][   T44] cdc_ncm 6-1:1.0: bind() failure
[  735.186875][   T44] usb 6-1: USB disconnect, device number 30
[  735.239882][T13094] pantherlord 0003:0810:0001.0033: item fetching failed at offset 0/2
[  735.250258][T13094] pantherlord 0003:0810:0001.0033: parse failed
[  735.260489][T13094] pantherlord 0003:0810:0001.0033: probe with driver pantherlord failed with error -22
[  735.680117][T18656] veth1: entered promiscuous mode
[  735.700833][T18656] macvtap1: entered allmulticast mode
[  735.726577][T18656] veth1: entered allmulticast mode
[  735.743397][T18656] veth1: left allmulticast mode
[  735.749390][T18656] veth1: left promiscuous mode
[  735.951220][   T44] usb 2-1: USB disconnect, device number 82
[  736.913864][   T44] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  737.075435][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.085823][   T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  737.095041][   T44] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  737.105607][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.115454][   T44] usb 6-1: config 0 descriptor??
[  737.124167][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  737.131010][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  737.138337][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  737.147380][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  737.154675][   T44] usb 6-1: media controller created
[  737.160829][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  737.171666][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  737.177527][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  737.189175][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input73
[  737.201954][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  737.211516][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  737.253066][   T44] usb 4-1: USB disconnect, device number 103
[  737.254342][T13090] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  737.328412][   T10] usb 6-1: USB disconnect, device number 31
[  737.350061][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  737.418389][T18692] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3925'.
[  737.465841][T13090] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  737.477336][T13090] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  737.488950][T13090] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  737.498581][T13090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.515172][T18688] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  737.530799][T13090] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  737.737330][T13090] usb 2-1: USB disconnect, device number 83
[  738.115855][T18703] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3930'.
[  738.214008][T13090] usb 5-1: new low-speed USB device number 89 using dummy_hcd
[  738.225293][T18707] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  738.304942][T18709] bridge1: entered promiscuous mode
[  738.310402][T18709] bridge1: entered allmulticast mode
[  738.326917][T18712] netlink: 'syz.1.3934': attribute type 5 has an invalid length.
[  738.353876][T13090] usb 5-1: device descriptor read/64, error -71
[  738.494938][T18716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  738.601347][T13090] usb 5-1: new low-speed USB device number 90 using dummy_hcd
[  738.655908][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'.
[  738.660037][T18729] fuse: Bad value for 'fd'
[  738.732403][T18733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3942'.
[  738.741727][T13090] usb 5-1: device descriptor read/64, error -71
[  738.853660][   T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  738.861577][T13090] usb usb5-port1: attempt power cycle
[  739.013733][   T10] usb 4-1: Using ep0 maxpacket: 16
[  739.020354][   T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  739.028721][   T10] usb 4-1: config 0 has no interface number 0
[  739.036808][   T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  739.046218][   T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  739.059736][   T10] usb 4-1: Product: syz
[  739.065106][   T10] usb 4-1: SerialNumber: syz
[  739.071028][   T10] usb 4-1: config 0 descriptor??
[  739.079138][   T10] cm109 4-1:0.8: invalid payload size 9, expected 4
[  739.087107][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input74
[  739.202611][T18741] netlink: 'syz.5.3946': attribute type 1 has an invalid length.
[  739.213997][T13090] usb 5-1: new low-speed USB device number 91 using dummy_hcd
[  739.235895][T13090] usb 5-1: device descriptor read/8, error -71
[  739.421698][T18752] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3950'.
[  739.493850][T13090] usb 5-1: new low-speed USB device number 92 using dummy_hcd
[  739.511748][    C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  739.518781][    C0] ------------[ cut here ]------------
[  739.524276][    C0] URB ffff8880288b1100 submitted while active
[  739.531384][    C0] WARNING: CPU: 0 PID: 5232 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830
[  739.540981][    C0] Modules linked in:
[  739.544893][    C0] CPU: 0 UID: 0 PID: 5232 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  739.553767][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  739.563836][    C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830
[  739.569400][    C0] Code: 44 89 f2 e8 a1 d6 00 fa e9 13 fc ff ff e8 c7 ed 93 fa c6 05 2c bc 61 08 01 90 48 c7 c7 80 fb 34 8c 48 89 de e8 60 8c 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 a1 ed 93 fa eb 11 e8 9a ed 93 fa bd
[  739.589027][    C0] RSP: 0000:ffffc900031276f8 EFLAGS: 00010046
[  739.595121][    C0] RAX: 94ca72bd83273d00 RBX: ffff8880288b1100 RCX: 0000000000040000
[  739.603098][    C0] RDX: ffffc90002171000 RSI: 0000000000004431 RDI: 0000000000004432
[  739.611260][    C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a
[  739.619240][    C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000
[  739.627228][    C0] R13: ffff888052696030 R14: ffff8880288b1108 R15: 0000000000000820
[  739.635210][    C0] FS:  00007fd8e39fb880(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  739.644145][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  739.650731][    C0] CR2: 0000200000001000 CR3: 000000007c9b4000 CR4: 00000000003526f0
[  739.658711][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000508c
[  739.666687][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  739.674661][    C0] Call Trace:
[  739.677947][    C0]  <TASK>
[  739.680896][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  739.686113][    C0]  cm109_urb_irq_callback+0x709/0xca0
[  739.691503][    C0]  __usb_hcd_giveback_urb+0x41a/0x690
[  739.696885][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  739.702789][    C0]  ? rcu_is_watching+0x15/0xb0
[  739.707560][    C0]  ? usb_hcd_giveback_urb+0x10e/0x420
[  739.712942][    C0]  dummy_timer+0x862/0x4550
[  739.717452][    C0]  ? rcu_is_watching+0x15/0xb0
[  739.722217][    C0]  ? lock_release+0x4b/0x3e0
[  739.726829][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  739.732474][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  739.737858][    C0]  ? rcu_is_watching+0x15/0xb0
[  739.742660][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  739.747613][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  739.752560][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  739.757504][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  739.762720][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  739.768451][    C0]  ? read_tsc+0x9/0x20
[  739.772553][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  739.778367][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  739.783662][    C0]  handle_softirqs+0x283/0x870
[  739.788437][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  739.793214][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  739.798505][    C0]  __irq_exit_rcu+0xca/0x1f0
[  739.803105][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  739.808312][    C0]  irq_exit_rcu+0x9/0x30
[  739.812560][    C0]  sysvec_apic_timer_interrupt+0x57/0xc0
[  739.818204][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  739.824196][    C0] RIP: 0033:0x5589c0595fb1
[  739.828616][    C0] Code: 3d 05 03 00 b9 97 05 00 00 31 f6 31 c0 4c 8d 05 72 29 03 00 48 8d 15 66 b0 02 00 bf 03 00 00 00 e8 84 94 01 00 e9 96 f0 ff ff <8b> 3d 75 60 04 00 8b 35 67 60 04 00 31 c9 31 ed 48 8b 44 24 30 45
[  739.848239][    C0] RSP: 002b:00007ffe4f998330 EFLAGS: 00000202
[  739.854326][    C0] RAX: 0000000000000001 RBX: 0000000000000bb8 RCX: 0000000000000000
[  739.862305][    C0] RDX: 0000000000000001 RSI: 00007ffe4f998440 RDI: 000000000000000b
[  739.870279][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  739.878256][    C0] R10: 0000000000000bb8 R11: 0000000000000202 R12: 0000000000000000
[  739.886238][    C0] R13: 00005589c05dc100 R14: 0000000000000001 R15: 00007ffe4f998530
[  739.894313][    C0]  </TASK>
[  739.897335][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  739.904615][    C0] CPU: 0 UID: 0 PID: 5232 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  739.913466][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  739.923621][    C0] Call Trace:
[  739.926910][    C0]  <TASK>
[  739.929843][    C0]  dump_stack_lvl+0x99/0x250
[  739.934534][    C0]  ? __asan_memcpy+0x40/0x70
[  739.939153][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  739.944368][    C0]  ? __pfx__printk+0x10/0x10
[  739.949070][    C0]  vpanic+0x281/0x750
[  739.953071][    C0]  ? __pfx__printk+0x10/0x10
[  739.957683][    C0]  ? __pfx_vpanic+0x10/0x10
[  739.962193][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  739.967498][    C0]  panic+0xb9/0xc0
[  739.971239][    C0]  ? __pfx_panic+0x10/0x10
[  739.975677][    C0]  __warn+0x31b/0x4b0
[  739.979664][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  739.984604][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  739.989567][    C0]  report_bug+0x2be/0x4f0
[  739.993914][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  739.998849][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  740.003795][    C0]  ? usb_submit_urb+0xfc3/0x1830
[  740.008733][    C0]  handle_bug+0x84/0x160
[  740.012984][    C0]  exc_invalid_op+0x1a/0x50
[  740.017489][    C0]  asm_exc_invalid_op+0x1a/0x20
[  740.022345][    C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830
[  740.027901][    C0] Code: 44 89 f2 e8 a1 d6 00 fa e9 13 fc ff ff e8 c7 ed 93 fa c6 05 2c bc 61 08 01 90 48 c7 c7 80 fb 34 8c 48 89 de e8 60 8c 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 a1 ed 93 fa eb 11 e8 9a ed 93 fa bd
[  740.047511][    C0] RSP: 0000:ffffc900031276f8 EFLAGS: 00010046
[  740.053584][    C0] RAX: 94ca72bd83273d00 RBX: ffff8880288b1100 RCX: 0000000000040000
[  740.061560][    C0] RDX: ffffc90002171000 RSI: 0000000000004431 RDI: 0000000000004432
[  740.069538][    C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a
[  740.077542][    C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000
[  740.085520][    C0] R13: ffff888052696030 R14: ffff8880288b1108 R15: 0000000000000820
[  740.093530][    C0]  ? usb_submit_urb+0xfc0/0x1830
[  740.098484][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  740.103695][    C0]  cm109_urb_irq_callback+0x709/0xca0
[  740.109087][    C0]  __usb_hcd_giveback_urb+0x41a/0x690
[  740.114480][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  740.120410][    C0]  ? rcu_is_watching+0x15/0xb0
[  740.125234][    C0]  ? usb_hcd_giveback_urb+0x10e/0x420
[  740.130650][    C0]  dummy_timer+0x862/0x4550
[  740.135182][    C0]  ? rcu_is_watching+0x15/0xb0
[  740.139961][    C0]  ? lock_release+0x4b/0x3e0
[  740.144600][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  740.150258][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  740.155661][    C0]  ? rcu_is_watching+0x15/0xb0
[  740.160450][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  740.165413][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  740.170370][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  740.175323][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  740.180547][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  740.186276][    C0]  ? read_tsc+0x9/0x20
[  740.190381][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  740.196192][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  740.201309][    C0]  handle_softirqs+0x283/0x870
[  740.206086][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  740.210953][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  740.216244][    C0]  __irq_exit_rcu+0xca/0x1f0
[  740.220836][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  740.226046][    C0]  irq_exit_rcu+0x9/0x30
[  740.230310][    C0]  sysvec_apic_timer_interrupt+0x57/0xc0
[  740.235961][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  740.242042][    C0] RIP: 0033:0x5589c0595fb1
[  740.246462][    C0] Code: 3d 05 03 00 b9 97 05 00 00 31 f6 31 c0 4c 8d 05 72 29 03 00 48 8d 15 66 b0 02 00 bf 03 00 00 00 e8 84 94 01 00 e9 96 f0 ff ff <8b> 3d 75 60 04 00 8b 35 67 60 04 00 31 c9 31 ed 48 8b 44 24 30 45
[  740.266072][    C0] RSP: 002b:00007ffe4f998330 EFLAGS: 00000202
[  740.272242][    C0] RAX: 0000000000000001 RBX: 0000000000000bb8 RCX: 0000000000000000
[  740.280218][    C0] RDX: 0000000000000001 RSI: 00007ffe4f998440 RDI: 000000000000000b
[  740.288203][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  740.296178][    C0] R10: 0000000000000bb8 R11: 0000000000000202 R12: 0000000000000000
[  740.304155][    C0] R13: 00005589c05dc100 R14: 0000000000000001 R15: 00007ffe4f998530
[  740.312135][    C0]  </TASK>
[  740.315577][    C0] Kernel Offset: disabled
[  740.319902][    C0] Rebooting in 86400 seconds..