last executing test programs:

5m43.512512711s ago: executing program 1 (id=3176):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, 0x0, 0x0, 0x48014)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r6, 0xc4c03d09, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0)
recvmsg$unix(r2, &(0x7f0000000940)={&(0x7f0000000300), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000180)=""/25, 0x19}, {&(0x7f0000000880)=""/187, 0xbb}], 0x5, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x78}, 0x12001)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendto$packet(r1, &(0x7f0000000200)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afae4b8b05fe09e29583ad1495a48416bebbbba7979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b51c09e31b21fe1865a1efd20807b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d040000000000a3fb170a02f2e841b0ebf3f16ca8ba9106f7313be11673cc1f0cd42a0cc66bbe5d5a2a6d813a20fea7cf0fd3c70250c3db2bd85a9f95d3930496a0b06e42aa892a241511631b4802545eb440876473459eb185e075", 0xed, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004012200a4e2000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001400000000000000"], 0x48)
pipe(&(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
writev(r11, 0x0, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x15)
splice(r10, 0x0, r12, 0x0, 0x80000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000009000000050000000900cd2d2f6e7a51f55aa214e0c8eba864be2c00", @ANYRES32=0x1, @ANYBLOB="ae5e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000040000000d00"/28], 0x50)

5m41.675027869s ago: executing program 1 (id=3180):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x4}]})
r3 = syz_usb_connect(0x3, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0x56, 0xbc, 0x40, 0x19d2, 0x1247, 0x3be6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbb, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x8, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x69, 0x2}, @generic={0x51, 0x4, "a01ce807a0d3cb3b73837e270ef6f10f0ebfc212627347fd80100a286bc4bb2c179e8a59a4a3fde242034ef49e97fa60fa8d3036718caee765551c5b26b4ea2a9cf2694eb1b8858655e1e60eee6741"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}})

5m39.667198327s ago: executing program 1 (id=3187):
r0 = socket(0x1e, 0x4, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3631564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}})
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r4, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010)
r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x941000, 0xf2)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
recvmmsg(r5, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)={r6, r7+10000000})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x5d}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9f}, @NFTA_BYTEORDER_OP={0x8}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$BLKCRYPTOIMPORTKEY(r5, 0xc0401289, &(0x7f0000000380)={&(0x7f0000000280)="57e4ed9f9a8795cc25901ab573f5f37f375c149f6e15ddfdd6e5765fa839d68aab34", 0x22, &(0x7f0000000340)=""/40, 0x28})
sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)
r9 = socket(0x1e, 0x4, 0x0)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x4}, 0x10)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r10, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001880)=""/4112, 0x1010}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f40)}}], 0x2, 0x58ca33a0, 0x0)

5m38.560501055s ago: executing program 1 (id=3194):
r0 = socket(0xa, 0x2, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864d2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
open_tree(r5, &(0x7f0000000080)='.\x00', 0x9001)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe]}}, 0x5c) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async, rerun: 64)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001500)) (async, rerun: 64)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) (async, rerun: 32)
ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000000c0)=0x1) (rerun: 32)

5m37.150091494s ago: executing program 1 (id=3197):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2$watch_queue(&(0x7f0000001180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000200)=',-\\\x00', &(0x7f0000000240)='^(!}\x00', &(0x7f0000000280)='w@](^\x00']})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000004340)=""/41, 0x29}], 0x2}, 0x41}], 0x1, 0x10000, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0xfffffc77, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=r4, @ANYRES32=<r5=>r2], 0x48}}, 0x20040004)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x36)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x240001, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRESOCT=r3, @ANYRES16=r7], 0x0)
fcntl$setflags(r8, 0x2, 0x1)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r7, 0x19)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='@^\xe5\x00', r3)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newsa={0x14c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x9, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'generic-gcm-aesni\x00'}, 0x0, 0x60}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffffff}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x20040000)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe2$watch_queue(&(0x7f0000001180), 0x80) (async)
add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async)
execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000200)=',-\\\x00', &(0x7f0000000240)='^(!}\x00', &(0x7f0000000280)='w@](^\x00']}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10) (async)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000004340)=""/41, 0x29}], 0x2}, 0x41}], 0x1, 0x10000, 0x0) (async)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0xfffffc77, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=r4, @ANYRES32=r2], 0x48}}, 0x20040004) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x36) (async)
pipe2$watch_queue(&(0x7f0000000300), 0x80) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x240001, 0x0) (async)
syz_emit_ethernet(0x8a, &(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRESOCT=r3, @ANYRES16=r7], 0x0) (async)
fcntl$setflags(r8, 0x2, 0x1) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r7, 0x19) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) (async)
request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='@^\xe5\x00', r3) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newsa={0x14c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x9, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'generic-gcm-aesni\x00'}, 0x0, 0x60}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffffff}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) (async)

5m36.672583653s ago: executing program 1 (id=3200):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read(r0, &(0x7f0000000380)=""/144, 0x90)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pwrite64(r0, &(0x7f0000000440)="7de2b30dc1", 0x5, 0x4)

5m36.154166393s ago: executing program 32 (id=3200):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read(r0, &(0x7f0000000380)=""/144, 0x90)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pwrite64(r0, &(0x7f0000000440)="7de2b30dc1", 0x5, 0x4)

9.924278674s ago: executing program 4 (id=4380):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0xff}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x2, 0x6576, 0xe, 0x0, <r3=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x100000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
acct(0xfffffffffffffffe)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0xa2200, 0xa4)
sendfile(r4, r4, 0x0, 0x68)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@fallback, 0xffffffffffffffff, 0x21, 0x1000}, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0020020022380300140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r8, @ANYBLOB="08001f004c6c7b65b12c05000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0)
write$vga_arbiter(r9, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r9, @ANYRES64=r7, @ANYBLOB="d76febfe147c540fcd4c01b46040a5d285fdd80eae7698c4375bae0e4822d034d1ece2f87a1dfe1af1ec1e1a998d4b1032105d6462b5daeca6c15b640abc9ca95230fb218f7bbcb7a566b06252565a21ee3c4cfc3d5da02bf7465f4fecaaf785743f7e8852aa909d4ec7e0d5e2a969a21f7ed69e97d5e52ea0bf9ddedca3619893c14c452b4e21287de821cf89faf8a6ab04d2b8262ad701125e6472bb89fa6beb04e621923f75c13fd5bbd75f2da7ae920fb5c6d8265625c9858b322cea5a0b93452ba21837bb5fcd4e81830bc6a9e0b454865b2e572bdc5600567aa5fb98b3d4919b0f01a7755387a386528fdf8cedabcff6c482d4e1cfacf259a5ca56a6dbe7fc15076c95b1ebcb1304b5107cd14ebf03ed83c66a4df63ca1f726ef2b76abaa9b2549cd5ebd3819f0419d076019aed234d43638be167c207bf2e37b899a3b471d6da598f84cee036ce2174ccd4263b03105c8a4f1d67d1c9235a0b2cfc07e7bbc28e5c3c533b049307578266d54bd0af5bd63a9600204d30bbb5fca813498e1a78430c5576ecdd4ac72bc105c65311d40a55b01ec90959ae8a73ac54e96a68f2ab3a873e2ef00"/440, @ANYRESHEX=r3, @ANYRESHEX=r5, @ANYRES16=r5, @ANYBLOB="8c0bc9377edb122ac5a98f4c6b7ddf29787385073b38aa60bc6ae77406046aef5254c08b18188325dcf0e34eb62c5c34f71c945d943fd14bf0ff7a684b546df6e7dba6086e95ee783012ca28f6d18039ebc1bb9f0675e300b91d2364d38f1a0a6543b6a9b785dc0b91d24172a3c5deb2603b"], 0x14)
syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x14, 0x26, 0x107, 0x0, 0x0, {0x4, 0x7c}}, 0x14}}, 0x0)
faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100)
clock_gettime(0x0, &(0x7f0000000300))
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r10, 0xffffffffffffffff, 0x0)

8.900760007s ago: executing program 5 (id=4387):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
poll(0x0, 0x0, 0x8001)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1000})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400})
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

7.460516992s ago: executing program 0 (id=4390):
r0 = socket$inet(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x47)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000003c0)={0x20000101, 0x2, 0x2, 0x0, 0xe3})
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x800})
lchown(0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x1, 0xae, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}]}, {0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x1}}, 0x6a)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4000000)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0)

6.808127402s ago: executing program 3 (id=4392):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @local}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000001a)
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019080)=ANY=[@ANYRES32=0x0], 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050)
pwritev(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x401, 0xff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="619a217b2c7e559e35551ca163881198fea0ee4baa6b731ef6c7fcf74a56c10776e024dab0f0ab5996c41c99dd75b2a72a7e124f685c02f7179c61ba633fa1cde148d6a32b59ae2c2d7bd09ab186b1af92d3bf2f90dc33290079559848f05373c610f49dfbef4a5d22afbc4d8ce4e9be100c184f2435f6d3d184004cc83da49adb30da17fda23d778c6731749ffae1ef2cdc6330", @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc})

5.947936646s ago: executing program 4 (id=4393):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x20006f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

5.941917788s ago: executing program 5 (id=4394):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "0100"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400)={0x40, 0x16, 0x2, "0e90"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x40, 0x7, 0x1, "87"}, 0x0, 0x0})
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "be58b864b222bf56e5de595fbe659615"}]}}}}}}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

5.552218242s ago: executing program 4 (id=4396):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a3000"], 0x110}}, 0x0)

5.363276042s ago: executing program 0 (id=4397):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$kcm(0x10, 0x2, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0x7fff, 0x8, 0x2, 0xfffffffe})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/233, 0xe9}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}, 0x3}], 0x1, 0x22, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xaba, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x1000535a, 0x0, 0x0, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@host}, 0x1})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]})

5.11911221s ago: executing program 3 (id=4398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x15, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfba}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x411}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.068967298s ago: executing program 5 (id=4399):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

5.041831529s ago: executing program 3 (id=4400):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000280)=ANY=[], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c00000020000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

4.982614714s ago: executing program 5 (id=4401):
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x54) (async)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r0, 0x1, 0x80)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
syz_open_dev$usbmon(0x0, 0x0, 0x0) (async)
close_range(r5, 0xffffffffffffffff, 0x0)

4.655332541s ago: executing program 4 (id=4402):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x541b, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x900, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0xb, 0x2c, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010103, @remote, {[@generic={0x44, 0x4, "bbfa"}]}}, @timestamp={0xd, 0x0, 0x0, 0x1, 0x5, 0x7b2, 0x0, 0x8a8}}}}}, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}, 0x1, 0x40})
io_uring_enter(r1, 0x6b4d, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x0, 0x3, 0x7, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="912e000180000b00000000000011492d845f3eef8d92a976226066715fa0eaf06b326daa373574565669dc09b578a21fbd6c1a4387e187518d28a79ec9f8fdda56153610619e56c7a73032a42dc40f63cf5bc0b4fa76ff7d3863109bfbcffb119f02f706512778a5806fbfa9fee969b05b7a0e07806db7159b8e72415520265d5ec0d26dd705cc31a35c88d1401084cbd48dcff94cd9c4ceb88438c8f8b63f36853b24a2cfa7f7b1d14ddd6e7526fc1e78abce3c463575ae8c1fe65a3fa65e8175e0558c39647cf5b04c5032ba727e7ac84e18eeb20b4f9fbd4276074100fb6e5d90bb2ffde8d40770935787fbf2b2b73da6e6bf92ffdff907ea2ac334490cf245815c75", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)

4.377829746s ago: executing program 0 (id=4403):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000000}, 0x1c)
r1 = syz_io_uring_setup(0x643c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1a4}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getneightbl={0x14, 0x42, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

4.288864068s ago: executing program 4 (id=4404):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502570e00000000090582020002fef774fdbb2f1c6d60bc0f4e533eb3cc8a6de4dab46c91e11571bdfecef0cb80947b4e852c11fe8f33aba48cfe6cb8355d0b0eac193005479e43d459f2e73c5cf673fd5d6601b9aa7d46", @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=0x0], 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r3=>0x0})
r4 = socket$rxrpc(0x21, 0x2, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x11)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}}, 0x24)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4f74, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)
r9 = syz_io_uring_setup(0x7bce, &(0x7f0000000140)={0x0, 0x5883, 0x4000, 0xfffffffd, 0xfffffdfc}, &(0x7f0000000200)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x108, &(0x7f0000000100)=0x4, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r14, 0x4008ae9c, &(0x7f0000000000)={0x5c, 0x5, 0x46})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0xffffffff, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xfd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

4.233288902s ago: executing program 0 (id=4405):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
lseek(r4, 0x6, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x2, @void}, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r8=>0x0})
r9 = socket$igmp(0x2, 0x3, 0x2)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01072cbd70003536d90d6cb3cefc"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r13, @ANYBLOB="18005a8014000180050001003000000006000200b8"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4032200", @ANYRES16=r10, @ANYBLOB="08002dbd7000ffdbdf251300000008000300", @ANYRES32=r13, @ANYBLOB="05007400030000001000bd000500feff0900aacb047d0600060014010500000005001301020000004f00be00f6694926720b795378bfc164bb2bf1328eec7718c8ecb272e307f1ecb004dc693dd475ab2ba2da8af38657263bbd42874ecc6a44306c1c6f72f8baffac9104aade2eea54f13aada08605f8000500e400010000000600360001000000"], 0xa4}, 0x1, 0x0, 0x0, 0x24000800}, 0x44)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r8, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r9, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r8, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r6], 0xc0}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x4080)

3.412619681s ago: executing program 3 (id=4407):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1a000000c005b382081500000800000000000000", @ANYRESOCT, @ANYBLOB="000000000000930000000000000000000000000049a8"], 0x50)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
mremap(&(0x7f0000239000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000400000000000000095"], &(0x7f0000001600)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.799274215s ago: executing program 4 (id=4408):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
syz_open_dev$vim2m(0x0, 0xdf, 0x2)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
write$char_usb(r3, &(0x7f0000006800)="10", 0x1)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
ftruncate(0xffffffffffffffff, 0x36)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x70)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r6)

2.42790397s ago: executing program 2 (id=4409):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x40010, 0xffffffffffffffff, 0x68861000) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x6e}}, 0x18)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async)
r1 = eventfd(0xffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r2=>0x0}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x1c, 0x10, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x8}, 0xfffffff1}, @in={0x2, 0x0, @remote}}}, 0x118)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0xf, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10)
recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000024c0)=[{0x0}, {&(0x7f00000006c0)=""/233, 0x140}], 0x2}, 0x7}], 0x1, 0x40000002, 0x0) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@can={{}, 0x4, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x50800}, 0x0) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xdad, 0x6, 0x2) (async)
r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x50, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2700004e16344e46a9157c176b4fcd05a9bae2c24eca328c8037b73b4969f5d08f23e9b0e7c9196bb91f86000000004e0000004e0900004e00d38a99858ab609fc000000e7ff004e"])

2.140433289s ago: executing program 2 (id=4410):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x15, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfba}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd23}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.878354509s ago: executing program 2 (id=4411):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

1.814931909s ago: executing program 0 (id=4412):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a3000"], 0x110}}, 0x0)

1.265104981s ago: executing program 3 (id=4413):
socket$packet(0x11, 0x3, 0x300)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0)
epoll_create1(0x0) (async)
r3 = epoll_create1(0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) (async)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x4}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0})
io_uring_enter(r7, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r11, r10, 0x0, 0x100000002) (async)
sendfile(r11, r10, 0x0, 0x100000002)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x101, 0xeeee0000, 0x4, r10, 0x8})
r12 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="080008000084040008"], 0x53)
syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0)

1.21212759s ago: executing program 2 (id=4414):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
socket(0x1, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0xe4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
dup(r0)
pipe(&(0x7f00000001c0))
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c001300030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0)

1.000296801s ago: executing program 2 (id=4415):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x0, 0x3, 0x63, 0x2}}]}}]}}, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x0, 0x3, 0x63, 0x2}}]}}]}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x122, 0x0, 0x3}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {}, 0x2})

965.275533ms ago: executing program 5 (id=4416):
socket$inet6(0xa, 0x3, 0x2f) (async)
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x8, 0xf7ff, 0x3, 0x2, 0x50, 0x0, 0x3c}, {}, {0x0, 0xfffffffffffffffe, 0x101}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], 0x13b0}}, {{&(0x7f0000001740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0x3ff, @loopback, 0x7f}}}, 0x80, &(0x7f0000001900)=[{&(0x7f00000017c0)="a61e8f053b435edd431a25cef7d760a622c19fb0b7fde6bba4c4e47a18b78812685ac2fa8303", 0x26}, {&(0x7f0000001800)="b888cb7188a32077887a2586a804", 0xe}, {&(0x7f0000001840)="fb9b73f69a5143a31dcc108db6d8182a3de27d4222a47c3179286d05b00e693faaedca61f49e9678372165e5bdfeaa9083a428097080780785616e55fd9260", 0x3f}, {&(0x7f0000001880)="f8b1f5e6a10a6ff8895beb4e07e3fa51da74eca59bb7d917e94faf2406981366ed0cbacacf4a48a6d1e645e5e1e42808ff0cf86691d0df7029554d7c362cac4e48628cad", 0x44}], 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x1558}}, {{&(0x7f0000002ec0)=@pppoe={0x18, 0x0, {0x0, @multicast, 'ipvlan0\x00'}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002f40)="8015d80914b2ecd2f36b269c223057519ab5b506c8bbca4359221a632da3e90718e326cb8041162cffcb90091df6dc8c96c74a2331ef3a35db189c50b89fd1ab8f1aacc971de63040ff1c32efe1aade2b392b2817d04227dc82d86dd72a4511d27e9fd3c3a21275f6932fe82c0fb70142b25e029c978ed345079b43ca336de67734e5422533cc8cb656a87d4a146234e9f0f5e1f53966057063ea9", 0x9b}, {&(0x7f0000003000)="975883302e319c8f34fed7b4aceedb91d3", 0x11}, {&(0x7f0000003040)="84e2d861a66b864ea1666c5e565ddc869c7635a7e67999f3e8fd07b40193705b17175f3a37991da40dc901ef415d250f7edb65247efad2114756261f3b64cdf789c69818aeddd05f62b776ee66d9655a49592f2eb8fbbda0d0720f7f440a3bdaf861ab535ed95cafd21adef1b5db6ac66af83ab6166da3e7c6157452fcebca6611402a55ae048ab8ce04b93fa87c1e4d6ff09163c415d477d6c0a00dc0c6e1e0de95d0be7ccd9c8f94982b34c4ea6d1d47976e19b21ae16d23f92ba1a2c7d5e729d72f6b17abb190b541ae91e9b1d0e4bd6f759e9b", 0xd5}, {&(0x7f0000003140)="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", 0xfc}, {&(0x7f0000003240)="429ad3388b1d80791b08ee5fb0d376d8154c9b7288e09530e34d55b2a04b846abf7104d794d05e870d2be8e06eb9f7d17cbb989e40670c0ff09496a15187d59f8691b2032b5e40f8e87958915966e32fa50ec4ae7ab61ea069bf850eb22b58ec5db0b4aabe57ee3e69d1bf402a85a50d839eebbdd8fe97", 0x77}], 0x5}}], 0x3, 0x800)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e65f1f68282b0e3a265a945ae5794f53dc874f29c696d30000000a2d4b721c70000001400168010de00800c00", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x40)
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x80) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x80)
landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) (async)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0)
r3 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x1)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0) (async)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x3) (async)
landlock_restrict_self(r2, 0x3)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
accept(r6, 0x0, 0x0) (async)
accept(r6, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) (async)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r8, 0x0, 0x0)

704.565868ms ago: executing program 0 (id=4417):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x3, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0xfb, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xf9, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x10, 0x4, 0x2, 0x8, 0x1}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe0, 0x9, 0xfff5}]}, 0x7, [{0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="540371cb4a63f4cccd8871be9e97303145439b5c50b9b84a006e011892d229a77481ed9e1dcbd8b63e4c92714047d46a1954d210"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x146a}}, {0xc3, &(0x7f00000002c0)=ANY=[@ANYBLOB="c303f1e7d81764d6ef9152cdfa3396c8b504d8ff7f000000000000edb97dc7e02e6014f467bb7dbb4332472ca237c0b715a7529122496ba34ee531ca2e680bd363475dde0ce5f5813237de268fc3b6e0966239f4bb7ecddc249a5796de38f36c6501747504375a6a5d531b44c19a3e3481bcf468e9be0415f53f6fbdb2f79468831caab6595cd7833b17659e2543a24dce7f7e88f2e5a1a69ab4d0f6fd5bf3a4629a7d7e912ca0702c22da0177848935bcc74b61db0599709101d9e403be6fc3354674"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc07}}, {0xab, &(0x7f0000000440)=ANY=[@ANYBLOB="ab03af5e66193006b471f80c4948c0413a048e351c08141ced8ff0661b66226fe2b45bd13a8b2c957e7b0f9064c00260724e0b0714972d5916c9b826011a9331c4190503ea2bc847a8d13ed201b2e35b770030359d2dd7e45ac3996efbe137275ae537a50b919666cd1eef927c84db169735240c6f9c7c057d82c6d00d62e28277ef76d5273653bbd45745a5b104db100da2109cd91668877dc5fb89ed1c9e9ffd87c90f60b7e0dbedbad9"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x439}}]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0x8, 0x5}}}}]}, 0x40}}, 0x4010004)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0xc0844123, &(0x7f0000000000)=0x2)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100, 0x3})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x214, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1e0, 0x2, [@TCA_MATCHALL_ACT={0x1dc, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x5c, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x0, 0x5, 0xffff}]}, {0x17, 0x6, "987262f06efadc86c056d297774d61e847c950"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_skbedit={0x128, 0x1d, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x1a18}}, @TCA_SKBEDIT_MARK={0x4, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

512.484696ms ago: executing program 2 (id=4418):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8, @ANYBLOB="b6"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
sigaltstack(0x0, &(0x7f00000000c0)={0x0})
openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100)

99.701847ms ago: executing program 5 (id=4419):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x2004e23}, 0x6e)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000bc0)="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", 0x1000, 0xfffffffffffffffa)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="a129e2d15994f52e7f9600582795dcf985f2ba78b6f98174f3e8f304edb951eb8e56e48065d390f9c9f2b328145df28722a49065685d502295fff6ab0f151c8550bcc6c5c4e5183e28b204f6d91e951b6c9c67af5bb662b97ad8aafcc6eb07820e1cd6b111", 0x65}], 0x1, r3)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={r2, 0x0, 0x25, 0x1, @void}, 0x10)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x8d8, &(0x7f0000000340)={0x0, 0xba95, 0x800, 0x0, 0x11f}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0\x00'})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000040)={{0x1, 0x2000005}, {0x0, 0x2000001}, 0xb585, 0x5})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
preadv(r10, &(0x7f0000000440)=[{0x0, 0x3f}, {&(0x7f0000000300)=""/59, 0xffffff9f}], 0x2, 0xb, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

0s ago: executing program 3 (id=4420):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="20e83143a800118816dd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000200)=0x5)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x8, 0xa2c65)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000700)=0x31)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000900)="40ee", 0x2}, {0x0}], 0x2)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000500)='\x00\x00\xe4\xff\xff\xb4\xf7b\xd2\xde\x9d\xa5\vR_\x06\a\x1e\x82{\x8a\b$\xc0\xb7\bJ\x86<(B\x03\x87\x1du\xe6(\xeb\xf9\x16\xd6-\"mv\xe0\tn\x8c\x8c\xfaSa\x85\xdbW\x11\xd2tl\xb8z92\xbd\'\xae\x7f\xf6\x8fP\xefB\x92\xfa\x95^B\xcb>*\x17\xb4\x89\xe1\xf0\xe0\x8eyK\x97\x8c\x87\xbeS\xed\x87(\x04X\xbc\x05\xa5\xf1\xa7]\xf6\xbf\x7f\x14\x8d\xff;4x\xf1\x1be\x86\xc6\x99jJ\xe7\xd4\xd3\xd7\x05\xb3\x92J\xec\xa8g\x88o\xf1\x81\xa8O\xd7P\xb4\xddw\x05\xef\x95%T\xa6@\xfb\xb3|Y\xad\x91\xfc\xdfLwP\xd8\x8dB\x87\xf0\xe8\x91}\xb4f\xd46\xbe\x8dD\xc29!\x1f\xff4\xf1\xfd\xcd!\n\xb3\xf8\xaeW\xa1\x16S\xa6\x9c8\xe2\xb6\n\x88z;i\xa2Izc9\x92\xfb-\x05\xaaut\xe4\xaf\x16JP\x90\xfc\xaf \xd4\f\x16\xeb\x99\xe5\xc1-\xbb\x9bY}\x82\x96\xce\x1e\xf9m\x97\x93\x8d\x8dK\x91\xf7\xdc\xff\xd8\xd20\xf2\'(\xa7\x83\xefC\xc3xZ>C@[\xa6d\t\xc6\xbf\x1f\xfc\x99\xbf\x0f\xad\x7f\x9by\x8d\xb1\xbc5ES\xd3\x14\xfd\f\xbf1\xcc\xbb@\x1b\xc5naz/\xbc\xf2x\xf2\r\xb7QVt\x1c\x7f\x8fF\xc0\x11\x9fj\xb0\xd64\xa9\xb1#\x87m\x0e\x0f4\xdad/x\x9cN\xc9\xba\f\x1b\x98\xea\x90\xf5dO\xbe\x94\xd2\xa8{\xca\xbc\xfa\x85\xd7C\xf3\xed\r\x11\xa6\xef\xa3\xf3\xc3\x88%\x17\x9f\xc85a\x04\xed\x1d\x1c\xb1\x85\xca\x18\xc1\x81\x04\xf5\\\xd7s\xce\xdf\x8bm\x82\xc1\xc3JS\xfe1\xba\x10U\xc7\xa8R\xb9\x8dP\x02\x02\x12\xe1\x9a)rGM\xbe\xbfu^n\xdbQL7\x83\x06\xe2\x1e\t\x04\xd1\xdd\x91\x8f\x14\x84\x95*\xc7\x131[\xf06~\x955\x80\xc4\xed\"\xe7\xa84q\xc3\xbf*<\x02\xf3\xe2\x85\xf0\xa9\x9e\xc1\xa5\xb5\x15\x89\x12\x99%h\x14v\x83Z\f\xa3\x00\x00\x00\x00\x00', &(0x7f0000000940)='\x06)]A\"\x01\xc8\xb1@\x1b;\x01\xf3\xc6\x17\x85\x00F\xa3\xe5]A?\xa5\x03\xf5%\xfc94H\x03L\xdb[\xbc\x12\'A@\x17\xd5\xc7D\xd7\xf8P\xfe\xc9[%\xa7\xd9\x1970\xce\x98n\x95\xf9\bJ\xb1\x91R\xe5\x12/\xd2)\x98\xa8\x93>\xf2z@\xa6\xf0gG\x154E\xf6-B\xfe\xf1r\xe3\xa4b\x9625\xedY\xe6g\xe3\xde\xf3L\x16\x8d\xce\x0e\xfd?\xff\x16\xb0N\b\xc2IJ_\x9c\xd28Gr\'\xb3j\xa7J\xbd\xb1\xce\x9dU\x03\xdd\xcb\xaa\xa8\xb5\x89\xc9\xacK\xe4\x11G\x1b%\xc4V\a\xa9Z\x84\xb8\xd5\xa7t\x88\x8an\xe0T\xf1\xed\xd9\r\f\fY\x815\xc8\x0e\xd3\xf6&\x14\xbb\x8a\'\x906w\xdc8\xc1AZ\x01\xb6O\xbd\x8a]\x16\x84^\x96Y\x04', 0x0)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000400)="64f30f0966ba2100ed2e262636670fc75b07c4e1d455f1f2a4c4e3bd5d92001000000766b850008ec80f20d835200000000f22d8650f0f6d17a4f0810e00000000", 0x41}], 0x1, 0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x36040, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000300)="3ef20f01d9646736dc26baf80c66b8ddc0218b66efbafc0cec66650f009642babaa000b8ed00ef26660f380604baf80c66b84a73be8066efbafc0cb80400ef66b86e0000000f23c80f21f86635080090000f23f8660f38816320baf80c66b80c27bf8766efbafc0ced", 0x69}], 0x1, 0x43, 0x0, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8907, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x23, &(0x7f0000000000), 0x4)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x40408d0}, 0x40)
poll(&(0x7f0000000280)=[{r7, 0x8000}], 0x1, 0xa)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYRES32=r7], 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)

kernel console output (not intermixed with test programs):

index 0x00000040: -71
[ 1130.089230][T20723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1130.109607][T20723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1130.130996][T20723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1130.141651][T20723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1130.152932][T20723] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1130.182916][T20723] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 1130.204752][T20723] usb 4-1: USB disconnect, device number 121
[ 1130.280260][T21429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1130.310258][T21429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1130.568215][T21459] netlink: 'syz.5.3981': attribute type 4 has an invalid length.
[ 1130.583693][T21459] netlink: 'syz.5.3981': attribute type 4 has an invalid length.
[ 1130.693253][T21462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1130.721153][T21462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1130.743137][T18210] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1130.766668][T18210] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1130.777214][T18210] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1130.796189][T18210] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[ 1130.810698][T18210] usb 5-1: USB disconnect, device number 125
[ 1131.211674][T21486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1131.219777][T21486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1131.611411][T20723] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1131.758795][T21493] tipc: Enabled bearer <eth:gre0>, priority 10
[ 1131.789542][T20723] usb 3-1: Using ep0 maxpacket: 8
[ 1131.891324][T20723] usb 3-1: config 127 has an invalid interface number: 171 but max is 1
[ 1131.899832][T20723] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.911690][T20723] usb 3-1: config 127 has no interface number 1
[ 1131.918172][T20723] usb 3-1: config 127 interface 171 has no altsetting 0
[ 1131.952422][T20723] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[ 1131.961827][T20723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1131.973096][T20723] usb 3-1: Product: syz
[ 1131.977508][T20723] usb 3-1: Manufacturer: syz
[ 1131.985811][T20723] usb 3-1: SerialNumber: syz
[ 1132.624601][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'.
[ 1132.641241][T21502] veth1_macvtap: left promiscuous mode
[ 1132.900539][T20725] tipc: Node number set to 1489771993
[ 1133.072784][T21504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1133.170793][T21504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1133.308138][T21509] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1134.600247][T21516] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3993'.
[ 1134.681899][T20723] xr_serial 3-1:127.171: xr_serial converter detected
[ 1134.690793][T20723] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[ 1134.718173][T20723] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 1134.760126][T21516] ip6t_srh: unknown srh invflags 4000
[ 1134.806476][T20723] usb 3-1: USB disconnect, device number 127
[ 1134.843651][T20723] xr_serial 3-1:127.171: device disconnected
[ 1135.353893][T20723] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1135.386663][T21524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1135.399469][T21524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1135.410935][T21524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1135.423009][T21524] syzkaller0: entered promiscuous mode
[ 1135.429967][T21524] syzkaller0: entered allmulticast mode
[ 1135.473763][T21524] tipc: Resetting bearer <eth:syzkaller0>
[ 1135.484369][T21523] tipc: Resetting bearer <eth:syzkaller0>
[ 1135.490505][T20725] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1135.519221][T20723] usb 3-1: Using ep0 maxpacket: 8
[ 1135.543577][T20723] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1135.544108][T21523] tipc: Disabling bearer <eth:syzkaller0>
[ 1135.571291][T20723] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1135.608897][T20723] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1135.642891][T20723] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1135.657693][T20723] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1135.665741][T20723] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1135.677570][T20723] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1135.693708][T20725] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1135.703934][T20725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.721095][T20723] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1135.737390][T20725] usb 4-1: config 0 descriptor??
[ 1135.746187][T20723] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1135.754458][T20723] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1135.766397][T20723] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1135.779786][T20725] cp210x 4-1:0.0: cp210x converter detected
[ 1135.786959][T20723] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1135.809296][T20723] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1135.818768][T20723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.827912][T20723] usb 3-1: Product: syz
[ 1135.833288][T20723] usb 3-1: Manufacturer: syz
[ 1135.838014][T20723] usb 3-1: SerialNumber: syz
[ 1136.068269][T20723] adutux 3-1:168.0: interrupt endpoints not found
[ 1136.105187][T20723] usb 3-1: USB disconnect, device number 2
[ 1136.183575][T20725] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1136.193045][T21522] pimreg: entered allmulticast mode
[ 1136.201141][T21522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1136.215017][T21522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1136.249480][T20725] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1136.438222][T18210] usb 4-1: USB disconnect, device number 122
[ 1136.545009][T18210] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1136.579726][T18210] cp210x 4-1:0.0: device disconnected
[ 1136.993848][T21544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1137.103636][T21544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1137.179124][T20725] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1137.409112][T20725] usb 5-1: Using ep0 maxpacket: 16
[ 1137.436829][T20725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1137.511962][T20725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1137.553683][T20725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1137.586166][T20725] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1137.620098][T20725] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1137.666598][T20725] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1137.676814][T20725] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1137.703015][T20725] usb 5-1: Manufacturer: syz
[ 1137.732604][T20725] usb 5-1: config 0 descriptor??
[ 1138.083653][T21557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'.
[ 1138.120011][T20725] rc_core: IR keymap rc-hauppauge not found
[ 1138.128541][T20725] Registered IR keymap rc-empty
[ 1138.136561][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.159284][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.176358][T21531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1138.186309][T20725] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1138.207232][T21531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1138.279522][T21559] macvlan3: entered promiscuous mode
[ 1138.290966][T21559] macvlan3: entered allmulticast mode
[ 1138.322279][T21559] bond3: entered promiscuous mode
[ 1138.327827][T20725] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input122
[ 1138.355916][T21559] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1138.378053][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.392134][T21559] bond3: left promiscuous mode
[ 1138.459347][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.489135][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.530346][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.558472][T21564] syzkaller0: entered promiscuous mode
[ 1138.579167][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.580543][T21564] syzkaller0: entered allmulticast mode
[ 1138.662550][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.689355][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.709386][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.770259][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.819252][T20725] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1138.871944][T20725] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1138.933203][T20725] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1138.951912][T21567] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4006'.
[ 1139.238048][T21569] syzkaller1: entered promiscuous mode
[ 1139.252115][T21569] syzkaller1: entered allmulticast mode
[ 1139.294907][T21569] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4007'.
[ 1139.505281][T21574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1139.526410][T21574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1140.551235][T20727] usb 5-1: USB disconnect, device number 126
[ 1140.703048][   T31] audit: type=1326 audit(1765643325.579:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1140.779336][   T31] audit: type=1326 audit(1765643325.609:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1140.804843][   T31] audit: type=1326 audit(1765643325.609:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1140.819338][T21584] program syz.5.4011 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1140.841897][   T31] audit: type=1326 audit(1765643325.609:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1140.875403][   T31] audit: type=1326 audit(1765643325.609:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1140.900942][   T31] audit: type=1326 audit(1765643325.609:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1140.932944][   T31] audit: type=1326 audit(1765643325.609:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1140.956047][   T31] audit: type=1326 audit(1765643325.609:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1141.019109][   T31] audit: type=1326 audit(1765643325.609:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1141.042265][   T31] audit: type=1326 audit(1765643325.609:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21583 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e4438df90 code=0x7ffc0000
[ 1141.239042][T12463] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[ 1141.279080][    T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1141.417329][T12463] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.439021][    T9] usb 5-1: Using ep0 maxpacket: 16
[ 1141.449736][T12463] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1141.459984][T12463] usb 3-1: config 1 has no interface number 0
[ 1141.466878][T12463] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1141.482936][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1141.497410][    T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 1141.508135][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.530453][T12463] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1141.559742][    T9] usb 5-1: config 0 descriptor??
[ 1141.572508][T12463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.608057][T12463] usb 3-1: Product: syz
[ 1141.639624][T12463] usb 3-1: Manufacturer: syz
[ 1141.644343][T12463] usb 3-1: SerialNumber: syz
[ 1141.675590][T12463] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing
[ 1141.714042][T12463] cdc_ncm 3-1:1.1: bind() failure
[ 1141.830379][T21596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4013'.
[ 1142.077046][T21589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1142.116567][T20722] usb 3-1: USB disconnect, device number 3
[ 1142.145930][T21589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1142.332892][T21589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1142.440075][T21589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1142.766106][T21589] gretap1: entered allmulticast mode
[ 1142.835696][    T9] usbhid 5-1:0.0: can't add hid device: -71
[ 1142.843947][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1142.873455][    T9] usb 5-1: USB disconnect, device number 127
[ 1143.079892][T21604] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[ 1143.532308][T21608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4016'.
[ 1143.542173][T21608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4016'.
[ 1143.894712][T21614] kvm: pic: non byte write
[ 1144.988679][T21627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.038404][T21627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1145.051761][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4022'.
[ 1145.089632][T20727] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1145.259070][T20727] usb 5-1: Using ep0 maxpacket: 32
[ 1145.266143][T20727] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1145.289452][T20727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.310011][T20727] usb 5-1: config 0 descriptor??
[ 1145.367122][T20727] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1145.570077][T20727] gspca_vc032x: reg_r err -32
[ 1145.586101][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.595944][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.607470][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.619192][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.631760][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.642941][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.659082][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.674698][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.684836][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.702076][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.709094][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.714528][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.739739][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.745371][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.757524][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.769208][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.774607][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.794285][T20727] gspca_vc032x: I2c Bus Busy Wait 00
[ 1145.809124][T20727] gspca_vc032x: Unknown sensor...
[ 1145.819255][T20727] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[ 1145.920713][T21638] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4024'.
[ 1145.995575][T21635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4024'.
[ 1146.007363][T21635] vim2m vim2m.0: vidioc_s_fmt queue busy
[ 1146.166947][   T31] kauditd_printk_skb: 66 callbacks suppressed
[ 1146.166973][   T31] audit: type=1326 audit(1765643330.919:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.301311][   T31] audit: type=1326 audit(1765643330.919:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.324218][   T31] audit: type=1326 audit(1765643330.919:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.379372][   T31] audit: type=1326 audit(1765643330.929:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.501706][   T31] audit: type=1326 audit(1765643330.929:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.572390][   T31] audit: type=1326 audit(1765643330.929:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.644110][   T31] audit: type=1326 audit(1765643330.929:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.706456][   T31] audit: type=1326 audit(1765643330.929:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.754273][   T31] audit: type=1326 audit(1765643330.929:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1146.801829][   T31] audit: type=1326 audit(1765643330.929:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.5.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1147.459562][T21647] syzkaller0: entered promiscuous mode
[ 1147.475446][T21647] syzkaller0: entered allmulticast mode
[ 1147.492186][T21647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1147.514426][T21652] syzkaller0: entered promiscuous mode
[ 1147.525173][T21652] syzkaller0: entered allmulticast mode
[ 1147.761755][T18210] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1147.823351][T20727] usb 5-1: USB disconnect, device number 2
[ 1147.959377][T18210] usb 4-1: Using ep0 maxpacket: 16
[ 1147.975009][T18210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1147.996223][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4033'.
[ 1148.015852][T18210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1148.023538][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4033'.
[ 1148.027754][T18210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1148.093957][T18210] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1148.124846][T18210] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1148.160422][T21671] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4033'.
[ 1148.161400][T18210] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1148.192165][T18210] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1148.211562][T18210] usb 4-1: Manufacturer: syz
[ 1148.232672][T18210] usb 4-1: config 0 descriptor??
[ 1148.489143][    T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[ 1148.665135][    T9] usb 3-1: config 0 has an invalid interface number: 177 but max is 0
[ 1148.665169][    T9] usb 3-1: config 0 has no interface number 0
[ 1148.669637][    T9] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=39.5d
[ 1148.699233][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.699267][    T9] usb 3-1: Product: syz
[ 1148.699286][    T9] usb 3-1: Manufacturer: syz
[ 1148.699304][    T9] usb 3-1: SerialNumber: syz
[ 1148.702975][    T9] usb 3-1: config 0 descriptor??
[ 1148.864317][T21703] hub 1-0:1.0: USB hub found
[ 1148.865079][T21703] hub 1-0:1.0: 1 port detected
[ 1148.944606][T21681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1148.945480][T21681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1149.036227][    T9] usb 3-1: USB disconnect, device number 4
[ 1149.129306][T12463] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1149.179679][T21647] tipc: Resetting bearer <eth:syzkaller0>
[ 1149.221624][T21647] tipc: Disabling bearer <eth:syzkaller0>
[ 1149.259236][T12463] usb 1-1: device descriptor read/64, error -71
[ 1149.280044][T18210] rc_core: IR keymap rc-hauppauge not found
[ 1149.280061][T18210] Registered IR keymap rc-empty
[ 1149.280720][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.306088][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.361769][T18210] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1149.389360][T18210] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input123
[ 1149.620738][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.639356][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.678869][T12463] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1149.709233][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.732394][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.768380][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.809190][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.829854][T12463] usb 1-1: device descriptor read/64, error -71
[ 1149.849672][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.889959][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.919174][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1149.939534][T12463] usb usb1-port1: attempt power cycle
[ 1149.959124][T18210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1150.024983][T18210] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[ 1150.044100][T18210] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1150.085229][T21731] geneve1: entered promiscuous mode
[ 1150.102012][T18210] usb 4-1: USB disconnect, device number 123
[ 1150.111256][T21731] bridge0: port 3(macsec0) entered blocking state
[ 1150.118862][T21731] bridge0: port 3(macsec0) entered disabled state
[ 1150.151643][T21731] macsec0: entered allmulticast mode
[ 1150.178736][T21731] geneve1: entered allmulticast mode
[ 1150.219744][T21731] macsec0: entered promiscuous mode
[ 1150.299321][T12463] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1150.320467][T12463] usb 1-1: device descriptor read/8, error -71
[ 1150.327513][T21734] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1150.469025][T18210] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1150.569163][T12463] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1150.588728][T21739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1150.620102][T12463] usb 1-1: device descriptor read/8, error -71
[ 1150.649149][T18210] usb 4-1: Using ep0 maxpacket: 8
[ 1150.658281][T18210] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1150.676270][T18210] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1150.690482][T21739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1150.710189][T18210] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1150.720866][T18210] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1150.749868][T21739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1150.760251][T12463] usb usb1-port1: unable to enumerate USB device
[ 1150.769259][T21739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1150.786569][T18210] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1150.812904][T18210] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1150.822283][T18210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.839647][T20710] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1151.031682][T20710] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1151.040609][T18210] usb 4-1: GET_CAPABILITIES returned 0
[ 1151.054134][T21745] FAULT_INJECTION: forcing a failure.
[ 1151.054134][T21745] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1151.059364][T18210] usbtmc 4-1:16.0: can't read capabilities
[ 1151.076343][T21745] CPU: 1 UID: 0 PID: 21745 Comm: syz.5.4052 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1151.076377][T21745] Tainted: [L]=SOFTLOCKUP
[ 1151.076385][T21745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1151.076399][T21745] Call Trace:
[ 1151.076409][T21745]  <TASK>
[ 1151.076419][T21745]  dump_stack_lvl+0x189/0x250
[ 1151.076451][T21745]  ? __pfx____ratelimit+0x10/0x10
[ 1151.076484][T21745]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1151.076510][T21745]  ? __pfx__printk+0x10/0x10
[ 1151.076541][T21745]  ? __might_fault+0xb0/0x130
[ 1151.076584][T21745]  should_fail_ex+0x414/0x560
[ 1151.076619][T21745]  _copy_from_user+0x2d/0xb0
[ 1151.076644][T21745]  __sys_sendto+0x25c/0x520
[ 1151.076682][T21745]  ? __pfx___sys_sendto+0x10/0x10
[ 1151.076712][T21745]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1151.076747][T21745]  ? __fget_files+0x3a0/0x420
[ 1151.076788][T21745]  ? ksys_write+0x22a/0x250
[ 1151.076812][T21745]  ? __pfx_ksys_write+0x10/0x10
[ 1151.076838][T21745]  __x64_sys_sendto+0xde/0x100
[ 1151.076875][T21745]  do_syscall_64+0xfa/0xf80
[ 1151.076910][T21745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1151.076932][T21745]  ? clear_bhb_loop+0x60/0xb0
[ 1151.076958][T21745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1151.076979][T21745] RIP: 0033:0x7f4e4438f749
[ 1151.077000][T21745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1151.077020][T21745] RSP: 002b:00007f4e4526f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1151.077044][T21745] RAX: ffffffffffffffda RBX: 00007f4e445e5fa0 RCX: 00007f4e4438f749
[ 1151.077061][T21745] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1151.077075][T21745] RBP: 00007f4e4526f090 R08: 0000200000000140 R09: 0000000000000014
[ 1151.077089][T21745] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 1151.077102][T21745] R13: 00007f4e445e6038 R14: 00007f4e445e5fa0 R15: 00007f4e4470fa28
[ 1151.077136][T21745]  </TASK>
[ 1151.078795][T20710] usb 3-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b
[ 1151.303247][T18210] usb 4-1: USB disconnect, device number 124
[ 1151.422927][T20710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.434351][   T31] kauditd_printk_skb: 26 callbacks suppressed
[ 1151.434371][   T31] audit: type=1326 audit(1765643336.309:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.499077][T21752] [U] 
[ 1151.529298][T20710] usb 3-1: config 0 descriptor??
[ 1151.541109][   T31] audit: type=1326 audit(1765643336.309:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.576259][T20710] usb 3-1: selecting invalid altsetting 0
[ 1151.582350][T20710] usb 3-1: can't set first interface for hiFace device.
[ 1151.601939][T20710] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5
[ 1151.624101][   T31] audit: type=1326 audit(1765643336.309:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.669285][   T31] audit: type=1326 audit(1765643336.319:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.697465][   T31] audit: type=1326 audit(1765643336.319:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.749444][T20710] usb 3-1: USB disconnect, device number 5
[ 1151.789762][   T31] audit: type=1326 audit(1765643336.319:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.849024][   T31] audit: type=1326 audit(1765643336.319:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.879289][T20727] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1151.889038][   T31] audit: type=1326 audit(1765643336.319:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.926089][   T31] audit: type=1326 audit(1765643336.319:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.951930][   T31] audit: type=1326 audit(1765643336.319:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21754 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x7ffc0000
[ 1151.990045][T21753] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[ 1152.061442][T20727] usb 5-1: Using ep0 maxpacket: 32
[ 1152.080490][T20727] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[ 1152.093427][T20727] usb 5-1: config 0 has no interface number 0
[ 1152.119003][T20727] usb 5-1: config 0 interface 196 has no altsetting 0
[ 1152.133744][T20727] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1152.146843][T20727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.163252][T20727] usb 5-1: Product: syz
[ 1152.182605][T20727] usb 5-1: Manufacturer: syz
[ 1152.196911][T20727] usb 5-1: SerialNumber: syz
[ 1152.228445][T20727] usb 5-1: config 0 descriptor??
[ 1152.463260][T21758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.520301][T21758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.575214][T21758] vlan2: entered promiscuous mode
[ 1152.721957][T20727] ipheth 5-1:0.196: Unable to find endpoints
[ 1152.741074][T20727] usb 5-1: USB disconnect, device number 3
[ 1152.890589][T21781] FAULT_INJECTION: forcing a failure.
[ 1152.890589][T21781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1152.929438][T21781] CPU: 1 UID: 0 PID: 21781 Comm: syz.3.4064 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1152.929473][T21781] Tainted: [L]=SOFTLOCKUP
[ 1152.929482][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1152.929496][T21781] Call Trace:
[ 1152.929505][T21781]  <TASK>
[ 1152.929515][T21781]  dump_stack_lvl+0x189/0x250
[ 1152.929547][T21781]  ? __pfx____ratelimit+0x10/0x10
[ 1152.929578][T21781]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1152.929597][T21781]  ? __pfx__printk+0x10/0x10
[ 1152.929621][T21781]  ? __might_fault+0xb0/0x130
[ 1152.929654][T21781]  should_fail_ex+0x414/0x560
[ 1152.929680][T21781]  _copy_from_iter+0x1cd/0x1630
[ 1152.929704][T21781]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1152.929735][T21781]  ? __pfx__copy_from_iter+0x10/0x10
[ 1152.929762][T21781]  ? dev_get_by_index+0x22/0x2e0
[ 1152.929782][T21781]  ? dev_get_by_index+0x22/0x2e0
[ 1152.929806][T21781]  packet_sendmsg+0x3072/0x5080
[ 1152.929833][T21781]  ? aa_unix_bind_perm+0x8b6/0x8c0
[ 1152.929865][T21781]  ? __pfx___might_resched+0x10/0x10
[ 1152.929891][T21781]  ? aa_sk_perm+0x15f/0x920
[ 1152.929907][T21781]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1152.929925][T21781]  ? aa_sk_perm+0x7ee/0x920
[ 1152.929945][T21781]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[ 1152.929969][T21781]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1152.929988][T21781]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1152.930003][T21781]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1152.930023][T21781]  __sock_sendmsg+0x21c/0x270
[ 1152.930046][T21781]  __sys_sendto+0x3bd/0x520
[ 1152.930072][T21781]  ? __pfx___sys_sendto+0x10/0x10
[ 1152.930094][T21781]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1152.930118][T21781]  ? __fget_files+0x3a0/0x420
[ 1152.930146][T21781]  ? ksys_write+0x22a/0x250
[ 1152.930163][T21781]  ? __pfx_ksys_write+0x10/0x10
[ 1152.930181][T21781]  __x64_sys_sendto+0xde/0x100
[ 1152.930208][T21781]  do_syscall_64+0xfa/0xf80
[ 1152.930232][T21781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.930248][T21781]  ? clear_bhb_loop+0x60/0xb0
[ 1152.930267][T21781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.930282][T21781] RIP: 0033:0x7fbb8c38f749
[ 1152.930296][T21781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1152.930310][T21781] RSP: 002b:00007fbb8a5ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1152.930327][T21781] RAX: ffffffffffffffda RBX: 00007fbb8c5e5fa0 RCX: 00007fbb8c38f749
[ 1152.930345][T21781] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1152.930356][T21781] RBP: 00007fbb8a5ee090 R08: 0000200000000140 R09: 0000000000000014
[ 1152.930367][T21781] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 1152.930376][T21781] R13: 00007fbb8c5e6038 R14: 00007fbb8c5e5fa0 R15: 00007fbb8c70fa28
[ 1152.930401][T21781]  </TASK>
[ 1153.459315][T20727] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1153.549075][T20725] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[ 1153.599119][T20727] usb 1-1: device descriptor read/64, error -71
[ 1153.726674][T21797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1153.743332][T21797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1153.753902][T20725] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1153.764624][T20725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.773699][T20725] usb 4-1: Product: syz
[ 1153.791114][T20725] usb 4-1: Manufacturer: syz
[ 1153.802240][T20725] usb 4-1: SerialNumber: syz
[ 1153.821066][T20725] usb 4-1: config 0 descriptor??
[ 1153.863760][T20727] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1153.999094][T20727] usb 1-1: device descriptor read/64, error -71
[ 1154.040174][T20725] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1154.112892][T20727] usb usb1-port1: attempt power cycle
[ 1154.459198][T20727] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1154.490817][T20727] usb 1-1: device descriptor read/8, error -71
[ 1154.529377][T20710] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1154.679171][T20710] usb 5-1: Using ep0 maxpacket: 16
[ 1154.686615][T20710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1154.700603][T20710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1154.719127][T20710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1154.739914][T20727] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1154.744209][T20710] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1154.780988][T20727] usb 1-1: device descriptor read/8, error -71
[ 1154.783160][T20710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.832588][T20710] usb 5-1: config 0 descriptor??
[ 1154.919730][T20727] usb usb1-port1: unable to enumerate USB device
[ 1155.060498][T20725] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1155.251157][T21814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1155.262947][T20710] usbhid 5-1:0.0: can't add hid device: -71
[ 1155.269107][T20710] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1155.283869][T20710] usb 5-1: USB disconnect, device number 4
[ 1155.329243][T21814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.007808][T20723] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1156.149257][T20723] usb 3-1: device descriptor read/64, error -71
[ 1156.319177][T20725] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1156.389055][T20723] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1156.692993][T20725] usb 1-1: Using ep0 maxpacket: 32
[ 1156.710913][T20725] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 1156.719573][T20725] usb 1-1: config 0 has no interface number 0
[ 1156.726045][T20725] usb 1-1: config 0 interface 196 has no altsetting 0
[ 1156.726585][T18210] usb 4-1: USB disconnect, device number 125
[ 1156.774417][T20725] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1156.798053][T20725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.830175][T20725] usb 1-1: Product: syz
[ 1156.836150][T20725] usb 1-1: Manufacturer: syz
[ 1156.844329][T20725] usb 1-1: SerialNumber: syz
[ 1156.872249][T20725] usb 1-1: config 0 descriptor??
[ 1156.879250][T20723] usb 3-1: device descriptor read/64, error -71
[ 1156.989619][T20723] usb usb3-port1: attempt power cycle
[ 1157.123500][T21826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.132639][T21826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.142324][T18210] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1157.166638][T21826] dummy0: entered promiscuous mode
[ 1157.174717][T21826] vlan2: entered promiscuous mode
[ 1157.300284][T20725] ipheth 1-1:0.196: Unable to find endpoints
[ 1157.319223][T18210] usb 4-1: device descriptor read/64, error -71
[ 1157.337976][T20725] usb 1-1: USB disconnect, device number 72
[ 1157.344063][T20723] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1157.391173][T20723] usb 3-1: device descriptor read/8, error -71
[ 1157.559115][T18210] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1157.639511][T20723] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1157.680016][T20723] usb 3-1: device descriptor read/8, error -71
[ 1157.719129][T18210] usb 4-1: device descriptor read/64, error -71
[ 1157.796535][T20723] usb usb3-port1: unable to enumerate USB device
[ 1157.848826][T18210] usb usb4-port1: attempt power cycle
[ 1158.219099][T20710] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1158.226912][T18210] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1158.274464][T18210] usb 4-1: device descriptor read/8, error -71
[ 1158.430078][T20710] usb 1-1: Using ep0 maxpacket: 16
[ 1158.453649][T20710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1158.465689][T20710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1158.471254][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'.
[ 1158.487573][T20710] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1158.487596][T21869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4087'.
[ 1158.487829][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'.
[ 1158.519448][T18210] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1158.527455][T21869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4087'.
[ 1158.537056][T20710] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1158.547357][T18210] usb 4-1: device descriptor read/8, error -71
[ 1158.567974][T20710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.592514][T20710] usb 1-1: config 0 descriptor??
[ 1158.661672][T18210] usb usb4-port1: unable to enumerate USB device
[ 1159.049800][T20710] usbhid 1-1:0.0: can't add hid device: -71
[ 1159.063055][T20710] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1159.082037][T20710] usb 1-1: USB disconnect, device number 73
[ 1159.259451][T18210] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1159.427914][T18210] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1159.439913][T18210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1159.451769][T18210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1159.463369][T18210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1159.476904][T18210] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1159.487602][T18210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.503764][T18210] usb 3-1: config 0 descriptor??
[ 1159.609137][T20710] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1159.779217][T20710] usb 5-1: Using ep0 maxpacket: 16
[ 1159.791257][T20710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1159.827855][T20710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1159.842370][T20710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1159.875073][T20710] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[ 1159.884912][T20710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=253
[ 1159.893314][T20710] usb 5-1: SerialNumber: syz
[ 1159.899850][T20725] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1159.917932][T20710] usb 5-1: config 0 descriptor??
[ 1159.954984][T18210] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1160.069092][T20725] usb 1-1: Using ep0 maxpacket: 8
[ 1160.076789][T20725] usb 1-1: config 1 has an invalid interface number: 6 but max is 0
[ 1160.099084][T20725] usb 1-1: config 1 has no interface number 0
[ 1160.123245][T20725] usb 1-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b
[ 1160.154974][T20725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.160067][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1160.173634][T20725] usb 1-1: Product: syz
[ 1160.177876][T20725] usb 1-1: Manufacturer: syz
[ 1160.206551][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1160.221387][T20710] usbhid 5-1:0.0: can't add hid device: -71
[ 1160.234011][T20710] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1160.234447][T20725] usb 1-1: SerialNumber: syz
[ 1160.285929][T20710] usb 5-1: USB disconnect, device number 5
[ 1160.658514][T21895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4092'.
[ 1161.179156][T20710] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1161.349319][T20710] usb 5-1: Using ep0 maxpacket: 32
[ 1161.361202][T20710] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[ 1161.384641][T20710] usb 5-1: config 0 has no interface number 0
[ 1161.409029][T20710] usb 5-1: config 0 interface 196 has no altsetting 0
[ 1161.428239][T20710] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1161.452660][T20710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1161.508367][T20710] usb 5-1: Product: syz
[ 1161.519003][T20710] usb 5-1: Manufacturer: syz
[ 1161.528643][T20710] usb 5-1: SerialNumber: syz
[ 1161.550269][T20710] usb 5-1: config 0 descriptor??
[ 1161.773993][T21897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1161.809306][T21897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1161.904173][T21897] vlan2: entered promiscuous mode
[ 1162.003922][T20722] usb 3-1: USB disconnect, device number 10
[ 1162.100594][T20710] ipheth 5-1:0.196: Unable to find endpoints
[ 1162.128636][T20710] usb 5-1: USB disconnect, device number 6
[ 1162.672231][T20725] usb 1-1: palm_os_4_probe - error -71 getting connection info
[ 1162.694216][T20725] visor 1-1:1.6: Handspring Visor / Palm OS converter detected
[ 1162.740314][T20725] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1162.793128][T20725] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1162.831998][T20725] usb 1-1: USB disconnect, device number 74
[ 1162.874920][T20725] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1162.934844][T20725] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1162.957617][T20725] visor 1-1:1.6: device disconnected
[ 1163.110762][T21907] Cannot find set identified by id 0 to match
[ 1163.213847][T18210] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1163.289133][T20725] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1163.399064][T18210] usb 5-1: Using ep0 maxpacket: 16
[ 1163.416053][T18210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1163.427570][T20710] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1163.455624][T18210] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[ 1163.470110][T20725] usb 1-1: Using ep0 maxpacket: 16
[ 1163.485672][T18210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.510740][T20725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1163.541032][T20725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1163.556991][T18210] usb 5-1: config 0 descriptor??
[ 1163.586067][T20725] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1163.649238][T20710] usb 3-1: Using ep0 maxpacket: 8
[ 1163.649815][T20725] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1163.682028][T20725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.697639][T20710] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1163.751813][T20725] usb 1-1: config 0 descriptor??
[ 1163.788980][T20710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1163.849012][T20710] usb 3-1: config 0 has no interfaces?
[ 1163.863145][T20710] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[ 1163.899722][T20710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.978019][T20710] usb 3-1: config 0 descriptor??
[ 1164.018172][T18210] kye 0003:0458:0087.004D: reserved main item tag 0xd
[ 1164.028416][T18210] kye 0003:0458:0087.004D: unexpected long global item
[ 1164.038200][T18210] kye 0003:0458:0087.004D: parse failed
[ 1164.054496][T18210] kye 0003:0458:0087.004D: probe with driver kye failed with error -22
[ 1164.253282][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.289321][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.449205][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.457245][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.458225][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1164.495023][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1164.525965][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.526601][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1164.553006][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1164.559179][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.565597][T18210] usb 5-1: USB disconnect, device number 7
[ 1164.589370][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.648533][T20710] usb 3-1: USB disconnect, device number 11
[ 1164.665045][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.675181][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.689153][T20725] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0
[ 1164.719640][T20725] microsoft 0003:045E:07DA.004E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[ 1164.749730][T20725] microsoft 0003:045E:07DA.004E: no inputs found
[ 1164.766635][T20725] microsoft 0003:045E:07DA.004E: could not initialize ff, continuing anyway
[ 1164.800442][T20725] usb 1-1: USB disconnect, device number 75
[ 1165.563452][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4107'.
[ 1165.605304][T21954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1166.439121][T18210] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[ 1166.634408][T18210] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1166.642770][T20723] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1166.650039][T18210] usb 4-1: not running at top speed; connect to a high speed hub
[ 1166.673352][T18210] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1166.689171][T18210] usb 4-1: can't read configurations, error -61
[ 1166.799663][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4115'.
[ 1166.800828][T20723] usb 3-1: device descriptor read/64, error -71
[ 1166.839678][T18210] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[ 1167.049695][T20711] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1167.057602][T20710] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[ 1167.069120][T20723] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1167.079849][T18210] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1167.092564][T18210] usb 4-1: not running at top speed; connect to a high speed hub
[ 1167.190668][T18210] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1167.198744][T18210] usb 4-1: can't read configurations, error -61
[ 1167.207082][T18210] usb usb4-port1: attempt power cycle
[ 1167.239111][T20723] usb 3-1: device descriptor read/64, error -71
[ 1167.252031][T20710] usb 1-1: config 0 has an invalid interface number: 143 but max is 0
[ 1167.261120][T20711] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[ 1167.285330][T20710] usb 1-1: config 0 has no interface number 0
[ 1167.293193][T20711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1167.306366][T20710] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=fe.ea
[ 1167.320958][T20711] usb 5-1: config 0 descriptor??
[ 1167.328080][T20710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.350394][T20710] usb 1-1: Product: syz
[ 1167.356400][T20710] usb 1-1: Manufacturer: syz
[ 1167.359420][T20723] usb usb3-port1: attempt power cycle
[ 1167.366962][T20710] usb 1-1: SerialNumber: syz
[ 1167.383508][T20710] usb 1-1: config 0 descriptor??
[ 1167.405036][T20710] usb 1-1: unknown interface protocol 0xf6, assuming v1
[ 1167.414352][T20710] usb 1-1: cannot find UAC_HEADER
[ 1167.467501][T20710] snd-usb-audio 1-1:0.143: probe with driver snd-usb-audio failed with error -22
[ 1167.528338][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.143/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1167.569677][T18210] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[ 1167.626144][T18210] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1167.644621][T18210] usb 4-1: not running at top speed; connect to a high speed hub
[ 1167.659017][T21968] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1167.695558][T18210] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1167.699633][T20723] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1167.704392][T18210] usb 4-1: can't read configurations, error -61
[ 1167.749346][T21970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4115'.
[ 1167.869879][T20723] usb 3-1: device descriptor read/8, error -71
[ 1167.950530][T20711] kye 0003:0458:0153.004F: collection stack underflow
[ 1167.957400][T20711] kye 0003:0458:0153.004F: item 0 4 0 12 parsing failed
[ 1167.994152][T18210] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[ 1168.020548][T20711] kye 0003:0458:0153.004F: parse failed
[ 1168.026297][T20711] kye 0003:0458:0153.004F: probe with driver kye failed with error -22
[ 1168.145318][T20725] usb 5-1: USB disconnect, device number 8
[ 1168.199222][T20723] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1168.346937][T20723] usb 3-1: device descriptor read/8, error -71
[ 1168.467789][T18210] usb 4-1: device descriptor read/8, error -71
[ 1168.559342][T20723] usb usb3-port1: unable to enumerate USB device
[ 1168.590056][T18210] usb usb4-port1: unable to enumerate USB device
[ 1168.601098][T21979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1168.630138][T21979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1168.664224][T21983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1168.680079][T21983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1168.825821][T21988] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1168.980546][T18210] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1169.149181][T18210] usb 4-1: Using ep0 maxpacket: 16
[ 1169.157226][T18210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1169.198353][T18210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1169.223936][T18210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1169.254852][T18210] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1169.274644][T18210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.310914][T18210] usb 4-1: config 0 descriptor??
[ 1169.365114][T21998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.486191][T21998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.756526][T20725] usb 1-1: USB disconnect, device number 76
[ 1169.791258][T18210] hid_parser_main: 13 callbacks suppressed
[ 1169.791287][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1169.838159][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1169.886944][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1169.904854][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1169.922963][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1169.948380][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1169.977113][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1169.997705][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1170.019667][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1170.037297][T18210] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0
[ 1170.076126][T18210] microsoft 0003:045E:07DA.0050: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 1170.123247][T18210] microsoft 0003:045E:07DA.0050: no inputs found
[ 1170.158374][T18210] microsoft 0003:045E:07DA.0050: could not initialize ff, continuing anyway
[ 1170.210595][T18210] usb 4-1: USB disconnect, device number 8
[ 1170.297023][T22011] fido_id[22011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1171.009060][T18210] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1171.242585][T18210] usb 3-1: Using ep0 maxpacket: 8
[ 1171.260296][T18210] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1171.267965][T18210] usb 3-1: can't read configurations, error -61
[ 1171.379763][T20711] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[ 1171.462025][T22052] sctp: [Deprecated]: syz.3.4136 (pid 22052) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1171.462025][T22052] Use struct sctp_sack_info instead
[ 1171.526096][T18210] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1171.617516][T20711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1171.635125][T20711] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1171.657520][T20711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1171.681945][T20711] usb 1-1: config 0 descriptor??
[ 1171.697138][T22047] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1171.719560][T18210] usb 3-1: Using ep0 maxpacket: 8
[ 1171.746970][T18210] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1171.755070][T18210] usb 3-1: can't read configurations, error -61
[ 1171.762177][T18210] usb usb3-port1: attempt power cycle
[ 1171.839082][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1172.019142][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1172.029136][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1172.050107][    T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1172.090299][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1172.102782][    T9] usb 4-1: Product: syz
[ 1172.107667][    T9] usb 4-1: Manufacturer: syz
[ 1172.123696][    T9] usb 4-1: SerialNumber: syz
[ 1172.129138][T18210] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1172.240894][    T9] usb 4-1: config 0 descriptor??
[ 1172.247456][T20711] elan 0003:04F3:0755.0051: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[ 1172.279966][T18210] usb 3-1: Using ep0 maxpacket: 8
[ 1172.287825][T18210] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1172.295938][T18210] usb 3-1: can't read configurations, error -61
[ 1172.395694][    T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1172.479364][T18210] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1172.520972][T18210] usb 3-1: Using ep0 maxpacket: 8
[ 1172.560052][T18210] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1172.575986][T18210] usb 3-1: can't read configurations, error -61
[ 1172.595738][T18210] usb usb3-port1: unable to enumerate USB device
[ 1172.619062][T20723] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1172.684911][ T7035] usb 4-1: Failed to submit usb control message: -71
[ 1172.693427][T18210] usb 4-1: USB disconnect, device number 9
[ 1172.701575][ T7035] usb 4-1: unable to send the bmi data to the device: -71
[ 1172.744598][ T7035] usb 4-1: unable to get target info from device
[ 1172.769329][ T7035] usb 4-1: could not get target info (-71)
[ 1172.786803][ T7035] usb 4-1: could not probe fw (-71)
[ 1172.820999][T20723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1172.838266][T20723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1172.850910][T20723] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1172.873395][T20723] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1172.882345][T20723] usb 5-1: Manufacturer: syz
[ 1172.925580][T20723] usb 5-1: config 0 descriptor??
[ 1173.141421][T22064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1173.168375][T22064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1173.389043][T18210] usb 1-1: reset full-speed USB device number 77 using dummy_hcd
[ 1173.497056][T22058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1173.541477][T22058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1173.665503][T20723] usbhid 5-1:0.0: can't add hid device: -71
[ 1173.675239][T20723] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1173.720450][T20723] usb 5-1: USB disconnect, device number 9
[ 1173.759148][T20711] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1173.931421][T20711] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1173.949185][T20711] usb 4-1: config 0 has no interface number 0
[ 1173.955666][T20711] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1173.970529][T20711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.982678][T20711] usb 4-1: config 0 descriptor??
[ 1174.031330][T20711] usb 4-1: selecting invalid altsetting 1
[ 1174.053665][T20711] dvb_ttusb_budget: ttusb_init_controller: error
[ 1174.067659][T20711] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1174.219192][T20710] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1174.240315][T22066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1174.274219][T20711] DVB: Unable to find symbol cx22700_attach()
[ 1174.283993][T22066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1174.410864][T20710] usb 3-1: Using ep0 maxpacket: 16
[ 1174.423556][T20710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1174.436569][T20710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1174.448987][T20710] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[ 1174.463216][T20710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1174.474393][T20711] DVB: Unable to find symbol tda10046_attach()
[ 1174.495014][T20710] usb 3-1: config 0 descriptor??
[ 1174.500295][T20711] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1174.564823][T20711] usb 4-1: USB disconnect, device number 10
[ 1174.619019][T20723] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1174.824808][T20723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1174.847671][T20723] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 1174.868023][T20723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.885345][T20723] usb 5-1: Product: syz
[ 1174.893380][T20723] usb 5-1: Manufacturer: syz
[ 1174.898083][T20723] usb 5-1: SerialNumber: syz
[ 1174.931576][T20723] usb 5-1: config 0 descriptor??
[ 1174.967652][T20723] powermate 5-1:0.0: probe with driver powermate failed with error -22
[ 1175.100000][T22084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1175.114565][T22084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1175.177482][T22094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4145'.
[ 1175.206096][T22095] sctp: [Deprecated]: syz.4.4143 (pid 22095) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1175.206096][T22095] Use struct sctp_sack_info instead
[ 1175.249974][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4143'.
[ 1175.360922][    T9] usb 1-1: USB disconnect, device number 77
[ 1175.554882][T20710] usbhid 3-1:0.0: can't add hid device: -71
[ 1175.603922][T20710] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1175.649679][T20710] usb 3-1: USB disconnect, device number 20
[ 1176.337196][T22109] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4150'.
[ 1176.376122][T22109] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[ 1176.439056][T20710] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1176.623871][T20710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1176.645425][T20710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1176.665929][T20710] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1176.692282][T22112] usb usb8: usbfs: process 22112 (syz.3.4151) did not claim interface 0 before use
[ 1176.702168][T20710] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1176.745029][T20710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.772860][T20710] usb 3-1: config 0 descriptor??
[ 1176.853362][T22116] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4152'.
[ 1176.866681][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4152'.
[ 1177.137423][T22124] hsr0: entered allmulticast mode
[ 1177.142678][T22124] hsr_slave_0: entered allmulticast mode
[ 1177.148481][T22124] hsr_slave_1: entered allmulticast mode
[ 1177.223906][T20710] usbhid 3-1:0.0: can't add hid device: -71
[ 1177.230505][T20710] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1177.275170][T20710] usb 3-1: USB disconnect, device number 21
[ 1177.452977][T20726] usb 5-1: USB disconnect, device number 10
[ 1177.969946][T20726] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1178.170995][T20726] usb 5-1: Using ep0 maxpacket: 16
[ 1178.185093][T20726] usb 5-1: config index 0 descriptor too short (expected 4495, got 71)
[ 1178.203796][T20726] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[ 1178.217373][T20726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1178.298488][T20726] usb 5-1: config 0 has no interface number 0
[ 1178.363473][T22143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1178.383960][T20726] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[ 1178.394325][T22143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1178.424527][T20726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.457346][T20726] usb 5-1: Product: syz
[ 1178.464010][T20726] usb 5-1: Manufacturer: syz
[ 1178.476643][T20726] usb 5-1: SerialNumber: syz
[ 1178.519379][T20726] usb 5-1: config 0 descriptor??
[ 1178.520546][T22145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1178.618723][T22145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1178.829135][T20726] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0)
[ 1178.836736][T20726] uvcvideo 5-1:0.105: No valid video chain found.
[ 1178.995619][T22133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1179.049668][T22133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1179.332725][T18210] usb 5-1: USB disconnect, device number 11
[ 1181.423989][T22182] loop9: detected capacity change from 0 to 7
[ 1181.448435][T22182] Dev loop9: unable to read RDB block 7
[ 1181.454339][T22182]  loop9: unable to read partition table
[ 1181.464503][T22182] loop9: partition table beyond EOD, truncated
[ 1181.560572][T22182] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1181.848411][T22199] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.4170'.
[ 1181.858782][T22199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4170'.
[ 1181.884133][T22196] bond3: option packets_per_slave: invalid value (18446744073709551615)
[ 1181.916925][T22176] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1181.923793][T22176] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1181.970118][T22176] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1181.979922][T22196] bond3: option packets_per_slave: allowed values 0 - 65535
[ 1181.980157][T22176] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1182.005615][T22176] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1182.047775][T22196] bond3 (unregistering): Released all slaves
[ 1182.116858][T22176] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1182.163185][T22176] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1182.203494][T22176] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1182.227656][T22176] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1182.244208][T22176] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1182.287694][T22176] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1182.557620][T22210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1182.565608][T22210] syzkaller0: entered promiscuous mode
[ 1182.585002][T22210] syzkaller0: entered allmulticast mode
[ 1182.629795][T22210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4173'.
[ 1182.666457][T22210] tipc: Resetting bearer <eth:syzkaller0>
[ 1182.680199][T22210] fuse: Unknown parameter 'fl'
[ 1182.690712][T22210] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1182.711584][T22209] tipc: Resetting bearer <eth:syzkaller0>
[ 1182.747685][   T31] kauditd_printk_skb: 145 callbacks suppressed
[ 1182.747720][   T31] audit: type=1800 audit(1765643367.619:2196): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4176" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1257 res=0 errno=0
[ 1182.851399][T22209] tipc: Disabling bearer <eth:syzkaller0>
[ 1182.954965][T22217] syzkaller0: entered promiscuous mode
[ 1182.992526][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.998876][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.075485][T22220] fuse: Unknown parameter '���	�ߋG#LB��R����͞w��tF)���rFX�	�CiU�R_t/�f�ϐ�LF�!�q��'
[ 1183.092084][T22220] binder: 22213:22220 unknown command 527554
[ 1183.098261][T22220] binder: 22213:22220 ioctl c0306201 200000000080 returned -22
[ 1183.139408][ T5148] Bluetooth: hci5: command 0x0406 tx timeout
[ 1183.341051][T22227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4179'.
[ 1183.549086][T20710] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1183.729062][T20710] usb 1-1: Using ep0 maxpacket: 32
[ 1183.749860][T20710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1183.780656][T20710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1183.813601][T20710] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1183.989544][T22240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1183.998822][T22240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1184.068235][T20710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.068434][ T5148] Bluetooth: hci0: command 0x0406 tx timeout
[ 1184.080589][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[ 1184.115272][T20710] usb 1-1: config 0 descriptor??
[ 1184.150308][T22243] fuse: Unknown parameter '����j��+nK��2c�T�@84�Pk��R�(���:�
[ 1184.150308][T22243] ����+'
[ 1184.188287][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[ 1184.260889][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1184.459338][T22240] syzkaller0: entered promiscuous mode
[ 1184.485457][T22240] syzkaller0: entered allmulticast mode
[ 1184.583608][T20710] hid_parser_main: 13 callbacks suppressed
[ 1184.583636][T20710] ft260 0003:0403:6030.0052: unknown main item tag 0x7
[ 1184.767983][T20710] ft260 0003:0403:6030.0052: chip code: 6424 8183
[ 1184.795553][T22251] bond4: option lacp_rate: invalid value (16)
[ 1184.827143][T22251] bond4 (unregistering): Released all slaves
[ 1184.969667][T22229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1185.031336][T22229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1185.061306][T20710] ft260 0003:0403:6030.0052: failed to retrieve system status
[ 1185.076001][T20710] ft260 0003:0403:6030.0052: probe with driver ft260 failed with error -32
[ 1185.224939][ T5829] Bluetooth: hci5: command 0x0406 tx timeout
[ 1185.379169][T20710] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1185.776356][T22267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1185.805692][T22267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.099208][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[ 1186.100602][ T5148] Bluetooth: hci0: command 0x0406 tx timeout
[ 1186.269231][ T5148] Bluetooth: hci3: command 0x0406 tx timeout
[ 1186.339042][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1186.472333][   T31] audit: type=1326 audit(1765643371.339:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1186.531842][   T31] audit: type=1326 audit(1765643371.339:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe71018de97 code=0x7ffc0000
[ 1186.573949][   T31] audit: type=1326 audit(1765643371.339:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1186.643291][   T31] audit: type=1326 audit(1765643371.339:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1186.847633][   T31] audit: type=1326 audit(1765643371.339:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1186.974158][T20711] usb 1-1: USB disconnect, device number 78
[ 1187.029437][   T31] audit: type=1326 audit(1765643371.339:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1187.125149][   T31] audit: type=1326 audit(1765643371.339:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1187.191677][   T31] audit: type=1326 audit(1765643371.339:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1187.329243][   T31] audit: type=1326 audit(1765643371.339:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22270 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x7ffc0000
[ 1188.429016][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1189.077683][   T31] kauditd_printk_skb: 7 callbacks suppressed
[ 1189.077702][   T31] audit: type=1326 audit(1765643373.949:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x0
[ 1189.482415][T22305] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1189.514150][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'.
[ 1189.525423][T20711] IPVS: starting estimator thread 0...
[ 1189.537165][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1189.772839][T22308] IPVS: using max 36 ests per chain, 86400 per kthread
[ 1190.296165][   T31] audit: type=1326 audit(1765643375.169:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.4.4191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78a618f749 code=0x0
[ 1191.610031][T20726] IPVS: starting estimator thread 0...
[ 1191.711870][T22330] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1191.877130][T22332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1192.490385][T22346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1192.531350][T22346] syzkaller0: entered promiscuous mode
[ 1192.536996][T22346] syzkaller0: entered allmulticast mode
[ 1192.731754][T22352] tipc: Resetting bearer <eth:syzkaller0>
[ 1192.819161][T20726] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[ 1192.838504][T22345] tipc: Resetting bearer <eth:syzkaller0>
[ 1192.976831][T22345] tipc: Disabling bearer <eth:syzkaller0>
[ 1192.984871][T20726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1192.998149][T20726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1193.029459][T20726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1193.059466][T20726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1193.179126][T20723] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1193.299645][T20726] usb 3-1: usb_control_msg returned -32
[ 1193.305468][T20726] usbtmc 3-1:16.0: can't read capabilities
[ 1193.349291][T20723] usb 4-1: Using ep0 maxpacket: 16
[ 1193.361782][T20723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1193.394169][T20723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1193.406751][T22371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.420962][T20723] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[ 1193.431583][T22371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.443437][T20726] usb 3-1: USB disconnect, device number 22
[ 1193.460741][T20723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1193.510938][T20723] usb 4-1: config 0 descriptor??
[ 1193.609189][T20711] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1194.258173][   T31] audit: type=1326 audit(1765643379.129:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.2.4212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x0
[ 1194.292808][T20711] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1194.306577][T20711] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1194.309714][T20723] playstation 0003:054C:05C4.0053: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0
[ 1194.320540][T20711] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.40
[ 1194.409082][T20711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.421498][T20711] usb 1-1: Product: 邒䔗䖔蔲ꮃꌨ䵧䢴ኍ半Ꚁꨏ斪哔汦﫨ӌẖ軪ꬤ槖砶鴕鬙沇姏賆꾴吓磨⺳㎇꼈橘ꚺ硿䄯쩠똕껴嬨ᅚᏐヴ偞羸⥞遟ャᲄ撔캿䂟⭁ⲡﭩ켊笻単黎쪟῞㖥ᕦ㗼⛟ꧬ㼮즊똂ሂ팳ﯾ娨ឺ噕怯ꯚ胓ꏜ屄箈떅堿줶틱ꗎ猔ꑸ견㧱쎲⯟陔縼辕
[ 1194.460366][T20711] usb 1-1: Manufacturer: у
[ 1194.461497][T20723] playstation 0003:054C:05C4.0053: Invalid byte count transferred, expected 16 got 0
[ 1194.475624][T20711] usb 1-1: SerialNumber:  
[ 1194.493206][T20723] playstation 0003:054C:05C4.0053: Failed to retrieve DualShock4 pairing info: -22
[ 1194.559959][T20723] playstation 0003:054C:05C4.0053: Failed to get MAC address from DualShock4
[ 1194.569969][T20723] playstation 0003:054C:05C4.0053: Failed to create dualshock4.
[ 1194.590474][T20723] playstation 0003:054C:05C4.0053: probe with driver playstation failed with error -22
[ 1194.698389][T20723] usb 4-1: USB disconnect, device number 11
[ 1194.778102][T22380] fido_id[22380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1194.858282][T22365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1194.871572][T22365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1194.924046][T22365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1194.933696][ T5922] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1194.959582][T22365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1195.003074][T20711] usbhid 1-1:1.0: can't add hid device: -71
[ 1195.020777][T20711] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[ 1195.046361][T20711] usb 1-1: USB disconnect, device number 79
[ 1195.101258][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1195.119604][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.146689][ T5922] usb 5-1: config 0 descriptor??
[ 1195.170746][ T5922] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1195.879129][T20723] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1195.993047][ T5922] gspca_stv06xx: I2C: Read error writing address: -71
[ 1196.018785][ T5922] usb 5-1: USB disconnect, device number 14
[ 1196.052759][T20723] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1196.063368][T20723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1196.076962][T20723] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1196.093792][T20723] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1196.112371][T20723] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1196.123133][T20723] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1196.140807][T20723] usb 1-1: Product: syz
[ 1196.149223][T20727] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1196.158661][T20723] usb 1-1: Manufacturer: syz
[ 1196.193541][T20723] cdc_wdm 1-1:1.0: skipping garbage
[ 1196.204158][T20723] cdc_wdm 1-1:1.0: skipping garbage
[ 1196.222466][T20723] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1196.310164][T20727] usb 4-1: Using ep0 maxpacket: 32
[ 1196.321904][T20727] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1196.331665][T20727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1196.350332][T20727] usb 4-1: config 0 descriptor??
[ 1196.415518][T22397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1196.439525][T22397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1196.451642][T20726] usb 1-1: USB disconnect, device number 80
[ 1196.604140][T20727] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[ 1196.625414][T20727] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1196.648536][T20727] dib0700: firmware download failed at 7 with -22
[ 1197.028136][T22414] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4221'.
[ 1197.042495][T22414] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[ 1197.089152][ T5922] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1197.279016][ T5922] usb 3-1: Using ep0 maxpacket: 16
[ 1197.289550][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.300144][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1197.322883][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1197.334124][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.342983][ T5922] usb 3-1: Product: syz
[ 1197.347314][ T5922] usb 3-1: Manufacturer: syz
[ 1197.353183][ T5922] usb 3-1: SerialNumber: syz
[ 1197.571471][ T5922] usb 3-1: 0:2 : does not exist
[ 1197.675768][ T5922] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 1197.791756][ T5922] usb 3-1: USB disconnect, device number 23
[ 1197.810433][T20711] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[ 1197.858623][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1197.971159][T20711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.983794][T20711] usb 1-1: config 0 has no interfaces?
[ 1198.004308][T20711] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1198.022131][T20711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.057477][T20711] usb 1-1: config 0 descriptor??
[ 1198.420490][   T31] audit: type=1326 audit(1765643383.299:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22419 comm="syz.4.4225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78a618f749 code=0x0
[ 1198.848521][T22426] sock: sock_set_timeout: `syz.2.4226' (pid 22426) tries to set negative timeout
[ 1199.238371][T20726] usb 4-1: USB disconnect, device number 12
[ 1199.572260][T22433] fuse: Unknown parameter 'group_id�00000000000000000000'
[ 1199.919524][T20726] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1200.099108][T20726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1200.109680][T20726] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1200.228223][T20726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.265338][T20726] usb 3-1: config 0 descriptor??
[ 1200.287017][T20726] pwc: Askey VC010 type 2 USB webcam detected.
[ 1200.760539][T20726] pwc: recv_control_msg error -71 req 02 val 2b00
[ 1200.814333][T20726] pwc: recv_control_msg error -71 req 02 val 2700
[ 1200.824466][T20726] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1200.834595][T20726] pwc: recv_control_msg error -71 req 04 val 1000
[ 1200.851603][T20726] pwc: recv_control_msg error -71 req 04 val 1300
[ 1200.864189][T20726] pwc: recv_control_msg error -71 req 04 val 1400
[ 1200.874248][T18210] usb 1-1: USB disconnect, device number 81
[ 1200.899186][T20726] pwc: recv_control_msg error -71 req 02 val 2000
[ 1200.967526][T20726] pwc: recv_control_msg error -71 req 02 val 2100
[ 1201.036882][T20726] pwc: recv_control_msg error -71 req 04 val 1500
[ 1201.074679][T20726] pwc: recv_control_msg error -71 req 02 val 2500
[ 1201.109776][T20726] pwc: recv_control_msg error -71 req 02 val 2400
[ 1201.130678][T22455] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4234'.
[ 1201.149619][T20726] pwc: recv_control_msg error -71 req 02 val 2600
[ 1201.168594][T20726] pwc: recv_control_msg error -71 req 02 val 2900
[ 1201.189097][T20726] pwc: recv_control_msg error -71 req 02 val 2800
[ 1201.199793][T22455] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4234'.
[ 1201.219169][T22455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4234'.
[ 1201.261961][T20726] pwc: recv_control_msg error -71 req 04 val 1100
[ 1201.269056][T20726] pwc: recv_control_msg error -71 req 04 val 1200
[ 1201.311527][T20726] pwc: Registered as video103.
[ 1201.339359][T20726] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input125
[ 1201.449547][T20726] usb 3-1: USB disconnect, device number 24
[ 1202.206026][T20726] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1202.362115][T22486] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4240'.
[ 1202.416986][T20726] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1202.439580][T20726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.503474][T20726] usb 3-1: Product: syz
[ 1202.507726][T20726] usb 3-1: Manufacturer: syz
[ 1202.518364][T20726] usb 3-1: SerialNumber: syz
[ 1202.557170][T20726] usb 3-1: config 0 descriptor??
[ 1202.582627][T20726] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1202.739356][T20711] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1202.823383][T20726] gspca_sunplus: reg_r err -71
[ 1202.841089][T20726] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 1202.882079][T20726] usb 3-1: USB disconnect, device number 25
[ 1202.892677][T20723] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[ 1202.909490][T20711] usb 4-1: Using ep0 maxpacket: 16
[ 1202.930451][T20711] usb 4-1: config index 0 descriptor too short (expected 60196, got 36)
[ 1202.941321][T20711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10
[ 1202.963934][T20711] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[ 1202.988264][T20711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1203.013157][T20711] usb 4-1: config 0 descriptor??
[ 1203.151179][T20723] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1203.190421][T20723] usb 5-1: string descriptor 0 read error: -22
[ 1203.196903][T20723] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=45.5d
[ 1203.234133][T20723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.284748][T20723] usb 5-1: config 0 descriptor??
[ 1203.581561][T20723] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[ 1203.646566][   T31] audit: type=1326 audit(1765643388.519:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.2.4242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x0
[ 1203.656288][T20723] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1203.706284][T20723] dib0700: firmware download failed at 7 with -22
[ 1203.780101][T20723] usb 5-1: USB disconnect, device number 15
[ 1204.659477][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'.
[ 1204.695209][T22514] chnl_net:caif_netlink_parms(): no params data found
[ 1205.266056][T22518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1205.301986][T22518] syzkaller0: entered promiscuous mode
[ 1205.369429][T22518] syzkaller0: entered allmulticast mode
[ 1205.801826][T22519] tipc: Resetting bearer <eth:syzkaller0>
[ 1205.940651][T22519] tipc: Disabling bearer <eth:syzkaller0>
[ 1206.210180][T22530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1206.234898][T22530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1206.449289][T20711] usb 4-1: string descriptor 0 read error: -71
[ 1206.450823][T22532] hsr0: entered allmulticast mode
[ 1206.467856][T20711] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input126
[ 1206.510720][ T5183] bcm5974 4-1:0.0: could not read from device
[ 1206.615156][T20711] usb 4-1: USB disconnect, device number 13
[ 1206.676053][T22532] hsr_slave_0: entered allmulticast mode
[ 1206.730816][T22532] hsr_slave_1: entered allmulticast mode
[ 1206.830756][T18210] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1207.089087][T18210] usb 5-1: Using ep0 maxpacket: 16
[ 1207.127814][T18210] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1207.147479][T18210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.177967][T18210] usb 5-1: config 0 descriptor??
[ 1207.183232][ T5922] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1207.202035][T18210] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1207.369038][ T5922] usb 1-1: Using ep0 maxpacket: 8
[ 1207.377095][ T5922] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1207.398647][ T5922] usb 1-1: config 0 has no interface number 0
[ 1207.419175][ T5922] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1207.459166][ T5922] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1207.472025][ T5922] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1207.483961][ T5922] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1207.498848][ T5922] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1207.519057][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.535721][ T5922] usb 1-1: config 0 descriptor??
[ 1207.575432][ T5922] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1207.900262][ T5922] usb 1-1: USB disconnect, device number 82
[ 1207.902630][    C1] ldusb 1-1:0.55: usb_submit_urb failed (-19)
[ 1207.913106][T22546] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19
[ 1207.952987][ T5922] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1208.217416][T18210] gspca_sonixj: reg_w1 err -71
[ 1208.254789][T18210] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[ 1208.290354][T18210] usb 5-1: USB disconnect, device number 16
[ 1208.428326][   T31] audit: type=1326 audit(1765643393.299:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.5.4259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x0
[ 1209.178456][T22595] binder: 22594:22595 unknown command 0
[ 1209.201050][T22595] binder: 22594:22595 ioctl c0306201 200000000080 returned -22
[ 1209.242025][T22595] binder: 22594:22595 ioctl c0306201 2000000003c0 returned -14
[ 1209.336671][T22595] binder: BINDER_SET_CONTEXT_MGR already set
[ 1209.345842][T22597] binder: 22594:22597 unknown command 0
[ 1209.351534][T22595] binder: 22594:22595 ioctl 4018620d 2000000001c0 returned -16
[ 1209.360050][T22597] binder: 22594:22597 ioctl c0306201 200000000080 returned -22
[ 1209.484394][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4269'.
[ 1209.587368][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4269'.
[ 1209.735761][T22607] bond4: (slave geneve2): Enslaving as an active interface with an up link
[ 1209.893202][T22609] bond4 (unregistering): (slave geneve2): Releasing backup interface
[ 1209.996959][T22609] bond4 (unregistering): Released all slaves
[ 1210.362045][T22628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1210.432968][T22628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1211.233957][T22645] loop9: detected capacity change from 0 to 7
[ 1211.254676][T22645] Dev loop9: unable to read RDB block 7
[ 1211.268528][T22645]  loop9: unable to read partition table
[ 1211.280573][T22645] loop9: partition table beyond EOD, truncated
[ 1211.316690][T22645] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1211.327647][ T5922] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1211.552041][ T5922] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[ 1211.569641][ T5922] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1211.733663][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1211.761610][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.783684][ T5922] usb 3-1: Product: ᠞脔샳鮡ᚫ祼▃芎硗鐅僓ᅍ鸸㙒ᅆ踣ꂽ袂튽炩䱅ꓥ脩├᲏扼ግ層駇⦨벰
[ 1211.818332][ T5922] usb 3-1: Manufacturer: 砆
[ 1211.836569][ T5922] usb 3-1: SerialNumber: 랸ٍ꫒虹륦齆ཾಗꃗ匲軔옿귔﹓끱珟ﲘ꨸
[ 1211.865168][   T31] audit: type=1326 audit(1765643396.739:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.5.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1211.957594][   T31] audit: type=1326 audit(1765643396.769:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.5.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x7ffc0000
[ 1212.673426][   T31] audit: type=1326 audit(1765643397.549:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.3.4283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f749 code=0x0
[ 1213.155728][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4284'.
[ 1213.179800][T22665] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1213.436412][T22667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1213.459905][T22667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1213.851219][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'.
[ 1214.131285][ T5922] cdc_ncm 3-1:1.0: bind() failure
[ 1214.169214][ T5922] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 1214.199034][ T5922] cdc_ncm 3-1:1.1: bind() failure
[ 1214.223981][ T5922] usb 3-1: USB disconnect, device number 26
[ 1214.354876][T22690] netlink: 'syz.3.4291': attribute type 13 has an invalid length.
[ 1214.423023][T22691] netlink: 'syz.3.4291': attribute type 13 has an invalid length.
[ 1214.453751][T22691] gretap0: refused to change device tx_queue_len
[ 1214.520982][T22691] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1214.639731][T22690] gretap0: refused to change device tx_queue_len
[ 1214.646537][T22690] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1214.769128][T20726] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1214.967118][T20726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1214.999788][T20726] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1215.009720][T20726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.036033][T20726] usb 1-1: config 0 descriptor??
[ 1215.053697][T20726] pwc: Askey VC010 type 2 USB webcam detected.
[ 1215.150666][T22708] kAFS: unable to lookup cell '(,c��'
[ 1215.456525][T20726] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1215.468680][T20726] pwc: recv_control_msg error -32 req 02 val 2700
[ 1215.480381][T20726] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1215.501672][T20726] pwc: recv_control_msg error -32 req 04 val 1000
[ 1215.520984][T20726] pwc: recv_control_msg error -32 req 04 val 1300
[ 1215.538674][T20726] pwc: recv_control_msg error -32 req 04 val 1400
[ 1215.557584][T20726] pwc: recv_control_msg error -32 req 02 val 2000
[ 1215.559337][T22687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1215.700525][T22687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1215.967718][T20726] pwc: recv_control_msg error -32 req 02 val 2100
[ 1216.002945][T20726] pwc: recv_control_msg error -32 req 04 val 1500
[ 1216.027752][T20726] pwc: recv_control_msg error -71 req 02 val 2500
[ 1216.053388][T20726] pwc: recv_control_msg error -71 req 02 val 2400
[ 1216.079669][T20726] pwc: recv_control_msg error -71 req 02 val 2600
[ 1216.123675][T20726] pwc: recv_control_msg error -71 req 02 val 2900
[ 1216.146455][T20726] pwc: recv_control_msg error -71 req 02 val 2800
[ 1216.172312][T20726] pwc: recv_control_msg error -71 req 04 val 1100
[ 1216.200373][T20726] pwc: recv_control_msg error -71 req 04 val 1200
[ 1216.222945][T20726] pwc: Registered as video103.
[ 1216.251357][T20726] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input127
[ 1216.349529][T20726] usb 1-1: USB disconnect, device number 83
[ 1217.155130][T22732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1217.209158][ T5922] usb 1-1: new low-speed USB device number 84 using dummy_hcd
[ 1217.228706][   T31] audit: type=1326 audit(1765643402.099:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22724 comm="syz.2.4302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71018f749 code=0x0
[ 1217.411006][ T5922] usb 1-1: config 65 has an invalid interface number: 95 but max is 0
[ 1217.420991][ T5922] usb 1-1: config 65 has no interface number 0
[ 1217.445261][ T5922] usb 1-1: string descriptor 0 read error: -22
[ 1217.456602][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6
[ 1217.469319][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.538089][T22741] netlink: 'syz.5.4306': attribute type 27 has an invalid length.
[ 1217.590457][T22741] geneve2: left promiscuous mode
[ 1217.603054][T22741] ipip0: left promiscuous mode
[ 1217.607876][T22741] ipip0: left allmulticast mode
[ 1217.621423][T22741] sit1: left promiscuous mode
[ 1217.639081][   T50] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 39345 - 0
[ 1217.660409][   T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 39345 - 0
[ 1217.689001][   T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 39345 - 0
[ 1217.738806][ T5922] usbtest 1-1:65.95: Linux gadget zero
[ 1217.754737][ T5922] usbtest 1-1:65.95: low-speed {control in/out} tests (+alt)
[ 1217.780316][   T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 39345 - 0
[ 1217.857104][T22745] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4308'.
[ 1217.874820][T22745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1217.930814][ T5922] usb 1-1: USB disconnect, device number 84
[ 1218.407808][T22758] fuse: Unknown parameter 'bd-0x0000000000000008'
[ 1218.559276][ T5922] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1218.839778][ T5922] usb 4-1: config 160 has an invalid interface number: 200 but max is 0
[ 1218.848744][ T5922] usb 4-1: config 160 has no interface number 0
[ 1218.869052][ T5922] usb 4-1: config 160 interface 200 has no altsetting 0
[ 1218.894602][ T5922] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 1218.915242][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.941538][ T5922] usb 4-1: Product: syz
[ 1218.955130][ T5922] usb 4-1: Manufacturer: syz
[ 1218.972081][ T5922] usb 4-1: SerialNumber: syz
[ 1219.239267][T20725] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1219.323328][T22765] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4313'.
[ 1219.360603][ T5922] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1219.367623][ T5922] usb 4-1: MIDIStreaming interface descriptor not found
[ 1219.499157][T20725] usb 3-1: Using ep0 maxpacket: 16
[ 1219.520354][T20725] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 1219.529721][T20725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.537967][T20725] usb 3-1: Product: syz
[ 1219.550082][T20725] usb 3-1: Manufacturer: syz
[ 1219.557416][T20725] usb 3-1: SerialNumber: syz
[ 1219.600522][T20725] usb 3-1: config 0 descriptor??
[ 1219.653849][T20725] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 1219.660636][ T5922] usb 4-1: USB disconnect, device number 14
[ 1219.702878][T20725] usb 3-1: Detected FT232H
[ 1219.851239][T22768] input: syz0 as /devices/virtual/input/input128
[ 1219.853657][T20725] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1219.918354][T20725] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1219.983196][T20725] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[ 1220.030754][T20725] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1220.064755][T20725] usb 3-1: USB disconnect, device number 27
[ 1220.090961][T20725] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1220.163117][T20725] ftdi_sio 3-1:0.0: device disconnected
[ 1220.469063][ T5963] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1220.745947][ T5963] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1220.763599][ T5963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1220.806580][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1220.837009][ T5963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1220.950824][ T5963] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1221.019441][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1221.037960][ T5963] usb 4-1: Product: syz
[ 1221.076317][ T5963] usb 4-1: Manufacturer: syz
[ 1221.113273][ T5963] cdc_wdm 4-1:1.0: skipping garbage
[ 1221.139245][ T5963] cdc_wdm 4-1:1.0: skipping garbage
[ 1221.170706][ T5963] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1221.199743][ T5963] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1221.454792][   T31] audit: type=1326 audit(1765643406.329:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.4.4319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78a618f749 code=0x0
[ 1221.460758][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1221.590055][T22808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1221.620314][T22808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1221.659536][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1222.545069][T22828] hsr0: entered allmulticast mode
[ 1222.550367][T22828] hsr_slave_0: entered allmulticast mode
[ 1222.556740][T22828] hsr_slave_1: entered allmulticast mode
[ 1222.589264][ T5922] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1222.782471][ T5922] usb 1-1: Using ep0 maxpacket: 16
[ 1222.890526][T22831] netlink: 'syz.4.4330': attribute type 10 has an invalid length.
[ 1222.943571][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1222.955640][T22831] team0: Port device 
0!
 added
[ 1222.963693][T22832] netlink: 'syz.4.4330': attribute type 10 has an invalid length.
[ 1223.119274][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1223.149915][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1223.219394][ T5922] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1223.230245][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.276085][ T5922] usb 1-1: config 0 descriptor??
[ 1223.307311][T22832] team0: Port device 
0!
 removed
[ 1223.336792][T22832] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[ 1223.662355][T20725] usb 4-1: USB disconnect, device number 15
[ 1223.793563][ T5922] usbhid 1-1:0.0: can't add hid device: -71
[ 1223.821354][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1223.852190][ T5922] usb 1-1: USB disconnect, device number 85
[ 1224.356829][ T5198] Dev loop6: unable to read RDB block 7
[ 1224.372252][ T5198]  loop6: unable to read partition table
[ 1224.378487][ T5198] loop6: partition table beyond EOD, truncated
[ 1224.414029][T22842] QAT: Device 2 not found
[ 1224.650119][ T5922] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1224.839030][ T5922] usb 4-1: Using ep0 maxpacket: 32
[ 1224.850351][ T5922] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 1224.859360][ T5922] usb 4-1: config 0 has no interface number 0
[ 1224.904726][ T5922] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1225.051951][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1225.090623][ T5922] usb 4-1: Product: syz
[ 1225.103399][ T5922] usb 4-1: Manufacturer: syz
[ 1225.124066][ T5922] usb 4-1: SerialNumber: syz
[ 1225.163253][ T5922] usb 4-1: config 0 descriptor??
[ 1225.184168][ T5922] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1225.361096][   T31] audit: type=1326 audit(1765643410.189:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22852 comm="syz.0.4338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd03b8f749 code=0x0
[ 1225.404931][ T5922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1225.420100][ T5922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1225.762329][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[ 1226.459155][ T5922] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1226.512206][T22871] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[ 1226.578714][T22875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1226.605539][T22875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1226.632974][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1226.660277][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1226.660804][ T5963] usb 4-1: USB disconnect, device number 16
[ 1226.668434][ T5922] usb 3-1: can't read configurations, error -61
[ 1226.724916][ T5963] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1226.875856][ T5922] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1226.894187][ T5963] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1226.930658][ T5963] quatech2 4-1:0.51: device disconnected
[ 1227.054156][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1227.082502][ T5922] usb 3-1: can't read configurations, error -61
[ 1227.093031][ T5922] usb usb3-port1: attempt power cycle
[ 1227.375621][T22893] bridge0: port 3(syz_tun) entered disabled state
[ 1227.487154][T20726] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1227.570858][ T5922] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1227.609919][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1227.629604][ T5922] usb 3-1: can't read configurations, error -61
[ 1227.649048][T20726] usb 1-1: Using ep0 maxpacket: 16
[ 1227.651327][T20726] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1227.651349][T20726] usb 1-1: config 0 has no interface number 0
[ 1227.654051][T20726] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1227.654086][T20726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.654109][T20726] usb 1-1: Product: syz
[ 1227.654125][T20726] usb 1-1: Manufacturer: syz
[ 1227.654254][T20726] usb 1-1: SerialNumber: syz
[ 1227.656439][T20726] usb 1-1: config 0 descriptor??
[ 1227.668623][T20726] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1227.788031][ T5922] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1227.827108][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1227.887407][ T5922] usb 3-1: can't read configurations, error -61
[ 1227.895029][ T5922] usb usb3-port1: unable to enumerate USB device
[ 1228.369344][T22887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1228.436553][T22887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1228.514576][T20726] gspca_spca1528: reg_w err -71
[ 1228.539172][T20726] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[ 1228.652237][T20726] usb 1-1: USB disconnect, device number 86
[ 1230.173132][   T31] audit: type=1326 audit(1765643415.049:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22907 comm="syz.4.4351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78a618f749 code=0x0
[ 1230.544583][T22919] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[ 1230.909422][T22926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1230.949468][T22926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1231.029405][   T25] null_blk: rq ffff888025023300 timed out
[ 1231.036310][   T25] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2
[ 1231.047476][   T25] null_blk: rq ffff888025023480 timed out
[ 1231.053334][   T25] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2
[ 1231.859141][ T5963] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1232.019122][ T5963] usb 5-1: Using ep0 maxpacket: 16
[ 1232.093347][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1232.114494][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1232.256842][ T5963] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 1232.288370][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.407941][ T5963] usb 5-1: config 0 descriptor??
[ 1233.029837][ T5963] corsair 0003:1B1C:1B02.0054: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0
[ 1233.282227][ T5963] corsair 0003:1B1C:1B02.0054: Read invalid backlight brightness: 16.
[ 1233.528254][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4360'.
[ 1233.550603][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4360'.
[ 1233.697500][T22956] libceph: resolve '.
[ 1233.697500][T22956] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 1233.697500][T22956] ' (ret=-3): failed
[ 1234.352227][T22972] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[ 1234.491079][T22940] syz.4.4356 (22940): drop_caches: 2
[ 1234.552557][   T31] audit: type=1326 audit(1765643419.429:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.4366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x0
[ 1235.268459][T22986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4368'.
[ 1236.032633][T23003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1236.045044][T23003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1236.232152][T23006] kvm: kvm [23004]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076)
[ 1236.242902][T23006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4374'.
[ 1236.252229][T23006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4374'.
[ 1236.498157][T20725] usb 5-1: USB disconnect, device number 17
[ 1236.809055][T20726] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1237.321617][T20726] usb 4-1: config 0 has no interfaces?
[ 1237.347675][T20726] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1237.400582][T20726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.458050][T20726] usb 4-1: Product: syz
[ 1237.507021][T20726] usb 4-1: Manufacturer: syz
[ 1237.533374][T20726] usb 4-1: SerialNumber: syz
[ 1237.591941][T20726] usb 4-1: config 0 descriptor??
[ 1237.945914][T23010] loop6: detected capacity change from 7 to 1
[ 1238.399314][T20710] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1238.645763][T20710] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1238.691017][T23044] binder: 23041:23044 ioctl 4018620d 0 returned -22
[ 1238.700504][T20710] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1238.739033][T20710] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1238.831587][T20710] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1238.921818][T20710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1238.979583][T20710] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1238.999551][T20710] usb 5-1: invalid MIDI out EP 0
[ 1239.331209][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1239.431028][T20710] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1239.599566][T20710] usb 5-1: USB disconnect, device number 18
[ 1240.248443][ T5198] Dev loop6: unable to read RDB block 1
[ 1240.265866][ T5198]  loop6: unable to read partition table
[ 1240.278720][ T5198] loop6: partition table beyond EOD, truncated
[ 1240.308017][T20710] usb 4-1: USB disconnect, device number 17
[ 1240.423255][T23050] syzkaller0: entered promiscuous mode
[ 1241.388788][T23070] set match dimension is over the limit!
[ 1241.698372][T23076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1241.728096][T23076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1241.758714][T23076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1241.779666][T23076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1241.946797][T23081] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[ 1242.001321][T23082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4396'.
[ 1242.269125][T20726] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1242.319743][T23086] Failed to get privilege flags for destination (handle=0x2:0x0)
[ 1242.441425][T20726] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[ 1242.452031][T20726] usb 3-1: config 0 has no interface number 0
[ 1242.470461][T20726] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1242.484760][T20726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.493703][T20726] usb 3-1: Product: syz
[ 1242.498008][T20726] usb 3-1: Manufacturer: syz
[ 1242.510831][T20726] usb 3-1: SerialNumber: syz
[ 1242.524933][T20726] usb 3-1: config 0 descriptor??
[ 1242.541597][T20726] yurex 3-1:0.50: Could not find endpoints
[ 1242.750760][T23078] kvm: kvm [23077]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[ 1242.765331][T23078] kvm: kvm [23077]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[ 1242.794875][T20726] usb 3-1: USB disconnect, device number 32
[ 1242.799119][T20710] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1242.951266][T23100] bridge0: port 3(syz_tun) entered blocking state
[ 1242.958114][T23100] bridge0: port 3(syz_tun) entered forwarding state
[ 1242.959019][T20710] usb 4-1: Using ep0 maxpacket: 32
[ 1242.983077][T20710] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[ 1242.994615][T23100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1243.001415][T20710] usb 4-1: config 0 has no interface number 0
[ 1243.049091][T20710] usb 4-1: config 0 interface 196 has no altsetting 0
[ 1243.064631][T23096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1243.075446][T23096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1243.084855][T20710] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1243.096688][T20710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.106821][T20710] usb 4-1: Product: syz
[ 1243.112190][   T31] audit: type=1326 audit(1765643427.989:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23094 comm="syz.5.4401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e4438f749 code=0x0
[ 1243.135888][T20710] usb 4-1: Manufacturer: syz
[ 1243.144338][T20710] usb 4-1: SerialNumber: syz
[ 1243.152571][T20710] usb 4-1: config 0 descriptor??
[ 1243.363480][T23093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1243.377865][T23093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1243.397726][T20710] ipheth 4-1:0.196: Unable to find endpoints
[ 1243.414004][T20710] usb 4-1: USB disconnect, device number 18
[ 1243.509031][ T5963] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1243.679044][ T5963] usb 5-1: Using ep0 maxpacket: 8
[ 1243.688309][ T5963] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[ 1243.708054][ T5963] usb 5-1: config 2 has no interface number 0
[ 1243.723273][ T5963] usb 5-1: config 2 interface 31 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1243.754676][ T5963] usb 5-1: config 2 interface 31 has no altsetting 0
[ 1243.782514][ T5963] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 1243.800468][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.824072][ T5963] usb 5-1: Product: syz
[ 1243.833554][ T5963] usb 5-1: Manufacturer: syz
[ 1243.846445][ T5963] usb 5-1: SerialNumber: syz
[ 1243.877047][ T5963] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[ 1244.436573][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.443119][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.606411][T20710] usb 5-1: USB disconnect, device number 19
[ 1244.832728][T23125] syz.4.4408 (23125): drop_caches: 2
[ 1244.902634][T23126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1245.021119][T23126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1245.099323][T20725] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1246.273122][T23141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4412'.
[ 1246.603768][T23151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1246.633087][T23151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1246.666541][T23153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1246.688613][T23154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1246.731227][T23154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1246.750662][T23153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1246.819030][T20710] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1247.089073][T20711] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1247.252531][T20711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1247.269288][T20711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1247.281476][T20711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1247.291277][T20711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1247.306772][T20711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1247.317192][T20711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1247.326294][T20710] usb 3-1: device descriptor read/64, error -71
[ 1247.333993][T20711] usb 1-1: Product: syz
[ 1247.339442][T20711] usb 1-1: Manufacturer: syz
[ 1247.435649][T20711] cdc_wdm 1-1:1.0: skipping garbage
[ 1247.443099][T20711] cdc_wdm 1-1:1.0: skipping garbage
[ 1247.479845][T20711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1247.485834][T20711] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1247.580697][T20710] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1247.739876][T23159] tipc: Started in network mode
[ 1247.746583][T23159] tipc: Node identity 3290f7da2f29, cluster identity 4711
[ 1247.759749][T20710] usb 3-1: Using ep0 maxpacket: 16
[ 1247.772078][T20710] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1247.786135][T20710] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1247.786522][T23159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1247.855313][T20710] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1247.860743][T23166] syzkaller0: entered allmulticast mode
[ 1352.868877][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 1352.875572][    C1] rcu: 	1-...!: (1 GPs behind) idle=e0d4/1/0x4000000000000000 softirq=177890/177891 fqs=1
[ 1352.886987][    C1] rcu: 	(t=10500 jiffies g=173281 q=21 ncpus=2)
[ 1352.893241][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g173281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 1352.905657][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=97728
[ 1352.913560][    C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g173281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 1352.925020][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1352.934994][    C1] rcu: RCU grace-period kthread stack dump:
[ 1352.940888][    C1] task:rcu_preempt     state:I stack:27568 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1352.952832][    C1] Call Trace:
[ 1352.956112][    C1]  <TASK>
[ 1352.959052][    C1]  __schedule+0x14bc/0x5000
[ 1352.963595][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1352.969544][    C1]  ? __pfx___schedule+0x10/0x10
[ 1352.974425][    C1]  ? schedule+0x91/0x360
[ 1352.978678][    C1]  schedule+0x165/0x360
[ 1352.982849][    C1]  schedule_timeout+0x12b/0x270
[ 1352.987716][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1352.993097][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1352.999004][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1353.004311][    C1]  ? prepare_to_swait_event+0x341/0x380
[ 1353.009879][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[ 1353.014750][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[ 1353.020657][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1353.025953][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1353.031169][    C1]  ? finish_swait+0xcd/0x1f0
[ 1353.035779][    C1]  rcu_gp_kthread+0x99/0x390
[ 1353.040382][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1353.045598][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1353.050583][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1353.055633][    C1]  kthread+0x711/0x8a0
[ 1353.059718][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1353.064930][    C1]  ? __pfx_kthread+0x10/0x10
[ 1353.069539][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1353.074783][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1353.080015][    C1]  ? __pfx_kthread+0x10/0x10
[ 1353.084639][    C1]  ret_from_fork+0x599/0xb30
[ 1353.089247][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1353.094382][    C1]  ? __switch_to_asm+0x39/0x70
[ 1353.099165][    C1]  ? __switch_to_asm+0x33/0x70
[ 1353.103943][    C1]  ? __pfx_kthread+0x10/0x10
[ 1353.108546][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1353.113337][    C1]  </TASK>
[ 1353.116364][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1353.122784][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1353.128017][    C0] NMI backtrace for cpu 0
[ 1353.128039][    C0] CPU: 0 UID: 0 PID: 23169 Comm: syz.0.4417 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.128075][    C0] Tainted: [L]=SOFTLOCKUP
[ 1353.128087][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1353.128102][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1353.128135][    C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 10 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1353.128152][    C0] RSP: 0018:ffffc90004a16d58 EFLAGS: 000002c7
[ 1353.128169][    C0] RAX: ffffffff8173727d RBX: 0000000000000003 RCX: 0000000000080000
[ 1353.128182][    C0] RDX: ffffc9001190d000 RSI: 000000000000aaa9 RDI: 000000000000aaaa
[ 1353.128194][    C0] RBP: ffffc90004a16e30 R08: ffffffff8f81fa77 R09: 1ffffffff1f03f4e
[ 1353.128208][    C0] R10: dffffc0000000000 R11: fffffbfff1f03f4f R12: dffffc0000000000
[ 1353.128222][    C0] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000942db0
[ 1353.128235][    C0] FS:  00007efd01db46c0(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000
[ 1353.128251][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1353.128264][    C0] CR2: 00007efd01db3f98 CR3: 00000000626e4000 CR4: 00000000003526f0
[ 1353.128281][    C0] Call Trace:
[ 1353.128291][    C0]  <TASK>
[ 1353.128298][    C0]  kvm_wait+0x232/0x290
[ 1353.128326][    C0]  ? __pfx_kvm_wait+0x10/0x10
[ 1353.128355][    C0]  __pv_queued_spin_lock_slowpath+0x7bf/0xb60
[ 1353.128393][    C0]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 1353.128423][    C0]  ? __bpf_address_lookup+0x3b0/0x3f0
[ 1353.128446][    C0]  queued_spin_lock_slowpath+0x43/0x50
[ 1353.128475][    C0]  do_raw_spin_lock+0x21f/0x290
[ 1353.128502][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1353.128530][    C0]  ? netem_change+0x478/0x28c0
[ 1353.128550][    C0]  netem_change+0x478/0x28c0
[ 1353.128576][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1353.128603][    C0]  ? __pfx_netem_change+0x10/0x10
[ 1353.128631][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1353.128657][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[ 1353.128692][    C0]  ? __hrtimer_setup+0x181/0x200
[ 1353.128717][    C0]  ? __pfx_netem_init+0x10/0x10
[ 1353.128733][    C0]  ? __pfx_netem_init+0x10/0x10
[ 1353.128751][    C0]  netem_init+0x65/0xc0
[ 1353.128768][    C0]  qdisc_create+0x7ac/0xea0
[ 1353.128800][    C0]  tc_modify_qdisc+0x1547/0x2020
[ 1353.128836][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1353.128877][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[ 1353.128901][    C0]  rtnetlink_rcv_msg+0x77c/0xb70
[ 1353.128932][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1353.128960][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1353.128986][    C0]  ? ref_tracker_free+0x63a/0x7d0
[ 1353.129014][    C0]  ? __asan_memcpy+0x40/0x70
[ 1353.129031][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1353.129063][    C0]  netlink_rcv_skb+0x208/0x470
[ 1353.129084][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1353.129113][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1353.129138][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1353.129163][    C0]  netlink_unicast+0x82f/0x9e0
[ 1353.129185][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[ 1353.129203][    C0]  ? netlink_sendmsg+0x642/0xb30
[ 1353.129222][    C0]  ? skb_put+0x11b/0x210
[ 1353.129241][    C0]  netlink_sendmsg+0x805/0xb30
[ 1353.129266][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1353.129289][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1353.129311][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1353.129328][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1353.129349][    C0]  __sock_sendmsg+0x21c/0x270
[ 1353.129375][    C0]  ____sys_sendmsg+0x505/0x820
[ 1353.129398][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1353.129422][    C0]  ? import_iovec+0x74/0xa0
[ 1353.129443][    C0]  ___sys_sendmsg+0x21f/0x2a0
[ 1353.129463][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1353.129485][    C0]  ? futex_wake+0x4b2/0x560
[ 1353.129523][    C0]  ? __fget_files+0x2a/0x420
[ 1353.129546][    C0]  ? __fget_files+0x3a0/0x420
[ 1353.129575][    C0]  __x64_sys_sendmsg+0x19b/0x260
[ 1353.129595][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1353.129629][    C0]  ? do_syscall_64+0xbe/0xf80
[ 1353.129658][    C0]  do_syscall_64+0xfa/0xf80
[ 1353.129686][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.129704][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1353.129725][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.129743][    C0] RIP: 0033:0x7efd03b8f749
[ 1353.129761][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1353.129776][    C0] RSP: 002b:00007efd01db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1353.129794][    C0] RAX: ffffffffffffffda RBX: 00007efd03de6180 RCX: 00007efd03b8f749
[ 1353.129808][    C0] RDX: 0000000020000804 RSI: 0000200000000080 RDI: 0000000000000008
[ 1353.129820][    C0] RBP: 00007efd03c13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1353.129832][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1353.129843][    C0] R13: 00007efd03de6218 R14: 00007efd03de6180 R15: 00007efd03f0fa28
[ 1353.129866][    C0]  </TASK>
[ 1353.130050][    C1] CPU: 1 UID: 0 PID: 23163 Comm: syz.5.4419 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.130085][    C1] Tainted: [L]=SOFTLOCKUP
[ 1353.130096][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1353.130110][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x28/0x90
[ 1353.130146][    C1] Code: 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 60 7e 92 65 8b 0d c8 ab bc 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b <83> ba 6c 16 00 00 00 74 52 8b 8a 48 16 00 00 83 f9 03 75 47 48 8b
[ 1353.130167][    C1] RSP: 0018:ffffc90000a084c8 EFLAGS: 00000246
[ 1353.130188][    C1] RAX: ffffffff895c8ef6 RBX: 0000000000000008 RCX: 0000000000000100
[ 1353.130205][    C1] RDX: ffff88809df53d00 RSI: 0000000000000008 RDI: 0000000000000300
[ 1353.130220][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000004
[ 1353.130235][    C1] R10: 0000000000000008 R11: 0000000000000100 R12: ffff88801d7006dc
[ 1353.130251][    C1] R13: ffff8880567be200 R14: dffffc0000000000 R15: 0000000000000000
[ 1353.130269][    C1] FS:  00007f4e4526f6c0(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000
[ 1353.130289][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1353.130306][    C1] CR2: 00007fbb8c372a60 CR3: 00000000625f2000 CR4: 00000000003526f0
[ 1353.130328][    C1] Call Trace:
[ 1353.130338][    C1]  <IRQ>
[ 1353.130347][    C1]  tcf_classify+0x486/0x1140
[ 1353.130481][    C1]  hfsc_enqueue+0x323/0xf20
[ 1353.130525][    C1]  ? __pfx_hfsc_enqueue+0x10/0x10
[ 1353.130553][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 1353.130599][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1353.130638][    C1]  dev_qdisc_enqueue+0x4e/0x240
[ 1353.130670][    C1]  ? __dev_queue_xmit+0xc60/0x3140
[ 1353.130703][    C1]  __dev_queue_xmit+0x1829/0x3140
[ 1353.130742][    C1]  ? __dev_queue_xmit+0x289/0x3140
[ 1353.130769][    C1]  ? neigh_resolve_output+0x438/0x750
[ 1353.130817][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1353.130848][    C1]  ? read_seqbegin+0x1ac/0x250
[ 1353.130883][    C1]  ? __pfx_read_seqbegin+0x10/0x10
[ 1353.130915][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1353.130941][    C1]  ? eth_header+0x11b/0x200
[ 1353.130971][    C1]  ? __asan_memcpy+0x40/0x70
[ 1353.131024][    C1]  ip_finish_output2+0xd40/0x1160
[ 1353.131050][    C1]  ? ip_skb_dst_mtu+0x18d/0xb70
[ 1353.131080][    C1]  ? ip_finish_output2+0x452/0x1160
[ 1353.131110][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[ 1353.131139][    C1]  ? ip_skb_dst_mtu+0x18d/0xb70
[ 1353.131159][    C1]  ? ip_skb_dst_mtu+0x917/0xb70
[ 1353.131186][    C1]  ? ip_finish_output+0x33a/0x3f0
[ 1353.131228][    C1]  ip_output+0x29f/0x450
[ 1353.131265][    C1]  ? ip_output+0x5b/0x450
[ 1353.131303][    C1]  igmp_ifc_timer_expire+0xbb6/0xde0
[ 1353.131342][    C1]  ? igmp_ifc_timer_expire+0x26/0xde0
[ 1353.131394][    C1]  call_timer_fn+0x16e/0x590
[ 1353.131424][    C1]  ? __pfx_igmp_ifc_timer_expire+0x10/0x10
[ 1353.131460][    C1]  ? call_timer_fn+0xbe/0x590
[ 1353.131488][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1353.131529][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1353.131562][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1353.131596][    C1]  ? __pfx_igmp_ifc_timer_expire+0x10/0x10
[ 1353.131633][    C1]  __run_timer_base+0x61a/0x860
[ 1353.131673][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1353.131694][    C1]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[ 1353.131748][    C1]  run_timer_softirq+0xb7/0x180
[ 1353.131780][    C1]  handle_softirqs+0x27d/0x850
[ 1353.131810][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[ 1353.131844][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1353.131883][    C1]  __irq_exit_rcu+0xca/0x1f0
[ 1353.131909][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1353.131947][    C1]  irq_exit_rcu+0x9/0x30
[ 1353.131971][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1353.132008][    C1]  </IRQ>
[ 1353.132016][    C1]  <TASK>
[ 1353.132026][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1353.132053][    C1] RIP: 0010:kasan_check_range+0xa8/0x2c0
[ 1353.132083][    C1] Code: 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 de 01 00 00 49 ff c3 <48> ff c3 75 ee e9 21 01 00 00 44 89 dd 83 e5 07 0f 84 b5 00 00 00
[ 1353.132105][    C1] RSP: 0018:ffffc900033d74c0 EFLAGS: 00000282
[ 1353.132125][    C1] RAX: 1ffff9200067ae01 RBX: fffffffffffffffe RCX: ffffffff81744b78
[ 1353.132144][    C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900033d7638
[ 1353.132160][    C1] RBP: 0000000000000000 R08: ffffc900033d7647 R09: 1ffff9200067aec8
[ 1353.132177][    C1] R10: dffffc0000000000 R11: fffff5200067aec8 R12: 0000000000000002
[ 1353.132194][    C1] R13: ffffc900033d7638 R14: fffff5200067aec9 R15: 1ffff9200067aec7
[ 1353.132223][    C1]  ? unwind_next_frame+0xc98/0x2390
[ 1353.132265][    C1]  __asan_memset+0x22/0x50
[ 1353.132288][    C1]  unwind_next_frame+0xc98/0x2390
[ 1353.132324][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1353.132353][    C1]  ? io_submit_sqes+0xad3/0x2140
[ 1353.132393][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1353.132432][    C1]  arch_stack_walk+0x11c/0x150
[ 1353.132467][    C1]  ? __se_sys_io_uring_enter+0x2e0/0x2b60
[ 1353.132499][    C1]  stack_trace_save+0x9c/0xe0
[ 1353.132543][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1353.132586][    C1]  ? __alloc_frozen_pages_noprof+0x1d6/0x370
[ 1353.132620][    C1]  kasan_save_track+0x3e/0x80
[ 1353.132643][    C1]  ? kasan_save_track+0x3e/0x80
[ 1353.132665][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[ 1353.132690][    C1]  ? kmem_cache_alloc_noprof+0x37d/0x710
[ 1353.132724][    C1]  ? getname_flags+0xb8/0x540
[ 1353.132752][    C1]  ? io_renameat_prep+0x211/0x3d0
[ 1353.132773][    C1]  ? io_submit_sqes+0xad3/0x2140
[ 1353.132858][    C1]  __kasan_slab_alloc+0x6c/0x80
[ 1353.132888][    C1]  kmem_cache_alloc_noprof+0x37d/0x710
[ 1353.132927][    C1]  ? getname_flags+0xb8/0x540
[ 1353.132962][    C1]  getname_flags+0xb8/0x540
[ 1353.132995][    C1]  io_renameat_prep+0x211/0x3d0
[ 1353.133026][    C1]  io_submit_sqes+0xad3/0x2140
[ 1353.133089][    C1]  __se_sys_io_uring_enter+0x2e0/0x2b60
[ 1353.133117][    C1]  ? finish_task_switch+0x23d/0x940
[ 1353.133154][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1353.133191][    C1]  ? finish_task_switch+0x23d/0x940
[ 1353.133229][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1353.133260][    C1]  ? trace_sched_exit_tp+0x36/0xf0
[ 1353.133295][    C1]  ? __schedule+0x14d2/0x5000
[ 1353.133336][    C1]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[ 1353.133392][    C1]  ? __pfx___schedule+0x10/0x10
[ 1353.133436][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1353.133471][    C1]  ? __x64_sys_io_uring_enter+0x21/0xf0
[ 1353.133501][    C1]  do_syscall_64+0xfa/0xf80
[ 1353.133539][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.133564][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1353.133592][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.133617][    C1] RIP: 0033:0x7f4e4438f749
[ 1353.133639][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1353.133659][    C1] RSP: 002b:00007f4e4526f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1353.133682][    C1] RAX: ffffffffffffffda RBX: 00007f4e445e5fa0 RCX: 00007f4e4438f749
[ 1353.133699][    C1] RDX: 0000000000003e80 RSI: 00000000000047ba RDI: 0000000000000007
[ 1353.133715][    C1] RBP: 00007f4e44413f91 R08: 0000000000000000 R09: 0000000000000000
[ 1353.133731][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1353.133745][    C1] R13: 00007f4e445e6038 R14: 00007f4e445e5fa0 R15: 00007f4e4470fa28
[ 1353.133784][    C1]  </TASK>
[ 1354.133885][    C1] sched: DL replenish lagged too much