last executing test programs:

9.672209522s ago: executing program 0 (id=10181):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100021de24a20830434128552010000010902120001000000000904"], 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x7, 0x1, 0x3, 0x5e, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x80, 0x7, 0x5}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x81, 0x8, 0x0, 0xff, 0x7}, 0x10, &(0x7f00000000c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x83, 0xfb, 0x6, 0x5, 0x8}]}, 0x2, [{0x5a, &(0x7f0000000100)=@string={0x5a, 0x3, "59d60e0a2681fae0edbdce70d5d0f22eccb653266c9142aed3f05b056ecc679e259b0128d56930e2b310973a0aa7d99b6509eae9036c8279cb7fceff9b00a805f503540850841709f6241ca6b66ab682a0a48e6b1a8d78b4"}}, {0xc, &(0x7f0000000180)=@string={0xc, 0x3, "f6a7e3fc77a5e9f94363"}}]})
syz_usb_connect$cdc_ecm(0x0, 0x8b, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x1, 0x1, 0x80, 0xfc, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "169d9e"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x3, 0x7}, [@obex={0x5, 0x24, 0x15, 0x77}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x79}, @mdlm={0x15}, @mdlm={0x15, 0x24, 0x12, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x10, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0xc, 0xe8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x3, 0x5, 0x3, 0x20, 0x80}, 0xd0, &(0x7f0000000300)={0x5, 0xf, 0xd0, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x9, 0x2}, @generic={0x79, 0x10, 0x4, "a8d6f16581685fbddf84657aaf4e818fab51e2b757852f27386ea6748eed2394d7671eef47ab99adc5dc5f2c31271ba86eff7955a1a92717965d506cb942ac259cebb265c54120f2a208c0f32a6f0f29aa035e7517eed74cfbb35e178cac1ac71582a300795eda59604a937be9eb73a6fb909be36601"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "05e4867af2387576ff4fc2ae147db14b"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xf, 0xf, 0xa, [0xff000f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x9, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0xd8, 0x5, 0x1, 0xf00, 0x180, [0xff000f, 0xff0f, 0x3f0f, 0x0, 0x3f60]}]}, 0x5, [{0xa6, &(0x7f0000000400)=@string={0xa6, 0x3, "80bb129a0a96c76242157f0ff3f60e7ddbd4a168132b67ad61dd0732262a6fb1bf83905e98cd43bd4cc707ef5ae73a91b6782b196ca1866c6eff67d727e6b413a347c114c32e82b9fef95297ddfa11d88762b225f5cee78f23cab9fb254e42cb6ee8efef7fbe6203dbfea19de445805b058458b17da89d415ae3a7cd8c527f0f3d96aa1dd892ab7380ec121b278d1eaed69df2d849d600d70a7004adf13867ec4ed08cf3"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x1c, &(0x7f0000000500)=@string={0x1c, 0x3, "511571ec858042dbc860739e4fa4fe38db5c9d6506f00ebe32de"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}, {0x5d, &(0x7f0000000580)=@string={0x5d, 0x3, "02db6a10b18b4bc6f61eb99641dfc02c6559fab2c71af957b70afc1d1ccd9a08374840626a5a07b46748320c435858a27befbf542ece681c4944279637335e590d549782c9b8c833a764cc24aff4428df543ec8de496f74c15f462"}}]})

8.743750994s ago: executing program 2 (id=10185):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a050440000000000000090224000100004005090400007e03000300092100002901220700090581030002dd0711"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x61, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0xf9, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "2de503070e10"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xc19e, 0x1c, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0xe5, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0x6}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x2, 0x0, 0x10, 0xf}, 0x57, &(0x7f0000000140)={0x5, 0xf, 0x57, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9c, "46528f1f5c8ecdff725a78067c06726c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x6, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x5027, 0xf0f, 0x7, [0x204f, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x80, 0x1, 0x9, 0x9e}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9fd78f7c493d8244f23febe891672798"}]}, 0x3, [{0xb, &(0x7f0000000200)=@string={0xb, 0x3, "252c0653a63cabdf99"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x436}}]})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x1, "a827"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x4, "94"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a050440000000000000090224000100004005090400007e03000300092100002901220700090581030002dd0711"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x6, 0x61, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0xf9, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "2de503070e10"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xc19e, 0x1c, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0xe5, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0x6}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x2, 0x0, 0x10, 0xf}, 0x57, &(0x7f0000000140)={0x5, 0xf, 0x57, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9c, "46528f1f5c8ecdff725a78067c06726c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x6, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x5027, 0xf0f, 0x7, [0x204f, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x80, 0x1, 0x9, 0x9e}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9fd78f7c493d8244f23febe891672798"}]}, 0x3, [{0xb, &(0x7f0000000200)=@string={0xb, 0x3, "252c0653a63cabdf99"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x436}}]}) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x1, "a827"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x4, "94"}]}}, 0x0}, 0x0) (async)

6.566713322s ago: executing program 0 (id=10192):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) (async)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) (async, rerun: 64)
mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r12, @ANYBLOB="0500030001"], 0x28}}, 0x80) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@getchain={0x54, 0x66, 0xfcd66a900070b359, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xe, 0xfff1}, {0xfff3, 0x9}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xe7ed}, {0x8}, {0x8, 0xb, 0xc0}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0xea78}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000) (rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.24882912s ago: executing program 4 (id=10195):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800)
mremap(&(0x7f00004dd000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
pread64(r0, &(0x7f0000000240)=""/199, 0xc7, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = gettid()
process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90)
write$cgroup_int(r6, &(0x7f0000000380)=0x80000001, 0x12)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x9})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000000)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x80000001, 0x6, 0x3d8f7261, 0x4}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$XFS_IOC_FSGROWFSLOG(r7, 0x4008586f, &(0x7f0000000100)={0x7, 0x5})

5.995092061s ago: executing program 0 (id=10196):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000d000)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x44}}, 0x24040084)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x54}}, 0x18)
r4 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfd}, &(0x7f00000000c0), &(0x7f00000002c0))
flistxattr(r4, &(0x7f0000000440)=""/226, 0xe2)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x35, 0xfe, 0x66, 0x40, 0x499, 0x1037, 0x72e9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x6f, 0x7, 0x0, 0xea, 0xfd, 0x1c, 0x8}}]}}]}}, 0x0)

5.575962763s ago: executing program 2 (id=10197):
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
syz_open_procfs$userns(r3, &(0x7f0000000580))
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

5.299050267s ago: executing program 4 (id=10198):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf25020009000800fbff0a0000000000000005000600000000000a000000000000000000000000001c00000000000000000102000000000000000200010000000000040000070000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x14)
r1 = epoll_create1(0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0)
fchdir(r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x604a21, 0x9d)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = dup3(r3, r1, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002340)={r6, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10)
syz_usb_control_io(r5, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="df00d5d08c0600000000005c1ce21e55d0bf8e2d38d42a60fc03db51592b1ce091fa1106aaa60c7a7afe45b192f67505e7068a4a6cb82e7a6cf971a27b81bb5e8c991d0bc1b9d157dba32a4a6fa0587507119ff7c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xff5, &(0x7f0000001840)=""/4085, 0x40e00}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x7a, {0x2, 0x0, @broadcast}, 'gre0\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd2d, 0x9, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)

4.633997962s ago: executing program 2 (id=10199):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f0006ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x20042894}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, 0x10144, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x2, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000008c0)=[@wr_crn={0x67, 0x20, {0x3, 0x7}}], 0x20})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

4.523613379s ago: executing program 3 (id=10200):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x5, &(0x7f0000000080)=[{0x6, 0x6, 0x80, 0x7fff0000}, {0x4000, 0x85, 0x23, 0x1}, {0xf, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x2, 0x9}, {0x3, 0x7, 0xc, 0x3}]}) (async)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x880) (async, rerun: 64)
r2 = syz_io_uring_setup(0x248b, &(0x7f0000000300)={0x0, 0x5ba2, 0x0, 0x2, 0x3bb}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) (async)
fsopen(&(0x7f00000001c0)='9p\x00', 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x46, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) (async, rerun: 64)
io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$sequencer(r7, &(0x7f00000001c0)=[@x={0x94, 0x0, "7689f55ac301"}], 0x8)
prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x7ffffffffffffffe}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.40375005s ago: executing program 3 (id=10201):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x7ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x20000002)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af})

4.031078943s ago: executing program 1 (id=10202):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3}, 0x94)

3.952211226s ago: executing program 1 (id=10203):
r0 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0x9, @win={{0xe, 0xfffffffa, 0xe, 0x975}, 0x7, 0xc53, 0x0, 0x5, 0x0, 0xff}}})
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x90)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f8666bf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

3.324613617s ago: executing program 3 (id=10204):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r0, 0x0, 0x2)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x20, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001033d5bc4b82f57c7d91467457b49ba7a7000142147dd83645d513a5d8fb461a0000000000000000000500000a88000000060a01040000000000250000000a0000010900010073797a31000000005c000480580001800b00010074617267657400004800ff6b87694a65736291dc34d42c4d1702802c3703009ac420fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000e57a7661000008000240000000000e00010049444c4554494d45520000000900020073797a32000000001400000011000122d5fcf74b7abfb37d0665920dec4ecf81ee670463a255d5783d9f7f8181882b4caca145c27771a86e91834c63e5dc351b0cf5850a2fab1f0eb9c94f8b87034acf1f7b35a77e4ce033072827cd17a211c3d1dec9c78db0c2fc862f8ec17cbda8dcb5743075ad31c331d91259bd994cb1d7cd0b25e49d076ba8d47f05a5b9a51aebfc1336d30c7fee1111f1"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000000000005)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040))
r5 = socket$netlink(0x10, 0x3, 0x5)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
fcntl$setpipe(r5, 0x407, 0x2)
write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x20a04426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x14, 0x0)
r7 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a)
r8 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r7}, &(0x7f0000000080)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1})
io_uring_enter(r8, 0x847ba, 0x222000, 0x56, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20)

2.988623093s ago: executing program 2 (id=10205):
r0 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0x9, @win={{0xe, 0xfffffffa, 0xe, 0x975}, 0x7, 0xc53, 0x0, 0x5, 0x0, 0xff}}})
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x90)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f8666bf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

2.895946577s ago: executing program 0 (id=10206):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async)
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc0, 0x80, 0x14, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8, 0xfc, 0x1, {0x22, 0x560}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x9, 0xf}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x6a, 0x2, 0x20}, 0x176, &(0x7f0000000140)={0x5, 0xf, 0x176, 0x3, [@generic={0x9f, 0x10, 0x8, "0c57e3618d0de6f7c601c5ddbb82296b7668d8dfe9473221baf76ada52a0246f45ceb37a55ea4e4e398d094a91287e0bf757da5eed2a841d4bb4e8155a5febe386515a9d8d92684f160017fde28f77443ec5c60fcc90a339a84f926c5c8b42c73a056330638640c06b71c15e702b603fe368c771d8850f6f77038c9e96a464d39a520508974727c4f40e9bea3e74078bb3e43d952c9288d97c7d6e25"}, @generic={0x5f, 0x10, 0x2, "034879e66ec230bed7746e72f038a132b2564992eeefa8f4ba4906a323cf2dffe6864785e3a0dde9830e6507d9c61b3d590db38867bb4a1173ae896aa2ba8beccc11bc05917177bef4a4c1046599cf0841bb85b4f745922050f884f4"}, @generic={0x73, 0x10, 0x4, "1e8ad6e6f6eef18f3eec779d737b97a5f7b60ca57d010160712eb5f84d5330ed6054095660e505d15acb90c4dab76a3d09d706816d91cc0c5355d1c579ab5ac5f5a46d7f5d74235e37a0a8098f47a2b1c2b8749042cac3a2e97fa94c29e389c073e413fbff6259720647864ce87943cf"}]}, 0x5, [{0x6f, &(0x7f00000002c0)=@string={0x6f, 0x3, "1fb7698a0f6dfae0abf0e4364bac058c1d0c1102e7b8b4d33e2cc20bf4db13bb028e208a7fafed645e03b52bc0b6a97dc9e76921f7d3bd47a8c13bf8e222953db34095b86b83359d3b9c608c7ba33bc9a5e2ce8bcbfd8a3c7937116d51336bc6bd66f97493a515a08c193dc2e9"}}, {0x4b, &(0x7f0000000340)=@string={0x4b, 0x3, "7ca203eac875e39f8b4bdb11d2006d5cb47d1ac42a14138b89abd9f34878213d8300a5e4d955d553ddcfa71e479034eb0d508695406b5304b957aea55094f4554cc27f31fea50102f2"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x7e, &(0x7f0000000480)=@string={0x7e, 0x3, "4038c90bcd36a03f466a4ba293b2fe0646d9af0fc1a0cc30b51a023617763e69b3879630126c36390ac25e93935b0543b7ddbe669b24d29f41b9c2db3736c77d5ce538abe16a2bafc0656d5b2464c93b991f600764770192625c8446463b8d43c323f2bea33247cde5508f7b7d0898ab04bd2c1235c090216e842736"}}]}) (async)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000004c0))
syz_usb_connect$cdc_ecm(0x5, 0xdd, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x1, 0x1, 0xfe, 0xb0, 0x55, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "c700"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x8, 0x2}, [@mdlm_detail={0x66, 0x24, 0x13, 0xe, "919d2159ae34432ec37d2c6b7a1b25de5e59e60fdd07c13f717bb74dabe21a344df90de07c192ec124eccb3864a0ed81140e03ea2c43c8d338f4df58df0c377ccbca5a7b95e549772071213b4820c385a156c8c396aaa67a0345daae7fd12d91ea4f"}, @dmm={0x7, 0x24, 0x14, 0x7, 0x6}, @dmm={0x7, 0x24, 0x14, 0x2, 0xa}, @mbim={0xc, 0x24, 0x1b, 0x6f4, 0xd77, 0x4, 0x6, 0x4, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0x7, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x1, 0x8, 0x7, 0x40, 0xec}, 0x3e, &(0x7f0000000840)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "117d1ca5ee05d8c1afb355287241066e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0xf, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "bce42fab3ae82f96eb99703d153809c8"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xb, 0x3, 0x9}]}, 0x9, [{0x56, &(0x7f0000000880)=@string={0x56, 0x3, "d0f131e34d53238c2f046389762fb9ee30d762198f6e36c9932f793e542b8bc94e7ad5962dcffce113fb10cff140b389f988971f906cdd6900bae98f3741770dd1df13ef008e57362ebf87c3289654665e6eb267"}}, {0x27, &(0x7f0000000900)=@string={0x27, 0x3, "62ab55a0116501f91dd17a9d20e153857bfda1d2455847230a358fb92185284d8a0f193b14"}}, {0xea, &(0x7f0000000940)=@string={0xea, 0x3, "57dcb422805d0f53be9b555ee4a91ec6bda66f1dfd1cec72b9033b0aa42aa5897ee4170aa1c32d5e76065a773d7c80bf5b691f9a11b4a3da6843d659b2001c858c6c7d12b6f38c9bec66d2ef5c061a9d1b0cc21801431c7dafa88f0193a48b5933612889bbc9ec497b388bf854df1c01a48937dfa297ab8b0ec98a25a63334676e90b8dac27b8370d25e9c6f13ff35911e64616226775c472c5daf24984610e399965b3991442814c3b5759dad05979b991bce25c5a4aaa5b749f5868e38795ac5b07abcfe6d5511aaed79a1fd41c18d1fd435b76e83b0827d2f39e395f03defefca14cf0083ce99"}}, {0x43, &(0x7f0000000a40)=@string={0x43, 0x3, "51ab33bed0fe8aea8b6fca311c4a30c1bb65918467e8a3a7bd19ad7c59cf130f66cb87ffa1b46ae77c6b4829332440e94c49cade76f595cebcd60598004c809c7a"}}, {0x81, &(0x7f0000000ac0)=@string={0x81, 0x3, "d0fc1565a7a289793a582aad12a7a771c854f7e100f30fb3a0f692a83cff40ef68c4393fd3e199b999f879bdc40a87564452c65cf54fee972e020ed31850ba0a8e720d5bfdc797de79fe2ca0cbb5f9b1a921a9055bcb70a2035665bf7c97f48c8ac8bb8d137f3efc3f4b27f73625612713511b80a1c9e841dfd0d32f3f7a85"}}, {0x49, &(0x7f0000000b80)=@string={0x49, 0x3, "32dc3fdde83f948342731fd756f448f134be6039db0f148cd5c5a66516c25511f2892d353f71ef72a5da72f7c1e772e63af9ade828146c52577e5e01dd622ffd0cee05e32e5257"}}, {0x1e, &(0x7f0000000c00)=@string={0x1e, 0x3, "e09ee59c3ebc71cfd42a49528422f04451a462a7a8e5bdd0dde4ee79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x440a}}]})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70fd2b, 0x25d7dbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) (async)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xa0, 0xa8, @random="4d6bc784f5eb3013f43ddd7eef47bf9cf356419de1f21d183ef411f7b65b904f8ab31da473babc74e332b05330c44262b7c236e677ba8af36e0274e243aba5dd99b323b1b635a04821c2e985716afdf39f483d5806ec1707b43a4ddde496d83b0d31d47b490416041dfd89055c0385e516e2a67fa9f2d8e5a20d39110f2023dd091e043b7f9854c314d43679d2935704fe4f0d5d78fa8bb4f0c0dedc"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40042}, 0x80)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x10, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x2, 0x1, 0x9, "c3ed"}, @global=@item_012={0x1, 0x1, 0x0, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0xfffffffffffffeb7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0})

2.637609824s ago: executing program 0 (id=10207):
r0 = getpid()
r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r0, 0x0, 0x7fff, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000bc0)={0x3, 0x6, 0x0, 0xe2, 'syz1\x00', 0x4})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)="ea", 0x1}], 0x2)
signalfd4(r3, &(0x7f0000000040)={[0x8]}, 0x8, 0x0)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000002f80)=""/54)
shmget$private(0x0, 0x800000, 0x200, &(0x7f00007ff000/0x800000)=nil)

2.55005229s ago: executing program 0 (id=10208):
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x5, 0x8, 0x1, 0x4})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)={0x6, 0x0, [{0xffffffff, 0x4, 0x1, 0x0, @sint={0xfe, 0x7}}, {0xd4, 0x5, 0x0, 0x0, @msi={0xc35, 0xd69, 0xb, 0xe}}, {0x2, 0x4, 0x0, 0x0, @adapter={0xd68, 0x1, 0xc52, 0x8, 0x4000000}}, {0xffff, 0x7, 0x1, 0x0, @irqchip={0x0, 0x1d8d}}, {0x400, 0x4, 0x0, 0x0, @sint={0x4628, 0x5}}, {0x428, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffe, 0xfffffffffffffffc, 0x80000000, 0x3, 0x4}}]}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) (async)
unshare(0x20000400) (async)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r6 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000001600)=[{0x15, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x1, @uvalue=0x2}, {0x2, @uvalue=0x2}, {0x3, @uvalue=0x9}]}, 0x3}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a18ad9"], 0x0) (async)
setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f00000000c0), 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c421fc107500c4417877c744240039010000c74424028a000000ff1c240f20c035040000002e0f4019400f1278c8c443a96c13053e41220a48b861000000000000000f23c00f21f84c3500000b000023f8f20f1eca66baf80cb8b428c987ef66bafc0cb843b50000ef", 0x69}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r7}) (async, rerun: 32)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32)

2.467925182s ago: executing program 1 (id=10209):
r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x10) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={<r4=>0x0, <r5=>0x0}, &(0x7f0000000600)=0xc)
stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) (async)
r7 = gettid()
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r7}, &(0x7f0000044000)) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x6, 0x73, 0x7, 0x200, 0x3, r4}) (async)
sendmsg$netlink(r3, &(0x7f0000000a00)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)=[{&(0x7f0000000a80)={0x254, 0x3e, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@generic="2bbaa049fcb7d6a92f9faeba2bd6cf11d99514b4f6d030a6717a42a47b16f845c23951838fca6c71bcb49d38296b6ec03bd6253e64d131cfd8cf34a13ffdca1cf01861e5e508da01ac5456347c8c9e419184a77daa188aecdfc7344dacca5d03286110a34b1190c93b05920710581fb354509bf7401bb2e57ed4d2eb3ab7bc7c53050ac92a2430a92170c4849211ad21fa9735f84bfd300e085615790ed90a91307976c964d9dffcf53d89291acf0e0f8738d9870d4420f6e41360beee07df905d87b8", @nested={0x17f, 0x11d, 0x0, 0x1, [@generic, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x401}, @typed={0xf4, 0x131, 0x0, 0x0, @binary="a6ec09cb067d530a4b1d72c1939bddb85ae9828227a7b595209ec844c7899478490aa407dfbb54de28e7632acc190719f79d9626552a4b9c244d2fe511290392dd2bba6a35ef51241164e0629865cfb53fde948d828e38dd6a443566c0ec18e2a329f4ef539028726e36f03a244c785d5541fc3e1636bb64f83797e126d2ce886952bb6af2897cc27fd9ca9d002a7795efe9b882899d5ccdd2700592943886b852479a7fb51ec5aec1b35000bbcd63c427a4f381643bff4eb79c3878007bf0f3ae8af1d3c9ed4564404723dddf2aae1c962fd1d10a9242bcd2c6629bfc7af8b334a57cb4661c006605c30ff7c8d8aee0"}, @generic="e72f5231b7a07b6036170edff7bbc4f238ddd6a4bc620d9eca7b459db3d201d7e084a658383dd902115674aaa499fd112c8d32ef99840a75c3e6df1e3de3b6ce3a3cbf92dd9773640ed259029386bd7305f76664f7d25333a2e7be34f58674e6632a984591d263463cf3e91a429003f5595a0de441f861ceda87a2", @nested={0x4, 0x114}]}]}, 0x254}, {&(0x7f0000001000)={0x4b8, 0x33, 0x5a54b17459360b37, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0xb6, 0x71, 0x0, 0x0, @binary="bef1394fff0a08aff7ee3e49381a9f5e74a2d40a9403b81b0d30716e260c9a69c4fa32892c100d17ac4a6f5bc9673e53a0147204804b012c2bda00514a453c59b5c8b0be5a5879be60c29b32a3a1d46b636d28f75012b76fcd7fab93c98e51ad0f239841b3433412e8e27cf8cf272558c8af3d9f78e8f4fc2afde9af51d7ec19e5bcb52dee4f84255b2e3afded794719d14ce3edec62f9076b27ca912af3b919389d337355defd1fd0a85f5334a6ce2211e1"}, @nested={0x14, 0x140, 0x0, 0x1, [@typed={0x8, 0x155, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x128, 0x0, 0x0, @uid=r6}]}, @generic="5e1842fadc62536558f918c51df5f105175d7ccd6c0f8fc4c66ec87893060e108e90764b23d28131b0648d0edd117ce229f3ecebdeaf9be3736fec5958d150d9b370def2d02052653862496ebd8aaf79675633f29ebeea80f07e50eb6432acdea1286a078f53e8da07f63d2de0670a62c083461052ec3f6547973feee18403b39d266d79da3df2596bcd4cdbb4", @typed={0x4, 0xb1}, @typed={0xa2, 0x4c, 0x0, 0x0, @binary="e671d822822901aa02800e80a0899f2b886b1717cd19e87ee12bae867dfdc4d766d642391e1f60fb8bada74913058f5997a59bf362160b6984c9883ccd29b74c22fccb2222e3358ec1e6e33cb3995ca856511072d56a325e56c700aaea632aa0865a41156d90bae861a83559b4b03bc2504f8bb9b1f62a8e321fc09c0b94d980ec677d4d06c0cf3e5fdde0d7d37b0c16e849fda61da8f4192cb98807fcc2"}, @nested={0x1e5, 0x24, 0x0, 0x1, [@generic="3ad5d209b80e3372d986b4452c235c57f34d24c5932619510e55bfd7d5a319ae298c8dd735e24e8aaeca6e21b02af07667920408e58dbb05f1bd2b8d94923833c52e086b327321446ab1065ee854960b07d94b816b33ce74cb8e38f991dfc6da6c165ecc935c687f78e70444b9f228e7217b159f212379654b93d645691e1f5c", @generic="bcc010e18b584f43d64f675c447d6a0a6e3b94d02f1e5ad5df028b5ceae216b2d47fedb26de9864e95c26a5006ba9db85027bce6d62168c88acedacc7eb505ffea4e1991b8a377045e7e95a364255100dcd7d6a44b74f1485439c6b2cf23e34bdc692a1d8eb42b49b0b117e7d69e68638f3786b8ed14b790716af1ee5dcf629c5a019735500782cf07f078cf26d0ff34da76f4574f8f28", @nested={0x26, 0x16, 0x0, 0x1, [@generic="96b09bd76fce74fd3ed307b954dea6b198bc2914451c4488eeef4fb234f93b70a445"]}, @generic="060d2062175fbf0caed4575c7891fe19ac46cfe9de7e07e479d298ef102beccb93b6a7", @generic="97096d5f79d6ed92a9ddb6045474546aae232b993c4b2bb1132820ed5a99c65175533475ef5eb252d65d0dda623be4cf01408ec87317dd8fcb657771bf157b5c44a6e233ee60d3a09126c65faa61c781fa49898bc15ec4714dd04f346c98f9327a7e1b36c23fd18007c3e65375153b", @typed={0x8, 0x44, 0x0, 0x0, @fd=r3}, @nested={0x8, 0xa3, 0x0, 0x1, [@nested={0x4, 0x116}]}]}, @generic="8b449237ef47ac52ab0831dda911b0abb817ac05865778556576d5f5f336fb7bfa44ad7555547df6f3cbaba09689d105a33404e5c1104e94d4541a063cfb2197eb513a5cea406685b234334eca951b32aa105a9fb097e42c21ba923ce280037cb94ea26099d9dbad1e7d7893954dbe3b", @generic="2d7b93cd1d30872d09036467bed1b115d9eb654f41ccf9d6cbae734d3b2dfdfd096c7b9eecbe3f0453d204abed78d7409f5b30da1d4a52a19bc5d4a139b54894f4f1c0f6"]}, 0x4b8}], 0x2, 0x0, 0x0, 0x81}, 0x80)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x3) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', <r10=>0x0})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000a40)={0x0, 0x5, [0x1, 0x3, 0x7c7, 0x100, 0x1, 0x8]}) (async)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async)
r11 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x2597, 0x0, 0x9, 0x3bd}, &(0x7f0000000000)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0)
r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000008, 0x48012, r11, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x11c, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) (async)
syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x0)

2.323699031s ago: executing program 1 (id=10210):
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async)
syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xf, 0x9, 0xf3b8, 0x0, 0xfff, 0x7, 0x4002004c7, 0x8000000000001000, 0x0, 0x97, 0x10, 0x0, 0x40000000000003, 0x7, 0x0, 0x2], 0xeeee8000, 0x400}) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
madvise(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x9)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x40000001) (async)
madvise(&(0x7f0000954000/0x3000)=nil, 0x3000, 0x65)
ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x8}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x6, 0x8, '\x00', 0x5}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x8000) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32)
close(0x3) (rerun: 32)
openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) (async)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async, rerun: 64)
socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)

2.205284815s ago: executing program 4 (id=10211):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000"], 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0)
shutdown(0xffffffffffffffff, 0x2) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async)
add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173", 0x68, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

2.165690018s ago: executing program 1 (id=10212):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000005d40)={0x2020}, 0x2020)
pread64(r7, &(0x7f0000000000)=""/60, 0x3c, 0x7984e2f8)
read$FUSE(r7, &(0x7f0000000100)={0x2020}, 0x2020)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000002140)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void}, 0x39)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
setsockopt(r0, 0x82, 0x81, &(0x7f0000000280), 0x0)
sched_setscheduler(0x0, 0x2, 0x0)

1.801126403s ago: executing program 2 (id=10213):
r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x703000, 0x0) (async)
r1 = syz_io_uring_setup(0x23d, &(0x7f0000000680)={0x0, 0x90a, 0x1, 0xfffffdff, 0x202e0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0}) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x12}, 0x1c) (async)
sendto$l2tp6(r6, 0x0, 0x0, 0x20000081, &(0x7f0000000280)={0xa, 0x0, 0xfffff800, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3, 0x1}, 0x20)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x21, 0x0, 0x0, 0xa, &(0x7f0000000100)={r4, r5+10000000}, 0x1, 0x20, 0x0, {0x0, r7}})
io_uring_enter(r1, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) (async)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x4a, 0x8001, 0x0, 0xffffffffffffbffe, 0x9, 0x2000099, 0x5, 0x4}, 0x0) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000cfa000/0x2000)=nil, 0x2000, 0xfffffffffffffffd}) (async)
r11 = open(&(0x7f0000000040)='.\x00', 0x4480, 0x64)
fcntl$notify(r11, 0x402, 0x5) (async)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r0, 0x2) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, r12, 0x0, 0x10001, 0x0, 0x2, 0xfffffffd, 0x30e377})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f00000012c0)={0x18}) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, 0x0, 0x20048000)

1.711527344s ago: executing program 2 (id=10214):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x4, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x120)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6800000010000305000000000104000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000480012800c0001006d6163766c616e003800026ed12582d46a09bf33800a000400aa59565d539d5d07c52a771aaaaaaaaabb0000280005800a005b4c1baf6ce004002ae0d5b3974e00000a000400aaaaaaaaaa1600000c0004"], 0x68}}, 0x10)
r5 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000076c0), 0x0, 0x9200000004008044)
r6 = dup3(r5, r3, 0x0)
recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)}, 0x1}], 0x1, 0x40000001, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=<r7=>0xffffffffffffffff, @ANYRES32, @ANYRESOCT=r2, @ANYRES16=r4], 0x50)
unshare(0x62040200)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r7, @ANYRESHEX=r6], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x8080)

1.710807699s ago: executing program 4 (id=10215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async)
r2 = syz_usb_connect(0x3, 0x33, &(0x7f0000000940)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090221000100000000090400000129fddd00090500000000000000060594ef6333c9b90ec73af31b7d968c3ee90b98849dd44591e732535390ae67"], 0x0) (async)
r3 = socket(0x2, 0x805, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "12"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x20, 0x7, 0x50, {0x50, 0x24, "a934459b7c586dadbcc611e61bd679f8c3f6ca83a4d74f96df8d6e7955b97e85627f4fa4ca2ddd8cc511633e2cf93fd9af19dc7c96e06c16df75ee7b8609aef8519063a5a323757eea113325ddcc"}}, &(0x7f0000000240)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "f476b15e72acd67552cffa210caa8558fba0f0d0679dc7d9025569b27818fd0ea678fa141e87e5dbaf6d3bd7420bd9f5077180bec27dbe85305758739fc9e71add4c5fb99ea174eceb3adfa97987732987c5496291887a64fe01d8cedba1b09b16052ce75e0d34161d3fa44d5a7a5421ce4e1c873b61777381ebf5d0d6d328628360a0dac5fbc5ba0c16ec509db1d66e4ec580a2dd020b15128dd821f7e7ea7476b6ba71a57720015e4135d3bd18da9b2c8ca5ef304a39e0a78960c293a8d4014fe0c936258d2a95987d8f6e4a501e35f781a058cb2672e3b10445c76a4c4bc2552ac0e9b8cb668b789ea438dd0e0c566df4"}}, &(0x7f0000000340)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf7, "85f0632e8441bf1756a882f477aec2ca"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0xa, 0x7f}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x81, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x8, 0x52, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0xf7, 0x6, 0xf2ed, 0xf0f, 0x6, [0xc0, 0x30, 0xff0000, 0x3f30, 0x3f0f, 0x0]}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0x0, 0x1, "90f49efa", "04be480c"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x9, 0xf7, 0x6, 0x0, 0x5}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x5, 0x6f, "f05f18693f8b676eea2f01a9485dcb8ce087f2ef7cde688f9dcbf0a685c07780cafb1d1d90f56757936f30610cb95424fede507f9ec105569d4c5d6f1245e4e13b8dd1993b440cd977103817ebd09163cf1284c9da57bd48e1f8ed02643497adf1d8b03eb8dd01abca20b196b6445b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x160, 0x10, [0xf00]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'DV'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "d4c7"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x2ae}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x2}})
sendfile(r5, r5, 0x0, 0x8f)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000100)={r7, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90)

1.635178744s ago: executing program 4 (id=10216):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a0000000000000400000000000000000000000000000000000000000000000005000500000080ff0a00000000000000fe8000000000000080000000000000bb00000000000000000200130003"], 0x70}}, 0x0)

1.356017701s ago: executing program 3 (id=10217):
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10012, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10012, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0x64)
r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
syz_open_dev$usbfs(0x0, 0x76, 0x101b01) (async)
r7 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000180), 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r11=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000280)={0x3, r11, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r11})
ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r11, 0x0, 0x4, 0x7, 0x800, 0x0, {0x80000001, 0xfff, 0x0, 0x6, 0x9, 0x9, 0x5, 0x100, 0xb, 0x2, 0x0, 0x8, 0x5, 0x6, "4e80de46358e7f255a5d3f52e16f724fd04ef0eb3e6202d127cf9208f8a3226c"}})
ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff})
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x8)

1.148190294s ago: executing program 4 (id=10218):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090400000000000000000a140000000000080000000008001e80"], 0x24}}, 0x20000880)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0xc, @string={0xc, 0x3, "16324ebaafc608b8a3a0"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006dbf00000004037e15000000000000000000"], 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7574}, 0x94)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f00000025c0)="a54dd4", 0x3}], 0x1)
rt_sigqueueinfo(0x0, 0x40, &(0x7f00000000c0)={0x3e, 0x3, 0x80})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000004000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.13010905s ago: executing program 3 (id=10219):
pipe(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fchown(r0, 0x0, 0x0)
fchmod(r0, 0x21)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
mq_notify(r0, &(0x7f0000000100)={0x0, 0x36, 0x0, @tid=r1})
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
munlockall()
io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0)
close(0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141101)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x74ce, &(0x7f0000000380)={0x0, 0xb276, 0x800, 0x0, 0x80002a9}, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x800)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x4e20, 0x4, 0x4e22, 0x0, 0x2, 0x180, 0x60, 0x8, 0x0, r9}, {0x80000001, 0x4, 0x6d, 0x3, 0x3, 0x8, 0x2b3, 0xe97}, {0x4, 0xa, 0x1, 0x7fffffff}, 0xc, 0x6e6bb5, 0x1, 0x0, 0x1}, {{@in=@empty, 0x804d1, 0x32}, 0x2, @in=@local, 0x3506, 0x4, 0x2, 0x1, 0xd, 0x8, 0x2}}, 0xe8)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0/file0/file0\x00'})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, 0x0)

137.483343ms ago: executing program 3 (id=10220):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x100, 0x1})
ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x8})
socket$inet_tcp(0x2, 0x1, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040014)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)
syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f00000004c0)="9266b709b6a124c788f903c38e5f6f0102c2de5d1cb867eb", 0x0, 0x18)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x44, 0x5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x66, 0x0, 0x4, 0x2f, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4, 0x93, 0x1, 0x9}]}}}}})
socket$netlink(0x10, 0x3, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

0s ago: executing program 1 (id=10221):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async)
sendto$inet6(r4, 0x0, 0x0, 0x20004002, 0x0, 0x0) (async)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r6, 0x2000)
r7 = dup(r6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r7, 0x0, 0xffffffdb)
r9 = syz_open_dev$ttys(0xc, 0x2, 0x1)
fstatfs(r9, &(0x7f0000000500)=""/253) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) (async)
getsockopt$inet_tcp_buf(r10, 0x6, 0x1a, 0x0, &(0x7f0000000100)) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r7, 0x7ac, &(0x7f0000000000)={&(0x7f00000000c0)={{@local}, {@local, 0xb}, 0x400, "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"}, 0x418, 0x4})

kernel console output (not intermixed with test programs):

 5-1: config index 0 descriptor too short (expected 103, got 92)
[ 2495.771588][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2495.852655][ T5817] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2495.864354][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2495.878010][ T5817] usb 5-1: Product: syz
[ 2495.883229][ T5817] usb 5-1: Manufacturer: syz
[ 2495.891283][ T5817] usb 5-1: SerialNumber: syz
[ 2495.911517][ T5817] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2495.962955][T30115] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2496.689673][T28941] usb 5-1: USB disconnect, device number 93
[ 2497.024959][T30115] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2497.079543][T30115] ath9k_htc: Failed to initialize the device
[ 2497.108016][T28941] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2497.678097][T23256] syzkaller0: entered promiscuous mode
[ 2497.685017][T23256] syzkaller0: entered allmulticast mode
[ 2498.149702][T30115] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2498.575381][T30115] usb 5-1: Using ep0 maxpacket: 8
[ 2498.585967][T30115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2498.597946][T30115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2498.616676][T23280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9510'.
[ 2498.679422][T30115] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2498.692649][T30115] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[ 2498.914532][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9513'.
[ 2498.933586][T30115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2498.981231][T30115] usb 5-1: config 0 descriptor??
[ 2499.351909][T23280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9510'.
[ 2499.536364][T23306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9515'.
[ 2499.585240][T23268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2499.615792][T23306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9515'.
[ 2499.635951][T23268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2499.896270][T23320] syzkaller0: entered promiscuous mode
[ 2499.902941][T23320] syzkaller0: entered allmulticast mode
[ 2499.907446][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2499.932757][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2499.945001][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2499.955311][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2499.963638][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2499.972571][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2499.987300][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2499.995246][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2500.007243][T30115] hid-rmi 0003:06CB:81A7.0079: unknown main item tag 0x0
[ 2500.017593][T30115] hid-rmi 0003:06CB:81A7.0079: unbalanced collection at end of report description
[ 2500.060865][T30115] hid-rmi 0003:06CB:81A7.0079: parse failed
[ 2500.077375][T30115] hid-rmi 0003:06CB:81A7.0079: probe with driver hid-rmi failed with error -22
[ 2500.116947][T30115] usb 5-1: USB disconnect, device number 94
[ 2500.152624][ T7106] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 2500.302068][ T7106] usb 4-1: device descriptor read/64, error -71
[ 2500.339779][T23359] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9522'.
[ 2500.569405][T23361] tipc: Started in network mode
[ 2500.599402][ T7106] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 2500.642691][T23361] tipc: Node identity , cluster identity 4711
[ 2500.695215][T23361] tipc: Failed to obtain node identity
[ 2500.743133][T23361] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[ 2500.751589][ T7106] usb 4-1: device descriptor read/64, error -71
[ 2500.804225][T23364] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2500.881150][ T7106] usb usb4-port1: attempt power cycle
[ 2501.042931][T23383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2501.196530][T23383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2501.243039][T23386] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9525'.
[ 2501.259363][ T7106] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 2501.300377][ T7106] usb 4-1: device descriptor read/8, error -71
[ 2501.539348][ T7106] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 2501.583068][ T7106] usb 4-1: device descriptor read/8, error -71
[ 2501.707876][ T7106] usb usb4-port1: unable to enumerate USB device
[ 2502.123202][T23408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2502.211102][T23404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2502.255202][T23405] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9526'.
[ 2502.738320][T23413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9527'.
[ 2503.161661][T23422] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2503.212574][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9529'.
[ 2504.091284][T23438] syzkaller0: entered promiscuous mode
[ 2504.096852][T23438] syzkaller0: entered allmulticast mode
[ 2504.103179][T28941] IPVS: starting estimator thread 0...
[ 2504.209989][T23442] IPVS: using max 38 ests per chain, 91200 per kthread
[ 2505.078207][T23473] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 2505.147723][T23473] bond1 (unregistering): Released all slaves
[ 2505.778400][T23574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2505.906814][T23574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2505.923872][T23574] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9539'.
[ 2505.969626][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2506.491845][T23601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2508.076966][T23641] x_tables: unsorted underflow at hook 2
[ 2508.716060][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9553'.
[ 2509.292086][T23669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2509.493515][T23669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2509.525354][T23669] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9556'.
[ 2510.006737][T23677] xt_cluster: node mask cannot exceed total number of nodes
[ 2510.295259][T23688] netlink: 'syz.4.9562': attribute type 1 has an invalid length.
[ 2510.349405][T30115] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 2510.391993][T23717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9562'.
[ 2510.406919][T23688] bond6: entered promiscuous mode
[ 2510.414640][T23688] 8021q: adding VLAN 0 to HW filter on device bond6
[ 2510.428044][T23717] bond6: entered allmulticast mode
[ 2510.510418][T30115] usb 4-1: Using ep0 maxpacket: 32
[ 2510.519139][T30115] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 2510.534313][T30115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2510.545190][T30115] usb 4-1: config 0 descriptor??
[ 2510.567811][T30115] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 2510.579057][T23688] bond6: (slave bridge4): making interface the new active one
[ 2510.588079][T23688] bridge4: entered promiscuous mode
[ 2510.594682][T23688] bridge4: entered allmulticast mode
[ 2510.605007][T23688] bond6: (slave bridge4): Enslaving as an active interface with an up link
[ 2510.701166][T23730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9563'.
[ 2511.002699][T23744] x_tables: unsorted underflow at hook 2
[ 2511.080389][ T7106] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2511.241282][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 2511.251239][ T7106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 2511.263197][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2511.274373][ T7106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 2511.285349][ T7106] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 2511.295299][ T7106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2511.310126][ T7106] usb 5-1: config 0 descriptor??
[ 2511.368420][T23679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2511.395824][T23679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2511.437016][T23679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2511.447890][T23679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2511.527931][T23737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2511.548372][T23737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2511.587231][ T7106] hdpvr 5-1:0.0: firmware version 0x15 dated ���&S�3;���x&X^��	w��g/��n#��
[ 2511.798586][ T7106] hdpvr 5-1:0.0: device init failed
[ 2511.807738][ T7106] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[ 2511.820798][ T7106] usb 5-1: USB disconnect, device number 95
[ 2511.862912][T30115] gspca_vc032x: reg_w err -71
[ 2511.868316][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2511.874349][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2511.883959][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2511.892043][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2511.897482][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2511.918342][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2511.948129][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2511.956335][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.039679][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.045137][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.052519][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.057937][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.064380][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.071397][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.077110][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.082839][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.088931][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.094844][T30115] gspca_vc032x: I2c Bus Busy Wait 00
[ 2512.101007][T30115] gspca_vc032x: Unknown sensor...
[ 2512.106648][T30115] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[ 2512.122893][T30115] usb 4-1: USB disconnect, device number 51
[ 2512.521249][   T30] audit: type=1326 audit(1771046145.585:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.571717][T23794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2512.688377][T23794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2512.699767][   T30] audit: type=1326 audit(1771046145.595:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.726801][T23794] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9570'.
[ 2512.738014][   T30] audit: type=1326 audit(1771046145.595:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.772431][   T30] audit: type=1326 audit(1771046145.595:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.796963][   T30] audit: type=1326 audit(1771046145.595:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.874073][   T30] audit: type=1326 audit(1771046145.595:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.897100][   T30] audit: type=1326 audit(1771046145.595:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.929431][ T5817] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2512.939588][   T30] audit: type=1326 audit(1771046145.595:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2512.982896][   T30] audit: type=1326 audit(1771046145.595:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2513.021414][   T30] audit: type=1326 audit(1771046145.595:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.4.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0429b9bf79 code=0x7ffc0000
[ 2513.129299][ T5817] usb 5-1: Using ep0 maxpacket: 8
[ 2513.138616][ T5817] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2513.148357][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2513.157535][ T5817] usb 5-1: Product: syz
[ 2513.163619][ T5817] usb 5-1: Manufacturer: syz
[ 2513.168419][ T5817] usb 5-1: SerialNumber: syz
[ 2513.180199][ T5817] usb 5-1: config 0 descriptor??
[ 2513.387073][T23808] syzkaller0: entered promiscuous mode
[ 2513.393389][T23808] syzkaller0: entered allmulticast mode
[ 2513.403310][ T5817] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2513.620799][T23799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2513.631155][T23799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2513.976012][T23831] x_tables: unsorted underflow at hook 2
[ 2514.658506][T23840] dummy0: entered promiscuous mode
[ 2514.665588][T23840] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 2514.676056][T23840] hsr1: entered allmulticast mode
[ 2514.681471][T23840] dummy0: entered allmulticast mode
[ 2514.686828][T23840] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 2514.700833][T23840] input: syz0 as /devices/virtual/input/input219
[ 2514.936455][ T5817] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2514.958128][ T5817] usb 5-1: USB disconnect, device number 96
[ 2515.590579][T23876] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9583'.
[ 2515.621302][T23876] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9583'.
[ 2515.641066][T23878] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9583'.
[ 2517.354811][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9586'.
[ 2517.440469][T23945] netlink: 'syz.0.9586': attribute type 4 has an invalid length.
[ 2517.458955][T23945] netlink: 'syz.0.9586': attribute type 4 has an invalid length.
[ 2517.493067][T23945] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2518.229350][T30115] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 2518.426509][T30115] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[ 2518.449276][T30115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2518.473856][T30115] usb 4-1: config 0 descriptor??
[ 2518.499027][T30115] usb 4-1: bad CDC descriptors
[ 2518.861436][T23961] x_tables: unsorted underflow at hook 2
[ 2519.834484][T23980] netlink: 'syz.4.9593': attribute type 1 has an invalid length.
[ 2519.873324][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9593'.
[ 2520.173450][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9595'.
[ 2520.232140][T23999] bridge_slave_1: left allmulticast mode
[ 2520.278263][T23999] bridge_slave_1: left promiscuous mode
[ 2520.296809][T23999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2520.317573][T23999] bridge_slave_0: left allmulticast mode
[ 2520.325677][T23999] bridge_slave_0: left promiscuous mode
[ 2520.345771][T23999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2520.817628][ T5817] usb 4-1: USB disconnect, device number 52
[ 2520.994671][T24042] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9599'.
[ 2522.978535][T24082] x_tables: unsorted underflow at hook 2
[ 2523.790531][T24085] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9606'.
[ 2524.609883][T24106] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 2524.647980][T24106] netlink: 'syz.4.9610': attribute type 23 has an invalid length.
[ 2525.354206][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9613'.
[ 2525.441474][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9613'.
[ 2525.943741][T24142] binder: BINDER_SET_CONTEXT_MGR already set
[ 2525.950049][T24142] binder: 24137:24142 ioctl 4018620d 200000000300 returned -16
[ 2525.973566][T24142] binder_alloc: 24137: binder_alloc_buf size 4096 failed, no address space
[ 2525.989350][T24091] Bluetooth: hci1: command 0x0406 tx timeout
[ 2525.996226][T24142] binder_alloc: allocated: 8192 (num: 2 largest: 4096), free: 0 (num: 0 largest: 0)
[ 2526.690662][   T29] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2526.888459][   T29] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[ 2526.899965][   T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2526.913457][   T29] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2526.939642][   T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2526.949972][   T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2526.958282][   T29] usb 5-1: Product: syz
[ 2526.966605][   T29] usb 5-1: Manufacturer: syz
[ 2526.976700][   T29] usb 5-1: SerialNumber: syz
[ 2526.999892][   T29] usb 5-1: config 0 descriptor??
[ 2527.016491][T24165] x_tables: unsorted underflow at hook 2
[ 2527.028733][   T29] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2527.059812][   T29] hub 5-1:0.0: probe with driver hub failed with error -5
[ 2527.107258][   T29] usb 5-1: selecting invalid altsetting 0
[ 2527.321446][   T29] usb 5-1: USB disconnect, device number 97
[ 2527.453710][T24153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9618'.
[ 2527.463454][T24156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9618'.
[ 2527.510126][T22904] udevd[22904]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2527.615638][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9623'.
[ 2527.980364][   T29] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[ 2528.198838][   T29] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 2528.231004][   T29] usb 5-1: can't read configurations, error -71
[ 2529.027857][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.034832][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.537557][T24247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9630'.
[ 2530.164975][T23740] usb 5-1: new full-speed USB device number 100 using dummy_hcd
[ 2530.580654][T23740] usb 5-1: too many configurations: 121, using maximum allowed: 8
[ 2530.665271][T23740] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2530.689922][T23740] usb 5-1: can't read configurations, error -61
[ 2530.867796][T23740] usb 5-1: new full-speed USB device number 101 using dummy_hcd
[ 2530.920004][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9635'.
[ 2531.165484][T23740] usb 5-1: too many configurations: 121, using maximum allowed: 8
[ 2531.186633][T23740] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2531.220513][T23740] usb 5-1: can't read configurations, error -61
[ 2531.228670][T23740] usb usb5-port1: attempt power cycle
[ 2531.635815][T23740] usb 5-1: new full-speed USB device number 102 using dummy_hcd
[ 2531.733655][T23740] usb 5-1: too many configurations: 121, using maximum allowed: 8
[ 2531.764905][T23740] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2531.788309][T23740] usb 5-1: can't read configurations, error -61
[ 2532.059391][T23740] usb 5-1: new full-speed USB device number 103 using dummy_hcd
[ 2532.082870][T23740] usb 5-1: too many configurations: 121, using maximum allowed: 8
[ 2532.096658][T23740] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2532.116038][T23740] usb 5-1: can't read configurations, error -61
[ 2532.130330][T23740] usb usb5-port1: unable to enumerate USB device
[ 2532.218841][T24304] x_tables: unsorted underflow at hook 2
[ 2532.519840][T28941] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 2532.677045][T28941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2532.694607][T28941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2532.737208][T28941] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 2532.748638][T28941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2532.875841][T28941] usb 3-1: config 0 descriptor??
[ 2533.168057][T24336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9644'.
[ 2533.306897][T28941] cm6533_jd 0003:0D8C:0022.007A: invalid report_count 1192232228
[ 2533.309420][ T5817] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 2533.321117][T28941] cm6533_jd 0003:0D8C:0022.007A: item 0 4 1 9 parsing failed
[ 2533.332081][T28941] cm6533_jd 0003:0D8C:0022.007A: parse failed
[ 2533.338329][T28941] cm6533_jd 0003:0D8C:0022.007A: probe with driver cm6533_jd failed with error -22
[ 2533.479397][ T5817] usb 5-1: Using ep0 maxpacket: 16
[ 2533.492560][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2533.507312][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2533.513223][T28941] usb 3-1: USB disconnect, device number 42
[ 2533.517704][ T5817] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[ 2533.541714][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2533.560923][ T5817] usb 5-1: config 0 descriptor??
[ 2533.804169][ T5817] ntrig 0003:1B96:0008.007B: nested delimiters
[ 2533.810625][ T5817] ntrig 0003:1B96:0008.007B: item 0 1 2 10 parsing failed
[ 2533.820933][ T5817] ntrig 0003:1B96:0008.007B: parse failed
[ 2533.828907][ T5817] ntrig 0003:1B96:0008.007B: probe with driver ntrig failed with error -22
[ 2533.981790][ T5817] usb 5-1: USB disconnect, device number 104
[ 2534.698723][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9648'.
[ 2535.869372][T23740] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 2535.907559][T24415] syz_tun: entered allmulticast mode
[ 2536.055985][T23740] usb 5-1: Using ep0 maxpacket: 32
[ 2536.063596][T23740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2536.074235][T23740] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2536.094165][T23740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2536.119370][T23740] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2536.161959][T23740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2536.172493][T23740] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2536.356962][T24422] netlink: 'syz.0.9651': attribute type 10 has an invalid length.
[ 2536.445418][T24422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2536.508222][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 2536.508239][   T30] audit: type=1804 audit(1771046169.565:6459): pid=24422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9651" name="bus" dev="ramfs" ino=177538 res=1 errno=0
[ 2536.570362][T23740] usb 5-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a
[ 2536.587683][T23740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2536.641310][T23740] usb 5-1: Product: syz
[ 2536.703547][T23740] usb 5-1: Manufacturer: syz
[ 2536.717560][T23740] usb 5-1: SerialNumber: syz
[ 2536.739146][T23740] usb 5-1: config 0 descriptor??
[ 2536.755625][T23740] usb 5-1: bad CDC descriptors
[ 2536.766893][T23740] cdc_acm 5-1:0.0: Zero length descriptor references
[ 2536.810297][T23740] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[ 2536.821405][T24433] netlink: 'syz.3.9652': attribute type 1 has an invalid length.
[ 2536.886927][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9652'.
[ 2536.938623][T24433] bond7: entered promiscuous mode
[ 2537.007803][T24405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2537.024400][T24433] 8021q: adding VLAN 0 to HW filter on device bond7
[ 2537.039571][T24405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2537.252443][T24456] bond7: entered allmulticast mode
[ 2537.695602][   T30] audit: type=1800 audit(1771046170.745:6460): pid=24480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9655" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=647 res=0 errno=0
[ 2538.540230][T17915] usb 5-1: USB disconnect, device number 105
[ 2538.959754][T24504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9659'.
[ 2540.534203][T24552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2540.556646][T24552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2540.568828][T24552] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9671'.
[ 2540.584546][T24555] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9672'.
[ 2540.647347][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9672'.
[ 2540.692421][T24555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9672'.
[ 2540.920700][T17915] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 2541.138950][T17915] usb 5-1: Using ep0 maxpacket: 32
[ 2541.154792][T17915] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[ 2541.176408][T17915] usb 5-1: config 0 has no interface number 0
[ 2541.235861][T17915] usb 5-1: config 0 interface 196 has no altsetting 0
[ 2541.291124][T17915] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2541.313861][T17915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2541.343035][T17915] usb 5-1: Product: syz
[ 2541.352240][T17915] usb 5-1: Manufacturer: syz
[ 2541.367089][T17915] usb 5-1: SerialNumber: syz
[ 2541.379759][T17915] usb 5-1: config 0 descriptor??
[ 2541.598569][T24559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9673'.
[ 2541.664877][T17915] ipheth 5-1:0.196: Unable to find endpoints
[ 2541.693116][T17915] usb 5-1: USB disconnect, device number 106
[ 2542.994492][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9682'.
[ 2543.295136][T24625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9684'.
[ 2543.306953][T24625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9684'.
[ 2543.963589][T24642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9686'.
[ 2544.049111][T24643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2544.069828][T24643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2544.092986][T24643] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9687'.
[ 2545.598911][T24684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9695'.
[ 2545.608629][T24684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9695'.
[ 2545.619486][T24684] fuse: Unknown parameter 'group_ad'
[ 2545.773339][T24686] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9696'.
[ 2545.823925][T24686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9696'.
[ 2546.353937][T24691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9697'.
[ 2548.819733][T24732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2548.837678][T24732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2548.848975][T24732] __nla_validate_parse: 1 callbacks suppressed
[ 2548.848988][T24732] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9705'.
[ 2549.089022][T24742] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9707'.
[ 2549.101266][T24742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9707'.
[ 2549.441256][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9709'.
[ 2550.322758][T24797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9714'.
[ 2550.405334][T24799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9714'.
[ 2551.512719][T24820] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9719'.
[ 2551.527524][T24820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9719'.
[ 2551.639377][ T5817] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 2551.864241][ T5817] usb 3-1: Using ep0 maxpacket: 32
[ 2551.885862][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2551.897181][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2551.927860][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2552.033274][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2552.057095][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2552.071673][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2552.316465][ T5817] usb 3-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a
[ 2552.367915][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2552.385697][ T5817] usb 3-1: Product: syz
[ 2552.417756][ T5817] usb 3-1: Manufacturer: syz
[ 2552.441368][ T5817] usb 3-1: SerialNumber: syz
[ 2552.525579][ T5817] usb 3-1: config 0 descriptor??
[ 2552.558293][ T5817] usb 3-1: bad CDC descriptors
[ 2552.599990][ T5817] cdc_acm 3-1:0.0: Zero length descriptor references
[ 2552.606730][ T5817] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22
[ 2552.763545][T24812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2552.775009][T24812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2554.256182][T30115] usb 3-1: USB disconnect, device number 43
[ 2554.838806][T24884] xt_recent: Unsupported userspace flags (000000b1)
[ 2555.156987][   T30] audit: type=1326 audit(1771046188.185:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24889 comm="syz.0.9729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a9c79bf79 code=0x0
[ 2555.195514][T24894] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2556.225858][ T7106] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 2556.443898][ T7106] usb 5-1: Using ep0 maxpacket: 16
[ 2556.452391][ T7106] usb 5-1: config 0 has no interfaces?
[ 2556.468129][ T7106] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2556.508146][ T7106] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2556.527129][ T7106] usb 5-1: Manufacturer: syz
[ 2556.542122][ T7106] usb 5-1: config 0 descriptor??
[ 2557.759336][ T7106] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 2557.919503][T30115] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 2557.979401][ T7106] usb 3-1: Using ep0 maxpacket: 16
[ 2557.987463][ T7106] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 2557.999524][ T7106] usb 3-1: config 0 has no interface number 0
[ 2558.007348][ T7106] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2558.036234][ T7106] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 2558.056514][ T7106] usb 3-1: config 0 interface 41 has no altsetting 0
[ 2558.079295][T30115] usb 4-1: Using ep0 maxpacket: 32
[ 2558.091677][T30115] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 2558.092238][ T7106] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2558.131044][T30115] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 2558.140684][ T7106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2558.148765][ T7106] usb 3-1: Product: syz
[ 2558.153347][ T7106] usb 3-1: Manufacturer: syz
[ 2558.158117][ T7106] usb 3-1: SerialNumber: syz
[ 2558.177193][T30115] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 2558.194712][ T7106] usb 3-1: config 0 descriptor??
[ 2558.213420][T30115] usb 4-1: config 1 has no interface number 0
[ 2558.213958][T24949] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2558.234132][T30115] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2558.263685][T30115] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2558.309813][T24949] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2558.322675][T30115] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 2558.339010][T30115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2558.381975][T30115] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 2558.543690][T24949] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2558.607451][T24949] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2558.630555][T30115] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[ 2559.048032][T30115] usb 5-1: USB disconnect, device number 107
[ 2559.052658][ T7106] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[ 2559.079596][T23740] usb 4-1: USB disconnect, device number 53
[ 2559.093258][T23740] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 2559.211864][T25002] program syz.4.9740 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2559.488106][T25005] syz.4.9740 (25005): drop_caches: 2
[ 2560.458554][ T7106] usb 3-1: USB disconnect, device number 44
[ 2560.480772][T17915] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 2560.619585][T17915] usb 5-1: device descriptor read/64, error -71
[ 2560.645022][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.654497][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.664395][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.678163][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.686458][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.709000][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.717994][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.726086][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.735135][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.747429][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: unknown main item tag 0x0
[ 2560.764753][T28941] hid-generic 1000:7FFFFFFF:00FF.007C: hidraw0: <UNKNOWN> HID v0.b3 Device [syz0] on syz0
[ 2560.872654][T17915] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 2560.897954][T25066] fido_id[25066]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2560.939385][T28941] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 2561.049366][T17915] usb 5-1: device descriptor read/64, error -71
[ 2561.099386][T28941] usb 4-1: device descriptor read/64, error -71
[ 2561.180142][T17915] usb usb5-port1: attempt power cycle
[ 2561.369638][T25073] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2561.532546][T28941] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 2561.699432][T17915] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 2561.800047][T28941] usb 4-1: device descriptor read/64, error -71
[ 2561.832133][T17915] usb 5-1: device descriptor read/8, error -71
[ 2561.910087][T28941] usb usb4-port1: attempt power cycle
[ 2562.149339][T17915] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 2562.180899][T17915] usb 5-1: device descriptor read/8, error -71
[ 2562.337629][T17915] usb usb5-port1: unable to enumerate USB device
[ 2562.389648][T28941] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 2562.437539][T28941] usb 4-1: device descriptor read/8, error -71
[ 2562.689367][T28941] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 2562.720629][T28941] usb 4-1: device descriptor read/8, error -71
[ 2562.840508][T28941] usb usb4-port1: unable to enumerate USB device
[ 2563.377537][T25111] syzkaller0: entered promiscuous mode
[ 2563.383831][T25111] syzkaller0: entered allmulticast mode
[ 2563.726090][T25130] program syz.2.9759 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2563.909663][T30115] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 2564.094278][T30115] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 2564.116265][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2564.125984][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2564.140716][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2564.458028][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2564.558759][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2564.570011][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2564.584251][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2564.597438][T28941] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2564.614803][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2564.665303][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2564.689362][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2564.753119][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2564.786696][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2564.803916][T28941] usb 4-1: Using ep0 maxpacket: 16
[ 2564.827147][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2564.846268][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2564.889846][T28941] usb 4-1: config 0 has no interfaces?
[ 2564.896625][T28941] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2564.906684][T28941] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2564.906698][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2564.956605][T28941] usb 4-1: Manufacturer: syz
[ 2564.956621][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2564.957877][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2565.017232][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2565.044212][T28941] usb 4-1: config 0 descriptor??
[ 2565.068875][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2565.093547][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2565.115270][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2565.130575][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2565.164098][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2565.195021][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2565.208794][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2565.218071][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2565.248027][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2565.267631][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2565.340592][T30115] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2565.350264][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2565.361330][T30115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2565.371209][T30115] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2565.463112][T30115] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 2565.490107][T30115] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 2565.515527][T30115] usb 5-1: Product: syz
[ 2565.524900][T30115] usb 5-1: Manufacturer: syz
[ 2565.535305][T30115] usb 5-1: SerialNumber: syz
[ 2565.550024][T30115] usb 5-1: config 0 descriptor??
[ 2565.708831][T30115] yurex 5-1:0.0: Could not submitting URB
[ 2565.723853][T30115] yurex 5-1:0.0: probe with driver yurex failed with error -5
[ 2565.970443][T28941] usb 5-1: USB disconnect, device number 112
[ 2566.599838][T25211] syzkaller0: entered promiscuous mode
[ 2566.605871][T25211] syzkaller0: entered allmulticast mode
[ 2566.999000][T25238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9770'.
[ 2567.056946][T25238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9770'.
[ 2567.088847][T25238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2567.193628][T25238] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9770'.
[ 2567.470097][T30115] usb 4-1: USB disconnect, device number 58
[ 2567.824469][T25256] syzkaller0: entered promiscuous mode
[ 2567.830209][T25256] syzkaller0: entered allmulticast mode
[ 2568.849354][T17915] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2569.021053][T17915] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 2569.048351][T17915] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 2569.072429][T17915] usb 3-1: config 220 has no interface number 2
[ 2569.079101][T17915] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 2569.097491][T17915] usb 3-1: config 220 interface 0 has no altsetting 0
[ 2569.106640][T17915] usb 3-1: config 220 interface 76 has no altsetting 0
[ 2569.114207][T17915] usb 3-1: config 220 interface 1 has no altsetting 0
[ 2569.126427][T17915] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2569.136857][T17915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2569.145235][T17915] usb 3-1: Product: syz
[ 2569.152430][T17915] usb 3-1: Manufacturer: syz
[ 2569.154881][T25290] syzkaller0: entered promiscuous mode
[ 2569.157367][T17915] usb 3-1: SerialNumber: syz
[ 2569.192537][T25290] syzkaller0: entered allmulticast mode
[ 2569.321071][ T7106] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 2569.399181][T17915] usb 3-1: selecting invalid altsetting 0
[ 2569.414422][T25304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9782'.
[ 2569.433418][T17915] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 2569.449529][T17915] uvcvideo 3-1:220.0: No valid video chain found.
[ 2569.472489][T17915] usb 3-1: selecting invalid altsetting 0
[ 2569.478408][T17915] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 2569.503369][T17915] usb 3-1: USB disconnect, device number 45
[ 2569.512447][ T7106] usb 4-1: Using ep0 maxpacket: 32
[ 2569.519705][ T7106] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[ 2569.528532][ T7106] usb 4-1: config 0 has no interface number 0
[ 2569.542907][ T7106] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 2569.583963][ T7106] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 2569.596808][ T7106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2569.608966][ T7106] usb 4-1: Product: syz
[ 2569.613603][ T7106] usb 4-1: Manufacturer: syz
[ 2569.625034][ T7106] usb 4-1: SerialNumber: syz
[ 2569.644905][ T7106] usb 4-1: config 0 descriptor??
[ 2569.652010][T25283] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2569.864609][T25283] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2570.068476][T25332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2570.158058][T25332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2570.192605][T25335] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9788'.
[ 2570.566023][ T7106] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 2570.582386][ T7106] asix 4-1:0.188: probe with driver asix failed with error -71
[ 2570.597308][ T7106] usb 4-1: USB disconnect, device number 59
[ 2571.660196][T25367] syzkaller0: entered promiscuous mode
[ 2571.669289][T25367] syzkaller0: entered allmulticast mode
[ 2571.886666][T25382] kAFS: unable to lookup cell '(,c��L'
[ 2571.970281][T25394] vcan0: tx address claim with dlc 0
[ 2572.169524][T30115] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 2572.326505][T25414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9803'.
[ 2572.338987][T23740] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2572.359427][T30115] usb 3-1: Using ep0 maxpacket: 32
[ 2572.368139][T25414] binder: 25413:25414 ioctl c0306201 200000000680 returned -14
[ 2572.368715][T30115] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2572.389932][T30115] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2572.399008][T30115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2572.419573][T30115] usb 3-1: config 0 descriptor??
[ 2572.430863][T30115] hub 3-1:0.0: bad descriptor, ignoring hub
[ 2572.436819][T30115] hub 3-1:0.0: probe with driver hub failed with error -5
[ 2572.470434][T30115] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 2572.524703][T23740] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2572.548439][T23740] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 2572.562293][T23740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2572.585520][T23740] usb 4-1: config 0 descriptor??
[ 2572.916402][T25437] syzkaller0: entered promiscuous mode
[ 2572.931717][T25437] syzkaller0: entered allmulticast mode
[ 2573.341445][T25446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.361988][T25446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.373451][T25446] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9808'.
[ 2573.412983][T23740] usbhid 4-1:0.0: can't add hid device: -71
[ 2573.421994][T23740] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2573.449330][T23740] usb 4-1: USB disconnect, device number 60
[ 2575.079462][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2575.229810][T23740] usb 3-1: USB disconnect, device number 46
[ 2575.642744][T25510] loop3: detected capacity change from 0 to 7
[ 2575.656769][T25510] Dev loop3: unable to read RDB block 7
[ 2575.671728][T25510]  loop3: unable to read partition table
[ 2575.691230][T25513] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode
[ 2575.700296][T25513] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode
[ 2575.713830][T25510] loop3: partition table beyond EOD, truncated
[ 2575.749502][T25510] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 2575.914177][T25522] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9820'.
[ 2576.951129][T25541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2576.974503][T25541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2576.986808][T25541] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9825'.
[ 2577.080973][T25545] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2577.368634][ T5189] Dev loop3: unable to read RDB block 7
[ 2577.382188][ T5189]  loop3: unable to read partition table
[ 2577.402760][   T30] audit: type=1804 audit(1771046210.495:6462): pid=25556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9828" name="bus" dev="ramfs" ino=179858 res=1 errno=0
[ 2577.438404][ T5189] loop3: partition table beyond EOD, truncated
[ 2577.497796][ T5189] Dev loop3: unable to read RDB block 7
[ 2577.597212][ T5189]  loop3: unable to read partition table
[ 2577.612287][ T5189] loop3: partition table beyond EOD, truncated
[ 2577.801302][ T5189] Dev loop3: unable to read RDB block 7
[ 2577.820041][T25571] syzkaller0: entered promiscuous mode
[ 2577.825668][T25571] syzkaller0: entered allmulticast mode
[ 2577.862378][ T5189]  loop3: unable to read partition table
[ 2577.882467][ T5189] loop3: partition table beyond EOD, truncated
[ 2577.984844][ T5189] Dev loop3: unable to read RDB block 7
[ 2577.991271][ T5189]  loop3: unable to read partition table
[ 2577.997056][ T5189] loop3: partition table beyond EOD, truncated
[ 2578.105970][ T5189] Dev loop3: unable to read RDB block 7
[ 2578.112098][ T5189]  loop3: unable to read partition table
[ 2578.118210][ T5189] loop3: partition table beyond EOD, truncated
[ 2578.261910][ T5189] Dev loop3: unable to read RDB block 7
[ 2578.268582][ T5189]  loop3: unable to read partition table
[ 2578.302508][ T5189] loop3: partition table beyond EOD, truncated
[ 2578.507663][T25592] tun0: tun_chr_ioctl cmd 1074025675
[ 2578.547409][T25592] tun0: persist enabled
[ 2578.661303][ T5189] Dev loop3: unable to read RDB block 7
[ 2578.679841][ T5189]  loop3: unable to read partition table
[ 2578.696333][ T5189] loop3: partition table beyond EOD, truncated
[ 2579.019022][T25622] Cannot find add_set index 0 as target
[ 2579.033417][T25622] netdevsim netdevsim2: Direct firmware load for /
[ 2579.033417][T25622]  failed with error -2
[ 2579.050839][T25622] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[ 2579.050839][T25622] 
[ 2579.519452][ T9395] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[ 2579.702554][ T9395] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[ 2579.726654][ T9395] usb 3-1: config 0 has no interface number 0
[ 2579.785320][T28941] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[ 2579.849663][ T9395] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 2579.916832][ T9395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2579.937346][ T9395] usb 3-1: Product: syz
[ 2579.946134][ T9395] usb 3-1: Manufacturer: syz
[ 2579.970446][ T9395] usb 3-1: SerialNumber: syz
[ 2579.971199][T28941] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2580.005593][ T9395] usb 3-1: config 0 descriptor??
[ 2580.036847][T28941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2580.086464][T28941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2580.115206][T28941] usb 4-1: Product: syz
[ 2580.129133][T28941] usb 4-1: Manufacturer: syz
[ 2580.155105][T28941] usb 4-1: SerialNumber: syz
[ 2580.257433][ T9395] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[ 2580.272326][ T9395] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[ 2580.299527][ T9395] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[ 2580.350612][ T9395] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[ 2580.428894][ T9395] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 2580.783840][T28941] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 2581.157363][T25630] syzkaller1: entered promiscuous mode
[ 2581.163900][T25630] syzkaller1: entered allmulticast mode
[ 2581.786713][ T7106] usb 4-1: USB disconnect, device number 61
[ 2581.803908][ T7106] usblp0: removed
[ 2582.213089][T25695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9849'.
[ 2582.527918][ T7106] usb 3-1: USB disconnect, device number 47
[ 2582.579202][ T7106] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 2582.724320][ T7106] keyspan 3-1:0.133: device disconnected
[ 2582.813918][T25724] syzkaller0: entered promiscuous mode
[ 2582.820584][T25724] syzkaller0: entered allmulticast mode
[ 2583.609334][T17915] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 2583.767459][T17915] usb 3-1: config 0 has an invalid interface number: 197 but max is 0
[ 2583.808424][T17915] usb 3-1: config 0 has no interface number 0
[ 2583.841808][T17915] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2583.881729][T17915] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[ 2583.915581][T17915] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[ 2583.965506][T17915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2584.039295][T17915] usb 3-1: Product: syz
[ 2584.043585][T17915] usb 3-1: Manufacturer: syz
[ 2584.055493][T17915] usb 3-1: SerialNumber: syz
[ 2584.074792][T17915] usb 3-1: config 0 descriptor??
[ 2584.088027][T25759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2584.106462][T25766] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2584.115233][T25766] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2584.387803][T23740] usb 3-1: USB disconnect, device number 48
[ 2585.461291][T17915] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 2585.609929][T17915] usb 3-1: device descriptor read/64, error -71
[ 2585.973455][T17915] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 2586.114750][T17915] usb 3-1: device descriptor read/64, error -71
[ 2586.303651][T17915] usb usb3-port1: attempt power cycle
[ 2586.623180][ T9395] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2586.662290][T17915] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 2586.691155][T17915] usb 3-1: device descriptor read/8, error -71
[ 2586.799342][ T9395] usb 4-1: Using ep0 maxpacket: 16
[ 2586.814668][ T9395] usb 4-1: config 0 has no interfaces?
[ 2586.831707][ T9395] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2586.856788][ T9395] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2586.884244][ T9395] usb 4-1: Manufacturer: syz
[ 2586.902543][ T9395] usb 4-1: config 0 descriptor??
[ 2586.939742][T17915] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 2586.970094][T17915] usb 3-1: device descriptor read/8, error -71
[ 2587.111542][T17915] usb usb3-port1: unable to enumerate USB device
[ 2589.675888][T17915] usb 4-1: USB disconnect, device number 62
[ 2590.448509][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.455859][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2590.859016][T25992] binder: 25987:25992 ioctl 4018620d 0 returned -22
[ 2591.059465][T25992] syz.0.9885 (25992): drop_caches: 2
[ 2592.520136][T26042] fuse: Unknown parameter 'fd0x000000000000000a'
[ 2593.353824][T26061] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9900'.
[ 2593.659614][T23740] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 2593.851490][T23740] usb 3-1: Using ep0 maxpacket: 32
[ 2593.874994][T23740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2593.891066][T23740] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2593.956912][T23740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2594.019820][T26087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9903'.
[ 2594.033833][T23740] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2594.087684][T23740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2594.116899][T23740] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2594.204387][T26087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9903'.
[ 2594.217707][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9903'.
[ 2594.263272][T23740] usb 3-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a
[ 2594.294814][T23740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2594.313280][T23740] usb 3-1: Product: syz
[ 2594.324044][T23740] usb 3-1: Manufacturer: syz
[ 2594.334133][T23740] usb 3-1: SerialNumber: syz
[ 2594.350563][T23740] usb 3-1: config 0 descriptor??
[ 2594.371338][T23740] usb 3-1: bad CDC descriptors
[ 2594.384458][T23740] cdc_acm 3-1:0.0: Zero length descriptor references
[ 2594.402413][T23740] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22
[ 2594.625083][T26065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2594.634401][T26065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2595.385712][T26136] syz.3.9912 (26136): drop_caches: 2
[ 2596.413912][T28941] usb 3-1: USB disconnect, device number 53
[ 2596.739458][T28941] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 2596.889365][T28941] usb 3-1: Using ep0 maxpacket: 32
[ 2596.897847][T28941] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 2596.919435][T28941] usb 3-1: config 0 has no interface number 0
[ 2596.935760][T28941] usb 3-1: config 0 interface 184 has no altsetting 0
[ 2596.946834][T28941] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2596.957723][T28941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2596.967451][T28941] usb 3-1: Product: syz
[ 2596.971945][T28941] usb 3-1: Manufacturer: syz
[ 2596.976549][T28941] usb 3-1: SerialNumber: syz
[ 2596.985305][T28941] usb 3-1: config 0 descriptor??
[ 2597.052006][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9915'.
[ 2597.399665][T28941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 2597.417277][T28941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 2597.466839][T28941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 2597.487184][T28941] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61
[ 2597.772686][T26184] fuse: Bad value for 'fd'
[ 2598.058274][T26185] fuse: Unknown parameter './file0'
[ 2598.158756][T28941] usb 3-1: USB disconnect, device number 54
[ 2599.229529][ T9395] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 2599.391522][ T9395] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2599.407940][ T9395] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2599.427231][ T9395] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2599.448445][ T9395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 2599.463907][ T9395] usb 5-1: SerialNumber: syz
[ 2599.724039][ T9395] usb 5-1: 0:2 : does not exist
[ 2599.829821][ T9395] usb 5-1: USB disconnect, device number 113
[ 2601.132942][T28941] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 2601.306113][T28941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2601.330269][T28941] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[ 2601.346969][T28941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2601.378309][T28941] usb 4-1: config 0 descriptor??
[ 2601.931651][ T7106] IPVS: starting estimator thread 0...
[ 2602.039702][T26315] IPVS: using max 58 ests per chain, 139200 per kthread
[ 2602.471782][T28941] hid_parser_main: 19 callbacks suppressed
[ 2602.471805][T28941] hid_mf 0003:0079:1846.007D: unknown main item tag 0x0
[ 2602.512728][T28941] hid_mf 0003:0079:1846.007D: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0
[ 2602.541187][T28941] hid_mf 0003:0079:1846.007D: Invalid report, this should never happen!
[ 2602.558704][T28941] hid_mf 0003:0079:1846.007D: Force feedback init failed.
[ 2603.022713][T28941] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 2603.169501][ T7106] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 2603.189615][T28941] usb 5-1: Using ep0 maxpacket: 8
[ 2603.198673][T28941] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 2603.208035][T28941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2603.216301][T28941] usb 5-1: Product: syz
[ 2603.220515][T28941] usb 5-1: Manufacturer: syz
[ 2603.225110][T28941] usb 5-1: SerialNumber: syz
[ 2603.231788][T28941] usb 5-1: config 0 descriptor??
[ 2603.239658][T28941] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 2603.339363][ T7106] usb 3-1: Using ep0 maxpacket: 32
[ 2603.346273][ T7106] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2603.355510][ T7106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2603.372461][ T7106] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2603.471326][T26383] syz.0.9939 (26383): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 2603.924626][T17915] usb 4-1: USB disconnect, device number 63
[ 2604.336819][ T7106] gspca_nw80x: reg_r err -110
[ 2604.339528][T26355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2604.341808][ T7106] nw80x 3-1:3.0: probe with driver nw80x failed with error -110
[ 2604.368549][T28941] gspca_sonixj: reg_r err -110
[ 2604.384348][T28941] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[ 2604.477172][T26355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2604.627009][ T5817] usb 5-1: USB disconnect, device number 114
[ 2605.149482][ T5817] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 2605.309354][ T5817] usb 5-1: Using ep0 maxpacket: 16
[ 2605.324091][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2605.334898][ T5817] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2605.432097][ T5817] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2605.441654][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2605.454558][ T5817] usb 5-1: Product: syz
[ 2605.460002][ T5817] usb 5-1: Manufacturer: syz
[ 2605.464893][ T5817] usb 5-1: SerialNumber: syz
[ 2605.801410][T26417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2605.825959][T26417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2606.045476][ T5817] usb 5-1: 0:2 : does not exist
[ 2606.133369][ T5817] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 2606.203055][ T5817] usb 5-1: USB disconnect, device number 115
[ 2606.344569][T29693] udevd[29693]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2606.815806][ T7106] usb 3-1: USB disconnect, device number 55
[ 2606.899422][T26495] loop9: detected capacity change from 0 to 7
[ 2606.911365][T26495] Dev loop9: unable to read RDB block 7
[ 2606.920304][T26495]  loop9: AHDI p1 p2 p3
[ 2606.936116][T26495] loop9: partition table partially beyond EOD, truncated
[ 2606.988978][T26505] fuse: Bad value for 'fd'
[ 2607.010540][T26495] loop9: p1 start 1601398130 is beyond EOD, truncated
[ 2607.048748][T26507] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2607.183220][T26495] loop9: p2 start 1702059890 is beyond EOD, truncated
[ 2607.248258][T26509] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2607.304333][T26495] vivid-001: disconnect
[ 2607.539970][T26484] vivid-001: reconnect
[ 2607.888500][T26546] binder: 26536:26546 ioctl c0306201 0 returned -14
[ 2607.909139][T26546] x_tables: unsorted underflow at hook 2
[ 2608.004306][T26548] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2608.069336][ T9395] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[ 2608.256512][ T9395] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2608.266925][ T9395] usb 4-1: not running at top speed; connect to a high speed hub
[ 2608.277593][ T9395] usb 4-1: config 7 has an invalid interface number: 180 but max is 0
[ 2608.287123][ T5817] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[ 2608.297323][ T9395] usb 4-1: config 7 has no interface number 0
[ 2608.324852][ T9395] usb 4-1: config 7 interface 180 has no altsetting 0
[ 2608.350251][ T9395] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2
[ 2608.359933][ T9395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2608.368141][ T9395] usb 4-1: Product: syz
[ 2608.378735][ T9395] usb 4-1: Manufacturer: ᆊ罾柵枨톐㉁띎뼱瑲ほ웒ຘ䭡듺늿=ሬ㻔㬚遧畾헍⹙雐羚⨁ᗩ堓툭ጃ㾋יⅤ㩩層ᗼ揣꘣㐌룋瀂商羹띀ꇶ䭌溩桳ꠈ줖伟핶⥦珅囧唵뮺㼑鍢嫥㗓뙼凳鼫俧拌᱓践
[ 2608.500869][ T9395] usb 4-1: SerialNumber: syz
[ 2608.519731][ T5817] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[ 2608.591746][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2608.726003][ T5817] usb 3-1: config 0 has no interface number 0
[ 2608.886167][ T5817] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[ 2608.898404][ T5817] usb 3-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2608.911620][ T5817] usb 3-1: config 0 interface 113 has no altsetting 0
[ 2608.931066][ T5817] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[ 2608.942968][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2609.021586][ T5817] usb 3-1: Product: syz
[ 2609.025892][ T5817] usb 3-1: Manufacturer: syz
[ 2609.067384][ T5817] usb 3-1: SerialNumber: syz
[ 2609.193222][ T5817] usb 3-1: config 0 descriptor??
[ 2609.322317][ T5817] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[ 2609.627446][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9954'.
[ 2611.369863][T23740] usb 3-1: USB disconnect, device number 56
[ 2611.630136][ T9395] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 2611.638229][ T9395] gspca_topro: reg_w err -71
[ 2611.686617][ T9395] gspca_topro: Sensor soi763a
[ 2611.696936][T26624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9960'.
[ 2611.708597][T26624] netlink: 'syz.2.9960': attribute type 11 has an invalid length.
[ 2611.719393][T26624] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9960'.
[ 2611.756813][ T9395] usb 4-1: USB disconnect, device number 64
[ 2611.958545][T26635] delete_channel: no stack
[ 2612.300256][T26656] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[ 2612.440402][T26662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2612.486964][T26663] netlink: 'syz.0.9967': attribute type 6 has an invalid length.
[ 2612.495014][T26663] netlink: 'syz.0.9967': attribute type 7 has an invalid length.
[ 2612.503793][T26663] netlink: 'syz.0.9967': attribute type 8 has an invalid length.
[ 2612.542553][T26664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2612.639596][T26662] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9966'.
[ 2613.435726][T26680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9973'.
[ 2613.582916][   T30] audit: type=1800 audit(1771046246.675:6463): pid=26673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9971" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=180948 res=0 errno=0
[ 2614.586570][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9979'.
[ 2614.605812][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9979'.
[ 2614.857384][T26730] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9979'.
[ 2615.990795][T28941] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2616.035373][T26756] tipc: Started in network mode
[ 2616.053487][T26756] tipc: Node identity 0689d71990ab, cluster identity 4711
[ 2616.075852][T26756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2616.101909][T26757] syzkaller0: entered promiscuous mode
[ 2616.107558][T26757] syzkaller0: entered allmulticast mode
[ 2616.162589][T26762] loop5: detected capacity change from 0 to 7
[ 2616.176260][T29693] Dev loop5: unable to read RDB block 7
[ 2616.185646][T26756] tipc: Resetting bearer <eth:syzkaller0>
[ 2616.187328][ T7106] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2616.192043][T29693]  loop5: unable to read partition table
[ 2616.206405][T29693] loop5: partition table beyond EOD, truncated
[ 2616.218815][T26762] Dev loop5: unable to read RDB block 7
[ 2616.231991][T26762]  loop5: unable to read partition table
[ 2616.237500][T28941] usb 4-1: Using ep0 maxpacket: 8
[ 2616.243494][T26762] loop5: partition table beyond EOD, truncated
[ 2616.245626][T28941] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[ 2616.258197][T28941] usb 4-1: config 0 has no interface number 0
[ 2616.263753][T26762] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 2616.284569][T28941] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2616.295700][T28941] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2616.307742][T28941] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2616.319812][T28941] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2616.333001][T28941] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2616.342252][T28941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2616.352377][T28941] usb 4-1: config 0 descriptor??
[ 2616.359484][ T7106] usb 5-1: Using ep0 maxpacket: 16
[ 2616.368800][ T7106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2616.382852][T28941] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2616.391219][ T7106] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 2616.407926][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2616.418980][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2616.431658][ T7106] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 2616.440870][ T7106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2616.448996][ T7106] usb 5-1: Product: syz
[ 2616.453405][ T7106] usb 5-1: Manufacturer: syz
[ 2616.458036][ T7106] usb 5-1: SerialNumber: syz
[ 2616.464722][ T7106] usb 5-1: config 0 descriptor??
[ 2616.472224][ T7106] appledisplay 5-1:0.0: Submitting URB failed
[ 2616.478507][ T7106] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5
[ 2616.651581][T23740] usb 4-1: USB disconnect, device number 65
[ 2616.657627][    C1] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[ 2616.693957][T23740] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[ 2616.700929][T26745] ldusb: No device or device unplugged -19
[ 2616.825604][T26755] tipc: Resetting bearer <eth:syzkaller0>
[ 2616.901973][T26755] tipc: Disabling bearer <eth:syzkaller0>
[ 2616.917075][ T7106] usb 5-1: USB disconnect, device number 116
[ 2617.348781][T26815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2617.369808][T26815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2617.381148][T26815] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9989'.
[ 2617.459362][ T7106] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 2617.619471][ T7106] usb 3-1: Using ep0 maxpacket: 32
[ 2617.626553][ T7106] usb 3-1: config index 0 descriptor too short (expected 256, got 36)
[ 2617.638494][ T7106] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2617.649335][ T7106] usb 3-1: config 0 has no interfaces?
[ 2617.657555][ T7106] usb 3-1: New USB device found, idVendor=060b, idProduct=e501, bcdDevice= 0.00
[ 2617.851351][ T7106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2617.876288][ T7106] usb 3-1: config 0 descriptor??
[ 2619.505980][T26849] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 2619.526932][T26849] bond1 (unregistering): Released all slaves
[ 2620.192979][T23740] usb 3-1: USB disconnect, device number 57
[ 2620.669442][ T7106] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2620.819317][ T7106] usb 5-1: Using ep0 maxpacket: 16
[ 2620.826933][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2620.838389][ T7106] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[ 2620.848139][ T7106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2620.860606][ T7106] usb 5-1: config 0 descriptor??
[ 2621.081251][T26993] usb usb9: usbfs: process 26993 (syz.3.10004) did not claim interface 19 before use
[ 2621.119543][ T7106] usbhid 5-1:0.0: can't add hid device: -71
[ 2621.128277][ T7106] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2621.141700][ T7106] usb 5-1: USB disconnect, device number 117
[ 2621.186083][T27006] netlink: 'syz.4.10005': attribute type 3 has an invalid length.
[ 2621.267527][T20708] Bluetooth: hci0: unexpected subevent 0x06 length: 18 > 10
[ 2621.313290][   T30] audit: type=1326 audit(1771046254.405:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27013 comm="syz.2.10006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f32b9bf79 code=0x0
[ 2621.590549][T27030] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2622.150379][T28941] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 2622.418335][ T9395] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 2622.542342][T28941] usb 3-1: Using ep0 maxpacket: 32
[ 2622.586718][T28941] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[ 2622.622032][T28941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2622.633978][ T9395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2622.639651][T28941] usb 3-1: config 0 descriptor??
[ 2622.674269][ T9395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2622.721478][ T9395] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[ 2622.862924][ T9395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2622.976197][ T9395] usb 4-1: config 0 descriptor??
[ 2623.164841][T28941] lenovo 0003:17EF:60A4.007E: unknown main item tag 0x0
[ 2623.196676][T28941] lenovo 0003:17EF:60A4.007E: hidraw0: USB HID vb4.34 Device [HID 17ef:60a4] on usb-dummy_hcd.2-1/input0
[ 2623.332513][T20708] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2623.429841][ T9395] steelseries 0003:1038:12B6.007F: hidraw1: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0
[ 2623.620041][T27050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2623.725169][T27050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2623.752390][ T9395] steelseries 0003:1038:12B6.007F: hid_hw_raw_request() failed with -71
[ 2623.802250][ T9395] usb 4-1: USB disconnect, device number 67
[ 2624.065853][T27114] x_tables: unsorted underflow at hook 2
[ 2624.404977][T27118] netlink: 'syz.0.10016': attribute type 13 has an invalid length.
[ 2624.419173][T27118] netlink: 'syz.0.10016': attribute type 17 has an invalid length.
[ 2624.684634][T27118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2624.705419][T27121] input: syz1 as /devices/virtual/input/input222
[ 2624.740053][T27127] FAULT_INJECTION: forcing a failure.
[ 2624.740053][T27127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2624.762016][T27127] CPU: 0 UID: 0 PID: 27127 Comm: syz.3.10018 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2624.762043][T27127] Tainted: [L]=SOFTLOCKUP
[ 2624.762050][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2624.762060][T27127] Call Trace:
[ 2624.762067][T27127]  <TASK>
[ 2624.762076][T27127]  dump_stack_lvl+0xe8/0x150
[ 2624.762110][T27127]  should_fail_ex+0x412/0x560
[ 2624.762132][T27127]  _copy_from_iter+0x1d3/0x1670
[ 2624.762158][T27127]  ? rcu_is_watching+0x15/0xb0
[ 2624.762178][T27127]  ? __pfx__copy_from_iter+0x10/0x10
[ 2624.762202][T27127]  ? netlink_sendmsg+0x650/0xb40
[ 2624.762216][T27127]  ? skb_put+0x11b/0x210
[ 2624.762236][T27127]  netlink_sendmsg+0x6c0/0xb40
[ 2624.762259][T27127]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2624.762278][T27127]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2624.762298][T27127]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2624.762321][T27127]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2624.762335][T27127]  ____sys_sendmsg+0xa68/0xad0
[ 2624.762350][T27127]  ? __might_fault+0xaf/0x130
[ 2624.762373][T27127]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2624.762397][T27127]  ? import_iovec+0x73/0xa0
[ 2624.762418][T27127]  ___sys_sendmsg+0x2a5/0x360
[ 2624.762433][T27127]  ? __lock_acquire+0x6b5/0x2cf0
[ 2624.762454][T27127]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2624.762497][T27127]  ? __fget_files+0x2a/0x420
[ 2624.762512][T27127]  ? __fget_files+0x3a0/0x420
[ 2624.762534][T27127]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2624.762552][T27127]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2624.762575][T27127]  ? __pfx_ksys_write+0x10/0x10
[ 2624.762602][T27127]  do_syscall_64+0x14d/0xf80
[ 2624.762619][T27127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2624.762631][T27127]  ? trace_irq_disable+0x37/0x100
[ 2624.762643][T27127]  ? clear_bhb_loop+0x40/0x90
[ 2624.762654][T27127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2624.762663][T27127] RIP: 0033:0x7ff9f199bf79
[ 2624.762685][T27127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2624.762694][T27127] RSP: 002b:00007ff9f28a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2624.762705][T27127] RAX: ffffffffffffffda RBX: 00007ff9f1c15fa0 RCX: 00007ff9f199bf79
[ 2624.762712][T27127] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 2624.762718][T27127] RBP: 00007ff9f28a5090 R08: 0000000000000000 R09: 0000000000000000
[ 2624.762724][T27127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2624.762729][T27127] R13: 00007ff9f1c16038 R14: 00007ff9f1c15fa0 R15: 00007ff9f1d3fa48
[ 2624.762743][T27127]  </TASK>
[ 2625.137673][ T7106] usb 3-1: USB disconnect, device number 58
[ 2625.447918][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10023'.
[ 2626.099362][ T7106] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 2626.339343][ T7106] usb 4-1: Using ep0 maxpacket: 16
[ 2626.351704][ T7106] usb 4-1: config 0 has an invalid interface number: 213 but max is 1
[ 2626.360055][ T7106] usb 4-1: config 0 has no interface number 1
[ 2626.390296][ T7106] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2626.420866][ T7106] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8
[ 2626.439380][ T7106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2626.450748][ T7106] usb 4-1: Product: syz
[ 2626.455582][ T7106] usb 4-1: Manufacturer: syz
[ 2626.471943][ T7106] usb 4-1: SerialNumber: syz
[ 2626.493784][ T7106] usb 4-1: config 0 descriptor??
[ 2626.516956][ T7106] usb 4-1: selecting invalid altsetting 0
[ 2626.527524][ T7106] usb 4-1: Could not set interface, error -22
[ 2626.707991][T27193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2626.729706][T27193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2626.740695][T27193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2626.766603][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10027'.
[ 2626.776829][T27214] veth0_vlan: entered allmulticast mode
[ 2626.873092][T27193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2626.903557][T27193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2626.933817][T27193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2627.020158][T27193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2627.091422][T27193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2627.138700][T27193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2627.203470][T27193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2627.445734][ T7106] usb 4-1: USB disconnect, device number 68
[ 2627.472312][T27237] x_tables: unsorted underflow at hook 2
[ 2628.401392][T30115] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 2628.411776][T27268] blktrace: Concurrent blktraces are not allowed on nullb0
[ 2628.430028][ T7106] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[ 2628.561375][T30115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2628.572872][T30115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2628.590425][T30115] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2628.629526][T30115] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2628.630825][ T7106] usb 3-1: config 6 has an invalid interface number: 4 but max is 0
[ 2628.649373][T30115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2628.649854][ T7106] usb 3-1: config 6 has no interface number 0
[ 2628.665026][ T7106] usb 3-1: config 6 interface 4 has no altsetting 0
[ 2628.669125][T30115] usb 4-1: config 0 descriptor??
[ 2628.674648][ T7106] usb 3-1: New USB device found, idVendor=16d8, idProduct=7003, bcdDevice=d0.3e
[ 2628.686439][ T7106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2628.742137][ T7106] usb 3-1: Product: syz
[ 2628.836955][ T7106] usb 3-1: Manufacturer: syz
[ 2628.842286][ T7106] usb 3-1: SerialNumber: syz
[ 2629.074488][T27258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2629.090383][T17915] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2629.095302][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.099913][T27258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2629.119091][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.190644][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.190918][ T7106] usb 3-1: USB disconnect, device number 59
[ 2629.198080][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.208770][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.222110][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.236992][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.250089][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.264947][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.272995][T17915] usb 5-1: Using ep0 maxpacket: 16
[ 2629.278239][T30115] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0
[ 2629.297176][T17915] usb 5-1: config 0 has no interfaces?
[ 2629.308413][T17915] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2629.337655][T17915] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2629.338903][T30115] plantronics 0003:047F:FFFF.0080: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 2629.358573][T17915] usb 5-1: Manufacturer: syz
[ 2629.385305][T17915] usb 5-1: config 0 descriptor??
[ 2629.402793][T27250] kernel read not supported for file / 
�7���âW)�sP�m�Q���fs�l{T�r�)r��O���2:"��� (pid: 27250 comm: syz.3.10031)
[ 2629.431991][   T30] audit: type=1800 audit(1771046262.525:6465): pid=27250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10031" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=182511 res=0 errno=0
[ 2629.437954][T17915] usb 4-1: USB disconnect, device number 69
[ 2629.706273][T27275] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2629.713616][T27275] bridge0: port 1(bridge_slave_0) entered listening state
[ 2629.733314][T27275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2629.756920][T27339] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2629.780576][T27339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10037'.
[ 2630.075752][T27350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10039'.
[ 2630.088722][T27350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10039'.
[ 2630.114614][T27350] erspan0: entered promiscuous mode
[ 2630.130279][T27350] gretap0: entered promiscuous mode
[ 2630.145138][T27350] debugfs: 'hsr1' already exists in 'hsr'
[ 2630.158591][T27350] Cannot create hsr debugfs directory
[ 2630.169349][T27350] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[ 2630.179688][T27350] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[ 2631.358631][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10047'.
[ 2631.389563][T30115] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 2631.496337][T27408] macvlan2: entered allmulticast mode
[ 2631.502074][T27408] vlan1: entered allmulticast mode
[ 2631.507557][ T5875] usb 5-1: USB disconnect, device number 118
[ 2631.525894][T27408] veth0_vlan: entered allmulticast mode
[ 2631.577641][T30115] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2631.595986][T30115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2631.623218][T30115] usb 3-1: Product: syz
[ 2631.627419][T30115] usb 3-1: Manufacturer: syz
[ 2631.647145][T30115] usb 3-1: SerialNumber: syz
[ 2631.663106][T30115] usb 3-1: config 0 descriptor??
[ 2631.821513][T17915] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 2632.021606][T27439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2632.034993][T27439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2632.077129][T30115] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 2632.222380][T17915] usb 4-1: Using ep0 maxpacket: 16
[ 2632.235222][T30115] usb 3-1: USB disconnect, device number 60
[ 2632.259814][T17915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2632.284438][T17915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2632.311317][T17915] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[ 2632.328425][T17915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2632.384898][T17915] usb 4-1: config 0 descriptor??
[ 2633.035551][T17915] usbhid 4-1:0.0: can't add hid device: -71
[ 2633.044251][T17915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2633.064487][T17915] usb 4-1: USB disconnect, device number 70
[ 2633.969581][ T9395] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 2634.130243][ T9395] usb 4-1: Using ep0 maxpacket: 8
[ 2634.148501][ T9395] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 2634.166701][ T9395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2634.190439][ T9395] usb 4-1: Product: syz
[ 2634.210590][ T9395] usb 4-1: Manufacturer: syz
[ 2634.223419][ T9395] usb 4-1: SerialNumber: syz
[ 2634.259851][ T9395] usb 4-1: config 0 descriptor??
[ 2634.560703][ T9395] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 2634.602053][T27525] netlink: 'syz.2.10057': attribute type 3 has an invalid length.
[ 2635.139175][ T7106] IPVS: starting estimator thread 0...
[ 2635.169805][T27541] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2635.280511][T27548] IPVS: using max 33 ests per chain, 79200 per kthread
[ 2635.345172][T27550] syzkaller0: entered promiscuous mode
[ 2635.350857][T27550] syzkaller0: entered allmulticast mode
[ 2636.448272][ T9395] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2636.462352][T27569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10066'.
[ 2636.472160][ T9395] dvbdev: DVB: registering new adapter (Terratec H7)
[ 2636.478986][ T9395] usb 4-1: media controller created
[ 2636.500087][T27569] binder: 27566:27569 ioctl c0306201 2000000003c0 returned -22
[ 2636.549389][ T9395] usb 4-1: dvb_usb_v2: MAC address: e1:db:ca:40:00:00
[ 2636.595142][ T9395] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2636.769983][ T9395] DVB: Unable to find symbol drxk_attach()
[ 2636.857918][ T9395] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -22
[ 2636.885552][ T9395] usb 4-1: USB disconnect, device number 71
[ 2637.586895][T30115] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 2637.781149][T30115] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2637.789697][T30115] usb 4-1: config 0 has no interface number 0
[ 2637.795894][T30115] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2637.807550][T30115] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2637.824287][T30115] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 2637.833853][T30115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2637.875033][T30115] usb 4-1: config 0 descriptor??
[ 2638.366320][T30115] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0081/input/input223
[ 2638.781811][T30115] holtek_kbd 0003:04D9:A055.0081: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1
[ 2638.813207][T30115] usb 4-1: USB disconnect, device number 72
[ 2638.886854][T27629] fido_id[27629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 2639.157550][T27650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2639.167896][T27650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2639.508462][T30115] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 2639.673399][T30115] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30
[ 2639.711750][T30115] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2639.744658][T30115] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2639.775477][T30115] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127
[ 2639.809392][T30115] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2639.821288][T30115] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[ 2639.834578][T30115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2639.846479][T30115] usb 4-1: config 0 descriptor??
[ 2639.901749][T27705] netlink: 'syz.2.10077': attribute type 11 has an invalid length.
[ 2640.253021][ T7106] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 2640.423168][ T7106] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2640.437693][ T7106] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2640.454836][ T7106] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 2640.493716][ T7106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2640.522554][ T7106] usb 3-1: config 0 descriptor??
[ 2640.699151][T30115] uclogic 0003:5543:004D.0082: failed retrieving Huion firmware version: -71
[ 2640.708623][T30115] uclogic 0003:5543:004D.0082: failed probing parameters: -71
[ 2640.736728][T30115] uclogic 0003:5543:004D.0082: probe with driver uclogic failed with error -71
[ 2640.760626][T30115] usb 4-1: USB disconnect, device number 73
[ 2641.078578][ T7106] hid_parser_main: 5 callbacks suppressed
[ 2641.078600][ T7106] koneplus 0003:1E7D:2D51.0083: unknown main item tag 0x7
[ 2641.109916][ T7106] koneplus 0003:1E7D:2D51.0083: hidraw0: USB HID v10.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[ 2641.299038][T27797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2641.320293][T27797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2641.331531][T27797] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10083'.
[ 2641.375934][ T7106] usb 3-1: USB disconnect, device number 61
[ 2641.679980][T30115] usb 4-1: new low-speed USB device number 74 using dummy_hcd
[ 2641.831906][T30115] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2641.855764][T30115] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt
[ 2641.880483][T30115] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x3 is Bulk; changing to Interrupt
[ 2641.905311][T30115] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2641.982919][T30115] usb 4-1: string descriptor 0 read error: -22
[ 2641.994794][T30115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2642.048115][T30115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2642.085340][T27805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2642.100588][T27805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2642.110096][T30115] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 2642.324041][ T5875] usb 4-1: USB disconnect, device number 74
[ 2642.329418][T30115] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 2642.459329][T30115] usb 3-1: device descriptor read/64, error -71
[ 2642.469343][ T7106] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2642.621098][ T7106] usb 5-1: Using ep0 maxpacket: 32
[ 2642.628338][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2642.642261][ T7106] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2642.655300][ T7106] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[ 2642.664450][ T7106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2642.681441][ T7106] usb 5-1: config 0 descriptor??
[ 2642.699520][T30115] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 2642.720723][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10088'.
[ 2642.829392][T30115] usb 3-1: device descriptor read/64, error -71
[ 2642.914068][ T7106] usb 5-1: string descriptor 0 read error: -71
[ 2642.959790][T30115] usb usb3-port1: attempt power cycle
[ 2642.961056][ T7106] usbhid 5-1:0.0: can't add hid device: -71
[ 2642.985574][ T7106] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2643.049140][ T7106] usb 5-1: USB disconnect, device number 119
[ 2643.172188][T27863] netlink: 'syz.3.10090': attribute type 1 has an invalid length.
[ 2643.253307][T27866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10090'.
[ 2643.262469][T27866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10090'.
[ 2643.339403][T30115] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 2643.373014][T30115] usb 3-1: device descriptor read/8, error -71
[ 2643.498904][T27863] bond8: (slave gretap1): making interface the new active one
[ 2643.509357][T27863] bond8: (slave gretap1): Enslaving as an active interface with an up link
[ 2643.533863][T27863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10090'.
[ 2643.703655][T30115] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 2643.730645][T30115] usb 3-1: device descriptor read/8, error -71
[ 2643.914887][T30115] usb usb3-port1: unable to enumerate USB device
[ 2644.273658][ T9395] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0
[ 2644.650219][ T9395] hid-generic 0000:0000:0000.0084: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2645.157965][T27988] x_tables: duplicate underflow at hook 2
[ 2645.459345][T30115] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 2645.609475][T30115] usb 3-1: Using ep0 maxpacket: 16
[ 2645.617039][T30115] usb 3-1: config 2 has an invalid interface number: 152 but max is 2
[ 2645.626228][T30115] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2645.636725][T30115] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3
[ 2645.645858][T30115] usb 3-1: config 2 has no interface number 0
[ 2645.652236][T30115] usb 3-1: config 2 interface 152 altsetting 255 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 2645.663768][T30115] usb 3-1: config 2 interface 152 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[ 2645.675041][T30115] usb 3-1: config 2 interface 152 altsetting 255 endpoint 0x6 has invalid maxpacket 1096, setting to 64
[ 2645.686330][T30115] usb 3-1: config 2 interface 152 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0
[ 2645.696824][T30115] usb 3-1: config 2 interface 152 altsetting 255 has 5 endpoint descriptors, different from the interface descriptor's value: 9
[ 2645.710407][T30115] usb 3-1: config 2 interface 152 has no altsetting 0
[ 2645.718851][T30115] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a60, bcdDevice=3c.86
[ 2645.728415][T30115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2645.740969][T30115] usb 3-1: Product: 䖭㘯⮼쭤䕏᧓㌱஝턀筑옿ᘧ褐䙭鵫ᢪ첳爱운쁽솲䰐놄⺈㡋䕶흲蟔긂扥嫑ᘠ盓믚뗇ꐄ擞ꋹ顣બ䒝䟖勪ⵓ橠֮蝯嫽䪌糲㌴嚢﹖칶陛壐屇咝廇烳䭐붏㘽쌅駎쏝뒧⇋갞好脯堒謬쐶ㇱ뱂睷쐷㽴촉Ȩꥩ鱛迠ᇬ⨃൉뙭⎲䐮誘禔ﵤ๤꒬뻵ꚳ榱蜾锂車沰츹囋呶⦶䊠鬫
[ 2645.775982][T30115] usb 3-1: Manufacturer: 鹐醁캪⃕Ꮰ幉㾔᪉汏㡄봭甖겕鸪腷몐㎄⿊
[ 2645.785077][T30115] usb 3-1: SerialNumber: syz
[ 2646.011390][T30115] usb 3-1: USB disconnect, device number 66
[ 2646.782810][ T9395] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 2646.929385][ T9395] usb 3-1: device descriptor read/64, error -71
[ 2647.025575][T28027] netlink: 'syz.4.10101': attribute type 4 has an invalid length.
[ 2647.229932][ T9395] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 2647.369450][ T9395] usb 3-1: device descriptor read/64, error -71
[ 2647.389358][T17915] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2647.479685][ T9395] usb usb3-port1: attempt power cycle
[ 2647.519319][T17915] usb 5-1: device descriptor read/64, error -71
[ 2647.759367][T17915] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 2647.829992][ T9395] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 2647.860031][ T9395] usb 3-1: device descriptor read/8, error -71
[ 2647.910449][T28061] netlink: 'syz.3.10103': attribute type 4 has an invalid length.
[ 2647.930731][T28061] netlink: 'syz.3.10103': attribute type 4 has an invalid length.
[ 2647.959685][T17915] usb 5-1: device descriptor read/64, error -71
[ 2647.979509][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2648.074342][T17915] usb usb5-port1: attempt power cycle
[ 2648.202381][ T9395] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 2648.210138][ T5817] usb 4-1: new low-speed USB device number 75 using dummy_hcd
[ 2648.240003][ T9395] usb 3-1: device descriptor read/8, error -71
[ 2648.349758][ T9395] usb usb3-port1: unable to enumerate USB device
[ 2648.379423][ T5817] usb 4-1: Invalid ep0 maxpacket: 16
[ 2648.419678][T17915] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2648.460262][T17915] usb 5-1: device descriptor read/8, error -71
[ 2648.519667][ T5817] usb 4-1: new low-speed USB device number 76 using dummy_hcd
[ 2648.679552][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2648.699357][T17915] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2648.709441][ T5817] usb 4-1: Invalid ep0 maxpacket: 16
[ 2648.719422][ T5817] usb usb4-port1: attempt power cycle
[ 2648.741035][T17915] usb 5-1: device descriptor read/8, error -71
[ 2648.852083][T17915] usb usb5-port1: unable to enumerate USB device
[ 2649.079411][ T5817] usb 4-1: new low-speed USB device number 77 using dummy_hcd
[ 2649.110189][ T5817] usb 4-1: Invalid ep0 maxpacket: 16
[ 2649.249411][ T5817] usb 4-1: new low-speed USB device number 78 using dummy_hcd
[ 2649.281464][ T5817] usb 4-1: Invalid ep0 maxpacket: 16
[ 2649.287179][ T5817] usb usb4-port1: unable to enumerate USB device
[ 2649.319809][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2650.096040][T28102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10109'.
[ 2650.769477][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2650.956604][T28136] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 2650.989958][T28136] bond2 (unregistering): Released all slaves
[ 2651.080260][T28135] syzkaller0: entered promiscuous mode
[ 2651.086012][T28135] syzkaller0: entered allmulticast mode
[ 2651.241965][T26082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2651.289482][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2651.689399][ T5817] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 2651.840614][ T5817] usb 5-1: Using ep0 maxpacket: 16
[ 2651.868345][ T5817] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 2651.885115][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2651.891798][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2651.900254][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2651.921238][ T5817] usb 5-1: Product: syz
[ 2651.929368][ T5817] usb 5-1: Manufacturer: syz
[ 2651.943812][ T5817] usb 5-1: SerialNumber: syz
[ 2651.964531][ T5817] usb 5-1: config 0 descriptor??
[ 2652.317406][T28236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.350267][T28236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.364985][T28236] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10120'.
[ 2652.647148][ T5817] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 2652.675398][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2652.737302][ T5817] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 2652.746861][ T5817] usb 5-1: media controller created
[ 2652.776380][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2652.846057][ T5817] zl10353_read_register: readreg error (reg=127, ret==0)
[ 2652.859982][ T5817] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 2652.898430][ T5817] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 2653.642965][T28270] vlan2: entered promiscuous mode
[ 2653.656568][T28270] bridge0: entered promiscuous mode
[ 2654.269400][ T5875] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 2654.427644][T26082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2654.458340][ T7106] usb 5-1: USB disconnect, device number 124
[ 2654.504885][ T7106] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 2654.540089][ T5875] usb 4-1: Using ep0 maxpacket: 32
[ 2654.556153][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2654.618916][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2654.655184][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2654.669901][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2654.700777][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2654.702202][T28311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10129'.
[ 2654.742499][T28311] geneve0: entered promiscuous mode
[ 2654.751896][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2654.787753][ T5875] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a
[ 2654.800558][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2654.816478][ T5875] usb 4-1: Product: syz
[ 2654.834271][ T5875] usb 4-1: Manufacturer: syz
[ 2654.838915][ T5875] usb 4-1: SerialNumber: syz
[ 2654.855919][ T5875] usb 4-1: config 0 descriptor??
[ 2654.901267][ T5875] usb 4-1: bad CDC descriptors
[ 2654.913961][ T5875] cdc_acm 4-1:0.0: Zero length descriptor references
[ 2654.920802][T10217] wlan0: Trigger new scan to find an IBSS to join
[ 2654.933264][ T5875] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22
[ 2655.133527][T28375] netlink: 'syz.4.10131': attribute type 5 has an invalid length.
[ 2655.281991][T28277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2655.350713][T28277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2655.653342][T28377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10132'.
[ 2655.701637][T28377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10132'.
[ 2655.829593][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.846059][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.861474][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.877335][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.893546][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.910635][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.927202][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.946457][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2655.962279][T28393] netlink: 'syz.1.10134': attribute type 1 has an invalid length.
[ 2656.029541][ T5817] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 2656.179554][ T5817] usb 3-1: device descriptor read/64, error -71
[ 2656.437636][T28403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2656.464191][T28403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2656.474037][ T5817] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 2656.486552][T28403] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10136'.
[ 2656.651860][ T5817] usb 3-1: device descriptor read/64, error -71
[ 2656.811110][ T5817] usb usb3-port1: attempt power cycle
[ 2656.911445][T28409] x_tables: unsorted underflow at hook 2
[ 2656.943217][ T9395] usb 4-1: USB disconnect, device number 79
[ 2657.012012][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2657.239823][ T5817] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 2657.260162][ T5817] usb 3-1: device descriptor read/8, error -71
[ 2657.482152][T28421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2657.522134][ T5817] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 2657.609746][ T5817] usb 3-1: device descriptor read/8, error -71
[ 2657.720066][ T5817] usb usb3-port1: unable to enumerate USB device
[ 2657.769406][ T5875] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 2657.882929][   T12] wlan0: Trigger new scan to find an IBSS to join
[ 2657.933855][ T5875] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[ 2657.949547][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2657.959797][ T5875] usb 4-1: Product: syz
[ 2657.964506][ T5875] usb 4-1: Manufacturer: syz
[ 2657.974646][ T5875] usb 4-1: SerialNumber: syz
[ 2658.204037][ T5875] gspca_main: pac207-2.14.0 probing 093a:2476
[ 2658.213040][ T5875] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[ 2658.226151][ T5875] uvcvideo 4-1:13.0: Found UVC 0.00 device syz (093a:2476)
[ 2658.233910][ T5875] uvcvideo 4-1:13.0: No valid video chain found.
[ 2658.295770][ T5875] usb 4-1: USB disconnect, device number 80
[ 2658.739726][ T5875] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 2658.903319][ T5875] usb 3-1: Using ep0 maxpacket: 16
[ 2658.912337][ T5875] usb 3-1: config 0 has no interfaces?
[ 2658.920595][ T5875] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2658.929800][ T5875] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2658.937788][ T5875] usb 3-1: Manufacturer: syz
[ 2659.008421][ T5875] usb 3-1: config 0 descriptor??
[ 2659.364870][T28447] veth0_vlan: left promiscuous mode
[ 2659.377857][T28447] veth0_vlan: entered promiscuous mode
[ 2659.449438][ T5875] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 2659.620695][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2659.631239][ T5875] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2659.640990][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2659.656168][ T5875] usb 5-1: config 0 descriptor??
[ 2659.670501][ T5875] pwc: Askey VC010 type 2 USB webcam detected.
[ 2659.739506][T17915] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 2659.903448][T17915] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2659.913534][T17915] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2659.929311][T17915] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2659.936113][T17915] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2659.945817][T17915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2659.962836][T17915] usb 4-1: config 0 descriptor??
[ 2660.072808][ T5875] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2660.080360][ T5875] pwc: recv_control_msg error -32 req 02 val 2700
[ 2660.087791][ T5875] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2660.096288][ T5875] pwc: recv_control_msg error -32 req 04 val 1000
[ 2660.103946][ T5875] pwc: recv_control_msg error -32 req 04 val 1300
[ 2660.111750][ T5875] pwc: recv_control_msg error -32 req 04 val 1400
[ 2660.119012][ T5875] pwc: recv_control_msg error -32 req 02 val 2000
[ 2660.127282][ T5875] pwc: recv_control_msg error -32 req 02 val 2100
[ 2660.134754][ T5875] pwc: recv_control_msg error -32 req 04 val 1500
[ 2660.146108][ T5875] pwc: recv_control_msg error -32 req 02 val 2500
[ 2660.202406][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 2660.204593][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2660.354854][ T5875] pwc: recv_control_msg error -71 req 02 val 2600
[ 2660.365978][ T5875] pwc: recv_control_msg error -71 req 02 val 2900
[ 2660.387795][ T5875] pwc: recv_control_msg error -71 req 02 val 2800
[ 2660.395050][ T5875] pwc: recv_control_msg error -71 req 04 val 1100
[ 2660.416132][ T5875] pwc: recv_control_msg error -71 req 04 val 1200
[ 2660.429963][ T5875] pwc: Registered as video103.
[ 2660.454109][ T5875] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input224
[ 2660.487482][ T5875] usb 5-1: USB disconnect, device number 125
[ 2660.919504][ T3130] wlan0: Trigger new scan to find an IBSS to join
[ 2661.023922][T28536] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10153'.
[ 2661.036664][T28536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10153'.
[ 2661.163284][T28544] x_tables: unsorted underflow at hook 2
[ 2661.250976][T17915] usb 3-1: USB disconnect, device number 75
[ 2661.877590][T28594] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2661.901346][T28594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2661.918401][T17436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2662.087259][T28608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10158'.
[ 2662.527834][ T5817] usb 4-1: USB disconnect, device number 81
[ 2662.696714][T28626] syzkaller0: entered promiscuous mode
[ 2662.703082][T28626] syzkaller0: entered allmulticast mode
[ 2662.780424][ T3125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2663.969353][ T9395] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 2664.219402][ T9395] usb 4-1: Using ep0 maxpacket: 32
[ 2664.230857][ T9395] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 2664.249190][ T9395] usb 4-1: config 0 has no interface number 0
[ 2664.317850][ T9395] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2664.372748][ T9395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2664.406677][ T9395] usb 4-1: Product: syz
[ 2664.421221][ T9395] usb 4-1: Manufacturer: syz
[ 2664.433478][ T9395] usb 4-1: SerialNumber: syz
[ 2664.445707][T28732] validate_nla: 44 callbacks suppressed
[ 2664.445724][T28732] netlink: 'syz.1.10172': attribute type 1 has an invalid length.
[ 2664.452221][ T9395] usb 4-1: config 0 descriptor??
[ 2664.660546][T28782] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10171'.
[ 2664.737577][T28732] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2665.034880][T28737] macvlan3: entered promiscuous mode
[ 2665.041302][T28737] macvlan3: entered allmulticast mode
[ 2665.051100][T28737] bond1: entered promiscuous mode
[ 2665.061853][T28737] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 2665.083262][T28737] bond1: left promiscuous mode
[ 2665.152082][ T9395] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2665.164259][ T9395] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2665.178470][T28748] bond1: (slave ip6gretap1): making interface the new active one
[ 2665.196586][T28748] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 2665.260699][T28784] macvlan3: entered promiscuous mode
[ 2665.267165][T28784] macvlan3: entered allmulticast mode
[ 2665.273805][T28784] bond1: entered promiscuous mode
[ 2665.280600][T28784] ip6gretap1: entered promiscuous mode
[ 2665.290411][T28784] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 2665.297490][T28784] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1
[ 2665.320226][ T3125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2665.337449][T28784] bond1: left promiscuous mode
[ 2665.346956][T28784] ip6gretap1: left promiscuous mode
[ 2665.568296][T28816] syzkaller1: entered promiscuous mode
[ 2665.583890][T28816] syzkaller1: entered allmulticast mode
[ 2665.738848][   T30] audit: type=1326 audit(1771046298.825:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28825 comm="syz.0.10175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a9c79bf79 code=0x0
[ 2666.228088][ T9395] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 2666.244320][ T9395] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[ 2666.274739][ T9395] usb 4-1: USB disconnect, device number 82
[ 2667.729379][T17915] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 2667.839678][T28941] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[ 2667.880832][T17915] usb 4-1: Using ep0 maxpacket: 16
[ 2667.898036][T17915] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 2667.912267][T17915] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2667.927954][T17915] usb 4-1: Product: syz
[ 2667.935817][T17915] usb 4-1: Manufacturer: syz
[ 2667.943993][T17915] usb 4-1: SerialNumber: syz
[ 2667.960723][T17915] usb 4-1: config 0 descriptor??
[ 2668.002380][T28941] usb 3-1: no configurations
[ 2668.010504][T28941] usb 3-1: can't read configurations, error -22
[ 2668.149377][T28941] usb 3-1: new full-speed USB device number 77 using dummy_hcd
[ 2668.311547][T28941] usb 3-1: no configurations
[ 2668.316189][T28941] usb 3-1: can't read configurations, error -22
[ 2668.330085][T28941] usb usb3-port1: attempt power cycle
[ 2668.699408][T28941] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[ 2668.720342][T28941] usb 3-1: no configurations
[ 2668.724953][T28941] usb 3-1: can't read configurations, error -22
[ 2668.869476][T28941] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[ 2668.892560][T28941] usb 3-1: no configurations
[ 2668.897214][T28941] usb 3-1: can't read configurations, error -22
[ 2668.903790][T28941] usb usb3-port1: unable to enumerate USB device
[ 2669.231094][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10191'.
[ 2669.282630][T28925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10191'.
[ 2669.323034][T28924] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2669.453772][T28924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2669.482480][T28924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2669.739698][T17436] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2669.761841][T17436] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2669.781048][T17436] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2669.798534][T17436] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2669.849125][T17436] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2669.872941][T17436] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2669.885993][T28945] usb 4-1: USB disconnect, device number 83
[ 2669.902570][T17436] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2669.937669][T17436] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2670.350281][T28945] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 2670.530995][T28945] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 2670.541076][T28945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2670.552043][T28945] usb 4-1: config 0 descriptor??
[ 2670.772093][T28945] kaweth 4-1:0.0: Firmware present in device.
[ 2670.962201][T28945] kaweth 4-1:0.0: Statistics collection: 0
[ 2670.978473][T28945] kaweth 4-1:0.0: Multicast filter limit: 0
[ 2670.994256][T28945] kaweth 4-1:0.0: MTU: 0
[ 2671.007909][T28945] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00
[ 2671.164336][T28945] kaweth 4-1:0.0: probe with driver kaweth failed with error -5
[ 2671.214507][T28945] usb 4-1: USB disconnect, device number 84
[ 2671.330934][T28948] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 2671.489363][T28948] usb 5-1: device descriptor read/64, error -71
[ 2671.801886][T28948] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 2672.069328][T28948] usb 5-1: device descriptor read/64, error -71
[ 2672.191002][T28948] usb usb5-port1: attempt power cycle
[ 2672.361381][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2672.599352][T28948] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 2672.772450][T28948] usb 5-1: device descriptor read/8, error -71
[ 2673.019477][T28948] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2673.040262][T28948] usb 5-1: device descriptor read/8, error -71
[ 2673.149902][T28948] usb usb5-port1: unable to enumerate USB device
[ 2673.229983][T28933] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 2673.340330][T29062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2673.349681][T29063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2673.413896][T29062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2673.426992][T29063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2673.439767][T28933] usb 4-1: Using ep0 maxpacket: 16
[ 2673.446836][T29062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2673.446846][T28933] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 2673.463400][T29062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2673.472276][T28933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2673.562399][T28933] usb 4-1: config 0 has no interface number 0
[ 2673.573638][T28933] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[ 2673.591696][T28933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2673.606473][T28933] usb 4-1: Product: syz
[ 2673.698038][T28933] usb 4-1: Manufacturer: syz
[ 2673.760545][T28933] usb 4-1: SerialNumber: syz
[ 2673.786237][T28933] usb 4-1: config 0 descriptor??
[ 2673.833399][T28933] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[ 2673.879459][T28933] uvcvideo 4-1:0.105: No valid video chain found.
[ 2674.435678][T29127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2674.468219][T29129] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 2674.540463][T29127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2674.681960][T29150] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10212'.
[ 2674.925927][ T2997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2675.238145][T28933] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 2675.361528][T28945] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 2675.402416][T28933] usb 3-1: Using ep0 maxpacket: 16
[ 2675.414985][T28933] usb 3-1: config 0 has no interfaces?
[ 2675.422758][T28933] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2675.441317][T28933] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2675.465727][T28933] usb 3-1: Manufacturer: syz
[ 2675.475591][T28933] usb 3-1: config 0 descriptor??
[ 2675.532900][T28945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2675.549285][T28945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2675.578519][T28945] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2675.605650][T28945] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2675.640940][T28945] usb 5-1: Manufacturer: syz
[ 2675.659625][T28945] usb 5-1: config 0 descriptor??
[ 2676.783455][T28945] uclogic 0003:256C:006D.0086: v1 frame probing failed: -71
[ 2676.791241][T28945] uclogic 0003:256C:006D.0086: failed probing parameters: -71
[ 2676.801346][T28945] uclogic 0003:256C:006D.0086: probe with driver uclogic failed with error -71
[ 2676.823452][T28945] usb 5-1: USB disconnect, device number 4
[ 2676.882764][T29088] ==================================================================
[ 2676.890949][T29088] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x40a/0x4d0
[ 2676.899098][T29088] Read of size 4 at addr ffff88802b33a43c by task syz.0.10208/29088
[ 2676.907066][T29088] 
[ 2676.909403][T29088] CPU: 1 UID: 0 PID: 29088 Comm: syz.0.10208 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2676.909420][T29088] Tainted: [L]=SOFTLOCKUP
[ 2676.909424][T29088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2676.909431][T29088] Call Trace:
[ 2676.909437][T29088]  <TASK>
[ 2676.909442][T29088]  dump_stack_lvl+0xe8/0x150
[ 2676.909459][T29088]  print_report+0xba/0x230
[ 2676.909471][T29088]  ? dvb_frontend_release+0x40a/0x4d0
[ 2676.909483][T29088]  kasan_report+0x117/0x150
[ 2676.909499][T29088]  ? dvb_frontend_release+0x40a/0x4d0
[ 2676.909511][T29088]  dvb_frontend_release+0x40a/0x4d0
[ 2676.909523][T29088]  ? __pfx_dvb_frontend_release+0x10/0x10
[ 2676.909534][T29088]  __fput+0x44f/0xa70
[ 2676.909548][T29088]  task_work_run+0x1d9/0x270
[ 2676.909563][T29088]  ? __pfx_task_work_run+0x10/0x10
[ 2676.909576][T29088]  ? do_exit+0x696/0x2310
[ 2676.909589][T29088]  ? kmem_cache_free+0x180/0x610
[ 2676.909602][T29088]  ? put_net+0x191/0x260
[ 2676.909614][T29088]  do_exit+0x69b/0x2310
[ 2676.909627][T29088]  ? cgroup1_freezing+0x20/0x350
[ 2676.909638][T29088]  ? __pfx_do_exit+0x10/0x10
[ 2676.909651][T29088]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2676.909666][T29088]  do_group_exit+0x21b/0x2d0
[ 2676.909680][T29088]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2676.909691][T29088]  get_signal+0x1284/0x1330
[ 2676.909705][T29088]  arch_do_signal_or_restart+0xbc/0x830
[ 2676.909715][T29088]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2676.909727][T29088]  exit_to_user_mode_loop+0x86/0x480
[ 2676.909737][T29088]  ? rcu_is_watching+0x15/0xb0
[ 2676.909749][T29088]  do_syscall_64+0x32d/0xf80
[ 2676.909760][T29088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2676.909769][T29088]  ? trace_irq_disable+0x37/0x100
[ 2676.909781][T29088]  ? clear_bhb_loop+0x40/0x90
[ 2676.909790][T29088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2676.909800][T29088] RIP: 0033:0x7f0a9c79bc0b
[ 2676.909809][T29088] Code: Unable to access opcode bytes at 0x7f0a9c79bbe1.
[ 2676.909815][T29088] RSP: 002b:00007f0a9d607f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2676.909826][T29088] RAX: fffffffffffffffc RBX: 0000000000000006 RCX: 00007f0a9c79bc0b
[ 2676.909833][T29088] RDX: 00007f0a9d608fd0 RSI: 0000000080085502 RDI: 0000000000000006
[ 2676.909839][T29088] RBP: 00007f0a9d608fd0 R08: 0000000000000001 R09: 00000000ffffffff
[ 2676.909846][T29088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[ 2676.909852][T29088] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f0a9c85076a
[ 2676.909861][T29088]  </TASK>
[ 2676.909865][T29088] 
[ 2677.149259][T29088] Allocated by task 1:
[ 2677.153333][T29088]  kasan_save_track+0x3e/0x80
[ 2677.158009][T29088]  __kasan_kmalloc+0x93/0xb0
[ 2677.162596][T29088]  __kmalloc_cache_noprof+0x31c/0x660
[ 2677.167962][T29088]  dvb_register_device+0x2fd/0x2210
[ 2677.173178][T29088]  dvb_register_frontend+0x649/0x950
[ 2677.178453][T29088]  vidtv_bridge_probe+0x9aa/0xf80
[ 2677.183484][T29088]  platform_probe+0xf9/0x190
[ 2677.188066][T29088]  really_probe+0x267/0xaf0
[ 2677.192551][T29088]  __driver_probe_device+0x18c/0x320
[ 2677.197816][T29088]  driver_probe_device+0x4f/0x240
[ 2677.202822][T29088]  __driver_attach+0x3e7/0x710
[ 2677.207568][T29088]  bus_for_each_dev+0x23b/0x2c0
[ 2677.212403][T29088]  bus_add_driver+0x345/0x670
[ 2677.217071][T29088]  driver_register+0x23a/0x320
[ 2677.221822][T29088]  vidtv_bridge_init+0x28/0x50
[ 2677.226589][T29088]  do_one_initcall+0x250/0x840
[ 2677.231358][T29088]  do_initcall_level+0x104/0x190
[ 2677.236288][T29088]  do_initcalls+0x59/0xa0
[ 2677.240714][T29088]  kernel_init_freeable+0x2a6/0x3e0
[ 2677.245905][T29088]  kernel_init+0x1d/0x1d0
[ 2677.250241][T29088]  ret_from_fork+0x51e/0xb90
[ 2677.254826][T29088]  ret_from_fork_asm+0x1a/0x30
[ 2677.259581][T29088] 
[ 2677.261888][T29088] Freed by task 29088:
[ 2677.266024][T29088]  kasan_save_track+0x3e/0x80
[ 2677.270687][T29088]  kasan_save_free_info+0x46/0x50
[ 2677.275695][T29088]  __kasan_slab_free+0x5c/0x80
[ 2677.280455][T29088]  kfree+0x1c1/0x610
[ 2677.284443][T29088]  dvb_generic_release+0x11d/0x1b0
[ 2677.289558][T29088]  dvb_frontend_release+0x132/0x4d0
[ 2677.294750][T29088]  __fput+0x44f/0xa70
[ 2677.298719][T29088]  task_work_run+0x1d9/0x270
[ 2677.303299][T29088]  do_exit+0x69b/0x2310
[ 2677.307445][T29088]  do_group_exit+0x21b/0x2d0
[ 2677.312036][T29088]  get_signal+0x1284/0x1330
[ 2677.316561][T29088]  arch_do_signal_or_restart+0xbc/0x830
[ 2677.322109][T29088]  exit_to_user_mode_loop+0x86/0x480
[ 2677.327391][T29088]  do_syscall_64+0x32d/0xf80
[ 2677.331973][T29088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2677.337855][T29088] 
[ 2677.340164][T29088] The buggy address belongs to the object at ffff88802b33a400
[ 2677.340164][T29088]  which belongs to the cache kmalloc-256 of size 256
[ 2677.354203][T29088] The buggy address is located 60 bytes inside of
[ 2677.354203][T29088]  freed 256-byte region [ffff88802b33a400, ffff88802b33a500)
[ 2677.367908][T29088] 
[ 2677.370219][T29088] The buggy address belongs to the physical page:
[ 2677.376626][T29088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b33a
[ 2677.385377][T29088] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2677.393860][T29088] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2677.401398][T29088] page_type: f5(slab)
[ 2677.405367][T29088] raw: 00fff00000000040 ffff88813fe9db40 dead000000000122 0000000000000000
[ 2677.413941][T29088] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2677.422514][T29088] head: 00fff00000000040 ffff88813fe9db40 dead000000000122 0000000000000000
[ 2677.431166][T29088] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2677.439820][T29088] head: 00fff00000000001 ffffea0000acce81 00000000ffffffff 00000000ffffffff
[ 2677.448474][T29088] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 2677.457136][T29088] page dumped because: kasan: bad access detected
[ 2677.463624][T29088] page_owner tracks the page as allocated
[ 2677.469322][T29088] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13065394638, free_ts 0
[ 2677.489017][T29088]  post_alloc_hook+0x231/0x280
[ 2677.493784][T29088]  get_page_from_freelist+0x24dc/0x2580
[ 2677.499324][T29088]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 2677.505251][T29088]  allocate_slab+0x77/0x660
[ 2677.509867][T29088]  refill_objects+0x331/0x3c0
[ 2677.514552][T29088]  __pcs_replace_empty_main+0x2b9/0x620
[ 2677.520095][T29088]  __kmalloc_cache_noprof+0x392/0x660
[ 2677.525464][T29088]  bus_add_driver+0x162/0x670
[ 2677.530138][T29088]  driver_register+0x23a/0x320
[ 2677.534886][T29088]  usb_register_driver+0x1e4/0x390
[ 2677.539992][T29088]  do_one_initcall+0x250/0x840
[ 2677.544747][T29088]  do_initcall_level+0x104/0x190
[ 2677.549674][T29088]  do_initcalls+0x59/0xa0
[ 2677.553993][T29088]  kernel_init_freeable+0x2a6/0x3e0
[ 2677.559207][T29088]  kernel_init+0x1d/0x1d0
[ 2677.563537][T29088]  ret_from_fork+0x51e/0xb90
[ 2677.568114][T29088] page_owner free stack trace missing
[ 2677.573466][T29088] 
[ 2677.575772][T29088] Memory state around the buggy address:
[ 2677.581418][T29088]  ffff88802b33a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2677.589461][T29088]  ffff88802b33a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2677.597524][T29088] >ffff88802b33a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2677.605570][T29088]                                         ^
[ 2677.611449][T29088]  ffff88802b33a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2677.619488][T29088]  ffff88802b33a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2677.627526][T29088] ==================================================================
[ 2677.659422][T29088] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2677.666662][T29088] CPU: 0 UID: 0 PID: 29088 Comm: syz.0.10208 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2677.677668][T29088] Tainted: [L]=SOFTLOCKUP
[ 2677.681979][T29088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2677.692018][T29088] Call Trace:
[ 2677.695285][T29088]  <TASK>
[ 2677.698197][T29088]  vpanic+0x56c/0xa60
[ 2677.702173][T29088]  ? __pfx_vpanic+0x10/0x10
[ 2677.706672][T29088]  panic+0xc5/0xd0
[ 2677.710390][T29088]  ? __pfx_panic+0x10/0x10
[ 2677.714792][T29088]  ? preempt_schedule_thunk+0x16/0x30
[ 2677.720147][T29088]  ? preempt_schedule_thunk+0x16/0x30
[ 2677.725502][T29088]  ? dvb_frontend_release+0x40a/0x4d0
[ 2677.730862][T29088]  check_panic_on_warn+0x89/0xb0
[ 2677.735884][T29088]  ? dvb_frontend_release+0x40a/0x4d0
[ 2677.741323][T29088]  end_report+0x6f/0x140
[ 2677.745556][T29088]  kasan_report+0x128/0x150
[ 2677.750045][T29088]  ? dvb_frontend_release+0x40a/0x4d0
[ 2677.755404][T29088]  dvb_frontend_release+0x40a/0x4d0
[ 2677.760582][T29088]  ? __pfx_dvb_frontend_release+0x10/0x10
[ 2677.766283][T29088]  __fput+0x44f/0xa70
[ 2677.770263][T29088]  task_work_run+0x1d9/0x270
[ 2677.774840][T29088]  ? __pfx_task_work_run+0x10/0x10
[ 2677.779933][T29088]  ? do_exit+0x696/0x2310
[ 2677.784245][T29088]  ? kmem_cache_free+0x180/0x610
[ 2677.789270][T29088]  ? put_net+0x191/0x260
[ 2677.793518][T29088]  do_exit+0x69b/0x2310
[ 2677.797668][T29088]  ? cgroup1_freezing+0x20/0x350
[ 2677.802596][T29088]  ? __pfx_do_exit+0x10/0x10
[ 2677.807180][T29088]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2677.812187][T29088]  do_group_exit+0x21b/0x2d0
[ 2677.816762][T29088]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2677.821942][T29088]  get_signal+0x1284/0x1330
[ 2677.826434][T29088]  arch_do_signal_or_restart+0xbc/0x830
[ 2677.831961][T29088]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2677.838104][T29088]  exit_to_user_mode_loop+0x86/0x480
[ 2677.843384][T29088]  ? rcu_is_watching+0x15/0xb0
[ 2677.848133][T29088]  do_syscall_64+0x32d/0xf80
[ 2677.852756][T29088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2677.858823][T29088]  ? trace_irq_disable+0x37/0x100
[ 2677.863845][T29088]  ? clear_bhb_loop+0x40/0x90
[ 2677.868518][T29088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2677.874418][T29088] RIP: 0033:0x7f0a9c79bc0b
[ 2677.878818][T29088] Code: Unable to access opcode bytes at 0x7f0a9c79bbe1.
[ 2677.885815][T29088] RSP: 002b:00007f0a9d607f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2677.894217][T29088] RAX: fffffffffffffffc RBX: 0000000000000006 RCX: 00007f0a9c79bc0b
[ 2677.902173][T29088] RDX: 00007f0a9d608fd0 RSI: 0000000080085502 RDI: 0000000000000006
[ 2677.910126][T29088] RBP: 00007f0a9d608fd0 R08: 0000000000000001 R09: 00000000ffffffff
[ 2677.918090][T29088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[ 2677.926097][T29088] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f0a9c85076a
[ 2677.934161][T29088]  </TASK>
[ 2677.937361][T29088] Kernel Offset: disabled
[ 2677.941767][T29088] Rebooting in 86400 seconds..