last executing test programs:

11.45581999s ago: executing program 2 (id=2931):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$isdn_base(0x22, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c001d45e9bd351f16ab0000000000000200000000000006000000006d1c02671e91a1017c92119975ad2bd3eccd564fa83a4454e069e13a24c1fc63f54085380c9e83f956739caaead8936a02"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x859, 0xed1710c49bdc24d4, 0x0, "3205c5460400000000000000022c1e04f4bf40070700000200", 0x38414762})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = syz_open_dev$dri(0x0, 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

10.162599578s ago: executing program 2 (id=2933):
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)

9.959236266s ago: executing program 2 (id=2936):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xe2, 0x52, 0x64, 0x20, 0x129b, 0x160c, 0x1bd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x6c, 0x9, 0x0, 0x1, 0x3, 0x65, 0xb3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8ed7"}, {0x5, 0x24, 0x0, 0xd571}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x3ff, 0x10}}]}}]}}]}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r3, 0x809, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000850}, 0x40)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan4\x00'})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r10)
setregid(0x0, r10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x4791}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@cgroup=r4, 0xffffffffffffffff, 0x35, 0x0, 0x0, @void, @value=r0}, 0x20)

6.374182518s ago: executing program 4 (id=2948):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

6.162608554s ago: executing program 0 (id=2950):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.161764626s ago: executing program 4 (id=2951):
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))
ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, 0x0)

6.034094744s ago: executing program 4 (id=2952):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000000201010800000000000000000700000a060012"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB="08000900160a3a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000004)

5.863969005s ago: executing program 2 (id=2953):
r0 = semget$private(0x0, 0x4, 0x2)
r1 = socket$kcm(0x29, 0x3, 0x0)
pread64(r1, &(0x7f0000000000)=""/107, 0x6b, 0x7) (async)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x5, 0x7, 0x7, 0xffff, 0x5, 0x0])
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x121002, 0x0) (async)
gettid() (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffff}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20004820)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x103400, 0x0, 0x28}, 0x18)
unlinkat(r3, &(0x7f0000000300)='./file0\x00', 0x200)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd) (async)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x80000001, 0x4)
r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) (async)
socket$kcm(0x29, 0x3, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x185001, 0x0)
r5 = socket$inet(0x2, 0x1, 0x9)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000540)={'broute\x00', 0x0, 0x4, 0xe9, [0x2, 0xffffffffffffffff, 0x16b9, 0x6000, 0xd383], 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000440)=""/233}, &(0x7f00000005c0)=0x78) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
listen(r6, 0x6)
r7 = syz_io_uring_setup(0x6501, &(0x7f0000000600)={0x0, 0xf745, 0x8, 0x3, 0x124}, &(0x7f0000000680), &(0x7f00000006c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10010, r7, 0x10000000) (async)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x80080, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000740)=[<r9=>0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000007c0)={0x0, 0x0, <r10=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x8, 0x5})
ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000980)={r9, r10, r11, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0]}) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r12, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6e, 0x29}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}}, 0x4000)

5.849178961s ago: executing program 4 (id=2954):
r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x0, 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0x2}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r3 = open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x100, 0x1)
mkdirat(r3, &(0x7f0000000200)='./bus\x00', 0x11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380))
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402090401", @ANYRES64], 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0xf, 0x7c, {0x7c, 0x2, "436e742c8431db3c27b5dbe191202ec5070231d6c724a244d3d9bb5f759495e526c7c5c5f8a89a4523846ab98a15a27c33ed882eac0f54051369b42b658327ac31f2c77dd3f5204cbdd320d373990e83e811392781e2946b023a4d4df97becf02844521c2d4b8a800b45711947d6e0103eef131c3608cba0c82d"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000540)={0x20, 0x31, 0xab, "980d5ac7c21e8c186524220dbe476c18501413d1e30e6382d13d81d5e88a90b29013a247913c60061599ba7162236eaa941318326953d4d89a5d07e00a1e89553871f380f3993ccd04deb858eb85cad194315b1f765651e4429f183b0122013ac4f29c5ffdd41019f6b1bb81879be1232805c0216461a1f6403e9bcc95ede14e128b6baea495bf7c4a914ba1faf946e2069cebbbab4b17915b1e5e98411c1bfa4a633faa56cc4d1364a1ba"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x85}})
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8812}, 0x400c000)
chdir(&(0x7f00000000c0)='./bus\x00')
r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
open_by_handle_at(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fb0003000000a7"], 0x830200)

5.753079466s ago: executing program 0 (id=2955):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd012000002"], 0xb8}}, 0x4004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xb}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040804}, 0x4000000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000100)={0x32, 0xc, 0x2, 0x3, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x68)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = userfaultfd(0x801)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd0000})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000c40))
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x2}, 0x1)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)

5.578788684s ago: executing program 2 (id=2956):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @in={0x2, 0x4e24, @multicast2}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, @isdn={0x22, 0x5, 0xfa, 0x5, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2a, 0x1})
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r2, 0x0)
listen(r2, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1})
socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x3, 0xa, 0x3, "07000000000000000000000000e70000a20000000d0000000065fe00a42000", 0x3831354f})

3.975756524s ago: executing program 1 (id=2960):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) (async, rerun: 32)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0) (async, rerun: 32)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = getpid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c900000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, 0x0, 0x0, 0x0) (async, rerun: 32)
r6 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) (rerun: 32)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "f63800000000f1ffffffa93c"]})

3.863474941s ago: executing program 0 (id=2961):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x39)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000000c0)=""/211, &(0x7f0000000000)=0xd3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000002c0))
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791", 0x6b}, {&(0x7f0000000500)="12109e71143949c567756f564b826216827f15e1560cb5d1e06c0507f98c804b296299bb95ae1ede20edbf342ba39983366f6dd693d9b82c24cd55a1054a945f8b22dc3d15488ce5954ff2742385d678b423f0963074e350d1a335d4f5ffa71e3e2daf3813ecec6d3b79565f73", 0x6d}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)={0x2ca0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x13, 0x5, "bfc74c63c066ab2be2f7a4302fc131"}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3905bf49}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^&^\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\xa7(/\xb1}-(*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']%\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[#&}-//}*^[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ']+{:\xe4!&\xcd),-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1fc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-()\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '),\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+,#):\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':#:)/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x102fc55a}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "c1abe20422f36fcccd6289208d44804e91653be7d4764187a52a058ced7e55d3cb1829ebcccb5bed5b663e452e332ea82aa3054ca0f7a895423dd58a055f629326875fdc016921085d95d92dffc3c673bf0e810bd81029f19eb76a52741bdd46d3ab4663d1d3314108cb0a1db282596d0c7e8e63a80a25df73ea4a4e2e768eeefcbd072432d82e2418c8e87ed4457dcc4372d19ea3e7fc7729dc5456d2e56037b95af0c2159d6f675c0874c9b111f1094f103356ab60c24aa87084fb22d64ff78d787512cad001aaf2a25563be"}]}, @ETHTOOL_A_FEATURES_WANTED={0x228, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "6096d42795056b09592ac013d81c661ee5dd078fcbf601b72320fe394ab0ca31211a3c4b5bdb21efcf65d0f4886957624c096a30a4b6045a4eea0b51825620d5c1c17ef57cd7359e187aaca011db2633615c9e7767a461f96ad34b580b6e18e023bb5242b60fc03fe32d78a3446ca6c44e761188d1b95646245ab97eeaec87e646990ad969b750ef7a68a3df2d773523df99bc2adedfa46ff6cc3126066518ba13caa013c130353185d06edd61985321281e7e53d1d3f0d91afdfd8deee52a8a5e7e7380a3ffe2f11061bb7d94f3ed70879a12ca980df0b460ab2175"}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '!^}[&&:%\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-\':\\\'{'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '('}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '}*#[]!%\\\\.\'(@!\'[(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\\:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':-:'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']-\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xed84}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'+]\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!*@%\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x1248, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\xe9:&S@\xec\x90*{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*,*\xb3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x89}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{^\x9e\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&?%\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "6a488fbf78abd65299450f3d5f44be2a381e180c27d4eb7275f2815b4d5a7f72fc8cf8b03fa77a9d2507773f9e7ace3ce8cafbeedfcce31013f5efe751ad719ffa342eb0293e56cc663e18e077db608f1da5e17fb8a124c05274838bb841241a65f326c2b8b5b0be2c9c15ce7164"}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "127351c17eb6b726651a893ba4092b3f5c9328bd8d3a81d134293ef3fb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "ed7bf49f48c704d8b003c53da541769e051dcecc2a1270f1f195795b6b8fff44615b3f206928b92d398dbecb739e3be01395957a814c9794d1e48a49fcf04ce78cd7af8a498e923c822077c1619b2dd89dc00843ec2bfc929d6f74f8f855da1d1a9e24a734a0bc"}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "afbc849ce232e3b5e1dfa5c5df2f651fadbddbf5d4d66368380fd999a4e76c9a1c5ed4388cc2f20b5febe8a330ce20f9eafa46f8215d222d4c89416be7d6610079938331b5798456f4d204f8d1b5efac141877a03f66983eabac8ad0feacf60133a26d69cf55fc596344da39b39dc2456eac3d"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "7a5413e2d4b4df8daed348067ea2d12b1cab5a905218bf6cfd534c64a8e10fe28592a8566db0503691f46044b326"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',[{#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\-\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75d8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@#/-)$*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\xb9\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x788f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x1310, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "555103c4d3e36b30838565d5ed2715771b7693cba72c39c89e4fa2fe2a0ca961f4982198ed602ca2f62c5ddd1883213e35d84e0cb979c32500a00810ac6c2a726d6cbe7c1bba96bc91478dd2856fa22a92507c2e1ab75373000464349b1783297fb6b0f04dbcade8ff343bc79c803986817afcf2c44c785db64ddb10303c8028ddcc771675dd03217ec2e5a55eef2cc0ef55722d35e2849e141639539d7eb3ae5ca1b50c19ae0526606b1613c1971dcc326964b0ed135d9187afbae3460ecbb47c4fd58e8e14d0b30610f9fa316e156d20f3930cfcfec904d4b44eb2c3fe"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7, 0x5, "837293"}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "a526350f7adfa5a76fdb71fea77174241afd25e4c919fceff3ac4d138f46e89078122cfe9e72853eacd7c3a99ac93426a953830771869840a3c95cea8c0378334e5c6725f0ce61b21178b0f59b6070ad38fd539b0aa1770a998343028d19689ff447d7dec54824cfd28e8c4c2f71e10f9f44af62cb725146e42d4a4437846902c141b63cb0b8a86627cd6f9786967f58d18aa60d5b284bf7"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\)\xf9\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '###^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[@,^\'%-^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',[@.\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ',&{})(}@(]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9d8b}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!%)##\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6d71}, @ETHTOOL_A_BITSET_VALUE={0x78, 0x4, "f495b928ec9f8d3ef0991639bbec9c667f9ec1f4d799cdf521312a5e4462c9e8b36d39f3b3070234c3af5c8b1d3a89dbdb50e066bd0388d295e61e63814bfb0e328cc23e39198eab2daee8d32cb8eb88c48707d7f8ba21a4f3cfd05e287821678505f18db1f33e942d7249a23b75d117c7e45d6b"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x2ca0}, 0x1, 0x0, 0x0, 0x40080}, 0x80000c4)

3.818115766s ago: executing program 4 (id=2962):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20)
setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42d017dca493817aa84407e88dca79ad1ceecb28019cf673c66020af498b1b4aa96afec84191b9b0358f72ac34a7db2e", 0x47)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,')
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x208000, &(0x7f0000002140)=ANY=[])
read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
setresuid(0x0, r3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r5=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
r7 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r7, r8, r8}, &(0x7f0000000400)=""/189, 0xbd, &(0x7f00000003c0)={&(0x7f00000001c0)={'sha3-224-generic\x00'}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

3.801866193s ago: executing program 0 (id=2963):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0xfffffffd, {{0x39, 0x0, 0x1100}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x4000000)

3.660135056s ago: executing program 3 (id=2964):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r0)
ioctl(r1, 0x7, &(0x7f00000000c0)="b00eb4abd50ab0e9945e95f355d81d74b6f784dd183db15d76e541ce001d72e4bb0d4637331c5d4d550db5e11189f25ed32001e3c0bab2cac0e7a50a6854be5db0ec339909fb4a7ff042c88690")
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1004050, 0x0)

3.646230263s ago: executing program 1 (id=2965):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.619484565s ago: executing program 0 (id=2966):
socket$inet_tcp(0x2, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000140)={{0x1, @addr=0x9}, 0x8, 0x7, 0xff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000003c0)=[{0x6, 0x52, 0x7, 0xde, @tick=0x30, {0x10, 0x6}, {0x9, 0x50}, @raw32={[0x81, 0xee1]}}, {0x1, 0x10, 0x2, 0x6, @time={0x0, 0x98a7}, {0x44, 0x4}, {0xff, 0x9}, @addr={0x5, 0xb}}, {0x7, 0x8, 0x7, 0x7, @tick=0x2, {0x5}, {0x7, 0x81}, @raw32={[0x9, 0x4, 0x4]}}, {0x10, 0x2, 0x6, 0xfb, @time={0x5, 0x5}, {0xaf, 0xa}, {0x6, 0xfe}, @connect={{0x1, 0xff}, {0x2, 0x5}}}, {0x3, 0xa, 0xce, 0x6, @time={0x9, 0x2}, {0x10, 0x5}, {0x4, 0x7f}, @addr={0x9}}, {0x5, 0x33, 0x6, 0x4, @time={0x6, 0x7}, {0x5, 0x54}, {0x3, 0x8}, @control={0x8, 0x40, 0xe0e}}, {0x2, 0x6, 0x9, 0x1, @tick=0x1, {0x0, 0x8}, {0xf4, 0xa3}, @result={0xfffffff3, 0x7fff}}, {0x5, 0x73, 0x5, 0x1, @tick=0x10000, {0x2a, 0xc}, {0x0, 0x59}, @note={0x4, 0x2, 0xef, 0x9, 0xd41}}, {0x95, 0x6, 0x8b, 0x9, @time={0xff, 0x6}, {0x7, 0x8}, {0x4, 0x3}, @ext={0x77, &(0x7f00000000c0)="316887b1097bcd26ced8d42b53d33ec4459dd77056882486fb9055e1d8feb7056e32f8ef0886010168411d9ee5a70c203c818f49584eaffbd40c0373ea01495f6f426fcdfb5f535c612ac3b5f8d0fbfa5f582ead7e63731c42902d1dfa113401509f8f9ee2dca0cc533f14f18695fd222da69c06e00a91"}}], 0xfc)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x2, 0xffff}, 0x4, {0x40, 0xb8}, 0x0, 0x2, 0x1})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
fanotify_mark(r2, 0x71, 0x40000009, r3, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20142, 0x82)
r5 = fanotify_init(0x4, 0x101801)
fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000002200)=""/4102, 0x1006}], 0x1, 0xd, 0x0, 0x1f)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)

3.419695477s ago: executing program 3 (id=2967):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, 0x0)
r1 = io_uring_setup(0x2b9b, &(0x7f0000000640)={0x0, 0x658d, 0x800, 0x0, 0x2b4})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
syz_emit_ethernet(0x23e, &(0x7f0000000900)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x208, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xeea6, {0x0, 0x6, "9564ca", 0xfffe, 0x33, 0x0, @private2, @mcast2, [@hopopts={0x29, 0xf, '\x00', [@generic={0x8, 0x79, "8c6e5f3b0068ab4f1743cde41430184770c55c48173cc89e8432b4a97ab8657e3934a0691109da7f97c36714512ead7b7ab385a8702478416c861bc8cb7289c9d786c82d40c15a37d23fa1cef82a588dff81126bca62b2f866bdb825a5de1c90aee8d05567ce095b2b2979995ac85cffd8f821b394afe8f4af"}]}, @dstopts={0x2, 0xc, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xbd}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x4}, @pad1, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x28, {0x0, 0x8, 0xe, 0xf713, [0x8000000000000001, 0x4, 0xfffffffffffffffe, 0x100000000]}}]}, @routing={0x10, 0xe, 0x1, 0x4f, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', @remote]}, @fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x13, 0x67}, @dstopts={0xff, 0x9, '\x00', [@jumbo, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x101}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}], "7ecc4f8b252ca180"}}}}}}}, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'hsr0\x00', &(0x7f0000000380)=@ethtool_sset_info={0x37, 0xffff, 0x81}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'wp256\x00'}})
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x48000)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x66)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r6)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
unshare(0x2040400)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffffb9, r4, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x5, 0x4000000, 0x2, [<r9=>0x0, 0x0, 0x0, <r10=>0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r9, 0x0, 0x0, r10], [0x2b8]})
connect$rose(r6, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400800005000000010000003b7e0abf6b71368d448a", @ANYRES16=r12, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r13, @ANYBLOB="0a00180003030303030300001c005a801800008014000300060080040500080000800a0001009100"], 0x44}}, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="100027bd7000100000000000000008180300", @ANYRES32=0x0, @ANYBLOB="0500190107000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40001)

3.165505484s ago: executing program 3 (id=2968):
syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x6, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
shutdown(r0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000b00))
r3 = getpid()
ioprio_get$pid(0x3, r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x82}, [@IFLA_MAP={0x24, 0xe, {0x4, 0x24, 0x2, 0x1, 0x66, 0x1}}]}, 0x44}}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r6, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x6f8, 0x240940)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r7)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000400005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpgid(0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000040010403000000000000000000050100010000000000000000036e6fc57eb3114f50de1e90a806871f1b70"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)

2.831738669s ago: executing program 1 (id=2969):
r0 = memfd_create(0x0, 0x2)
fcntl$addseals(r0, 0x409, 0xd)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x6)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2000, 0xa3)

2.684315915s ago: executing program 1 (id=2970):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x46, &(0x7f0000000200), 0x4) (async)
syz_open_dev$MSR(&(0x7f0000000000), 0x80000001, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x9, 0x70bd25, 0x25dfdbfc, {}, [{0x4}]}, 0x18}}, 0xc0)

2.646160558s ago: executing program 2 (id=2971):
socket$nl_rdma(0x10, 0x3, 0x14)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x100ec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x3, "71e5dc119966c07bc6921cc3ec00801a498f4d9d5933aeeb8691e55ccc14f03d"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000100000d0a0000000001000000000000000000000900000d"], &(0x7f0000000f40)=""/4080, 0x82, 0xff0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231306010003000000002a90a08358477609b3"], 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_io_uring_setup(0x58f2, &(0x7f0000000300)={0x0, 0x1000f90c, 0x10100, 0x1, 0x387}, &(0x7f0000000240), 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000000)=""/192)
io_uring_enter(r0, 0x47ba, 0x3, 0x0, 0x0, 0x0)

2.053716177s ago: executing program 3 (id=2972):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000ac0)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @random="1771c706b3ab", {0x4, 0xe}, @device_a, @value={0x8, 0x1, 0x3, 0x1, 0x9}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast}, {@broadcast, @broadcast}, {@broadcast, @broadcast}]}, 0x54)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0))
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = dup(r4)
r8 = fcntl$dupfd(r5, 0x406, r6)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7})

955.768625ms ago: executing program 1 (id=2973):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000ac0)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @random="1771c706b3ab", {0x4, 0xe}, @device_a, @value={0x8, 0x1, 0x3, 0x1, 0x9}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast}, {@broadcast, @broadcast}, {@broadcast, @broadcast}]}, 0x54)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0))
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = dup(r4)
r8 = fcntl$dupfd(r5, 0x406, r6)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) (fail_nth: 1)

274.038805ms ago: executing program 3 (id=2974):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="3b000300010006", 0x7)

192.125031ms ago: executing program 4 (id=2975):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1e, "9f6a085d"}]}}, 0x0}, 0x0)

40.154695ms ago: executing program 1 (id=2976):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000080000000400000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x1010, 0xffffffffffffffff, 0xb150000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x220001, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
gettid()

22.235274ms ago: executing program 3 (id=2977):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x3e80, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x3e80, 0x4004000}}], 0x2, 0x0)

0s ago: executing program 0 (id=2978):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="7eaf0f5344bffe6a", 0x8}], 0x1}}], 0x2, 0x2004000) (async)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="7eaf0f5344bffe6a", 0x8}], 0x1}}], 0x2, 0x2004000)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001d00000427bd7000fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0100b40a0a000100aaaaaaaaaabb000008000800", @ANYRES32=0x0, @ANYBLOB="14000100fc000000001a0000000000000000000108000100ffffffff080004000100000008000d0000000100"], 0x5c}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
unshare(0x24060400) (async)
unshare(0x24060400)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fgetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) (async)
fgetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73)
syz_open_dev$sg(&(0x7f0000000500), 0xd, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000500), 0xd, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
umount2(&(0x7f0000000340)='./file0\x00', 0x1)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
gettid() (async)
r7 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)
preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)

kernel console output (not intermixed with test programs):

ed
[  601.115963][T11139] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  601.148954][T12333] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2019'.
[  601.278222][T11139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  601.309738][T11139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  601.340239][T11139] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  601.366077][T11139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.389150][T11139] usb 2-1: config 0 descriptor??
[  601.684649][   T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  601.735623][ T3081] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  601.972581][ T3081] usb 4-1: Using ep0 maxpacket: 16
[  602.043546][ T3081] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[  602.173517][ T3081] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  602.244807][ T3081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.406942][ T3081] usb 4-1: Product: syz
[  602.418936][ T3081] usb 4-1: Manufacturer: syz
[  602.429377][ T3081] usb 4-1: SerialNumber: syz
[  602.480197][ T3081] usb 4-1: config 0 descriptor??
[  602.498230][ T3081] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  602.539792][ T3081] usb 4-1: Detected FT232R
[  602.587963][T11139] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  602.595732][T11139] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  602.604096][T11139] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  602.610964][T11139] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  602.617914][T11139] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  602.624976][T11139] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  602.631802][T11139] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  602.645115][T11139] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  602.658639][   T10] usb 5-1: Using ep0 maxpacket: 16
[  602.674782][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  602.696358][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  602.717812][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.731550][   T10] usb 5-1: config 0 descriptor??
[  602.760035][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.763462][   T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30
[  602.793831][T11139] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device
[  602.801720][T11139] arvo 0003:1E7D:30D4.000E: couldn't install keyboard
[  602.806084][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.821069][T11139] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71
[  602.891517][ T3081] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  602.902102][T11139] usb 2-1: USB disconnect, device number 52
[  602.948422][   T10] bcm5974 5-1:0.0: could not read from device
[  602.963094][   T10] input: failed to attach handler mousedev to device input30, error: -5
[  602.981326][   T10] usb 5-1: USB disconnect, device number 61
[  602.987469][ T5177] bcm5974 5-1:0.0: could not read from device
[  603.131073][ T3081] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  603.441499][T12367] netlink: 'syz.1.2030': attribute type 29 has an invalid length.
[  603.451253][T12367] netlink: 'syz.1.2030': attribute type 29 has an invalid length.
[  603.460438][T12367] netlink: 'syz.1.2030': attribute type 29 has an invalid length.
[  603.469478][T12367] netlink: 'syz.1.2030': attribute type 29 has an invalid length.
[  603.672642][ T3081] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  603.734011][T12376] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2034'.
[  603.824511][ T3081] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  603.877307][ T3081] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  603.909434][ T3081] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72
[  603.945645][ T3081] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  603.973611][ T3081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.138184][ T3081] usb 1-1: Product: syz
[  604.174058][ T3081] usb 1-1: Manufacturer: syz
[  604.204491][ T3081] usb 1-1: SerialNumber: syz
[  604.329555][T12369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  604.583632][   T43] usb 4-1: USB disconnect, device number 55
[  604.621810][ T3081] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  604.640292][   T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  604.659256][   T43] ftdi_sio 4-1:0.0: device disconnected
[  604.789672][ T3081] kernel write not supported for file 1165/task/1165/uid_map (pid: 3081 comm: kworker/1:2)
[  604.819553][ T3081] usb 1-1: USB disconnect, device number 49
[  604.859898][ T3081] usblp0: removed
[  605.554832][T12401] team0: No ports can be present during mode change
[  606.710285][T12420] orangefs_mount: mount request failed with -4
[  606.869814][T12427] tc_dump_action: action bad kind
[  607.368906][T11139] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  608.578517][T11139] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  608.628021][T11139] usb 1-1: config 0 has no interface number 0
[  608.653185][T11139] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  608.682234][T11139] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  608.718564][T11139] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  608.736022][T11139] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  608.749601][T11139] usb 1-1: Product: syz
[  608.757378][T11139] usb 1-1: SerialNumber: syz
[  608.774103][T11139] usb 1-1: config 0 descriptor??
[  608.797916][T12446] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  608.952485][   T43] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  609.031473][T11139] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  609.119073][T11139] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -12
[  609.158414][ T3081] usb 5-1: new low-speed USB device number 62 using dummy_hcd
[  609.613393][   T43] usb 4-1: config 0 has an invalid interface number: 135 but max is 0
[  609.621646][   T43] usb 4-1: config 0 has no interface number 0
[  609.649017][   T43] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[  609.654541][T11139] usb 1-1: USB disconnect, device number 50
[  609.670218][   T43] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  609.695037][   T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65
[  609.711966][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.722087][   T43] usb 4-1: Product: syz
[  609.729925][   T43] usb 4-1: Manufacturer: syz
[  609.736743][   T43] usb 4-1: SerialNumber: syz
[  609.752225][   T43] usb 4-1: config 0 descriptor??
[  609.762221][ T3081] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  609.777789][ T3081] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  609.949830][T12442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  609.958108][T12442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  609.968503][ T3081] usb 5-1: string descriptor 0 read error: -22
[  609.975136][ T3081] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  609.985317][ T3081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.373024][T12442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  610.702643][T12442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  610.901413][ T3081] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  610.918708][ T3081] usb 5-1: MIDIStreaming interface descriptor not found
[  610.942146][   T43] asix 4-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  610.960139][ T3081] usb 5-1: USB disconnect, device number 62
[  610.969954][   T43] asix 4-1:0.135: probe with driver asix failed with error -71
[  611.002876][   T43] usb 4-1: USB disconnect, device number 56
[  611.021332][T12484] /dev/sg0: Can't lookup blockdev
[  611.412569][ T5895] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  611.444094][T12501] batman_adv: batadv0: Adding interface: dummy0
[  611.450419][T12501] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.477614][T12501] batman_adv: batadv0: Interface activated: dummy0
[  611.582070][ T5895] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  611.734587][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0
[  611.827275][ T5895] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  611.964539][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.163952][ T5895] usb 1-1: config 0 descriptor??
[  612.573010][ T3081] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  612.745612][ T3081] usb 4-1: Using ep0 maxpacket: 16
[  612.800947][ T3081] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  612.926946][ T3081] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  613.047988][ T3081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.183873][ T3081] usb 4-1: config 0 descriptor??
[  613.211642][ T3081] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31
[  613.323827][ T5895] corsair-cpro 0003:1B1C:1D00.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.0-1/input0
[  613.404834][ T5177] bcm5974 4-1:0.0: could not read from device
[  613.429547][ T5895] corsair-cpro 0003:1B1C:1D00.000F: probe with driver corsair-cpro failed with error -38
[  613.443013][ T3081] bcm5974 4-1:0.0: could not read from device
[  613.450822][ T5895] usb 1-1: USB disconnect, device number 51
[  613.459998][ T5177] bcm5974 4-1:0.0: could not read from device
[  613.490505][ T3081] input: failed to attach handler mousedev to device input31, error: -5
[  613.615429][T12530] 9pnet_fd: Insufficient options for proto=fd
[  613.694364][ T5177] bcm5974 4-1:0.0: could not read from device
[  613.703022][ T3081] usb 4-1: USB disconnect, device number 57
[  614.502605][   T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  615.237939][ T5877] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  615.264691][   T24] usb 2-1: config 0 has an invalid interface number: 80 but max is 0
[  615.379726][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  615.410762][   T24] usb 2-1: config 0 has no interface number 0
[  615.422612][   T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  615.456305][ T5877] usb 1-1: Using ep0 maxpacket: 8
[  615.465403][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.498146][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short
[  615.511612][ T5877] usb 1-1: config index 0 descriptor too short (expected 65534, got 116)
[  615.524012][   T24] usb 2-1: config 0 descriptor??
[  615.529252][ T5877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  615.563105][ T5877] usb 1-1: config 1 interface 1 has no altsetting 0
[  615.573374][ T5877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  615.603124][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.622813][ T5877] usb 1-1: Product: syz
[  615.632564][ T5877] usb 1-1: Manufacturer: syz
[  615.637326][ T5877] usb 1-1: SerialNumber: syz
[  615.858097][T12536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.967227][T12536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.080268][T12564] program syz.4.2092 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  616.214407][   T24] usb 2-1: string descriptor 0 read error: -32
[  616.418633][ T5877] usb 1-1: selecting invalid altsetting 0
[  616.437681][ T5877] usb 1-1: selecting invalid altsetting 0
[  616.449684][ T5877] cdc_ncm 1-1:1.0: bind() failure
[  616.477436][ T5877] usb 1-1: selecting invalid altsetting 0
[  616.495145][ T5877] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -22
[  616.519790][ T5877] usb 1-1: selecting invalid altsetting 0
[  616.537400][ T5877] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -22
[  616.562298][ T5877] usb 1-1: selecting invalid altsetting 0
[  616.742444][ T5877] usbtest 1-1:1.1: probe with driver usbtest failed with error -22
[  616.761661][ T5877] usb 1-1: USB disconnect, device number 52
[  617.999514][   T24] usb 2-1: USB disconnect, device number 53
[  618.294092][ T5895] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  619.202474][ T5895] usb 4-1: Using ep0 maxpacket: 8
[  619.216387][ T5895] usb 4-1: config 0 has no interfaces?
[  619.221938][ T5895] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  619.252915][T12591] geneve3: entered allmulticast mode
[  619.265922][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.288125][ T5895] usb 4-1: config 0 descriptor??
[  620.440237][T12616] netlink: 'syz.4.2110': attribute type 39 has an invalid length.
[  620.486770][T12618] 9pnet_fd: Insufficient options for proto=fd
[  620.732489][   T10] usb 4-1: USB disconnect, device number 58
[  621.982555][ T5877] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  622.024926][    T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  622.222649][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  622.258591][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  622.300619][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  622.321511][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.337924][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  622.348530][    T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  622.348647][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  622.357636][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.361109][    T9] usb 2-1: config 0 descriptor??
[  622.415309][ T5877] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  622.432497][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.462969][ T5877] usb 5-1: Product: syz
[  622.467206][ T5877] usb 5-1: Manufacturer: syz
[  622.494024][ T5877] usb 5-1: SerialNumber: syz
[  622.506110][ T5877] usb 5-1: config 0 descriptor??
[  622.528311][ T5877] usb 5-1: NFC: Unable to get FW version
[  622.551807][ T5877] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90
[  622.746944][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2115'.
[  622.761526][ T5877] usb 5-1: USB disconnect, device number 63
[  622.923285][T12671] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2128'.
[  622.977640][T12674] netlink: 'syz.3.2128': attribute type 7 has an invalid length.
[  622.988468][T12674] netlink: 'syz.3.2128': attribute type 8 has an invalid length.
[  623.063087][   T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  623.158763][    T9] hid-led 0003:27B8:01ED.0010: probe with driver hid-led failed with error -71
[  623.175603][    T9] usb 2-1: USB disconnect, device number 54
[  623.224513][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  623.240626][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  623.242006][   T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  623.261149][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  623.261179][   T24] usb 1-1: SerialNumber: syz
[  623.470586][   T24] usb 1-1: 0:2 : does not exist
[  623.486150][   T24] usb 1-1: USB disconnect, device number 53
[  623.836506][ T5877] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  624.046993][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  624.442595][ T5877] usb 5-1: Using ep0 maxpacket: 16
[  624.450270][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  624.729093][ T5877] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  624.738450][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.750522][ T5877] usb 5-1: config 0 descriptor??
[  624.761788][ T5877] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32
[  624.776251][T12701] bpq0: left allmulticast mode
[  624.862661][T12705] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.878205][T12705] bond0: (slave rose0): Enslaving as an active interface with an up link
[  624.964922][ T5177] bcm5974 5-1:0.0: could not read from device
[  624.976579][ T5877] bcm5974 5-1:0.0: could not read from device
[  624.983554][ T5177] bcm5974 5-1:0.0: could not read from device
[  625.010731][ T5877] input: failed to attach handler mousedev to device input32, error: -5
[  625.046416][ T5177] bcm5974 5-1:0.0: could not read from device
[  625.066159][ T5877] usb 5-1: USB disconnect, device number 64
[  625.261812][T12711] kvm: user requested TSC rate below hardware speed
[  625.857623][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2143'.
[  627.081965][T12746] FAULT_INJECTION: forcing a failure.
[  627.081965][T12746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.095182][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.4.2148 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[  627.095210][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  627.095222][T12746] Call Trace:
[  627.095230][T12746]  <TASK>
[  627.095240][T12746]  dump_stack_lvl+0x189/0x250
[  627.095274][T12746]  ? __pfx____ratelimit+0x10/0x10
[  627.095304][T12746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  627.095333][T12746]  ? __pfx__printk+0x10/0x10
[  627.095354][T12746]  ? __might_fault+0xb0/0x130
[  627.095393][T12746]  should_fail_ex+0x414/0x560
[  627.095429][T12746]  _copy_from_iter+0x1db/0x16f0
[  627.095462][T12746]  ? irqentry_exit+0x74/0x90
[  627.095491][T12746]  ? __pfx__copy_from_iter+0x10/0x10
[  627.095523][T12746]  ? netlink_sendmsg+0x642/0xb30
[  627.095545][T12746]  ? skb_put+0x11b/0x210
[  627.095572][T12746]  netlink_sendmsg+0x6b2/0xb30
[  627.095592][T12746]  ? trace_irq_disable+0x37/0x110
[  627.095627][T12746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  627.095652][T12746]  ? lockdep_hardirqs_on+0x9c/0x150
[  627.095684][T12746]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  627.095709][T12746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  627.095733][T12746]  __sock_sendmsg+0x219/0x270
[  627.095767][T12746]  ____sys_sendmsg+0x505/0x830
[  627.095798][T12746]  ? __pfx_____sys_sendmsg+0x10/0x10
[  627.095834][T12746]  ? import_iovec+0x74/0xa0
[  627.095871][T12746]  ___sys_sendmsg+0x21f/0x2a0
[  627.095900][T12746]  ? __pfx____sys_sendmsg+0x10/0x10
[  627.095966][T12746]  ? __fget_files+0x2a/0x420
[  627.095993][T12746]  ? __fget_files+0x3a0/0x420
[  627.096033][T12746]  __x64_sys_sendmsg+0x19b/0x260
[  627.096061][T12746]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  627.096107][T12746]  ? do_syscall_64+0xbe/0x3b0
[  627.096139][T12746]  do_syscall_64+0xfa/0x3b0
[  627.096169][T12746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.096187][T12746]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  627.096206][T12746]  ? clear_bhb_loop+0x60/0xb0
[  627.096230][T12746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.096250][T12746] RIP: 0033:0x7f031258e969
[  627.096268][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  627.096285][T12746] RSP: 002b:00007f0313423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  627.096307][T12746] RAX: ffffffffffffffda RBX: 00007f03127b6160 RCX: 00007f031258e969
[  627.096322][T12746] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 000000000000000e
[  627.096334][T12746] RBP: 00007f0313423090 R08: 0000000000000000 R09: 0000000000000000
[  627.096346][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.096357][T12746] R13: 0000000000000000 R14: 00007f03127b6160 R15: 00007ffedc8a20b8
[  627.096390][T12746]  </TASK>
[  627.369563][    C1] vkms_vblank_simulate: vblank timer overrun
[  627.495389][T12755] Bluetooth: MGMT ver 1.23
[  629.001630][T12782] 9pnet_fd: Insufficient options for proto=fd
[  630.193123][T12783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2159'.
[  630.522586][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  630.842130][    T9] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[  631.005262][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.125947][    T9] usb 1-1: config 0 descriptor??
[  631.185808][    T9] usb-storage 1-1:0.0: USB Mass Storage device detected
[  631.226525][    T9] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-syzkaller-11173-g546b1c9e93c2)
[  631.226525][    T9]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  631.288295][   T30] audit: type=1326 audit(1749004127.582:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12795 comm="syz.2.2164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500f78e969 code=0x0
[  631.343042][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'.
[  631.351980][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'.
[  631.368733][    T9] usb 1-1: USB disconnect, device number 54
[  631.401578][   T30] audit: type=1326 audit(1749004127.642:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12795 comm="syz.2.2164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500f78e969 code=0x0
[  631.592268][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'.
[  631.672515][T12808] netlink: 'syz.3.2168': attribute type 1 has an invalid length.
[  632.793395][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'.
[  633.680260][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2175'.
[  634.159533][T12846] tmpfs: Bad value for 'mpol'
[  635.806496][T12864] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2188'.
[  635.862532][T12838] Bluetooth: hci0: command 0x0406 tx timeout
[  635.866699][ T5828] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  636.556768][T12879] netlink: 'syz.0.2190': attribute type 4 has an invalid length.
[  638.283523][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'.
[  638.542753][   T24] usb 5-1: new low-speed USB device number 65 using dummy_hcd
[  638.728544][   T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  638.755848][   T24] usb 5-1: config 0 has no interface number 0
[  638.787167][   T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  638.810950][   T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  638.833803][   T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  638.861534][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.929788][   T24] usb 5-1: config 0 descriptor??
[  638.966533][T12886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  639.049207][   T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  639.262206][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2193'.
[  639.282607][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2193'.
[  639.437756][T11139] usb 5-1: USB disconnect, device number 65
[  639.445755][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'.
[  642.064458][T12931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2205'.
[  644.443357][   T24] kernel write not supported for file /dsp (pid: 24 comm: kworker/1:0)
[  644.493069][   T24] kernel write not supported for file /dsp (pid: 24 comm: kworker/1:0)
[  646.289068][T12962] netlink: 'syz.2.2214': attribute type 1 has an invalid length.
[  646.311628][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  646.343720][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  646.412478][   T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  646.476480][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'.
[  646.632447][   T10] usb 1-1: Using ep0 maxpacket: 8
[  647.255934][   T10] usb 1-1: config 0 has no interfaces?
[  647.327579][   T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc
[  647.367361][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.852424][   T10] usb 1-1: Manufacturer: �憢�撋葶쀫勓
[  647.858935][   T10] usb 1-1: SerialNumber: �
[  647.901348][   T10] r8152-cfgselector 1-1: Unknown version 0x0000
[  647.907938][   T10] r8152-cfgselector 1-1: config 0 descriptor??
[  648.067231][T12976] binder: 12975:12976 ioctl c0306201 0 returned -14
[  648.177433][   T10] r8152-cfgselector 1-1: USB disconnect, device number 55
[  648.735859][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2222'.
[  649.587324][T12993] FAULT_INJECTION: forcing a failure.
[  649.587324][T12993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  649.614812][T12993] CPU: 1 UID: 0 PID: 12993 Comm: syz.3.2226 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[  649.614845][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  649.614856][T12993] Call Trace:
[  649.614866][T12993]  <TASK>
[  649.614876][T12993]  dump_stack_lvl+0x189/0x250
[  649.614909][T12993]  ? __pfx____ratelimit+0x10/0x10
[  649.614937][T12993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  649.614965][T12993]  ? __pfx__printk+0x10/0x10
[  649.614999][T12993]  should_fail_ex+0x414/0x560
[  649.615050][T12993]  _copy_to_user+0x31/0xb0
[  649.615078][T12993]  simple_read_from_buffer+0xe1/0x170
[  649.615109][T12993]  proc_fail_nth_read+0x1df/0x250
[  649.615143][T12993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  649.615177][T12993]  ? rw_verify_area+0x258/0x650
[  649.615199][T12993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  649.615231][T12993]  vfs_read+0x200/0x980
[  649.615251][T12993]  ? cap_capable+0x11f/0x460
[  649.615286][T12993]  ? security_capable+0x7e/0x2e0
[  649.615308][T12993]  ? __pfx_vfs_read+0x10/0x10
[  649.615329][T12993]  ? ns_capable+0x8a/0xf0
[  649.615359][T12993]  ? do_fanotify_mark+0x7ff/0xf80
[  649.615379][T12993]  ? do_sys_openat2+0x154/0x1c0
[  649.615394][T12993]  ? kmem_cache_free+0x18f/0x400
[  649.615434][T12993]  ksys_read+0x145/0x250
[  649.615457][T12993]  ? __pfx_ksys_read+0x10/0x10
[  649.615476][T12993]  ? rcu_is_watching+0x15/0xb0
[  649.615507][T12993]  ? do_syscall_64+0xbe/0x3b0
[  649.615538][T12993]  do_syscall_64+0xfa/0x3b0
[  649.615564][T12993]  ? lockdep_hardirqs_on+0x9c/0x150
[  649.615592][T12993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.615612][T12993]  ? clear_bhb_loop+0x60/0xb0
[  649.615634][T12993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.615653][T12993] RIP: 0033:0x7f387518d37c
[  649.615672][T12993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  649.615691][T12993] RSP: 002b:00007f3875f4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  649.615712][T12993] RAX: ffffffffffffffda RBX: 00007f38753b5fa0 RCX: 00007f387518d37c
[  649.615726][T12993] RDX: 000000000000000f RSI: 00007f3875f4b0a0 RDI: 0000000000000004
[  649.615737][T12993] RBP: 00007f3875f4b090 R08: 0000000000000000 R09: 0000000000000000
[  649.615749][T12993] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  649.615761][T12993] R13: 0000000000000000 R14: 00007f38753b5fa0 R15: 00007ffdd9067fb8
[  649.615791][T12993]  </TASK>
[  649.887670][T12997] netlink: 'syz.1.2225': attribute type 1 has an invalid length.
[  650.595464][T12838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  650.613852][T12838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  650.622239][T12838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  650.630733][T12838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  650.641054][T12838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  650.788624][ T5829] bond0: (slave syz_tun): Releasing backup interface
[  650.823592][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'.
[  651.178852][  T194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.192245][  T194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  651.365871][  T194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.380077][  T194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  651.432381][T13021] 
: renamed from bond0 (while UP)
[  651.976601][  T194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.432433][  T194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  652.496708][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'.
[  652.520463][T13030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2233'.
[  652.625818][T13030] gretap3: entered promiscuous mode
[  652.672765][T13038] binder: 13037:13038 ioctl c0306201 200000000640 returned -22
[  652.742914][T12838] Bluetooth: hci3: command tx timeout
[  653.081734][  T194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.097529][  T194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  654.221033][T12996] chnl_net:caif_netlink_parms(): no params data found
[  654.376230][   T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1)
[  654.458945][  T194] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.486962][  T194] 
@ÿÿ: left allmulticast mode
[  654.491988][  T194] 
@ÿÿ: left promiscuous mode
[  654.501179][  T194] bridge0: port 1(
0
@ÿÿ) entered disabled state
[  654.822707][T12838] Bluetooth: hci3: command tx timeout
[  655.612589][   T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  655.772571][   T24] usb 2-1: Using ep0 maxpacket: 16
[  655.788597][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  655.802408][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  655.811652][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.845036][   T24] usb 2-1: config 0 descriptor??
[  655.894662][   T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35
[  656.042165][  T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  656.068375][ T5177] bcm5974 2-1:0.0: could not read from device
[  656.081072][   T24] bcm5974 2-1:0.0: could not read from device
[  656.088685][  T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  656.098508][ T5177] bcm5974 2-1:0.0: could not read from device
[  656.240475][   T24] input: failed to attach handler mousedev to device input35, error: -5
[  656.249550][  T194] bond0 (unregistering): Released all slaves
[  656.266034][ T5177] bcm5974 2-1:0.0: could not read from device
[  656.283091][ T5177] bcm5974 2-1:0.0: could not read from device
[  656.283501][   T24] usb 2-1: USB disconnect, device number 55
[  656.902619][T12838] Bluetooth: hci3: command tx timeout
[  657.871147][  T194] bond1 (unregistering): (slave veth3): Releasing active interface
[  657.879805][  T194] vlan0: entered promiscuous mode
[  657.897846][  T194] bond1 (unregistering): (slave vlan0): Releasing active interface
[  657.910022][  T194] bond1 (unregistering): Released all slaves
[  658.367697][T12996] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.375464][T12996] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.401669][T12996] bridge_slave_0: entered allmulticast mode
[  658.419554][T12996] bridge_slave_0: entered promiscuous mode
[  658.775075][T12996] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.784339][T12996] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.843873][T12996] bridge_slave_1: entered allmulticast mode
[  658.951425][T12996] bridge_slave_1: entered promiscuous mode
[  658.983007][T12838] Bluetooth: hci3: command tx timeout
[  660.797555][T12996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  661.861368][T12996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.906474][T12996] team0: Port device team_slave_0 added
[  662.945328][   T30] audit: type=1804 audit(1749004160.251:593): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2260" name="/" dev="pidfs" ino=13125 res=1 errno=0
[  662.946597][T13125] netlink: 'syz.1.2260': attribute type 2 has an invalid length.
[  662.988284][  T194] hsr_slave_0: left promiscuous mode
[  663.006294][  T194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  663.027409][  T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  663.052688][  T194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  663.110740][  T194] team_slave_1: left promiscuous mode
[  663.117278][   T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  663.133145][  T194] veth1_macvtap: left promiscuous mode
[  663.140590][  T194] veth0_macvtap: left promiscuous mode
[  663.353545][   T10] usb 1-1: Using ep0 maxpacket: 32
[  663.422537][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.524941][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.626613][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  663.713653][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.943324][   T10] usb 1-1: config 0 descriptor??
[  665.021888][   T10] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  665.116026][   T10] usb 1-1: USB disconnect, device number 56
[  669.462462][ T5877] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  670.318618][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short
[  670.366177][ T5877] usb 1-1: config 176 has an invalid interface number: 122 but max is 0
[  670.397761][ T5877] usb 1-1: config 176 has no interface number 0
[  670.412815][ T5877] usb 1-1: config 176 interface 122 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  670.442642][ T5877] usb 1-1: config 176 interface 122 has no altsetting 0
[  670.482627][ T5915] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  670.677587][ T5895] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  671.047930][ T5877] usb 1-1: string descriptor 0 read error: -71
[  671.055386][ T5877] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  671.064995][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.184632][ T5915] usb 4-1: config 16 has an invalid interface number: 168 but max is 0
[  671.218321][ T5895] usb 5-1: Using ep0 maxpacket: 16
[  671.219395][ T5877] usb 1-1: can't set config #176, error -71
[  671.240262][ T5915] usb 4-1: config 16 has no interface number 0
[  671.241716][ T5895] usb 5-1: config 8 has an invalid interface number: 206 but max is 0
[  671.259487][ T5915] usb 4-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  671.275166][ T5877] usb 1-1: USB disconnect, device number 57
[  671.281960][ T5895] usb 5-1: config 8 has no interface number 0
[  671.290789][ T5915] usb 4-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  671.307766][ T5895] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  671.308582][ T5915] usb 4-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a
[  671.336894][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.349461][ T5895] usb 5-1: config 8 interface 206 has no altsetting 0
[  671.373932][T13162] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  671.382653][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  671.392218][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.406911][ T5915] HFC-S_USB 4-1:16.168: probe with driver HFC-S_USB failed with error -5
[  671.423019][ T5895] usb 5-1: Product: syz
[  671.427381][ T5895] usb 5-1: Manufacturer: syz
[  671.433398][ T5895] usb 5-1: SerialNumber: syz
[  671.538494][  T194] team0 (unregistering): Port device team_slave_1 removed
[  671.600296][  T194] team0 (unregistering): Port device team_slave_0 removed
[  671.671664][ T5895] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected
[  671.732695][T11139] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  671.752105][ T5895] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  671.799389][ T5895] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  671.832126][ T5895] usb 5-1: USB disconnect, device number 66
[  671.844002][ T5895] garmin_gps 5-1:8.206: device disconnected
[  671.922694][T11139] usb 2-1: device descriptor read/64, error -71
[  672.162428][T11139] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  672.305052][T11139] usb 2-1: device descriptor read/64, error -71
[  672.425532][ T5915] usb 4-1: USB disconnect, device number 59
[  672.453231][T11139] usb usb2-port1: attempt power cycle
[  672.701794][T12996] team0: Port device team_slave_1 added
[  672.816132][T11139] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  672.861044][T11139] usb 2-1: device descriptor read/8, error -71
[  672.899063][T12996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.913805][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.944347][T12996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.971242][T12996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.980727][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.060457][T12996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.162360][T11139] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  673.201195][T11139] usb 2-1: device descriptor read/8, error -71
[  673.281632][T12996] hsr_slave_0: entered promiscuous mode
[  673.312883][T11139] usb usb2-port1: unable to enumerate USB device
[  673.337830][T12996] hsr_slave_1: entered promiscuous mode
[  673.338713][T12996] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  673.338775][T12996] Cannot create hsr debugfs directory
[  673.392121][  T194] IPVS: stop unused estimator thread 0...
[  675.057273][T13213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.976663][T12838] Bluetooth: hci4: unexpected cc 0x0809 length: 68 > 4
[  675.984089][T12838] Bluetooth: hci4: unexpected event for opcode 0x0809
[  676.216030][   T30] audit: type=1400 audit(1749004173.521:594): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13220 comm="syz.0.2290"
[  676.268058][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2292'.
[  676.619402][T12996] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  676.645036][T12996] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  676.656623][T12996] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  676.663940][T12996] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  678.722872][T12996] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.977402][T12996] 8021q: adding VLAN 0 to HW filter on device team0
[  679.014586][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.021841][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.044674][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.053326][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.094008][ T5895] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  679.169824][T13268] 9pnet_fd: Insufficient options for proto=fd
[  679.370263][ T5895] usb 1-1: device descriptor read/64, error -71
[  679.589190][T12996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  679.623298][ T5895] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  679.681562][T12996] veth0_vlan: entered promiscuous mode
[  679.697436][T12996] veth1_vlan: entered promiscuous mode
[  679.775625][ T5895] usb 1-1: device descriptor read/64, error -71
[  679.784803][T12996] veth0_macvtap: entered promiscuous mode
[  679.807440][T12996] veth1_macvtap: entered promiscuous mode
[  679.840829][T12996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  679.866564][T12996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  679.876492][T12996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.895483][ T5895] usb usb1-port1: attempt power cycle
[  679.907213][T12996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.907256][T12996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  679.907287][T12996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.170888][ T6235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.193229][ T6235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.242614][ T5895] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  680.267716][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.291958][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.300492][ T5895] usb 1-1: device descriptor read/8, error -71
[  680.552699][ T5895] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  680.601596][ T5895] usb 1-1: device descriptor read/8, error -71
[  680.655522][T13294] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2308'.
[  680.733143][ T5895] usb usb1-port1: unable to enumerate USB device
[  680.863349][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'.
[  681.088515][   T30] audit: type=1326 audit(1749004178.391:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.123455][   T30] audit: type=1326 audit(1749004178.391:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.170588][   T30] audit: type=1326 audit(1749004178.391:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.193633][   T30] audit: type=1326 audit(1749004178.391:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.193695][   T30] audit: type=1326 audit(1749004178.391:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.193742][   T30] audit: type=1326 audit(1749004178.391:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d0f90887 code=0x7ffc0000
[  681.193787][   T30] audit: type=1326 audit(1749004178.391:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.193835][   T30] audit: type=1326 audit(1749004178.391:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.193883][   T30] audit: type=1326 audit(1749004178.391:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  681.491389][T13316] FAULT_INJECTION: forcing a failure.
[  681.491389][T13316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.512045][T13316] CPU: 1 UID: 0 PID: 13316 Comm: syz.2.2314 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[  681.512079][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  681.512091][T13316] Call Trace:
[  681.512100][T13316]  <TASK>
[  681.512109][T13316]  dump_stack_lvl+0x189/0x250
[  681.512144][T13316]  ? __pfx____ratelimit+0x10/0x10
[  681.512175][T13316]  ? __pfx_dump_stack_lvl+0x10/0x10
[  681.512204][T13316]  ? __pfx__printk+0x10/0x10
[  681.512241][T13316]  should_fail_ex+0x414/0x560
[  681.512283][T13316]  _copy_to_user+0x31/0xb0
[  681.512311][T13316]  simple_read_from_buffer+0xe1/0x170
[  681.512341][T13316]  proc_fail_nth_read+0x1df/0x250
[  681.512375][T13316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  681.512409][T13316]  ? rw_verify_area+0x258/0x650
[  681.512432][T13316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  681.512466][T13316]  vfs_read+0x200/0x980
[  681.512497][T13316]  ? __pfx___mutex_lock+0x10/0x10
[  681.512529][T13316]  ? __pfx_vfs_read+0x10/0x10
[  681.512556][T13316]  ? __fget_files+0x2a/0x420
[  681.512590][T13316]  ? __fget_files+0x3a0/0x420
[  681.512616][T13316]  ? __fget_files+0x2a/0x420
[  681.512655][T13316]  ksys_read+0x145/0x250
[  681.512681][T13316]  ? __pfx_ksys_read+0x10/0x10
[  681.512702][T13316]  ? rcu_is_watching+0x15/0xb0
[  681.512738][T13316]  ? do_syscall_64+0xbe/0x3b0
[  681.512773][T13316]  do_syscall_64+0xfa/0x3b0
[  681.512801][T13316]  ? lockdep_hardirqs_on+0x9c/0x150
[  681.512829][T13316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.512849][T13316]  ? clear_bhb_loop+0x60/0xb0
[  681.512875][T13316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.512894][T13316] RIP: 0033:0x7fe8d0f8d37c
[  681.512923][T13316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  681.512941][T13316] RSP: 002b:00007fe8d1d84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  681.512965][T13316] RAX: ffffffffffffffda RBX: 00007fe8d11b5fa0 RCX: 00007fe8d0f8d37c
[  681.512979][T13316] RDX: 000000000000000f RSI: 00007fe8d1d840a0 RDI: 0000000000000004
[  681.512991][T13316] RBP: 00007fe8d1d84090 R08: 0000000000000000 R09: 0000000000000000
[  681.513003][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.513015][T13316] R13: 0000000000000000 R14: 00007fe8d11b5fa0 R15: 00007fffef12d9a8
[  681.513050][T13316]  </TASK>
[  684.015138][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  684.015159][   T30] audit: type=1400 audit(1749004181.321:626): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13344 comm="syz.4.2324" dest=20004
[  684.041071][T13345] cgroup: Invalid name
[  684.111907][T12838] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  684.363897][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2325'.
[  684.531563][T13355] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  685.196054][ T5915] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  685.355822][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  685.376916][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64
[  685.399102][ T5915] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  685.418767][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.432959][ T5915] usb 3-1: config 0 descriptor??
[  685.468287][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  685.772460][ T5915] ath6kl: Failed to submit usb control message: -71
[  685.784049][ T5915] ath6kl: unable to send the bmi data to the device: -71
[  685.803932][ T5915] ath6kl: Unable to send get target info: -71
[  685.830984][ T5915] ath6kl: Failed to init ath6kl core: -71
[  685.843913][ T5915] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  685.870949][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'.
[  685.897849][ T5915] usb 3-1: USB disconnect, device number 2
[  686.152559][T11139] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  686.310448][T11139] usb 4-1: Using ep0 maxpacket: 16
[  686.320375][T11139] usb 4-1: unable to get BOS descriptor or descriptor too short
[  686.333696][T11139] usb 4-1: no configurations
[  686.338350][T11139] usb 4-1: can't read configurations, error -22
[  686.482804][T11139] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  686.632622][T11139] usb 4-1: Using ep0 maxpacket: 16
[  686.650682][T11139] usb 4-1: unable to get BOS descriptor or descriptor too short
[  686.672839][T11139] usb 4-1: no configurations
[  686.697625][T11139] usb 4-1: can't read configurations, error -22
[  686.733108][T11139] usb usb4-port1: attempt power cycle
[  687.083315][T11139] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  687.283469][T13398] Bluetooth: MGMT ver 1.23
[  687.570073][T11139] usb 4-1: Using ep0 maxpacket: 16
[  687.977839][T11139] usb 4-1: unable to get BOS descriptor or descriptor too short
[  688.190543][T11139] usb 4-1: no configurations
[  688.199829][T11139] usb 4-1: can't read configurations, error -22
[  688.342421][T11139] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  688.383440][T11139] usb 4-1: Using ep0 maxpacket: 16
[  688.404255][T11139] usb 4-1: unable to get BOS descriptor or descriptor too short
[  688.419712][T11139] usb 4-1: no configurations
[  688.426249][T11139] usb 4-1: can't read configurations, error -22
[  688.446547][T11139] usb usb4-port1: unable to enumerate USB device
[  690.131008][ T5877] kernel write not supported for file /input/event2 (pid: 5877 comm: kworker/1:5)
[  690.195928][T13438] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  691.180623][ T5895] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  691.379272][ T5895] usb 5-1: Using ep0 maxpacket: 8
[  691.610507][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short
[  691.732775][ T5895] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  691.782662][ T5895] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  691.838575][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  691.918162][ T5895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  691.961973][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.041535][ T5895] usb 5-1: Product: syz
[  692.055700][ T5895] usb 5-1: Manufacturer: syz
[  692.067780][ T5895] usb 5-1: SerialNumber: syz
[  693.776660][ T5895] usb 5-1: can't set config #1, error -71
[  693.852854][ T5895] usb 5-1: USB disconnect, device number 67
[  694.959460][T13481] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  694.991871][T13481] audit: out of memory in audit_log_start
[  696.794789][T12838] Bluetooth: hci5: command 0x1003 tx timeout
[  696.842525][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  697.945797][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'.
[  699.941324][T13518] netlink: 'syz.1.2374': attribute type 2 has an invalid length.
[  699.980541][T13518] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2374'.
[  704.090676][T12838] Bluetooth: hci5: command 0x1003 tx timeout
[  704.090896][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  704.768825][   T30] audit: type=1400 audit(1749004202.071:627): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13565 comm="syz.2.2388" daddr=::ffff:172.20.20.187 dest=65533
[  706.225342][T13577] fuse: Unknown parameter '0x0000000000000003'
[  707.186901][  T194] Bluetooth: hci5: Frame reassembly failed (-84)
[  709.241803][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  711.262496][ T5915] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  711.398516][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'.
[  711.412671][ T5915] usb 5-1: device descriptor read/64, error -71
[  711.747117][ T5915] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  712.601773][ T5915] usb 5-1: device descriptor read/64, error -71
[  712.723662][ T5915] usb usb5-port1: attempt power cycle
[  716.109602][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  716.117242][T12838] Bluetooth: hci5: command 0x1003 tx timeout
[  717.123819][   T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1)
[  717.304214][T13677] batadv1: entered promiscuous mode
[  717.310913][T13677] 8021q: adding VLAN 0 to HW filter on device batadv1
[  719.105754][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'.
[  722.106254][T13733] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  722.732425][    T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  722.887505][   T30] audit: type=1326 audit(1749004220.191:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  722.927810][    T9] usb 1-1: config 0 has an invalid interface number: 215 but max is 0
[  723.148337][    T9] usb 1-1: config 0 has no interface number 0
[  723.166514][    T9] usb 1-1: config 0 interface 215 has no altsetting 0
[  723.173441][   T30] audit: type=1326 audit(1749004220.191:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  723.448221][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0467, bcdDevice=6d.1a
[  724.068741][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.077198][   T30] audit: type=1326 audit(1749004220.191:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  724.102522][    T9] usb 1-1: config 0 descriptor??
[  724.154682][   T30] audit: type=1326 audit(1749004220.191:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  724.189633][   T30] audit: type=1326 audit(1749004220.191:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  724.992674][   T30] audit: type=1326 audit(1749004220.191:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d0f90887 code=0x7ffc0000
[  725.064551][   T30] audit: type=1326 audit(1749004220.191:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  725.098425][   T30] audit: type=1326 audit(1749004220.191:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  725.125258][   T30] audit: type=1326 audit(1749004220.191:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  725.253187][ T5877] usb 1-1: USB disconnect, device number 62
[  725.312356][   T30] audit: type=1326 audit(1749004220.191:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13749 comm="syz.2.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8d0f8e969 code=0x7ffc0000
[  725.576815][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'.
[  725.941984][T13789] xt_l2tp: invalid flags combination: 4
[  725.949679][T13789] syz.1.2454: attempt to access beyond end of device
[  725.949679][T13789] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0
[  725.963292][T13789] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  726.171806][T13793] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  726.193054][T13801] FAULT_INJECTION: forcing a failure.
[  726.193054][T13801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  726.206408][T13801] CPU: 1 UID: 0 PID: 13801 Comm: syz.1.2459 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[  726.206437][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  726.206449][T13801] Call Trace:
[  726.206457][T13801]  <TASK>
[  726.206466][T13801]  dump_stack_lvl+0x189/0x250
[  726.206502][T13801]  ? __pfx____ratelimit+0x10/0x10
[  726.206531][T13801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  726.206559][T13801]  ? __pfx__printk+0x10/0x10
[  726.206581][T13801]  ? __might_fault+0xb0/0x130
[  726.206620][T13801]  should_fail_ex+0x414/0x560
[  726.206655][T13801]  _copy_from_user+0x2d/0xb0
[  726.206682][T13801]  ___sys_sendmsg+0x158/0x2a0
[  726.206712][T13801]  ? __pfx____sys_sendmsg+0x10/0x10
[  726.206780][T13801]  ? __fget_files+0x2a/0x420
[  726.206807][T13801]  ? __fget_files+0x3a0/0x420
[  726.206847][T13801]  __x64_sys_sendmsg+0x19b/0x260
[  726.206875][T13801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  726.206920][T13801]  ? __pfx_ksys_write+0x10/0x10
[  726.206942][T13801]  ? rcu_is_watching+0x15/0xb0
[  726.206977][T13801]  ? do_syscall_64+0xbe/0x3b0
[  726.207012][T13801]  do_syscall_64+0xfa/0x3b0
[  726.207039][T13801]  ? lockdep_hardirqs_on+0x9c/0x150
[  726.207067][T13801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.207086][T13801]  ? clear_bhb_loop+0x60/0xb0
[  726.207112][T13801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.207131][T13801] RIP: 0033:0x7f127178e969
[  726.207149][T13801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  726.207165][T13801] RSP: 002b:00007f127260f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  726.207187][T13801] RAX: ffffffffffffffda RBX: 00007f12719b5fa0 RCX: 00007f127178e969
[  726.207202][T13801] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  726.207215][T13801] RBP: 00007f127260f090 R08: 0000000000000000 R09: 0000000000000000
[  726.207227][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.207238][T13801] R13: 0000000000000000 R14: 00007f12719b5fa0 R15: 00007ffd41bd59f8
[  726.207271][T13801]  </TASK>
[  726.721469][ T5877] kernel write not supported for file /input/event2 (pid: 5877 comm: kworker/1:5)
[  729.132675][ T5915] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  729.140387][ T5877] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  729.470264][ T5877] usb 5-1: Using ep0 maxpacket: 32
[  729.475558][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  729.483341][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.494917][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  729.505718][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  729.532609][ T5877] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  729.541714][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.560352][ T5915] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  729.615319][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.625709][ T5877] usb 5-1: config 0 descriptor??
[  729.649317][ T5915] usb 4-1: config 0 descriptor??
[  729.667480][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36
[  729.902162][ T5177] bcm5974 4-1:0.0: could not read from device
[  730.043126][ T5177] bcm5974 4-1:0.0: could not read from device
[  730.228993][ T5877] usbhid 5-1:0.0: can't add hid device: -71
[  730.235429][ T5915] bcm5974 4-1:0.0: could not read from device
[  730.235692][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  730.242116][ T5877] usb 5-1: USB disconnect, device number 71
[  730.258976][ T5915] input: failed to attach handler mousedev to device input36, error: -5
[  730.275751][ T5177] bcm5974 4-1:0.0: could not read from device
[  730.277922][ T5915] usb 4-1: USB disconnect, device number 64
[  730.307324][ T5177] bcm5974 4-1:0.0: could not read from device
[  732.884325][ T5915] kernel write not supported for file /input/event2 (pid: 5915 comm: kworker/1:6)
[  733.052770][ T5915] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  733.506925][ T5915] usb 4-1: config 0 has an invalid interface number: 177 but max is 0
[  733.548602][ T5915] usb 4-1: config 0 has no interface number 0
[  733.739289][ T5915] usb 4-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=39.5d
[  733.748554][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.757739][ T5915] usb 4-1: Product: syz
[  733.762066][ T5915] usb 4-1: Manufacturer: syz
[  733.766857][ T5915] usb 4-1: SerialNumber: syz
[  733.791798][ T5915] usb 4-1: config 0 descriptor??
[  736.413608][ T5915] usb 4-1: USB disconnect, device number 65
[  737.922441][ T5915] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  738.917264][T13904] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049)
[  739.042372][ T5915] usb 1-1: Using ep0 maxpacket: 32
[  739.068048][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  739.117770][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  739.155308][ T5915] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  739.192566][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.299711][ T5915] usb 1-1: config 0 descriptor??
[  740.603541][ T5915] usbhid 1-1:0.0: can't add hid device: -71
[  740.610359][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  740.635393][ T5915] usb 1-1: USB disconnect, device number 63
[  741.522445][ T5915] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  741.682520][ T5915] usb 2-1: device descriptor read/64, error -71
[  741.922525][ T5915] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  742.092488][ T5915] usb 2-1: device descriptor read/64, error -71
[  742.232618][ T5915] usb usb2-port1: attempt power cycle
[  742.369032][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'.
[  742.402442][    T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  742.564387][    T9] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  742.575738][    T9] usb 4-1: config 0 has no interface number 0
[  742.586406][    T9] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  742.599856][ T5915] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  742.602384][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.632387][ T5895] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  742.643176][ T5915] usb 2-1: device descriptor read/8, error -71
[  742.647304][    T9] usb 4-1: config 0 descriptor??
[  742.671679][    T9] usb 4-1: bad CDC descriptors
[  742.827316][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.855502][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.878130][ T5895] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  742.892441][ T5915] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  742.938707][ T5915] usb 2-1: device descriptor read/8, error -71
[  742.942598][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.073268][ T5915] usb usb2-port1: unable to enumerate USB device
[  743.127355][   T10] usb 4-1: USB disconnect, device number 66
[  743.136426][ T5895] usb 5-1: config 0 descriptor??
[  743.881872][ T5895] hid_mf 0003:0079:1846.0012: unknown main item tag 0x0
[  743.947492][ T5895] hid_mf 0003:0079:1846.0012: unknown main item tag 0x0
[  744.028026][ T5895] hid_mf 0003:0079:1846.0012: unknown main item tag 0x0
[  744.182988][ T5895] hid_mf 0003:0079:1846.0012: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0
[  744.203711][ T5895] hid_mf 0003:0079:1846.0012: Invalid report, this should never happen!
[  744.216711][ T5895] hid_mf 0003:0079:1846.0012: Force feedback init failed.
[  744.900565][ T5895] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  745.082339][ T5895] usb 2-1: Using ep0 maxpacket: 32
[  745.103358][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.121879][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  745.151437][ T5895] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  745.194078][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.217102][ T5895] usb 2-1: config 0 descriptor??
[  745.531406][ T3081] usb 5-1: USB disconnect, device number 72
[  745.894141][ T5895] usbhid 2-1:0.0: can't add hid device: -71
[  745.900260][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  745.922615][ T5895] usb 2-1: USB disconnect, device number 64
[  745.928621][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'.
[  746.176985][ T5895] kernel write not supported for file /input/event2 (pid: 5895 comm: kworker/0:5)
[  746.306901][ T3081] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  746.953203][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'.
[  746.963607][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'.
[  746.998218][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  747.086105][ T3081] usb 3-1: Using ep0 maxpacket: 16
[  747.104063][ T3081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  747.117361][ T3081] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  747.126713][ T3081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.138568][ T3081] usb 3-1: config 0 descriptor??
[  747.175976][ T3081] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37
[  747.372679][ T3081] bcm5974 3-1:0.0: could not read from device
[  747.402963][ T5177] bcm5974 3-1:0.0: could not read from device
[  747.505432][ T3081] input: failed to attach handler mousedev to device input37, error: -5
[  747.602633][ T5177] bcm5974 3-1:0.0: could not read from device
[  747.621659][ T3081] usb 3-1: USB disconnect, device number 3
[  747.644280][T14011] netlink: 'syz.1.2522': attribute type 1 has an invalid length.
[  747.652058][T14011] netlink: 'syz.1.2522': attribute type 2 has an invalid length.
[  748.844045][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'.
[  752.372821][T14044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2534'.
[  753.849001][T14061] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2537'.
[  754.165936][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'.
[  755.442631][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  755.442654][   T30] audit: type=1400 audit(1749004252.731:655): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14080 comm="syz.1.2542" daddr=::ffff:172.20.20.0
[  756.658916][T14105] 9pnet_fd: Insufficient options for proto=fd
[  757.632456][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  759.003698][ T5915] kernel write not supported for file /input/event2 (pid: 5915 comm: kworker/1:6)
[  760.366206][   T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  760.378861][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.172349][   T24] usb 3-1: Product: syz
[  762.176757][   T24] usb 3-1: Manufacturer: syz
[  762.181546][   T24] usb 3-1: SerialNumber: syz
[  762.189509][   T24] usb 3-1: config 0 descriptor??
[  762.198353][   T24] usb 3-1: can't set config #0, error -71
[  762.208440][   T24] usb 3-1: USB disconnect, device number 4
[  762.582384][ T5877] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  762.692713][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'.
[  762.734875][ T5877] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  762.764555][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  762.801403][ T5877] usb 1-1: config 0 has no interface number 0
[  762.827725][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  762.850003][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.882067][ T5877] usb 1-1: Product: syz
[  762.901643][ T5877] usb 1-1: Manufacturer: syz
[  762.927095][ T5877] usb 1-1: SerialNumber: syz
[  762.957180][ T5877] usb 1-1: config 0 descriptor??
[  763.155373][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2556'.
[  763.204756][ T5877] usb 1-1: USB disconnect, device number 64
[  765.260566][T14131] fuse: Bad value for 'fd'
[  765.930254][ T5877] kernel write not supported for file /input/event2 (pid: 5877 comm: kworker/1:5)
[  766.480331][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'.
[  766.594692][ T5828] Bluetooth: hci3: link tx timeout
[  766.600250][ T5828] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  767.340312][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  767.617147][   T10] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  767.709871][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.828025][   T10] usb 3-1: Product: syz
[  767.911964][   T10] usb 3-1: Manufacturer: syz
[  767.992650][   T10] usb 3-1: SerialNumber: syz
[  768.171953][   T10] usb 3-1: config 0 descriptor??
[  768.253577][   T10] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 005
[  768.679253][T12838] Bluetooth: hci3: command 0x0406 tx timeout
[  769.025382][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  769.432434][    T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  770.351741][   T10]  (null): failure setting delay to 10us
[  770.357550][   T10] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  770.390009][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.462551][    T9] usb 4-1: Using ep0 maxpacket: 32
[  770.468617][ T5915] usb 3-1: USB disconnect, device number 5
[  770.469882][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  770.497028][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  770.529026][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  770.548345][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.562481][    T9] usb 4-1: config 0 descriptor??
[  770.675138][   T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1)
[  770.989108][    T9] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  771.272848][   T10] usb 4-1: USB disconnect, device number 67
[  771.539762][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'.
[  774.734374][T14253] netlink: 'syz.2.2587': attribute type 1 has an invalid length.
[  774.742439][T14253] netlink: 'syz.2.2587': attribute type 2 has an invalid length.
[  774.752498][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'.
[  774.832680][ T5915] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  775.032346][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  775.045794][ T5915] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  775.054330][ T5915] usb 4-1: config 0 has no interface number 0
[  775.061335][ T5915] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  775.242071][ T5915] usb 4-1: config 0 interface 85 has no altsetting 0
[  775.257613][T11139] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  775.265075][ T5915] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  775.301785][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.357767][ T5915] usb 4-1: Product: syz
[  775.377076][ T5915] usb 4-1: Manufacturer: syz
[  775.382040][ T5915] usb 4-1: SerialNumber: syz
[  775.425227][ T5915] usb 4-1: config 0 descriptor??
[  775.473640][T11139] usb 1-1: Using ep0 maxpacket: 8
[  775.492822][T11139] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17
[  775.727493][T11139] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  775.747325][T11139] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  775.772310][T11139] usb 1-1: Product: syz
[  775.776672][T11139] usb 1-1: Manufacturer: syz
[  775.781312][T11139] usb 1-1: SerialNumber: syz
[  775.795564][T11139] usb 1-1: config 0 descriptor??
[  776.058115][T11139] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  776.097441][T14264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  776.137511][T14264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.369500][T14264] loop6: detected capacity change from 0 to 524287999
[  776.563948][T14268] netlink: 'syz.0.2589': attribute type 27 has an invalid length.
[  776.577986][ T5915] appletouch 4-1:0.85: Failed to request geyser raw mode
[  776.595622][ T5915] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  776.627613][ T5915] usb 4-1: USB disconnect, device number 68
[  776.873981][T11139] gspca_sunplus: reg_w_riv err -71
[  776.881506][T11139] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  776.896267][T11139] usb 1-1: USB disconnect, device number 65
[  777.325680][ T5877] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  777.754062][   T49] Bluetooth: hci5: Frame reassembly failed (-84)
[  777.767294][T14289] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2599'.
[  777.804122][T14289] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2599'.
[  777.902634][ T5877] usb 3-1: Using ep0 maxpacket: 16
[  777.917088][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  777.949829][ T5877] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  777.982361][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.088409][ T5877] usb 3-1: config 0 descriptor??
[  778.343023][ T5877] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39
[  778.549669][ T5177] bcm5974 3-1:0.0: could not read from device
[  778.894649][ T5877] bcm5974 3-1:0.0: could not read from device
[  779.049806][ T5877] input: failed to attach handler mousedev to device input39, error: -5
[  779.083289][ T5177] bcm5974 3-1:0.0: could not read from device
[  779.101743][ T5877] usb 3-1: USB disconnect, device number 6
[  779.693534][ T5177] bcm5974 3-1:0.0: could not read from device
[  779.712481][T12838] Bluetooth: hci5: command 0x1003 tx timeout
[  779.714590][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  779.848323][    T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0)
[  781.236307][T14325] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2605'.
[  781.245352][T14325] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2605'.
[  781.973194][T14331] block nbd0: server does not support multiple connections per device.
[  781.981810][T14331] block nbd0: shutting down sockets
[  782.087657][T14341] netlink: 'syz.1.2611': attribute type 5 has an invalid length.
[  782.112489][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2611'.
[  782.142753][ T5877] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  782.314630][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  782.345062][ T5877] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  782.368374][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.402646][ T5877] usb 3-1: config 0 descriptor??
[  783.799875][   T49] Bluetooth: hci5: Frame reassembly failed (-84)
[  784.059130][   T24] usb 3-1: USB disconnect, device number 7
[  784.150106][    T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0)
[  785.930844][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  785.940236][T12838] Bluetooth: hci5: command 0x1003 tx timeout
[  787.928783][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'.
[  788.862656][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2629'.
[  790.082365][ T5877] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  790.262514][ T5877] usb 1-1: Using ep0 maxpacket: 16
[  790.284871][ T5877] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  790.416686][ T5877] usb 1-1: config 0 has no interface number 0
[  790.585796][ T5877] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  790.600999][ T5877] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  790.635439][ T5877] usb 1-1: config 0 interface 8 has no altsetting 0
[  790.652327][ T5877] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  790.680030][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.723151][ T5877] usb 1-1: config 0 descriptor??
[  791.158078][ T5877] uclogic 0003:5543:0522.0014: item fetching failed at offset 2/5
[  791.174475][ T5877] uclogic 0003:5543:0522.0014: parse failed
[  791.197971][ T5877] uclogic 0003:5543:0522.0014: probe with driver uclogic failed with error -22
[  793.416449][   T10] usb 1-1: USB disconnect, device number 66
[  794.250750][ T5894] Bluetooth: hci5: Frame reassembly failed (-84)
[  794.723622][T14452] Invalid logical block size (21760)
[  794.859661][   T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0)
[  794.882595][ T3081] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  794.924757][T14456] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  795.944056][T12838] Bluetooth: hci5: command 0x1003 tx timeout
[  795.952852][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  796.455568][T14468] binder: 14467:14468 ioctl c0306201 200000000080 returned -14
[  796.884470][T14473] 9pnet_fd: Insufficient options for proto=fd
[  799.586736][ T3081] kernel write not supported for file /input/event2 (pid: 3081 comm: kworker/1:2)
[  800.084548][ T3081] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  800.262348][ T3081] usb 2-1: Using ep0 maxpacket: 16
[  800.629744][ T3081] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  800.643278][ T3081] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  800.652959][ T3081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.695407][ T3081] usb 2-1: config 0 descriptor??
[  800.730402][ T3081] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input40
[  800.924206][ T5177] bcm5974 2-1:0.0: could not read from device
[  800.958013][ T5177] bcm5974 2-1:0.0: could not read from device
[  801.186432][ T5177] bcm5974 2-1:0.0: could not read from device
[  801.250925][ T3081] usb 2-1: USB disconnect, device number 65
[  805.075176][T14529] netlink: 'syz.1.2664': attribute type 12 has an invalid length.
[  805.262807][T14536] batadv_slave_1: entered promiscuous mode
[  805.297587][   T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0)
[  806.333561][T14534] batadv_slave_1: left promiscuous mode
[  806.612369][   T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  806.802343][    T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  806.968422][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'.
[  807.052332][    T9] usb 5-1: Using ep0 maxpacket: 16
[  807.065081][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  807.083872][   T24] usb 1-1: Using ep0 maxpacket: 32
[  807.084983][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  807.093594][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  807.111569][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.123486][   T30] audit: type=1326 audit(1749004304.421:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  807.155852][    T9] usb 5-1: config 0 descriptor??
[  807.181777][   T30] audit: type=1326 audit(1749004304.421:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  807.218449][   T30] audit: type=1326 audit(1749004304.431:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  807.240765][   T30] audit: type=1326 audit(1749004304.431:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  807.294342][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41
[  807.350965][   T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  807.360602][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.373801][   T30] audit: type=1326 audit(1749004304.431:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  807.412287][   T24] usb 1-1: Product: syz
[  807.461781][   T24] usb 1-1: Manufacturer: syz
[  807.593199][   T24] usb 1-1: SerialNumber: syz
[  807.673086][ T5177] bcm5974 5-1:0.0: could not read from device
[  807.765402][ T5177] bcm5974 5-1:0.0: could not read from device
[  807.800980][   T30] audit: type=1326 audit(1749004304.451:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  807.822918][    C1] vkms_vblank_simulate: vblank timer overrun
[  807.843417][   T24] usb 1-1: config 0 descriptor??
[  808.189293][    T9] bcm5974 5-1:0.0: could not read from device
[  808.195308][   T30] audit: type=1326 audit(1749004304.451:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  808.217746][   T30] audit: type=1326 audit(1749004304.451:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  808.239307][    C1] vkms_vblank_simulate: vblank timer overrun
[  808.245610][   T30] audit: type=1326 audit(1749004304.451:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  808.309442][   T30] audit: type=1326 audit(1749004304.451:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14562 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387518e969 code=0x7ffc0000
[  808.357888][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  808.385433][    T9] input: failed to attach handler mousedev to device input41, error: -5
[  808.403987][    T9] usb 5-1: USB disconnect, device number 73
[  808.407727][ T5177] bcm5974 5-1:0.0: could not read from device
[  808.451648][ T5177] bcm5974 5-1:0.0: could not read from device
[  808.510217][   T24] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  808.886984][   T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0)
[  808.917562][   T24] usb 1-1: USB disconnect, device number 68
[  809.942407][   T24] usb 1-1: new low-speed USB device number 69 using dummy_hcd
[  810.102338][ T5877] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  810.135028][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  810.166623][   T24] usb 1-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  810.200222][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  810.214925][   T24] usb 1-1: string descriptor 0 read error: -22
[  810.231791][   T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[  810.257041][ T5877] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  810.272338][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.280606][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.302574][ T5877] usb 5-1: Product: syz
[  810.306904][ T5877] usb 5-1: Manufacturer: syz
[  810.321950][ T5877] usb 5-1: SerialNumber: syz
[  810.335488][ T5877] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  810.392111][ T3081] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  810.532408][   T24] usbhid 1-1:1.0: can't add hid device: -71
[  810.549560][   T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  810.582988][   T24] usb 1-1: USB disconnect, device number 69
[  810.741733][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'.
[  810.834566][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.853180][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.866032][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.884383][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.113631][    T9] usb 5-1: USB disconnect, device number 74
[  811.232416][T11139] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  811.813102][ T3081] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  811.820403][ T3081] ath9k_htc: Failed to initialize the device
[  812.115374][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  812.302384][T11139] usb 4-1: Using ep0 maxpacket: 32
[  812.310042][T11139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.274389][T11139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.285941][T11139] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  813.295172][T11139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.363348][T11139] usb 4-1: config 0 descriptor??
[  814.059021][T11139] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0
[  814.066332][T11139] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0
[  814.128220][T11139] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0
[  814.137850][T11139] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0
[  814.145806][T11139] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0
[  814.153167][T11139] savu 0003:1E7D:2D5A.0015: unbalanced collection at end of report description
[  814.166029][T11139] savu 0003:1E7D:2D5A.0015: parse failed
[  814.171879][T11139] savu 0003:1E7D:2D5A.0015: probe with driver savu failed with error -22
[  814.401671][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.411636][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.454721][T11139] usb 4-1: USB disconnect, device number 69
[  814.721822][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'.
[  819.555861][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'.
[  819.662350][   T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  819.842736][   T24] usb 2-1: Using ep0 maxpacket: 32
[  819.854690][   T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  819.884372][   T24] usb 2-1: config 0 has no interface number 0
[  819.911229][   T24] usb 2-1: config 0 interface 184 has no altsetting 0
[  819.957427][   T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  820.008197][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.100590][   T24] usb 2-1: Product: syz
[  820.150009][   T24] usb 2-1: Manufacturer: syz
[  820.232141][   T24] usb 2-1: SerialNumber: syz
[  820.358552][   T24] usb 2-1: config 0 descriptor??
[  820.460714][   T24] smsc75xx v1.0.0
[  821.284820][T14722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.308496][T14722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.506577][T14729] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13)
[  821.513243][T14729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  821.524332][T14729] vhci_hcd vhci_hcd.0: Device attached
[  821.592710][ T3081] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  821.632589][   T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  821.752513][ T3081] usb 4-1: Using ep0 maxpacket: 16
[  821.772390][T11139] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  821.876614][ T3081] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  821.921007][   T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  821.942061][ T3081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.972773][ T3081] usb 4-1: Product: syz
[  821.977659][   T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  822.000558][ T3081] usb 4-1: Manufacturer: syz
[  822.019504][ T3081] usb 4-1: SerialNumber: syz
[  822.029218][   T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  822.084555][   T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  822.133146][ T3081] r8152-cfgselector 4-1: Unknown version 0x0000
[  822.156402][ T3081] r8152-cfgselector 4-1: config 0 descriptor??
[  822.302931][   T24] usb 2-1: USB disconnect, device number 66
[  822.706412][   T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  822.716015][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.719753][ T3081] r8152-cfgselector 4-1: Unknown version 0x0000
[  822.732182][   T10] usb 1-1: config 0 descriptor??
[  822.751392][ T3081] r8152-cfgselector 4-1: bad CDC descriptors
[  822.760104][   T10] cp210x 1-1:0.0: cp210x converter detected
[  822.792032][ T3081] r8152-cfgselector 4-1: USB disconnect, device number 70
[  823.062630][    T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  823.098448][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2724'.
[  823.158803][   T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  823.171317][   T10] usb 1-1: cp210x converter now attached to ttyUSB0
[  823.234831][    T9] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  823.267128][    T9] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  823.284654][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2725'.
[  823.296909][    T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64
[  823.328271][    T9] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  823.346029][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  823.359382][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.384130][ T3081] usb 1-1: USB disconnect, device number 70
[  823.399070][ T3081] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  824.442418][    T9] ath6kl: Failed to submit usb control message: -110
[  824.449223][    T9] ath6kl: unable to send the bmi data to the device: -110
[  824.472341][    T9] ath6kl: Unable to send get target info: -110
[  824.480228][ T3081] cp210x 1-1:0.0: device disconnected
[  824.762886][    T9] ath6kl: Failed to init ath6kl core: -110
[  824.771302][    T9] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -110
[  825.012775][T14731] vhci_hcd: connection reset by peer
[  825.163779][  T194] vhci_hcd: stop threads
[  825.257382][  T194] vhci_hcd: release socket
[  825.365630][  T194] vhci_hcd: disconnect device
[  825.862546][ T3081] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  826.027957][ T3081] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.065165][ T3081] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.078260][ T3081] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  826.091116][ T3081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.107821][ T3081] usb 1-1: config 0 descriptor??
[  827.088595][T11139] vhci_hcd: vhci_device speed not set
[  827.132902][ T3081] hid-led 0003:04D8:F372.0016: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0
[  827.179984][   T10] usb 2-1: USB disconnect, device number 67
[  827.188726][ T3081] hid-led 0003:04D8:F372.0016: Greynut Luxafor initialized
[  827.390133][T14781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.438527][T14781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.483473][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  827.483493][   T30] audit: type=1400 audit(1749004324.791:676): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14764 comm="syz.0.2730" daddr=::ffff:172.20.20.67 dest=1
[  827.604897][T14792] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2736'.
[  827.854266][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'.
[  828.854087][ T5948] usb 1-1: USB disconnect, device number 71
[  828.968396][  T194] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  829.057871][   T49] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  829.090648][   T49] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  830.089593][   T49] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  830.090876][   T49] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  830.092025][   T49] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  830.174803][   T49] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  830.183585][   T49] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  830.184782][   T49] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  830.185936][   T49] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  830.187063][   T49] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  830.189210][   T49] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  830.191021][   T49] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  830.192145][   T49] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  830.202906][   T49] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  830.207954][   T49] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  830.209256][   T49] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  830.210431][   T49] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  830.471291][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'.
[  831.489566][T14835] ip6gre1: entered promiscuous mode
[  831.494978][   T30] audit: type=1400 audit(1749004328.781:677): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14833 comm="syz.2.2747" daddr=::ffff:172.20.20.42 dest=20004
[  831.514014][T14835] ip6gre1: entered allmulticast mode
[  832.113130][T14834] ip6gre1: entered promiscuous mode
[  832.154229][T14834] ip6gre1: entered allmulticast mode
[  833.362980][T11139] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  833.567826][T11139] usb 5-1: Using ep0 maxpacket: 16
[  833.594741][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2752'.
[  833.607755][T11139] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.631922][T11139] usb 5-1: config 0 interface 0 has no altsetting 0
[  834.646898][T11139] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  834.656122][T11139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.667385][T11139] usb 5-1: config 0 descriptor??
[  836.193259][T11139] usbhid 5-1:0.0: can't add hid device: -71
[  836.199494][T11139] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  836.299457][T11139] usb 5-1: USB disconnect, device number 75
[  837.460155][   T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  837.653670][   T10] usb 4-1: Using ep0 maxpacket: 8
[  837.999066][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11
[  838.010870][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  838.024398][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  838.034086][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.045849][   T10] usb 4-1: config 0 descriptor??
[  838.474240][   T30] audit: type=1400 audit(1749004335.711:678): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14885 comm="syz.1.2762" dest=2
[  838.483085][T14890] block device autoloading is deprecated and will be removed.
[  838.646253][   T10] logitech 0003:046D:C298.0017: unknown main item tag 0x6
[  838.664668][   T10] logitech 0003:046D:C298.0017: unbalanced delimiter at end of report description
[  838.693047][   T10] logitech 0003:046D:C298.0017: parse failed
[  838.706016][   T10] logitech 0003:046D:C298.0017: probe with driver logitech failed with error -22
[  839.571380][   T10] usb 4-1: USB disconnect, device number 71
[  840.088458][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'.
[  840.302492][   T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  840.432773][ T3081] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  840.473895][   T10] usb 4-1: Using ep0 maxpacket: 16
[  840.487051][   T10] usb 4-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config
[  840.503254][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  840.595242][ T3081] usb 2-1: Using ep0 maxpacket: 32
[  840.610367][ T3081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  840.638513][ T3081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  840.671003][ T3081] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  840.698318][ T3081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.718898][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  840.729152][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.731130][ T3081] usb 2-1: config 0 descriptor??
[  840.737211][   T10] usb 4-1: Product: syz
[  840.737232][   T10] usb 4-1: Manufacturer: syz
[  840.737248][   T10] usb 4-1: SerialNumber: syz
[  840.766225][ T3081] hub 2-1:0.0: USB hub found
[  841.370076][T14911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.423050][T14911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.472037][   T10] usb 4-1: 0:2 : does not exist
[  841.492616][   T10] usb 4-1: unit 9 not found!
[  841.527218][   T10] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4)
[  841.562541][ T3081] hub 2-1:0.0: 1 port detected
[  841.814167][   T10] usb 4-1: USB disconnect, device number 72
[  841.922768][T14915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.975374][T14915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.697491][ T3081] usb 2-1: USB disconnect, device number 68
[  844.451037][T12838] Bluetooth: hci5: command 0x1003 tx timeout
[  844.494872][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  847.420101][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'.
[  849.263006][T11139] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  850.288336][T11139] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  850.316401][T11139] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  850.740141][T11139] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  850.783319][T11139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.868311][T14972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  850.886500][T11139] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  852.134012][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2789'.
[  852.322777][T11139] usb 5-1: USB disconnect, device number 76
[  852.565677][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'.
[  853.152308][   T24] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  853.311394][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  853.324296][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  853.356471][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.394811][   T24] usb 1-1: config 0 descriptor??
[  853.606441][T15021] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  853.691316][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2798'.
[  853.737130][T15025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2798'.
[  853.834899][   T24] microsoft 0003:045E:00F9.0018: hidraw0: USB HID v0.02 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0
[  853.877680][   T24] microsoft 0003:045E:00F9.0018: no inputs found
[  853.894436][   T24] microsoft 0003:045E:00F9.0018: could not initialize ff, continuing anyway
[  854.025888][   T24] usb 1-1: USB disconnect, device number 72
[  855.845933][ T5895] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  856.176104][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.189484][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.351569][ T5895] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  857.199238][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.259996][ T5895] usb 3-1: config 0 descriptor??
[  857.647556][ T5895] usb 3-1: can't set config #0, error -71
[  857.669654][ T5895] usb 3-1: USB disconnect, device number 8
[  859.274053][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'.
[  859.350582][T15070] fuse: Bad value for 'fd'
[  859.614766][ T3081] kernel write not supported for file /input/event2 (pid: 3081 comm: kworker/1:2)
[  863.368610][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'.
[  863.622538][T15117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2821'.
[  863.713840][T15120] fuse: Bad value for 'fd'
[  864.008099][T15106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2819'.
[  864.023797][   T30] audit: type=1800 audit(1749004361.321:679): pid=15121 uid=0 auid=0 ses=64 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2824" name="bus" dev="overlay" ino=2839 res=0 errno=0
[  864.720674][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2828'.
[  864.775572][T15133] veth0_to_bond: entered allmulticast mode
[  867.008509][   T30] audit: type=1400 audit(1749004364.311:680): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15162 comm="syz.0.2836" dest=20004
[  867.242693][ T5895] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  867.362741][   T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  867.405174][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  867.413620][ T5895] usb 1-1: config 0 has an invalid interface number: 160 but max is 0
[  867.421860][ T5895] usb 1-1: config 0 has no interface number 0
[  867.428065][ T5895] usb 1-1: config 0 interface 160 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  867.442867][ T5895] usb 1-1: config 0 interface 160 altsetting 0 endpoint 0x82 has invalid maxpacket 15936, setting to 1024
[  867.458421][ T5895] usb 1-1: config 0 interface 160 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  867.475801][ T5895] usb 1-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=6c.f5
[  867.493643][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.512825][ T5895] usb 1-1: Product: syz
[  867.517128][ T5895] usb 1-1: Manufacturer: syz
[  867.521740][ T5895] usb 1-1: SerialNumber: syz
[  867.542348][   T10] usb 2-1: Using ep0 maxpacket: 32
[  867.550412][ T5895] usb 1-1: config 0 descriptor??
[  867.556673][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  867.567220][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  867.576772][T15163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  867.579467][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  867.585641][T15163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  867.602325][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.622477][   T10] usb 2-1: Product: syz
[  867.626762][   T10] usb 2-1: Manufacturer: syz
[  867.631404][   T10] usb 2-1: SerialNumber: syz
[  867.817789][T15163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.849534][T15163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.871238][T15163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  867.922524][T15163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  868.153074][   T10] usb 2-1: cannot find UAC_HEADER
[  868.520961][ T5895] asix 1-1:0.160 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  868.550506][   T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  868.668529][ T5895] asix 1-1:0.160: probe with driver asix failed with error -71
[  868.797329][   T10] usb 2-1: USB disconnect, device number 69
[  868.828528][ T5895] usb 1-1: USB disconnect, device number 73
[  869.957411][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'.
[  869.978902][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  871.024085][T15215] binder: 15214:15215 ioctl c0306201 200000000700 returned -14
[  872.869469][   T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  875.214516][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.251222][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.307367][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  875.345628][   T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  875.354766][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.397599][   T43] usb 3-1: config 0 descriptor??
[  876.515073][   T43] usbhid 3-1:0.0: can't add hid device: -71
[  876.586965][   T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  876.597976][   T43] usb 3-1: USB disconnect, device number 9
[  876.793084][   T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  877.343013][T15269] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  877.402876][T15264] bpf: Bad value for 'uid'
[  878.054338][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  878.088725][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.100942][   T10] usb 1-1: Product: syz
[  878.105181][   T10] usb 1-1: Manufacturer: syz
[  878.110657][   T10] usb 1-1: SerialNumber: syz
[  878.192126][T15272] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0)
[  878.294439][   T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  878.341476][ T5948] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  878.620171][ T3081] usb 1-1: USB disconnect, device number 74
[  879.060593][   T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  879.210615][T15274] ubi0: attaching mtd0
[  879.218302][T15274] ubi0: scanning is finished
[  879.223085][T15274] ubi0: empty MTD device detected
[  879.250753][   T43] usb 3-1: Using ep0 maxpacket: 32
[  879.276269][   T43] usb 3-1: config 1 interface 0 has no altsetting 0
[  879.301225][   T43] usb 3-1: config 1 interface 0 has no altsetting 0
[  879.327128][   T43] usb 3-1: config 1 interface 0 has no altsetting 0
[  879.406186][T15274] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  879.445500][ T5948] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  879.460830][ T5948] ath9k_htc: Failed to initialize the device
[  879.500075][ T3081] usb 1-1: ath9k_htc: USB layer deinitialized
[  879.506487][   T43] usb 3-1: config 1 interface 0 has no altsetting 0
[  879.556483][   T43] usb 3-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d
[  879.617820][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.625908][   T43] usb 3-1: Product: syz
[  879.659837][   T43] usb 3-1: Manufacturer: syz
[  879.768059][T15303] evm: overlay not supported
[  879.826072][   T43] usb 3-1: SerialNumber: syz
[  886.757243][   T43] usb 3-1: can't set config #1, error -110
[  887.370059][ T3081] usb 3-1: USB disconnect, device number 10
[  888.316677][T15329] fuse: Bad value for 'fd'
[  888.789176][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'.
[  889.337048][T14947] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  890.130012][T15347] ucma_write: process 1627 (syz.4.2886) changed security contexts after opening file descriptor, this is not allowed.
[  892.656507][T15363] binder: BINDER_SET_CONTEXT_MGR already set
[  892.687897][T15363] binder: 15358:15363 ioctl 4018620d 200000000040 returned -16
[  893.625435][T14947] Bluetooth: hci3: command 0x0406 tx timeout
[  895.921394][ T3081] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  896.667921][ T5895] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  897.452971][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  897.464924][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  897.481455][ T5895] usb 1-1: config 0 has no interfaces?
[  897.504050][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  897.522811][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.732242][ T5895] usb 1-1: config 0 descriptor??
[  897.865874][ T5948] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  898.006569][ T5895] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  898.049446][ T5948] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  898.058479][ T5948] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  898.068973][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  898.084792][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  898.094086][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.102231][ T5948] usb 5-1: Product: syz
[  898.106448][ T5948] usb 5-1: Manufacturer: syz
[  898.111122][ T5948] usb 5-1: SerialNumber: syz
[  898.169303][ T5895] usb 3-1: config index 0 descriptor too short (expected 2647, got 77)
[  898.177914][ T5895] usb 3-1: config 227 has too many interfaces: 145, using maximum allowed: 32
[  898.186932][ T5895] usb 3-1: config 227 has an invalid descriptor of length 127, skipping remainder of the config
[  898.197892][ T5895] usb 3-1: config 227 has 0 interfaces, different from the descriptor's value: 145
[  898.214689][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  898.223912][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.232227][ T5895] usb 3-1: Product: syz
[  898.236774][ T5895] usb 3-1: Manufacturer: syz
[  898.241519][ T5895] usb 3-1: SerialNumber: syz
[  898.326355][T15396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.335841][T15396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.531665][T15406] Cannot find map_set index 0 as target
[  898.538684][T15406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.547698][T15406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.631563][T15408] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  898.685250][   T30] audit: type=1400 audit(1749004908.543:681): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15409 comm="syz.1.2907"
[  899.023365][   T10] usb 2-1: new low-speed USB device number 71 using dummy_hcd
[  899.128764][T11139] usb 1-1: USB disconnect, device number 75
[  900.049638][ T5948] usb 5-1: 0:2 : does not exist
[  900.068468][ T5948] usb 5-1: USB disconnect, device number 77
[  900.078529][   T10] usb 2-1: device descriptor read/64, error -71
[  900.225633][T15421] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  901.125482][   T10] usb 2-1: new low-speed USB device number 72 using dummy_hcd
[  901.186689][ T5895] usb 3-1: USB disconnect, device number 11
[  901.303512][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'.
[  901.313707][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'.
[  901.335269][   T10] usb 2-1: device descriptor read/64, error -71
[  901.456345][   T10] usb usb2-port1: attempt power cycle
[  901.547957][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'.
[  901.817726][   T10] usb 2-1: new low-speed USB device number 73 using dummy_hcd
[  901.851998][   T10] usb 2-1: device descriptor read/8, error -71
[  901.949124][T15456] overlayfs: invalid origin (0000)
[  902.213641][T15449] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  902.255843][T15453] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode
[  902.310074][T15455] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  904.469974][ T5895] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  904.640656][ T5895] usb 1-1: Using ep0 maxpacket: 8
[  904.673185][ T5895] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  904.711866][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.740344][ T5895] usb 1-1: config 0 descriptor??
[  905.177297][ T5895] nti 0003:0757:0A00.0019: reserved main item tag 0xd
[  905.195345][ T5895] nti 0003:0757:0A00.0019: unexpected long global item
[  905.196987][ T3081] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  905.207431][ T5895] nti 0003:0757:0A00.0019: probe with driver nti failed with error -22
[  905.528852][   T10] usb 1-1: USB disconnect, device number 76
[  906.038324][T15511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2939'.
[  906.043920][ T3081] usb 3-1: config 2 has an invalid interface number: 108 but max is 0
[  906.076971][ T3081] usb 3-1: config 2 has no interface number 0
[  906.087101][ T3081] usb 3-1: config 2 interface 108 has no altsetting 0
[  906.436053][ T3081] usb 3-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8
[  906.533793][ T3081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.577220][ T3081] usb 3-1: Product: syz
[  906.599959][ T3081] usb 3-1: Manufacturer: syz
[  906.604653][ T3081] usb 3-1: SerialNumber: syz
[  906.649641][T15518] xt_hashlimit: max too large, truncated to 1048576
[  907.444177][T15520] 8021q: adding VLAN 0 to HW filter on device bond1
[  907.480784][T15520] bridge0: port 3(bond1) entered blocking state
[  907.494234][T15520] bridge0: port 3(bond1) entered disabled state
[  907.506802][T15520] bond1: entered allmulticast mode
[  907.638481][T15520] bond1: entered promiscuous mode
[  907.647930][T15520] bridge0: port 3(bond1) entered blocking state
[  907.654759][T15520] bridge0: port 3(bond1) entered forwarding state
[  907.853597][ T5915] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  908.211027][T15525] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  908.225065][   T49] bridge0: port 3(bond1) entered disabled state
[  908.299599][ T3081] usb 3-1: Could not find all expected endpoints
[  908.317177][ T3081] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  908.325890][ T3081] usb 3-1: MIDIStreaming interface descriptor not found
[  908.367066][ T3081] usb 3-1: USB disconnect, device number 12
[  908.374847][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  908.386537][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61
[  908.394192][ T5915] usb 4-1: can't read configurations, error -61
[  908.545340][ T5915] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  908.715961][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  908.737117][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61
[  908.757316][ T5915] usb 4-1: can't read configurations, error -61
[  908.778037][ T5915] usb usb4-port1: attempt power cycle
[  908.999506][T15559] overlayfs: missing 'lowerdir'
[  909.137662][ T5915] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  909.195030][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  909.210285][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61
[  909.257271][ T5915] usb 4-1: can't read configurations, error -61
[  909.308317][T15535] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  909.398692][ T5915] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  909.442067][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  909.450696][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61
[  909.463960][ T5915] usb 4-1: can't read configurations, error -61
[  909.477184][T15535] usb 5-1: Using ep0 maxpacket: 16
[  909.482603][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  909.491890][ T5915] usb usb4-port1: unable to enumerate USB device
[  909.574875][T15535] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  909.592324][T15535] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  909.606370][T15535] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  909.620764][T15535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.632026][T15535] usb 5-1: Product: syz
[  909.636337][T15535] usb 5-1: Manufacturer: syz
[  909.641366][   T24] usb 3-1: Using ep0 maxpacket: 8
[  909.648434][T15535] usb 5-1: SerialNumber: syz
[  909.663453][   T24] usb 3-1: config 6 has an invalid interface number: 2 but max is 0
[  909.706341][   T24] usb 3-1: config 6 has no interface number 0
[  909.713700][   T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  909.723459][   T24] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  909.737209][   T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  909.748197][   T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  910.717769][T15535] usb 5-1: 0:2 : does not exist
[  910.723094][T15535] usb 5-1: unit 9 not found!
[  910.732102][   T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  910.741485][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.750006][   T24] usb 3-1: Product: syz
[  910.754488][T15535] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4)
[  910.805602][   T24] usb 3-1: Manufacturer: syz
[  910.810638][   T24] usb 3-1: SerialNumber: syz
[  910.837088][T15535] usb 5-1: USB disconnect, device number 78
[  910.851396][   T24] hso 3-1:6.2: Failed to find BULK IN ep
[  910.937875][T15582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2961'.
[  911.105056][ T5895] usb 3-1: USB disconnect, device number 13
[  911.223106][T15592] ufs: You didn't specify the type of your ufs filesystem
[  911.223106][T15592] 
[  911.223106][T15592] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  911.223106][T15592] 
[  911.223106][T15592] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  911.272212][T15592] ufs: ufstype=old is supported read-only
[  911.282873][T15592] ufs: ufs_fill_super(): bad magic number
[  912.718016][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  913.131088][T15624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  913.790802][   T24] usb 3-1: Using ep0 maxpacket: 16
[  913.812582][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.823961][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.843561][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  913.871030][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  913.880155][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.906733][   T24] usb 3-1: config 0 descriptor??
[  914.282139][T15629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  914.667556][   T24] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  914.681991][   T24] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max
[  914.725299][   T24] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  914.767497][   T24] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  914.786982][   T24] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  914.806647][   T24] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  914.825802][   T24] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  914.833121][   T24] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[ 1019.885823][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1019.892848][    C1] rcu: 	0-...!: (1 GPs behind) idle=fd3c/1/0x4000000000000000 softirq=70869/70870 fqs=0
[ 1019.903703][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=70009, q=86 ncpus=2)
[ 1019.911382][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1019.911416][    C0] NMI backtrace for cpu 0
[ 1019.911431][    C0] CPU: 0 UID: 0 PID: 15639 Comm: syz.3.2977 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 1019.911451][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1019.911460][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70
[ 1019.911485][    C0] Code: 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <e9> 7e ec 9f 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90
[ 1019.911499][    C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000006
[ 1019.911515][    C0] RAX: ffffffff81ae913e RBX: ffff888021afc340 RCX: ffff88805c213c00
[ 1019.911527][    C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000007
[ 1019.911538][    C0] RBP: 0000000000000000 R08: ffffffff99c6eafb R09: 1ffffffff338dd5f
[ 1019.911548][    C0] R10: dffffc0000000000 R11: fffffbfff338dd60 R12: dffffc0000000000
[ 1019.911559][    C0] R13: dffffc0000000000 R14: ffff8880b8627bc0 R15: 0000000000000000
[ 1019.911570][    C0] FS:  000055555a4f0500(0000) GS:ffff888125c93000(0000) knlGS:0000000000000000
[ 1019.911584][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1019.911595][    C0] CR2: 000055555a503588 CR3: 0000000035c2a000 CR4: 00000000003526f0
[ 1019.911611][    C0] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002
[ 1019.911620][    C0] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1019.911630][    C0] Call Trace:
[ 1019.911638][    C0]  <IRQ>
[ 1019.911645][    C0]  enqueue_hrtimer+0x5e/0x3a0
[ 1019.911673][    C0]  __hrtimer_run_queues+0x656/0xc60
[ 1019.911704][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1019.911725][    C0]  ? read_tsc+0x9/0x20
[ 1019.911746][    C0]  hrtimer_interrupt+0x45b/0xaa0
[ 1019.911780][    C0]  __sysvec_apic_timer_interrupt+0x108/0x410
[ 1019.911805][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1019.911828][    C0]  </IRQ>
[ 1019.911833][    C0]  <TASK>
[ 1019.911848][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.911865][    C0] RIP: 0010:memset_orig+0x60/0xb0
[ 1019.911880][    C0] Code: 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 <89> d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48
[ 1019.911893][    C0] RSP: 0018:ffffc9000e00ef10 EFLAGS: 00000246
[ 1019.911907][    C0] RAX: 0000000000000000 RBX: ffffc9000e00f020 RCX: 0000000000000000
[ 1019.911917][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000e00f038
[ 1019.911927][    C0] RBP: dffffc0000000000 R08: ffffc9000e00f047 R09: 0000000000000000
[ 1019.911938][    C0] R10: ffffc9000e00f038 R11: fffff52001c01e09 R12: ffffc9000e00ff58
[ 1019.911949][    C0] R13: ffffc9000e00f038 R14: ffffc9000e00efe8 R15: ffffc9000e00f030
[ 1019.911971][    C0]  unwind_next_frame+0xc98/0x2390
[ 1019.911996][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1019.912016][    C0]  ? do_syscall_64+0xfa/0x3b0
[ 1019.912041][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1019.912058][    C0]  arch_stack_walk+0x11c/0x150
[ 1019.912084][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.912103][    C0]  stack_trace_save+0x9c/0xe0
[ 1019.912118][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1019.912139][    C0]  save_stack+0xf7/0x1f0
[ 1019.912160][    C0]  ? __pfx_save_stack+0x10/0x10
[ 1019.912178][    C0]  ? post_alloc_hook+0x240/0x2a0
[ 1019.912197][    C0]  ? get_page_from_freelist+0x21d5/0x22b0
[ 1019.912219][    C0]  ? __alloc_frozen_pages_noprof+0x181/0x370
[ 1019.912240][    C0]  ? alloc_pages_mpol+0x232/0x4a0
[ 1019.912257][    C0]  ? alloc_pages_noprof+0xa9/0x190
[ 1019.912275][    C0]  ? __vmalloc_node_range_noprof+0x97d/0x12f0
[ 1019.912295][    C0]  ? __vmalloc_node_noprof+0xc2/0x110
[ 1019.912313][    C0]  ? dup_task_struct+0x3e7/0x860
[ 1019.912334][    C0]  ? copy_process+0x54b/0x3c00
[ 1019.912362][    C0]  ? kernel_clone+0x224/0x7f0
[ 1019.912376][    C0]  ? __se_sys_clone3+0x256/0x2d0
[ 1019.912391][    C0]  ? do_syscall_64+0xfa/0x3b0
[ 1019.912414][    C0]  ? seqcount_lockdep_reader_access+0x102/0x180
[ 1019.912436][    C0]  __set_page_owner+0x8d/0x4a0
[ 1019.912457][    C0]  ? __pfx___set_page_owner+0x10/0x10
[ 1019.912480][    C0]  post_alloc_hook+0x240/0x2a0
[ 1019.912502][    C0]  get_page_from_freelist+0x21d5/0x22b0
[ 1019.912547][    C0]  ? __pfx_get_page_from_freelist+0x10/0x10
[ 1019.912571][    C0]  ? prepare_alloc_pages+0x213/0x610
[ 1019.912596][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1019.912621][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1019.912648][    C0]  ? policy_nodemask+0x27c/0x720
[ 1019.912666][    C0]  ? __pfx___might_resched+0x10/0x10
[ 1019.912690][    C0]  alloc_pages_mpol+0x232/0x4a0
[ 1019.912712][    C0]  alloc_pages_noprof+0xa9/0x190
[ 1019.912733][    C0]  __vmalloc_node_range_noprof+0x97d/0x12f0
[ 1019.912767][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1019.912790][    C0]  ? memcpy_and_pad+0x48/0x80
[ 1019.912815][    C0]  __vmalloc_node_noprof+0xc2/0x110
[ 1019.912835][    C0]  ? copy_process+0x54b/0x3c00
[ 1019.912865][    C0]  ? copy_process+0x54b/0x3c00
[ 1019.912888][    C0]  dup_task_struct+0x3e7/0x860
[ 1019.912913][    C0]  copy_process+0x54b/0x3c00
[ 1019.912934][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1019.912959][    C0]  ? __might_fault+0xb0/0x130
[ 1019.912984][    C0]  ? __pfx_copy_process+0x10/0x10
[ 1019.913007][    C0]  ? __asan_memset+0x22/0x50
[ 1019.913027][    C0]  kernel_clone+0x224/0x7f0
[ 1019.913043][    C0]  ? __pfx_kernel_clone+0x10/0x10
[ 1019.913062][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1019.913086][    C0]  __se_sys_clone3+0x256/0x2d0
[ 1019.913101][    C0]  ? __might_fault+0xb0/0x130
[ 1019.913120][    C0]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1019.913142][    C0]  ? _copy_to_user+0x8a/0xb0
[ 1019.913168][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[ 1019.913188][    C0]  ? do_syscall_64+0xbe/0x3b0
[ 1019.913212][    C0]  do_syscall_64+0xfa/0x3b0
[ 1019.913233][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1019.913253][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.913268][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1019.913286][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.913301][    C0] RIP: 0033:0x7f38751c31c9
[ 1019.913316][    C0] Code: bf 08 00 48 8d 3d dc bf 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1019.913329][    C0] RSP: 002b:00007ffdd9067e88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1019.913345][    C0] RAX: ffffffffffffffda RBX: 00007f38751455b0 RCX: 00007f38751c31c9
[ 1019.913357][    C0] RDX: 00007f38751455b0 RSI: 0000000000000058 RDI: 00007ffdd9067ed0
[ 1019.913368][    C0] RBP: 00007f3875f4b6c0 R08: 00007f3875f4b6c0 R09: 00007ffdd9067fb7
[ 1019.913378][    C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8
[ 1019.913389][    C0] R13: 000000000000004d R14: 00007ffdd9067ed0 R15: 00007ffdd9067fb8
[ 1019.913408][    C0]  </TASK>
[ 1019.914413][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g70009 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1020.583340][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1020.593354][    C1] rcu: RCU grace-period kthread stack dump:
[ 1020.599264][    C1] task:rcu_preempt     state:R  running task     stack:26464 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[ 1020.612796][    C1] Call Trace:
[ 1020.616096][    C1]  <TASK>
[ 1020.619067][    C1]  __schedule+0x16a2/0x4cb0
[ 1020.623653][    C1]  ? do_raw_spin_unlock+0x122/0x240
[ 1020.628907][    C1]  ? schedule+0x165/0x360
[ 1020.633280][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1020.638166][    C1]  ? __pfx___schedule+0x10/0x10
[ 1020.643071][    C1]  ? schedule+0x91/0x360
[ 1020.647352][    C1]  schedule+0x165/0x360
[ 1020.651548][    C1]  schedule_timeout+0x12b/0x270
[ 1020.656436][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1020.661841][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1020.667165][    C1]  ? prepare_to_swait_event+0x341/0x380
[ 1020.672744][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[ 1020.677649][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1020.682618][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1020.688027][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1020.693341][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1020.698573][    C1]  ? finish_swait+0xcd/0x1f0
[ 1020.703194][    C1]  rcu_gp_kthread+0x99/0x390
[ 1020.707841][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1020.713120][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1020.718110][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1020.723185][    C1]  kthread+0x711/0x8a0
[ 1020.727300][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1020.732532][    C1]  ? __pfx_kthread+0x10/0x10
[ 1020.737153][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1020.742386][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1020.747614][    C1]  ? __pfx_kthread+0x10/0x10
[ 1020.752323][    C1]  ret_from_fork+0x3f9/0x770
[ 1020.756958][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1020.762112][    C1]  ? __switch_to_asm+0x39/0x70
[ 1020.766986][    C1]  ? __switch_to_asm+0x33/0x70
[ 1020.771775][    C1]  ? __pfx_kthread+0x10/0x10
[ 1020.776399][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1020.781217][    C1]  </TASK>
[ 1020.784257][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1020.790600][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 1020.802251][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1020.812332][    C1] Workqueue: events_unbound toggle_allocation_gate
[ 1020.818906][    C1] RIP: 0010:smp_call_function_many_cond+0xf6e/0x12d0
[ 1020.825631][    C1] Code: 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 43 0f b6 04 2c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b 00 eb e5 44 89
[ 1020.845266][    C1] RSP: 0018:ffffc900001176a0 EFLAGS: 00000293
[ 1020.851391][    C1] RAX: 0000000000000000 RBX: ffff8880b873c9c0 RCX: ffff88801cefda00
[ 1020.859399][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1020.867398][    C1] RBP: ffffc90000117800 R08: ffffffff8f9fb8f7 R09: 1ffffffff1f3f71e
[ 1020.875397][    C1] R10: dffffc0000000000 R11: fffffbfff1f3f71f R12: 1ffff110170c868d
[ 1020.883478][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8643468
[ 1020.891479][    C1] FS:  0000000000000000(0000) GS:ffff888125d93000(0000) knlGS:0000000000000000
[ 1020.900440][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1020.907045][    C1] CR2: 00007ffffffff000 CR3: 000000000df38000 CR4: 00000000003526f0
[ 1020.915039][    C1] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002
[ 1020.923032][    C1] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1020.931031][    C1] Call Trace:
[ 1020.934419][    C1]  <TASK>
[ 1020.937387][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1020.943757][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 1020.949153][    C1]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[ 1020.955339][    C1]  ? __pfx___text_poke+0x10/0x10
[ 1020.960305][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1020.965125][    C1]  ? trace_contention_end+0x39/0x120
[ 1020.970443][    C1]  ? __pfx_do_sync_core+0x10/0x10
[ 1020.975492][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[ 1020.980639][    C1]  smp_text_poke_batch_finish+0x5e0/0x1100
[ 1020.986477][    C1]  ? __pfx___mutex_lock+0x10/0x10
[ 1020.991552][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 1020.997819][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[ 1021.004105][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[ 1021.010111][    C1]  static_key_enable_cpuslocked+0x128/0x250
[ 1021.016034][    C1]  static_key_enable+0x1a/0x20
[ 1021.020821][    C1]  toggle_allocation_gate+0xad/0x240
[ 1021.026150][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1021.032080][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[ 1021.037853][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[ 1021.043694][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[ 1021.049444][    C1]  process_scheduled_works+0xae1/0x17b0
[ 1021.055057][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1021.061098][    C1]  worker_thread+0x8a0/0xda0
[ 1021.065753][    C1]  kthread+0x711/0x8a0
[ 1021.069861][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1021.075006][    C1]  ? __pfx_kthread+0x10/0x10
[ 1021.079621][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1021.084854][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1021.090083][    C1]  ? __pfx_kthread+0x10/0x10
[ 1021.094701][    C1]  ret_from_fork+0x3f9/0x770
[ 1021.099321][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1021.104473][    C1]  ? __switch_to_asm+0x39/0x70
[ 1021.109256][    C1]  ? __switch_to_asm+0x33/0x70
[ 1021.114036][    C1]  ? __pfx_kthread+0x10/0x10
[ 1021.118659][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1021.123471][    C1]  </TASK>