last executing test programs:

6m59.550606747s ago: executing program 4 (id=242):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8000})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000001cc0)=""/194, 0xc2, 0x0)

6m59.383425596s ago: executing program 4 (id=244):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6m59.130127499s ago: executing program 4 (id=245):
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffd, 0x74, 0x0, @scatter={0x0, 0xf5, 0x0}, &(0x7f00000001c0)="5538b9edff00000008ffffff01a26ccc143bc638b65f69d33b5ab57cf52671dc2d7b210c2520f4e08b80395e9ccde1178e751ed07500d83b77ea4beb9c4d4c362f69d05192fac58367ffe9779c6752fbdfc72b65c241364dee74e143fd791b70a2bbdbf4d0eb9b5ea7d2a2487b11a25a69d07e23", 0x0, 0x0, 0x0, 0x20000000, 0x0})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="50000000080211000001080211000000505050505050000000000000000000000000010000060202020202020101300301"], 0x5a)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

6m57.943600913s ago: executing program 4 (id=250):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2)
syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00')
read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020)
pread64(r3, 0x0, 0x0, 0xadc)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
r5 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)

6m49.989280538s ago: executing program 4 (id=259):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000240)={0x0, 0xd, 0x1, '\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m49.235886916s ago: executing program 4 (id=262):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
msgget$private(0x0, 0x8)
r1 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r4 = socket$tipc(0x1e, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r4, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a4400001020301090262000201a20001002400002000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f000100", 0x22)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}]}, 0x58}, 0x1, 0x7}, 0x0)
fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038014000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000009400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e6400000008000240000000064c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000000014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010076657468315f746f5f7465616d000000140001007465616d5f736c6176655f300000000008000140000000200900020073797a300000000010010380080001"], 0x378}}, 0x0)

6m33.644615192s ago: executing program 32 (id=262):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
msgget$private(0x0, 0x8)
r1 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r4 = socket$tipc(0x1e, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r4, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a4400001020301090262000201a20001002400002000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f000100", 0x22)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}]}, 0x58}, 0x1, 0x7}, 0x0)
fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0)

4m46.899779626s ago: executing program 3 (id=650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c0000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

4m46.644532305s ago: executing program 3 (id=653):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x40}}, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x4030}], 0x1, 0x1)

4m46.460055773s ago: executing program 3 (id=659):
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

4m46.217248987s ago: executing program 3 (id=664):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffff30)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m46.034266574s ago: executing program 3 (id=667):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

4m45.912105602s ago: executing program 3 (id=670):
socket$qrtr(0x2a, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300))
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)

4m30.716065938s ago: executing program 33 (id=670):
socket$qrtr(0x2a, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300))
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)

25.58780397s ago: executing program 2 (id=2019):
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @private2}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
ppoll(&(0x7f0000000080)=[{r1, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
connect$netlink(r4, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, 0x0, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000580)=0x8)
r6 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e0300040200010905000000000000000905"], 0x0)
ioctl$TCXONC(r6, 0x540a, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000001c0)=0x3)
clock_gettime(0xfffffffffffffffb, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

24.476769043s ago: executing program 0 (id=2022):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140))
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x209, 0x4, 0xfffffe0008000001, 0xfa16, 0xffffffff}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xe)
ftruncate(0xffffffffffffffff, 0xb)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x0, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x3, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0xd678, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x7, 0x0, 0x18e, 0x6, 0x6, 0x454f, 0x7, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x4, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x382, 0x4, 0xd, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0xfffffb82, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x21, 0x8008, 0x86, 0x13, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x201, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0xfffffffc, 0xd98, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2, 0x6, 0x8000, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0x1, 0x8, 0x5, 0x5, 0xc8, 0x0, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0xdc15, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd3, 0x200, 0xb, 0xfff]}, 0x45c)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$can_bcm(0x1d, 0x2, 0x2)

24.330675769s ago: executing program 6 (id=2023):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140))
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x209, 0x4, 0xfffffe0008000001, 0xfa16, 0xffffffff}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xe)
ftruncate(0xffffffffffffffff, 0xb)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x0, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x3, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0xd678, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x7, 0x0, 0x18e, 0x6, 0x6, 0x454f, 0x7, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x4, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x382, 0x4, 0xd, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0xfffffb82, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x21, 0x8008, 0x86, 0x13, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x201, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0xfffffffc, 0xd98, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2, 0x6, 0x8000, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0x1, 0x8, 0x5, 0x5, 0xc8, 0x0, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0xdc15, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd3, 0x200, 0xb, 0xfff]}, 0x45c)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$can_bcm(0x1d, 0x2, 0x2)

23.576898258s ago: executing program 2 (id=2025):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140))
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x209, 0x4, 0xfffffe0008000001, 0xfa16, 0xffffffff}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xe)
ftruncate(0xffffffffffffffff, 0xb)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x0, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x3, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0xd678, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x7, 0x0, 0x18e, 0x6, 0x6, 0x454f, 0x7, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x4, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x382, 0x4, 0xd, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0xfffffb82, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x21, 0x8008, 0x86, 0x13, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x201, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0xfffffffc, 0xd98, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2, 0x6, 0x8000, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0x1, 0x8, 0x5, 0x5, 0xc8, 0x0, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0xdc15, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd3, 0x200, 0xb, 0xfff]}, 0x45c)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$can_bcm(0x1d, 0x2, 0x2)

21.064946189s ago: executing program 2 (id=2031):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

20.90378216s ago: executing program 5 (id=2032):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
pipe2(&(0x7f00000000c0), 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000001dc0)={0x8c, 0x0, 0x20000}, 0x20)
syz_pidfd_open(0x0, 0x0)

19.620522874s ago: executing program 0 (id=2033):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec", 0x0, 0x3}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000})

19.613749828s ago: executing program 5 (id=2034):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d)
r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
pread64(r4, 0x0, 0x0, 0x6)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000019100)={0x0, 0x0, {0xffffffffffffffff, @usage=0x8, 0x0, 0x5, 0x0, 0x200, 0x9, 0x81f6, 0x40, @struct={0x7, 0x3}, 0x20, 0x4, [0x4, 0x1, 0x1, 0x86, 0xfffffffffffff0f7, 0x80]}, {0x40000000000002, @struct={0x7f, 0x9}, 0x0, 0x0, 0x8, 0x100000001, 0xee79, 0x6, 0x2, @struct={0x5, 0x9}, 0x40, 0x7, [0x2, 0xfffffffffffffffb, 0xd0c, 0x1, 0x7, 0xe]}, {0xdd0, @struct={0x5, 0x101}, 0x0, 0x0, 0x5, 0x7fffffffffffffff, 0x6, 0x2, 0xe8, @struct={0x8, 0x3}, 0x10001, 0x5, [0x2, 0x6, 0x6, 0xec, 0x800, 0x7f]}, {0x3, 0x3, 0x100}})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280), 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041)

15.859129764s ago: executing program 5 (id=2035):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4010}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.816739011s ago: executing program 2 (id=2036):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

14.901012459s ago: executing program 0 (id=2037):
socket$nl_sock_diag(0x10, 0x3, 0x4)
openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x370}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_usb_connect(0x1, 0x48, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x8f, 0xea, 0xba, 0x8, 0x4cb, 0x127, 0x3abe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0xac, 0x5, 0x10, 0x9, "", [{{0x9, 0x4, 0xb6, 0x3, 0x1, 0xed, 0x4e, 0x50, 0x3, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x1a, 0x0, 0x1, [@generic={0x7, 0xb, "8931b298b8"}]}}]}}, {{0x9, 0x4, 0xbe, 0x2, 0x1, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0x1e, 0x3, 0x3ff, 0xa, 0x2d, 0x4c, [@generic={0x2, 0xb}]}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x9927000)
move_pages(0x0, 0x1, &(0x7f0000004780)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000000), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)
io_setup(0x7f, &(0x7f0000000100)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(0xffffffffffffffff, 0xc0086444, &(0x7f0000000280))
syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x110, 0xe1, 0xd2, 0x6b, 0x40, 0x112a, 0x5, 0xfe2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x7f, 0xe, 0x0, 0xef, 0xb0, 0x6f, 0x1}}]}}]}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x78, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xd4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400cc}, 0xc1)

14.761915477s ago: executing program 6 (id=2038):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

12.533472941s ago: executing program 1 (id=2040):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0)

11.37144266s ago: executing program 1 (id=2041):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r4}, 0x18)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>r6, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}})

11.238092977s ago: executing program 0 (id=2042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={0x0, r5, 0x4000, r4}, 0x18)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})

11.163973718s ago: executing program 2 (id=2043):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.248076198s ago: executing program 6 (id=2044):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
unshare(0x20000400)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000783afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000e4180100fffff271c08223af91f34006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e9f8d8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d00001392000100"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x2030000)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x3}, &(0x7f00000000c0)=0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3d4eb3aa6afcc55db7b22c0531f92d05410ebfb39df0a1f3b500931cabbbe9ac27", @ANYRES16, @ANYBLOB="08002cbd7000fedbdf25420000000a0006006a669277f97200000a0006005050505050500000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044040)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001)

6.181178305s ago: executing program 1 (id=2045):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
socket$pppl2tp(0x18, 0x1, 0x1)
mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x734a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
prlimit64(0x0, 0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

6.017004993s ago: executing program 0 (id=2046):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x10140, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c)
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x1)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)

5.55092575s ago: executing program 5 (id=2047):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.035392444s ago: executing program 5 (id=2048):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.452415508s ago: executing program 6 (id=2049):
r0 = socket$phonet(0x23, 0x2, 0x1)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
close(r0)

3.354311009s ago: executing program 1 (id=2050):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.868029864s ago: executing program 1 (id=2051):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.748036814s ago: executing program 6 (id=2052):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
socket$pppl2tp(0x18, 0x1, 0x1)
mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x734a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
prlimit64(0x0, 0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x1, 0x16)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1})

1.647700003s ago: executing program 0 (id=2053):
socket$nl_sock_diag(0x10, 0x3, 0x4)
openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x370}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_usb_connect(0x1, 0x48, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x8f, 0xea, 0xba, 0x8, 0x4cb, 0x127, 0x3abe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0xac, 0x5, 0x10, 0x9, "", [{{0x9, 0x4, 0xb6, 0x3, 0x1, 0xed, 0x4e, 0x50, 0x3, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x1a, 0x0, 0x1, [@generic={0x7, 0xb, "8931b298b8"}]}}]}}, {{0x9, 0x4, 0xbe, 0x2, 0x1, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0x1e, 0x3, 0x3ff, 0xa, 0x2d, 0x4c, [@generic={0x2, 0xb}]}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x9927000)
move_pages(0x0, 0x1, &(0x7f0000004780)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000000), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)
io_setup(0x7f, &(0x7f0000000100)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(0xffffffffffffffff, 0xc0086444, &(0x7f0000000280))
syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x110, 0xe1, 0xd2, 0x6b, 0x40, 0x112a, 0x5, 0xfe2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x7f, 0xe, 0x0, 0xef, 0xb0, 0x6f, 0x1}}]}}]}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x78, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xd4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400cc}, 0xc1)

1.607508372s ago: executing program 5 (id=2054):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

241.904941ms ago: executing program 2 (id=2055):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c00028006000100000000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

116.244842ms ago: executing program 6 (id=2056):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c00028006000100000000000800"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 1 (id=2057):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
unshare(0x20000400)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000783afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000e4180100fffff271c08223af91f34006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e9f8d8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d00001392000100"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x2030000)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x3}, &(0x7f00000000c0)=0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3d4eb3aa6afcc55db7b22c0531f92d05410ebfb39df0a1f3b500931cabbbe9ac274d5580cd1e9fe12519ce93b9c80be644", @ANYRES16, @ANYBLOB="08002cbd7000fedbdf25420000000a0006006a669277f97200000a0006005050505050500000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044040)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001)

kernel console output (not intermixed with test programs):

: disconnect device
[  386.396988][   T93] vhci_hcd vhci_hcd.6: stop threads
[  386.397012][   T93] vhci_hcd vhci_hcd.6: release socket
[  386.397077][   T93] vhci_hcd vhci_hcd.6: disconnect device
[  386.397421][   T93] vhci_hcd vhci_hcd.6: stop threads
[  386.397436][   T93] vhci_hcd vhci_hcd.6: release socket
[  386.397513][   T93] vhci_hcd vhci_hcd.6: disconnect device
[  386.397857][   T93] vhci_hcd vhci_hcd.6: stop threads
[  386.397871][   T93] vhci_hcd vhci_hcd.6: release socket
[  386.397934][   T93] vhci_hcd vhci_hcd.6: disconnect device
[  386.398327][   T93] vhci_hcd vhci_hcd.6: stop threads
[  386.398340][   T93] vhci_hcd vhci_hcd.6: release socket
[  386.398401][   T93] vhci_hcd vhci_hcd.6: disconnect device
[  386.416293][ T5884] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  386.416370][ T5884] usb 45-1: enqueue for inactive port 0
[  386.482645][ T5927] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  386.485249][ T5884] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  386.506074][ T6888] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  387.527891][ T6888] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  388.001262][ T5927] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  388.086200][ T8985] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  388.086231][ T8985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  388.086349][ T8985] vhci_hcd vhci_hcd.0: Device attached
[  388.107052][ T8985] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8)
[  388.107079][ T8985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  388.107135][ T8985] vhci_hcd vhci_hcd.0: Device attached
[  388.114512][ T8985] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10)
[  388.124074][ T8985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  388.124145][ T8985] vhci_hcd vhci_hcd.0: Device attached
[  388.127523][ T8985] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12)
[  388.127547][ T8985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  388.127595][ T8985] vhci_hcd vhci_hcd.0: Device attached
[  388.136759][ T8985] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14)
[  388.136785][ T8985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  388.136835][ T8985] vhci_hcd vhci_hcd.0: Device attached
[  388.145117][ T8985] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(16)
[  388.145246][ T8985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  388.145356][ T8985] vhci_hcd vhci_hcd.0: Device attached
[  388.248581][ T9005] vhci_hcd: connection closed
[  388.248946][ T9007] vhci_hcd: connection closed
[  388.249213][ T9011] vhci_hcd: connection closed
[  388.249852][   T93] vhci_hcd vhci_hcd.0: stop threads
[  388.249878][   T93] vhci_hcd vhci_hcd.0: release socket
[  388.252610][   T93] vhci_hcd vhci_hcd.0: disconnect device
[  388.256881][   T93] vhci_hcd vhci_hcd.0: stop threads
[  388.256899][   T93] vhci_hcd vhci_hcd.0: release socket
[  388.257003][   T93] vhci_hcd vhci_hcd.0: disconnect device
[  388.257319][ T9017] vhci_hcd: connection closed
[  388.257563][   T93] vhci_hcd vhci_hcd.0: stop threads
[  388.257578][   T93] vhci_hcd vhci_hcd.0: release socket
[  388.257614][   T93] vhci_hcd vhci_hcd.0: disconnect device
[  388.258691][ T9013] vhci_hcd: connection closed
[  388.258956][ T9015] vhci_hcd: connection closed
[  388.259854][   T93] vhci_hcd vhci_hcd.0: stop threads
[  388.259871][   T93] vhci_hcd vhci_hcd.0: release socket
[  388.259908][   T93] vhci_hcd vhci_hcd.0: disconnect device
[  388.261188][   T93] vhci_hcd vhci_hcd.0: stop threads
[  388.261202][   T93] vhci_hcd vhci_hcd.0: release socket
[  388.261237][   T93] vhci_hcd vhci_hcd.0: disconnect device
[  388.261561][   T93] vhci_hcd vhci_hcd.0: stop threads
[  388.261573][   T93] vhci_hcd vhci_hcd.0: release socket
[  388.261642][   T93] vhci_hcd vhci_hcd.0: disconnect device
[  388.295000][   T36] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  388.656740][ T6888] usb 2-1: USB disconnect, device number 58
[  388.824678][  T808] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  388.988345][  T808] usb 7-1: Using ep0 maxpacket: 32
[  389.001934][  T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.001972][  T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.002015][  T808] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  389.002040][  T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.022712][  T808] usb 7-1: config 0 descriptor??
[  389.030449][  T808] hub 7-1:0.0: USB hub found
[  389.267531][  T808] hub 7-1:0.0: 1 port detected
[  389.292289][ T5884] usb 3-1: USB disconnect, device number 46
[  389.485287][ T8112] usb 1-1: new low-speed USB device number 42 using dummy_hcd
[  389.522236][ T9058] syzkaller0: entered promiscuous mode
[  389.685099][ T8112] usb 1-1: unable to get BOS descriptor or descriptor too short
[  389.689900][ T8112] usb 1-1: config 172 has an invalid interface number: 182 but max is 1
[  389.689949][ T8112] usb 1-1: config 172 has an invalid interface association descriptor of length 7, skipping
[  389.689969][ T8112] usb 1-1: config 172 has an invalid interface number: 190 but max is 1
[  389.689990][ T8112] usb 1-1: config 172 has an invalid interface association descriptor of length 2, skipping
[  389.690010][ T8112] usb 1-1: config 172 has no interface number 0
[  389.690027][ T8112] usb 1-1: config 172 has no interface number 1
[  389.690090][ T8112] usb 1-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  389.690132][ T8112] usb 1-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  389.690160][ T8112] usb 1-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  389.690186][ T8112] usb 1-1: config 172 interface 182 has no altsetting 0
[  389.690203][ T8112] usb 1-1: config 172 interface 190 has no altsetting 0
[  389.785278][ T8112] usb 1-1: string descriptor 0 read error: -22
[  389.785545][ T8112] usb 1-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  389.785568][ T8112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.867578][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[  389.868037][  T808] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  389.868516][ T6101] usb 7-1: USB disconnect, device number 2
[  390.062408][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.063029][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.484857][ T6101] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  390.635579][ T6101] usb 3-1: no configurations
[  390.635600][ T6101] usb 3-1: can't read configurations, error -22
[  390.668741][ T6888] usb 1-1: USB disconnect, device number 42
[  390.714747][   T36] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  390.764866][ T6101] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  390.874845][  T808] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  390.902087][   T36] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  390.902118][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.902141][   T36] usb 2-1: Product: syz
[  390.902154][   T36] usb 2-1: Manufacturer: syz
[  390.902168][   T36] usb 2-1: SerialNumber: syz
[  390.925502][ T6101] usb 3-1: no configurations
[  390.925520][ T6101] usb 3-1: can't read configurations, error -22
[  390.934854][ T6101] usb usb3-port1: attempt power cycle
[  390.962769][   T36] usb 2-1: config 0 descriptor??
[  391.044721][  T808] usb 7-1: Using ep0 maxpacket: 32
[  391.049345][  T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.049442][  T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.049485][  T808] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  391.049511][  T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.107087][  T808] usb 7-1: config 0 descriptor??
[  391.125159][  T808] hub 7-1:0.0: USB hub found
[  391.190376][   T36] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  391.275282][ T6101] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  391.298100][ T6101] usb 3-1: no configurations
[  391.298123][ T6101] usb 3-1: can't read configurations, error -22
[  391.332164][  T808] hub 7-1:0.0: 1 port detected
[  391.424917][ T6101] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  391.446440][ T6101] usb 3-1: no configurations
[  391.446461][ T6101] usb 3-1: can't read configurations, error -22
[  391.446844][ T6101] usb usb3-port1: unable to enumerate USB device
[  391.595130][ T6101] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  391.756015][ T6101] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  391.756050][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.756071][ T6101] usb 1-1: Product: syz
[  391.756085][ T6101] usb 1-1: Manufacturer: syz
[  391.756101][ T6101] usb 1-1: SerialNumber: syz
[  391.770234][ T6101] usb 1-1: config 0 descriptor??
[  391.943935][ T5927] usb 7-1: USB disconnect, device number 3
[  391.944312][  T808] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  392.209554][   T36] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  392.846192][ T6101] usb 1-1: Firmware version (0.0) predates our first public release.
[  392.846222][ T6101] usb 1-1: Please update to version 0.2 or newer
[  392.944327][ T6101] usb 1-1: USB disconnect, device number 43
[  393.525989][ T9194] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1078'.
[  393.544703][  T808] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  393.564761][ T5884] usb 2-1: USB disconnect, device number 59
[  393.715974][  T808] usb 7-1: Using ep0 maxpacket: 16
[  393.718483][  T808] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  393.718512][  T808] usb 7-1: config 0 has no interface number 0
[  393.718563][  T808] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  393.718591][  T808] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  393.723131][  T808] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  393.723162][  T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.723183][  T808] usb 7-1: Product: syz
[  393.723197][  T808] usb 7-1: Manufacturer: syz
[  393.723211][  T808] usb 7-1: SerialNumber: syz
[  393.810048][  T808] usb 7-1: config 0 descriptor??
[  393.810995][ T9181] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  393.812322][ T9181] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  393.924720][ T6101] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  393.967232][ T5927] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  394.032517][ T9181] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  394.032655][ T9181] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  394.074878][ T6101] usb 1-1: Using ep0 maxpacket: 32
[  394.079383][ T6101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.079419][ T6101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.079460][ T6101] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  394.079486][ T6101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.086773][ T6101] usb 1-1: config 0 descriptor??
[  394.129777][ T5927] usb 3-1: config 0 has no interfaces?
[  394.131867][ T5927] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  394.131896][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  394.131924][ T5927] usb 3-1: SerialNumber: syz
[  394.141107][ T6101] hub 1-1:0.0: USB hub found
[  394.193954][ T5927] usb 3-1: config 0 descriptor??
[  394.243601][  T808] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  394.243638][  T808] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  394.243982][  T808] asix 7-1:0.251: probe with driver asix failed with error -5
[  394.294809][  T808] usb 7-1: USB disconnect, device number 4
[  394.338861][ T6101] hub 1-1:0.0: 1 port detected
[  394.447259][ T6888] usb 3-1: USB disconnect, device number 51
[  394.505741][ T5927] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  394.674856][ T5927] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  394.674893][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.674915][ T5927] usb 2-1: Product: syz
[  394.674930][ T5927] usb 2-1: Manufacturer: syz
[  394.674945][ T5927] usb 2-1: SerialNumber: syz
[  394.720017][ T5927] usb 2-1: config 0 descriptor??
[  394.950016][ T6888] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  394.950218][ T6101] usb 1-1: USB disconnect, device number 44
[  395.494748][ T6888] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  395.662345][ T6888] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  395.663173][ T6888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.663456][ T6888] usb 3-1: Product: syz
[  395.663473][ T6888] usb 3-1: Manufacturer: syz
[  395.663489][ T6888] usb 3-1: SerialNumber: syz
[  395.698015][ T6888] usb 3-1: config 0 descriptor??
[  395.739704][ T5927] usb 2-1: Firmware version (0.0) predates our first public release.
[  395.739735][ T5927] usb 2-1: Please update to version 0.2 or newer
[  395.805829][ T5927] usb 2-1: USB disconnect, device number 60
[  396.081410][ T9264] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  396.231016][ T9273] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  396.231049][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  396.231166][ T9273] vhci_hcd vhci_hcd.0: Device attached
[  396.249306][ T9273] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7)
[  396.249334][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  396.249384][ T9273] vhci_hcd vhci_hcd.0: Device attached
[  396.267941][ T9273] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9)
[  396.267968][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  396.268023][ T9273] vhci_hcd vhci_hcd.0: Device attached
[  396.276670][ T9273] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11)
[  396.276696][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  396.276747][ T9273] vhci_hcd vhci_hcd.0: Device attached
[  396.280145][ T9273] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13)
[  396.280169][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  396.280229][ T9273] vhci_hcd vhci_hcd.0: Device attached
[  396.484792][ T5927] usb 33-1: new high-speed USB device number 5 using vhci_hcd
[  396.866453][ T6101] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  396.956936][ T9278] vhci_hcd: connection closed
[  396.957097][ T9276] vhci_hcd: connection reset by peer
[  396.958684][ T9280] vhci_hcd: connection closed
[  396.959749][ T9282] vhci_hcd: connection closed
[  396.962776][ T4482] vhci_hcd vhci_hcd.0: stop threads
[  396.962804][ T4482] vhci_hcd vhci_hcd.0: release socket
[  396.966585][ T4482] vhci_hcd vhci_hcd.0: disconnect device
[  396.971978][ T4482] vhci_hcd vhci_hcd.0: stop threads
[  396.971998][ T4482] vhci_hcd vhci_hcd.0: release socket
[  396.973256][ T9284] vhci_hcd: connection closed
[  397.026530][ T4482] vhci_hcd vhci_hcd.0: disconnect device
[  397.027116][ T4482] vhci_hcd vhci_hcd.0: stop threads
[  397.027199][ T4482] vhci_hcd vhci_hcd.0: release socket
[  397.027288][ T4482] vhci_hcd vhci_hcd.0: disconnect device
[  397.030412][ T4482] vhci_hcd vhci_hcd.0: stop threads
[  397.030431][ T4482] vhci_hcd vhci_hcd.0: release socket
[  397.030589][ T4482] vhci_hcd vhci_hcd.0: disconnect device
[  397.048170][ T4482] vhci_hcd vhci_hcd.0: stop threads
[  397.048196][ T4482] vhci_hcd vhci_hcd.0: release socket
[  397.048264][ T4482] vhci_hcd vhci_hcd.0: disconnect device
[  397.264596][ T9309] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  397.504673][ T6101] usb 2-1: Using ep0 maxpacket: 16
[  397.530463][ T6101] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  397.530560][ T6101] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  397.644734][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  397.794736][   T10] usb 7-1: Using ep0 maxpacket: 32
[  397.798552][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.798994][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.799041][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  397.799066][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.901135][   T10] usb 7-1: config 0 descriptor??
[  397.952781][   T10] hub 7-1:0.0: USB hub found
[  398.145603][   T10] hub 7-1:0.0: 1 port detected
[  398.406678][  T808] usb 3-1: USB disconnect, device number 52
[  398.787445][  T808] usb 7-1: USB disconnect, device number 5
[  398.793769][ T9293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1117'.
[  398.793799][ T9293] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1117'.
[  398.854750][ T1231] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  398.985069][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  398.985100][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  398.987597][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.023548][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7)
[  399.023581][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  399.023734][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.047682][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9)
[  399.047713][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  399.047885][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.088148][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11)
[  399.088178][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  399.088242][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.128438][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13)
[  399.128471][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  399.139767][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.170151][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(15)
[  399.170184][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  399.170286][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.183227][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(17)
[  399.183369][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  399.192760][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.202873][ T9341] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(19)
[  399.202901][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  399.203114][ T9341] vhci_hcd vhci_hcd.0: Device attached
[  399.305115][ T1231] usb 37-1: new high-speed USB device number 3 using vhci_hcd
[  399.671481][ T9358] vhci_hcd: connection closed
[  399.671873][ T9356] vhci_hcd: connection closed
[  399.673261][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.673289][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.673763][ T9353] vhci_hcd: connection closed
[  399.674153][ T9351] vhci_hcd: connection closed
[  399.683306][ T9349] vhci_hcd: connection closed
[  399.686673][ T9346] vhci_hcd: connection closed
[  399.689336][ T9342] vhci_hcd: connection reset by peer
[  399.689730][ T9344] vhci_hcd: connection closed
[  399.727414][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  399.728119][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.728215][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.728463][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  399.729607][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.729627][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.730038][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  399.730188][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.730204][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.730496][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  399.731264][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.731283][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.732644][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  399.733791][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.733808][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.755566][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  399.773520][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.773544][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.794461][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  399.819329][  T152] vhci_hcd vhci_hcd.2: stop threads
[  399.819354][  T152] vhci_hcd vhci_hcd.2: release socket
[  399.849700][  T152] vhci_hcd vhci_hcd.2: disconnect device
[  400.763103][ T9390] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  400.763133][ T9390] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  400.764086][ T9390] vhci_hcd vhci_hcd.0: Device attached
[  400.773484][ T9390] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7)
[  400.773512][ T9390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  400.773605][ T9390] vhci_hcd vhci_hcd.0: Device attached
[  400.787045][ T9390] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9)
[  400.787075][ T9390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  400.787462][ T9390] vhci_hcd vhci_hcd.0: Device attached
[  400.794456][ T9390] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11)
[  400.794484][ T9390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  400.796421][ T9390] vhci_hcd vhci_hcd.0: Device attached
[  400.802986][ T9390] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13)
[  400.803015][ T9390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  400.804179][ T9390] vhci_hcd vhci_hcd.0: Device attached
[  401.512373][ T9401] vhci_hcd: connection closed
[  401.513537][ T9399] vhci_hcd: connection closed
[  401.514190][ T1403] vhci_hcd vhci_hcd.2: stop threads
[  401.514220][ T1403] vhci_hcd vhci_hcd.2: release socket
[  401.514308][ T1403] vhci_hcd vhci_hcd.2: disconnect device
[  401.514489][ T9394] vhci_hcd: connection closed
[  401.517201][ T1403] vhci_hcd vhci_hcd.2: stop threads
[  401.517222][ T1403] vhci_hcd vhci_hcd.2: release socket
[  401.517308][ T1403] vhci_hcd vhci_hcd.2: disconnect device
[  401.518806][ T9396] vhci_hcd: connection closed
[  401.519060][ T1403] vhci_hcd vhci_hcd.2: stop threads
[  401.519075][ T1403] vhci_hcd vhci_hcd.2: release socket
[  401.519148][ T1403] vhci_hcd vhci_hcd.2: disconnect device
[  401.587977][ T9391] vhci_hcd: connection closed
[  401.589096][ T1403] vhci_hcd vhci_hcd.2: stop threads
[  401.589123][ T1403] vhci_hcd vhci_hcd.2: release socket
[  401.589215][ T1403] vhci_hcd vhci_hcd.2: disconnect device
[  401.593333][ T1403] vhci_hcd vhci_hcd.2: stop threads
[  401.593354][ T1403] vhci_hcd vhci_hcd.2: release socket
[  401.593439][ T1403] vhci_hcd vhci_hcd.2: disconnect device
[  401.606177][ T5927] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  403.219742][ T6101] usb 2-1: string descriptor 0 read error: -32
[  403.219914][ T6101] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  403.219942][ T6101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.322524][ T6101] usb 2-1: can't set config #1, error -32
[  403.513324][ T9428] 9p: Bad value for 'rfdno'
[  403.653288][ T6101] usb 2-1: USB disconnect, device number 61
[  404.762074][ T1231] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  405.195134][ T9456] netlink: 'syz.2.1180': attribute type 1 has an invalid length.
[  405.480992][ T9469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1185'.
[  407.481707][ T9521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1209'.
[  408.175174][   T36] usb 2-1: new low-speed USB device number 62 using dummy_hcd
[  408.347703][   T36] usb 2-1: unable to get BOS descriptor or descriptor too short
[  408.349003][   T36] usb 2-1: config 172 has an invalid interface number: 182 but max is 1
[  408.349029][   T36] usb 2-1: config 172 has an invalid interface association descriptor of length 7, skipping
[  408.349050][   T36] usb 2-1: config 172 has an invalid interface number: 190 but max is 1
[  408.349071][   T36] usb 2-1: config 172 has an invalid interface association descriptor of length 2, skipping
[  408.349092][   T36] usb 2-1: config 172 has no interface number 0
[  408.349109][   T36] usb 2-1: config 172 has no interface number 1
[  408.349175][   T36] usb 2-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  408.349219][   T36] usb 2-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  408.349246][   T36] usb 2-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  408.349274][   T36] usb 2-1: config 172 interface 182 has no altsetting 0
[  408.349294][   T36] usb 2-1: config 172 interface 190 has no altsetting 0
[  408.404652][   T36] usb 2-1: string descriptor 0 read error: -22
[  408.404799][   T36] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  408.404821][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.254511][ T8112] usb 2-1: USB disconnect, device number 62
[  409.340287][ T9612] 9p: Bad value for 'rfdno'
[  411.132145][ T6687] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  411.141697][ T6687] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  411.147323][ T6687] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  411.167619][ T6687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  411.168513][ T6687] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  413.214748][   T60] Bluetooth: hci6: command tx timeout
[  415.294848][   T60] Bluetooth: hci6: command tx timeout
[  415.465594][ T9456] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  415.653000][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1302'.
[  417.432495][   T60] Bluetooth: hci6: command tx timeout
[  417.664716][ T1231] usb 2-1: new low-speed USB device number 63 using dummy_hcd
[  417.766783][ T9733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.829553][ T1231] usb 2-1: unable to get BOS descriptor or descriptor too short
[  417.835526][ T1231] usb 2-1: config 172 has an invalid interface number: 182 but max is 1
[  417.835556][ T1231] usb 2-1: config 172 has an invalid interface association descriptor of length 7, skipping
[  417.835576][ T1231] usb 2-1: config 172 has an invalid interface number: 190 but max is 1
[  417.835597][ T1231] usb 2-1: config 172 has an invalid interface association descriptor of length 2, skipping
[  417.835617][ T1231] usb 2-1: config 172 has no interface number 0
[  417.835634][ T1231] usb 2-1: config 172 has no interface number 1
[  417.835697][ T1231] usb 2-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  417.835737][ T1231] usb 2-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  417.835762][ T1231] usb 2-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  417.835789][ T1231] usb 2-1: config 172 interface 182 has no altsetting 0
[  417.835808][ T1231] usb 2-1: config 172 interface 190 has no altsetting 0
[  417.846519][ T1231] usb 2-1: string descriptor 0 read error: -22
[  417.846687][ T1231] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  417.846712][ T1231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.102081][ T9752] 9p: Bad value for 'rfdno'
[  418.141991][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.142553][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.246339][ T4482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.573195][ T4482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.881634][   T10] usb 2-1: USB disconnect, device number 63
[  419.260255][ T4482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.394954][ T9771] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  419.454737][   T60] Bluetooth: hci6: command tx timeout
[  420.145538][   T10] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  420.504575][   T37] kauditd_printk_skb: 132 callbacks suppressed
[  420.504624][   T37] audit: type=1326 audit(1775331549.004:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  420.504937][   T37] audit: type=1326 audit(1775331549.014:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  420.505147][   T37] audit: type=1326 audit(1775331549.024:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  420.506425][   T37] audit: type=1326 audit(1775331549.024:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  420.506633][   T37] audit: type=1326 audit(1775331549.024:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  420.506819][   T37] audit: type=1326 audit(1775331549.074:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36e26ac582 code=0x7ffc0000
[  420.506970][   T37] audit: type=1326 audit(1775331549.074:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36e26ac582 code=0x7ffc0000
[  420.507176][   T37] audit: type=1326 audit(1775331549.164:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  420.508870][   T37] audit: type=1326 audit(1775331549.164:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36e26ac582 code=0x7ffc0000
[  420.509075][   T37] audit: type=1326 audit(1775331549.164:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f36e26ac617 code=0x7ffc0000
[  421.394714][   T10] usb 2-1: device descriptor read/64, error -71
[  421.416735][ T4482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.644166][   T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  421.723255][ T9706] chnl_net:caif_netlink_parms(): no params data found
[  421.774827][ T1231] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  421.774986][   T10] usb 2-1: device descriptor read/64, error -71
[  421.885218][   T10] usb usb2-port1: attempt power cycle
[  421.929945][ T1231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  421.930011][ T1231] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  421.930038][ T1231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.974927][ T1231] usb 3-1: config 0 descriptor??
[  422.003324][ T1231] pwc: Askey VC010 type 2 USB webcam detected.
[  422.234738][   T10] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  422.255603][   T10] usb 2-1: device descriptor read/8, error -71
[  422.356549][ T6888] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  422.437196][ T1231] pwc: recv_control_msg error -32 req 02 val 2b00
[  422.438472][ T1231] pwc: recv_control_msg error -32 req 02 val 2700
[  422.439521][ T1231] pwc: recv_control_msg error -32 req 02 val 2c00
[  422.440727][ T1231] pwc: recv_control_msg error -32 req 04 val 1000
[  422.441878][ T1231] pwc: recv_control_msg error -32 req 04 val 1300
[  422.443275][ T1231] pwc: recv_control_msg error -32 req 04 val 1400
[  422.444207][ T1231] pwc: recv_control_msg error -32 req 02 val 2000
[  422.446549][ T1231] pwc: recv_control_msg error -32 req 02 val 2100
[  422.447472][ T1231] pwc: recv_control_msg error -32 req 04 val 1500
[  422.448302][ T1231] pwc: recv_control_msg error -32 req 02 val 2500
[  422.448645][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[  422.449148][ T1231] pwc: recv_control_msg error -32 req 02 val 2400
[  422.459253][ T1231] pwc: recv_control_msg error -71 req 02 val 2600
[  422.460953][ T1231] pwc: recv_control_msg error -71 req 02 val 2900
[  422.462079][ T1231] pwc: recv_control_msg error -71 req 02 val 2800
[  422.463855][ T1231] pwc: recv_control_msg error -71 req 04 val 1100
[  422.465854][ T1231] pwc: recv_control_msg error -71 req 04 val 1200
[  422.471684][ T1231] pwc: Registered as video103.
[  422.487115][ T1231] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16
[  422.494764][   T10] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[  422.515604][   T10] usb 2-1: device descriptor read/8, error -71
[  422.531141][ T6888] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  422.531170][ T6888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.531188][ T6888] usb 7-1: Product: syz
[  422.531201][ T6888] usb 7-1: Manufacturer: syz
[  422.531215][ T6888] usb 7-1: SerialNumber: syz
[  422.641851][ T1231] usb 3-1: USB disconnect, device number 53
[  422.646152][   T10] usb usb2-port1: unable to enumerate USB device
[  422.728568][ T6888] usb 7-1: config 0 descriptor??
[  423.228074][ T4482] bridge_slave_1: left allmulticast mode
[  423.228106][ T4482] bridge_slave_1: left promiscuous mode
[  423.228379][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.343817][ T4482] bridge_slave_0: left allmulticast mode
[  423.343848][ T4482] bridge_slave_0: left promiscuous mode
[  423.344274][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.409553][ T4482] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  424.615807][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.689447][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.731464][ T4482] bond0 (unregistering): Released all slaves
[  424.791401][ T4482] bond1 (unregistering): Released all slaves
[  424.917186][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.917266][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.917442][ T9706] bridge_slave_0: entered allmulticast mode
[  424.919365][ T9706] bridge_slave_0: entered promiscuous mode
[  425.112773][  T808] usb 7-1: USB disconnect, device number 6
[  425.347103][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.347216][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.347454][ T9706] bridge_slave_1: entered allmulticast mode
[  425.349371][ T9706] bridge_slave_1: entered promiscuous mode
[  428.185664][ T9865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  428.374258][ T9878] netlink: 492 bytes leftover after parsing attributes in process `syz.1.1353'.
[  428.378256][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.431118][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.074783][ T9884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  430.363428][ T9706] team0: Port device team_slave_0 added
[  430.465865][ T9706] team0: Port device team_slave_1 added
[  430.577956][   T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  430.725782][   T10] usb 1-1: no configurations
[  430.725804][   T10] usb 1-1: can't read configurations, error -22
[  430.732634][ T4482] hsr_slave_0: left promiscuous mode
[  430.775120][ T4482] hsr_slave_1: left promiscuous mode
[  430.776382][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.776402][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.839726][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.839756][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.854745][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  431.005803][   T10] usb 1-1: no configurations
[  431.005834][   T10] usb 1-1: can't read configurations, error -22
[  431.009763][   T10] usb usb1-port1: attempt power cycle
[  431.093333][ T4482] veth1_macvtap: left promiscuous mode
[  431.093452][ T4482] veth0_macvtap: left promiscuous mode
[  431.093740][ T4482] veth1_vlan: left promiscuous mode
[  431.093948][ T4482] veth0_vlan: left promiscuous mode
[  431.304710][   T36] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  431.354801][   T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  431.376849][   T10] usb 1-1: no configurations
[  431.376871][   T10] usb 1-1: can't read configurations, error -22
[  431.475456][   T36] usb 7-1: Using ep0 maxpacket: 16
[  431.494740][   T36] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  431.494774][   T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.494794][   T36] usb 7-1: Product: syz
[  431.494809][   T36] usb 7-1: Manufacturer: syz
[  431.494823][   T36] usb 7-1: SerialNumber: syz
[  431.514845][   T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  431.543903][   T10] usb 1-1: no configurations
[  431.543923][   T10] usb 1-1: can't read configurations, error -22
[  431.544259][   T10] usb usb1-port1: unable to enumerate USB device
[  431.573253][   T36] r8152-cfgselector 7-1: Unknown version 0x0000
[  431.573282][   T36] r8152-cfgselector 7-1: config 0 descriptor??
[  432.023366][   T36] r8152-cfgselector 7-1: USB disconnect, device number 7
[  432.335481][ T4482] team0 (unregistering): Port device team_slave_1 removed
[  432.375361][ T4482] team0 (unregistering): Port device team_slave_0 removed
[  432.605117][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.605137][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.605169][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.626956][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.626975][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.627005][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.991583][ T9706] hsr_slave_0: entered promiscuous mode
[  432.993137][ T9706] hsr_slave_1: entered promiscuous mode
[  432.994228][ T9706] debugfs: 'hsr0' already exists in 'hsr'
[  432.994254][ T9706] Cannot create hsr debugfs directory
[  435.766538][  T808] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  435.931005][  T808] usb 7-1: config 0 has an invalid interface number: 74 but max is 1
[  435.931038][  T808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.931058][  T808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  435.931080][  T808] usb 7-1: config 0 has no interface number 0
[  435.931141][  T808] usb 7-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  435.931163][  T808] usb 7-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  435.931189][  T808] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  435.931216][  T808] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  435.982282][  T808] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  435.982317][  T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.982338][  T808] usb 7-1: Product: syz
[  435.982353][  T808] usb 7-1: Manufacturer: syz
[  435.982368][  T808] usb 7-1: SerialNumber: syz
[  436.060450][  T808] usb 7-1: config 0 descriptor??
[  436.339469][  T808] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected
[  436.965926][  T808] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  437.375280][  T808] usb 7-1: USB disconnect, device number 8
[  437.406538][  T808] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  437.407487][  T808] cypress_m8 7-1:0.74: device disconnected
[  438.721938][  T808] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  438.734761][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  438.909376][  T808] usb 2-1: Using ep0 maxpacket: 16
[  438.923518][  T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  438.923537][  T808] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  438.934671][   T10] usb 7-1: Using ep0 maxpacket: 16
[  438.951751][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  438.951778][   T10] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  439.074730][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1407'.
[  439.074762][T10043] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1407'.
[  439.123824][T10041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'.
[  439.123930][T10041] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1406'.
[  441.216383][ T9706] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  441.446075][ T9706] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  441.659647][ T9706] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  441.770626][ T9706] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  443.946002][  T808] usb 2-1: string descriptor 0 read error: -32
[  443.946165][  T808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  443.946181][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.989468][  T808] usb 2-1: can't set config #1, error -32
[  444.024232][   T10] usb 7-1: string descriptor 0 read error: -32
[  444.024337][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  444.024351][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.105512][   T10] usb 7-1: can't set config #1, error -32
[  444.412912][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.542453][ T9706] 8021q: adding VLAN 0 to HW filter on device team0
[  444.564182][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.564340][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.591577][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.596696][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.800773][ T9706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  445.051442][ T1231] usb 2-1: USB disconnect, device number 68
[  445.305492][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  445.305575][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  445.375066][ T8112] usb 7-1: USB disconnect, device number 9
[  445.604895][T10105] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1418'.
[  445.857020][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.018419][T10118] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1423'.
[  446.018489][T10118] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1423'.
[  446.743957][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1427'.
[  446.930979][T10143] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1429'.
[  446.931056][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1429'.
[  448.111281][T10175] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1436'.
[  449.539441][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1443'.
[  456.073351][ T9706] veth0_vlan: entered promiscuous mode
[  456.099168][ T9706] veth1_vlan: entered promiscuous mode
[  456.207971][ T9706] veth0_macvtap: entered promiscuous mode
[  456.231829][ T9706] veth1_macvtap: entered promiscuous mode
[  456.273696][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.305882][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.337413][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.364661][   T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.366880][   T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.372664][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.829060][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.829086][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.414018][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.414042][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.833485][T10248] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1463'.
[  458.833513][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1463'.
[  458.944761][ T5927] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  459.261173][ T5927] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  459.261195][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.261207][ T5927] usb 2-1: Product: syz
[  459.261216][ T5927] usb 2-1: Manufacturer: syz
[  459.261224][ T5927] usb 2-1: SerialNumber: syz
[  460.037014][ T5927] usb 2-1: config 0 descriptor??
[  460.658442][ T5927] usb 2-1: Firmware version (0.0) predates our first public release.
[  460.658473][ T5927] usb 2-1: Please update to version 0.2 or newer
[  460.665236][ T5927] usb 2-1: Firmware: build 
[  460.916649][   T37] kauditd_printk_skb: 56 callbacks suppressed
[  460.916670][   T37] audit: type=1326 audit(1775331589.494:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f054c819 code=0x7ffc0000
[  460.916720][   T37] audit: type=1326 audit(1775331589.494:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f054c819 code=0x7ffc0000
[  460.916769][   T37] audit: type=1326 audit(1775331589.504:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f054c819 code=0x7ffc0000
[  460.916816][   T37] audit: type=1326 audit(1775331589.514:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f054c819 code=0x7ffc0000
[  460.916864][   T37] audit: type=1326 audit(1775331589.514:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f68f054c819 code=0x7ffc0000
[  460.916912][   T37] audit: type=1326 audit(1775331589.564:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68f054c582 code=0x7ffc0000
[  460.916960][   T37] audit: type=1326 audit(1775331589.564:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68f054c582 code=0x7ffc0000
[  460.917008][   T37] audit: type=1326 audit(1775331589.574:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f054c819 code=0x7ffc0000
[  460.917055][   T37] audit: type=1326 audit(1775331589.574:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68f054c582 code=0x7ffc0000
[  460.917103][   T37] audit: type=1326 audit(1775331589.574:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f68f054c617 code=0x7ffc0000
[  461.458615][ T5927] usb 2-1: USB disconnect, device number 69
[  465.726558][T10287] netlink: 'syz.1.1473': attribute type 1 has an invalid length.
[  466.374777][ T5787] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  466.538314][ T5787] usb 3-1: Using ep0 maxpacket: 8
[  466.547139][ T5787] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  466.547167][ T5787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.547185][ T5787] usb 3-1: config 0 has no interface number 0
[  466.547235][ T5787] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  466.547273][ T5787] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  466.547294][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.578517][ T5787] usb 3-1: config 0 descriptor??
[  466.599813][ T5787] ldusb 3-1:0.55: Interrupt in endpoint not found
[  466.728185][  T808] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  466.821093][ T8112] usb 3-1: USB disconnect, device number 54
[  466.896765][  T808] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  466.896801][  T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.896823][  T808] usb 6-1: Product: syz
[  466.896837][  T808] usb 6-1: Manufacturer: syz
[  466.896853][  T808] usb 6-1: SerialNumber: syz
[  466.916642][  T808] usb 6-1: config 0 descriptor??
[  467.834950][   T37] kauditd_printk_skb: 11 callbacks suppressed
[  467.835002][   T37] audit: type=1326 audit(1775331596.174:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  467.835320][   T37] audit: type=1326 audit(1775331596.184:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  467.835574][   T37] audit: type=1326 audit(1775331596.194:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  467.835826][   T37] audit: type=1326 audit(1775331596.194:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  467.836496][   T37] audit: type=1326 audit(1775331596.194:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  467.836779][   T37] audit: type=1326 audit(1775331596.244:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36e26ac582 code=0x7ffc0000
[  467.836928][   T37] audit: type=1326 audit(1775331596.244:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36e26ac582 code=0x7ffc0000
[  467.837133][   T37] audit: type=1326 audit(1775331596.334:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e26ac819 code=0x7ffc0000
[  467.837361][   T37] audit: type=1326 audit(1775331596.334:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36e26ac582 code=0x7ffc0000
[  467.837564][   T37] audit: type=1326 audit(1775331596.334:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10311 comm="syz.6.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f36e26ac617 code=0x7ffc0000
[  468.396673][  T808] usb 6-1: Firmware version (0.0) predates our first public release.
[  468.396704][  T808] usb 6-1: Please update to version 0.2 or newer
[  468.490215][  T808] usb 6-1: Firmware: build 
[  468.796931][  T808] usb 6-1: USB disconnect, device number 20
[  468.897732][T10328] netlink: 'syz.1.1489': attribute type 1 has an invalid length.
[  472.058779][T10366] loop2: detected capacity change from 0 to 7
[  472.091900][T10366] Dev loop2: unable to read RDB block 7
[  472.091949][T10366]  loop2: unable to read partition table
[  472.092209][T10366] loop2: partition table beyond EOD, truncated
[  472.092249][T10366] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  472.436925][ T5927] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  472.594663][ T5927] usb 7-1: Using ep0 maxpacket: 32
[  472.599160][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.599219][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  472.599265][ T5927] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  472.599289][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.672976][ T5927] usb 7-1: config 0 descriptor??
[  472.699838][ T5927] hub 7-1:0.0: bad descriptor, ignoring hub
[  472.699884][ T5927] hub 7-1:0.0: probe with driver hub failed with error -5
[  472.703480][ T5927] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  473.321500][ T5787] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  474.304748][T10390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  474.464599][ T5787] usb 6-1: config 0 has an invalid interface number: 74 but max is 1
[  474.464632][ T5787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  474.464651][ T5787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  474.464671][ T5787] usb 6-1: config 0 has no interface number 0
[  474.464721][ T5787] usb 6-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  474.464742][ T5787] usb 6-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  474.464768][ T5787] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  474.464792][ T5787] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  474.474352][ T5787] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  474.474387][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.474410][ T5787] usb 6-1: Product: syz
[  474.474425][ T5787] usb 6-1: Manufacturer: syz
[  474.474440][ T5787] usb 6-1: SerialNumber: syz
[  474.490664][ T5787] usb 6-1: config 0 descriptor??
[  474.500934][T10399] netlink: 'syz.1.1513': attribute type 1 has an invalid length.
[  474.756736][ T5787] cypress_m8 6-1:0.74: HID->COM RS232 Adapter converter detected
[  474.805688][ T5787] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  474.842003][ T5787] usb 6-1: USB disconnect, device number 21
[  474.897524][ T5787] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  474.898009][ T5787] cypress_m8 6-1:0.74: device disconnected
[  475.325386][   T36] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  475.474637][   T36] usb 2-1: device descriptor read/64, error -71
[  475.592472][T10428] netlink: 'syz.0.1526': attribute type 1 has an invalid length.
[  475.625581][  T808] usb 7-1: reset high-speed USB device number 10 using dummy_hcd
[  475.640709][  T808] usb 7-1: device reset changed ep0 maxpacket size!
[  475.673742][  T808] usb 7-1: USB disconnect, device number 10
[  475.724741][   T36] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  475.854663][   T36] usb 2-1: device descriptor read/64, error -71
[  475.974023][   T36] usb usb2-port1: attempt power cycle
[  475.985697][  T808] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  476.125559][ T5787] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  476.144692][  T808] usb 7-1: Using ep0 maxpacket: 16
[  476.153337][  T808] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  476.153369][  T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.153389][  T808] usb 7-1: Product: syz
[  476.153404][  T808] usb 7-1: Manufacturer: syz
[  476.153418][  T808] usb 7-1: SerialNumber: syz
[  476.182223][  T808] r8152-cfgselector 7-1: Unknown version 0x0000
[  476.182249][  T808] r8152-cfgselector 7-1: config 0 descriptor??
[  476.275556][ T5787] usb 1-1: Using ep0 maxpacket: 32
[  476.281485][ T5787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  476.281520][ T5787] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  476.281547][ T5787] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  476.281562][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.300215][ T5787] usb 1-1: config 0 descriptor??
[  476.315898][   T36] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  476.348707][   T36] usb 2-1: device descriptor read/8, error -71
[  476.403152][ T5787] hub 1-1:0.0: bad descriptor, ignoring hub
[  476.403200][ T5787] hub 1-1:0.0: probe with driver hub failed with error -5
[  476.457332][ T5787] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  476.664905][   T36] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  476.688344][ T5787] r8152-cfgselector 7-1: USB disconnect, device number 11
[  476.696097][   T36] usb 2-1: device descriptor read/8, error -71
[  476.764700][  T808] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[  476.805677][   T36] usb usb2-port1: unable to enumerate USB device
[  476.929584][  T808] usb 6-1: unable to get BOS descriptor or descriptor too short
[  476.930801][  T808] usb 6-1: config 172 has an invalid interface number: 182 but max is 1
[  476.930830][  T808] usb 6-1: config 172 has an invalid interface association descriptor of length 7, skipping
[  476.930849][  T808] usb 6-1: config 172 has an invalid interface number: 190 but max is 1
[  476.930868][  T808] usb 6-1: config 172 has an invalid interface association descriptor of length 2, skipping
[  476.930880][  T808] usb 6-1: config 172 has no interface number 0
[  476.930890][  T808] usb 6-1: config 172 has no interface number 1
[  476.930926][  T808] usb 6-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  476.930950][  T808] usb 6-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  476.930965][  T808] usb 6-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  476.930980][  T808] usb 6-1: config 172 interface 182 has no altsetting 0
[  476.930990][  T808] usb 6-1: config 172 interface 190 has no altsetting 0
[  476.937570][  T808] usb 6-1: string descriptor 0 read error: -22
[  476.937716][  T808] usb 6-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  476.937739][  T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.234004][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.243404][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.857806][T10468] loop2: detected capacity change from 0 to 7
[  477.860996][T10468] Dev loop2: unable to read RDB block 7
[  477.861030][T10468]  loop2: AHDI p1 p2
[  477.861062][T10468] loop2: partition table partially beyond EOD, truncated
[  477.862133][T10468] loop2: p1 start 1818582900 is beyond EOD, truncated
[  477.940921][    T9] usb 6-1: USB disconnect, device number 22
[  478.336458][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'.
[  478.336497][T10481] netlink: 'syz.1.1549': attribute type 30 has an invalid length.
[  478.370193][ T4482] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  478.370793][ T4482] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  478.370836][ T4482] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  478.370874][ T4482] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  478.546492][   T36] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  478.730578][   T36] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  478.730614][   T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.730634][   T36] usb 7-1: Product: syz
[  478.730649][   T36] usb 7-1: Manufacturer: syz
[  478.730665][   T36] usb 7-1: SerialNumber: syz
[  478.757639][   T36] usb 7-1: config 0 descriptor??
[  479.156500][ T5884] usb 1-1: USB disconnect, device number 49
[  479.324018][   T36] usb 7-1: Firmware version (0.0) predates our first public release.
[  479.324048][   T36] usb 7-1: Please update to version 0.2 or newer
[  480.224648][   T36] usb 7-1: USB disconnect, device number 12
[  480.904990][  T808] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  481.034666][  T808] usb 2-1: device descriptor read/64, error -71
[  481.289097][  T808] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  481.672203][  T808] usb 2-1: device descriptor read/64, error -71
[  481.786246][  T808] usb usb2-port1: attempt power cycle
[  481.824601][   T36] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  482.002462][   T36] usb 7-1: config 0 has an invalid interface number: 74 but max is 1
[  482.002496][   T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.002517][   T36] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  482.002539][   T36] usb 7-1: config 0 has no interface number 0
[  482.002591][   T36] usb 7-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  482.002614][   T36] usb 7-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  482.002642][   T36] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  482.002670][   T36] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  482.049386][   T36] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  482.049418][   T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.049437][   T36] usb 7-1: Product: syz
[  482.049450][   T36] usb 7-1: Manufacturer: syz
[  482.049464][   T36] usb 7-1: SerialNumber: syz
[  482.132691][   T36] usb 7-1: config 0 descriptor??
[  482.192409][  T808] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  482.402820][  T808] usb 2-1: device descriptor read/8, error -71
[  482.498764][   T36] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected
[  482.543643][   T36] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  482.584915][   T36] usb 7-1: USB disconnect, device number 13
[  482.637757][   T36] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  482.638397][   T36] cypress_m8 7-1:0.74: device disconnected
[  482.664718][  T808] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  482.685917][  T808] usb 2-1: device descriptor read/8, error -71
[  482.710179][T10529] loop2: detected capacity change from 0 to 7
[  482.712256][T10529] Dev loop2: unable to read RDB block 7
[  482.712299][T10529]  loop2: AHDI p1 p2 p3
[  482.712329][T10529] loop2: partition table partially beyond EOD, truncated
[  482.712566][T10529] loop2: p1 start 1818582900 is beyond EOD, truncated
[  482.712583][T10529] loop2: p3 start 335544320 is beyond EOD, truncated
[  482.795011][  T808] usb usb2-port1: unable to enumerate USB device
[  482.865128][ T5927] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  483.019305][ T5927] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  483.019354][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.019367][ T5927] usb 1-1: Product: syz
[  483.019377][ T5927] usb 1-1: Manufacturer: syz
[  483.019388][ T5927] usb 1-1: SerialNumber: syz
[  483.030432][ T5927] usb 1-1: config 0 descriptor??
[  483.488658][ T5927] usb 1-1: Firmware version (0.0) predates our first public release.
[  483.488687][ T5927] usb 1-1: Please update to version 0.2 or newer
[  483.568441][ T5927] usb 1-1: USB disconnect, device number 50
[  483.754646][ T6101] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  483.944645][ T6101] usb 7-1: Using ep0 maxpacket: 16
[  483.950705][ T6101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.950744][ T6101] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  483.950792][ T6101] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  483.950817][ T6101] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.976258][ T6101] usb 7-1: config 0 descriptor??
[  484.744694][ T5787] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  484.918801][ T5787] usb 1-1: config 0 has an invalid interface number: 74 but max is 1
[  484.918835][ T5787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.918856][ T5787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  484.918878][ T5787] usb 1-1: config 0 has no interface number 0
[  484.918926][ T5787] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  484.918947][ T5787] usb 1-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  484.918972][ T5787] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  484.918999][ T5787] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  484.924043][ T5787] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  484.924085][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.924105][ T5787] usb 1-1: Product: syz
[  484.924119][ T5787] usb 1-1: Manufacturer: syz
[  484.924134][ T5787] usb 1-1: SerialNumber: syz
[  485.052920][ T5787] usb 1-1: config 0 descriptor??
[  485.393129][ T5787] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected
[  485.422670][ T5787] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  485.450868][ T5787] usb 1-1: USB disconnect, device number 51
[  485.483840][ T5787] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  485.495198][ T5787] cypress_m8 1-1:0.74: device disconnected
[  487.252370][T10590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  487.369967][ T6101] usbhid 7-1:0.0: can't add hid device: -71
[  487.370107][ T6101] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  487.419897][ T6101] usb 7-1: USB disconnect, device number 14
[  487.756845][T10600] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1596' sets config #0
[  488.553250][T10624] erspan0: entered promiscuous mode
[  488.564618][ T5884] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  488.793548][ T5884] usb 3-1: config 0 has no interfaces?
[  488.804733][ T8112] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  488.846784][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  488.846820][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  488.846842][ T5884] usb 3-1: SerialNumber: syz
[  488.886819][ T5884] usb 3-1: config 0 descriptor??
[  488.955257][ T8112] usb 1-1: Using ep0 maxpacket: 16
[  488.997701][ T8112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.997726][ T8112] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  488.997752][ T8112] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  488.997767][ T8112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.038631][ T8112] usb 1-1: config 0 descriptor??
[  491.605772][ T5787] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  491.721290][ T8112] usbhid 1-1:0.0: can't add hid device: -71
[  491.721431][ T8112] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  491.783177][ T8112] usb 1-1: USB disconnect, device number 52
[  491.798959][ T5787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  491.798998][ T5787] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  491.815359][ T5787] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  491.815389][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.815408][ T5787] usb 6-1: Product: syz
[  491.815421][ T5787] usb 6-1: Manufacturer: syz
[  491.815435][ T5787] usb 6-1: SerialNumber: syz
[  491.895309][ T5787] usb 6-1: config 0 descriptor??
[  492.527331][ T5787] usb 3-1: USB disconnect, device number 55
[  493.065715][ T5787] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  493.185562][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'.
[  493.195149][ T5787] usb 3-1: device descriptor read/64, error -71
[  493.434720][ T5787] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  493.458869][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  493.574697][ T5787] usb 3-1: device descriptor read/64, error -71
[  493.695074][ T5787] usb usb3-port1: attempt power cycle
[  494.034697][ T5787] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  494.055734][ T5787] usb 3-1: device descriptor read/8, error -71
[  494.297094][ T5787] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  494.315460][ T5787] usb 3-1: device descriptor read/8, error -71
[  494.394891][  T826] usb 2-1: new low-speed USB device number 78 using dummy_hcd
[  494.414787][ T6101] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  494.433372][ T5787] usb usb3-port1: unable to enumerate USB device
[  494.452728][ T5787] usb 6-1: USB disconnect, device number 23
[  494.547774][  T826] usb 2-1: unable to get BOS descriptor or descriptor too short
[  494.550106][  T826] usb 2-1: config 172 has an invalid interface number: 182 but max is 1
[  494.550131][  T826] usb 2-1: config 172 has an invalid interface association descriptor of length 7, skipping
[  494.550143][  T826] usb 2-1: config 172 has an invalid interface number: 190 but max is 1
[  494.550158][  T826] usb 2-1: config 172 has an invalid interface association descriptor of length 2, skipping
[  494.550168][  T826] usb 2-1: config 172 has no interface number 0
[  494.550178][  T826] usb 2-1: config 172 has no interface number 1
[  494.550214][  T826] usb 2-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  494.550238][  T826] usb 2-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  494.550254][  T826] usb 2-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  494.550269][  T826] usb 2-1: config 172 interface 182 has no altsetting 0
[  494.550280][  T826] usb 2-1: config 172 interface 190 has no altsetting 0
[  494.647212][  T826] usb 2-1: string descriptor 0 read error: -22
[  494.648278][  T826] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  494.648303][  T826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.967653][ T6101] usb 1-1: config 0 has no interfaces?
[  494.981421][ T6101] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  494.981457][ T6101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  494.981476][ T6101] usb 1-1: SerialNumber: syz
[  494.997058][ T6101] usb 1-1: config 0 descriptor??
[  495.070291][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.070628][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.444621][ T5875] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  495.610917][ T5875] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  495.610940][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.610952][ T5875] usb 6-1: Product: syz
[  495.610961][ T5875] usb 6-1: Manufacturer: syz
[  495.610970][ T5875] usb 6-1: SerialNumber: syz
[  495.662319][ T5875] usb 6-1: config 0 descriptor??
[  495.784279][ T6101] usb 2-1: USB disconnect, device number 78
[  496.304549][ T5875] usb 6-1: Firmware version (0.0) predates our first public release.
[  496.304579][ T5875] usb 6-1: Please update to version 0.2 or newer
[  496.443912][ T5875] usb 6-1: USB disconnect, device number 24
[  497.575498][ T5875] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  497.730102][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  497.730121][ T5875] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  497.732722][ T5875] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  497.732741][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.732753][ T5875] usb 6-1: Product: syz
[  497.732762][ T5875] usb 6-1: Manufacturer: syz
[  497.732770][ T5875] usb 6-1: SerialNumber: syz
[  497.799020][ T5875] usb 6-1: config 0 descriptor??
[  497.936244][ T6101] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  499.194767][T10743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  499.581888][   T10] usb 1-1: USB disconnect, device number 53
[  499.684654][   T36] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  499.825230][ T6101] usb 3-1: device descriptor read/all, error -71
[  499.850597][   T36] usb 7-1: Using ep0 maxpacket: 32
[  499.867836][   T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.867899][   T36] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  499.867957][   T36] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  499.867982][   T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.932937][   T36] usb 7-1: config 0 descriptor??
[  499.958295][   T36] hub 7-1:0.0: bad descriptor, ignoring hub
[  499.958341][   T36] hub 7-1:0.0: probe with driver hub failed with error -5
[  499.986502][   T36] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  500.430146][ T5875] usb 6-1: USB disconnect, device number 25
[  502.378717][   T10] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  502.589233][   T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  502.673675][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  502.673709][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.673729][   T10] usb 6-1: Product: syz
[  502.673742][   T10] usb 6-1: Manufacturer: syz
[  502.673757][   T10] usb 6-1: SerialNumber: syz
[  502.788238][   T10] usb 6-1: config 0 descriptor??
[  502.936493][ T8112] usb 7-1: USB disconnect, device number 15
[  503.354703][    T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  503.424664][ T5787] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  503.514680][    T9] usb 2-1: Using ep0 maxpacket: 8
[  503.521878][    T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  503.521909][    T9] usb 2-1: config 0 has no interface number 0
[  503.521959][    T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  503.521985][    T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  503.522014][    T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  503.522041][    T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  503.522096][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  503.522122][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.546782][    T9] usb 2-1: config 0 descriptor??
[  503.689957][    T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  504.807523][ T5787] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  504.807557][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.807577][ T5787] usb 3-1: Product: syz
[  504.807592][ T5787] usb 3-1: Manufacturer: syz
[  504.807606][ T5787] usb 3-1: SerialNumber: syz
[  504.883110][   T10] usb 2-1: USB disconnect, device number 79
[  504.910469][ T5787] usb 3-1: config 0 descriptor??
[  504.927447][   T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  505.152887][    T9] usb 6-1: USB disconnect, device number 26
[  505.242468][ T5787] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  505.564697][    T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  505.572275][T10941] loop2: detected capacity change from 0 to 7
[  505.617425][T10941] Dev loop2: unable to read RDB block 7
[  505.620131][T10941]  loop2: unable to read partition table
[  505.620849][T10941] loop2: partition table beyond EOD, truncated
[  505.620875][T10941] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  505.724847][    T9] usb 6-1: Using ep0 maxpacket: 32
[  505.730256][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.730318][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  505.730366][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  505.730390][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.807740][    T9] usb 6-1: config 0 descriptor??
[  505.848942][ T5787] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  505.875451][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  505.875497][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[  505.910843][    T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  506.154670][ T5787] usb 2-1: new low-speed USB device number 80 using dummy_hcd
[  506.748204][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  506.748286][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  506.962121][   T10] usb 3-1: USB disconnect, device number 62
[  507.006243][ T5787] usb 2-1: unable to get BOS descriptor or descriptor too short
[  507.007467][ T5787] usb 2-1: unable to read config index 0 descriptor/start: -71
[  507.007512][ T5787] usb 2-1: can't read configurations, error -71
[  508.054730][ T5787] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  508.207218][ T5787] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  508.211402][ T5787] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  508.211436][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.211457][ T5787] usb 2-1: Product: syz
[  508.211472][ T5787] usb 2-1: Manufacturer: syz
[  508.211487][ T5787] usb 2-1: SerialNumber: syz
[  508.220659][ T5787] usb 2-1: config 0 descriptor??
[  508.396248][   T10] usb 6-1: USB disconnect, device number 27
[  508.604348][T11040] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1697'.
[  508.604366][T11040] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1697'.
[  509.004808][ T8112] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  509.164647][ T8112] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  509.164680][ T8112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.164700][ T8112] usb 6-1: Product: syz
[  509.164714][ T8112] usb 6-1: Manufacturer: syz
[  509.164728][ T8112] usb 6-1: SerialNumber: syz
[  509.173467][ T8112] usb 6-1: config 0 descriptor??
[  509.430299][ T8112] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  510.049039][ T8112] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  510.915173][ T8112] usb 2-1: USB disconnect, device number 81
[  511.124816][ T5884] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  511.282766][ T5884] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  511.282791][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.282804][ T5884] usb 7-1: Product: syz
[  511.282812][ T5884] usb 7-1: Manufacturer: syz
[  511.282821][ T5884] usb 7-1: SerialNumber: syz
[  511.302568][ T5884] usb 7-1: config 0 descriptor??
[  511.735113][ T5884] usb 7-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  511.735146][ T5884] usb 7-1: Firmware version (0.0) predates our first public release.
[  511.735164][ T5884] usb 7-1: Please update to version 0.2 or newer
[  511.889285][ T5875] usb 6-1: USB disconnect, device number 28
[  512.067549][ T5884] usb 7-1: USB disconnect, device number 16
[  512.603671][T11165] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1721'.
[  512.603736][T11165] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1721'.
[  512.603752][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'.
[  513.494744][ T8112] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  513.651865][ T8112] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  513.651887][ T8112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.651900][ T8112] usb 1-1: Product: syz
[  513.651908][ T8112] usb 1-1: Manufacturer: syz
[  513.651917][ T8112] usb 1-1: SerialNumber: syz
[  513.707502][ T8112] usb 1-1: config 0 descriptor??
[  513.937353][ T8112] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  514.571855][ T8112] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  515.504709][T11221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1734'.
[  515.506805][T11221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1734'.
[  516.262399][ T6101] usb 1-1: USB disconnect, device number 54
[  516.299544][ T5884] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  516.468903][ T5884] usb 2-1: config 0 has an invalid interface number: 74 but max is 1
[  516.468938][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.468958][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  516.468979][ T5884] usb 2-1: config 0 has no interface number 0
[  516.469119][ T5884] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  516.469143][ T5884] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  516.469170][ T5884] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  516.469198][ T5884] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  516.492902][ T5884] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  516.492934][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.492954][ T5884] usb 2-1: Product: syz
[  516.492968][ T5884] usb 2-1: Manufacturer: syz
[  516.492981][ T5884] usb 2-1: SerialNumber: syz
[  516.591534][ T5884] usb 2-1: config 0 descriptor??
[  516.888889][ T5884] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected
[  516.909671][ T5884] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  517.010676][ T5884] usb 2-1: USB disconnect, device number 82
[  517.062677][ T5884] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  517.082167][ T5884] cypress_m8 2-1:0.74: device disconnected
[  517.479941][T11298] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1746'.
[  517.485631][T11298] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1746'.
[  517.895230][ T5884] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  518.101466][ T5884] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  518.101488][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.101501][ T5884] usb 6-1: Product: syz
[  518.101510][ T5884] usb 6-1: Manufacturer: syz
[  518.101518][ T5884] usb 6-1: SerialNumber: syz
[  518.109982][ T5884] usb 6-1: config 0 descriptor??
[  518.364772][ T5884] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  518.390088][ T8112] usb 2-1: new full-speed USB device number 83 using dummy_hcd
[  518.565453][ T5884] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  518.580163][ T8112] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  518.580194][ T8112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.580213][ T8112] usb 2-1: Product: syz
[  518.580226][ T8112] usb 2-1: Manufacturer: syz
[  518.580239][ T8112] usb 2-1: SerialNumber: syz
[  518.627616][ T8112] usb 2-1: config 0 descriptor??
[  518.847769][T11320] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1751'.
[  518.880492][ T8112] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  520.478599][T11329] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1753'.
[  520.478618][T11329] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1753'.
[  520.762457][ T5884] usb 6-1: USB disconnect, device number 29
[  520.913439][ T8112] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  521.232412][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1758'.
[  521.233865][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1758'.
[  521.705016][ T5884] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  521.872196][ T5884] usb 1-1: config 0 has an invalid interface number: 74 but max is 1
[  521.872217][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.872229][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  521.872241][ T5884] usb 1-1: config 0 has no interface number 0
[  521.872271][ T5884] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  521.872284][ T5884] usb 1-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  521.872298][ T5884] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  521.872312][ T5884] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  521.905531][ T5884] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  521.905563][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.905582][ T5884] usb 1-1: Product: syz
[  521.905595][ T5884] usb 1-1: Manufacturer: syz
[  521.905609][ T5884] usb 1-1: SerialNumber: syz
[  521.928573][ T5884] usb 1-1: config 0 descriptor??
[  522.173335][ T8112] usb 2-1: USB disconnect, device number 83
[  522.218494][T11374] netlink: 340 bytes leftover after parsing attributes in process `syz.6.1762'.
[  522.277528][ T5884] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected
[  522.313176][ T5884] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  522.353126][ T5884] usb 1-1: USB disconnect, device number 55
[  522.396864][ T5884] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  522.397423][ T5884] cypress_m8 1-1:0.74: device disconnected
[  522.885103][  T808] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  523.066988][  T808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  523.067024][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.067046][  T808] usb 2-1: Product: syz
[  523.067061][  T808] usb 2-1: Manufacturer: syz
[  523.067076][  T808] usb 2-1: SerialNumber: syz
[  523.122660][  T808] usb 2-1: config 0 descriptor??
[  523.168115][T11420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1769'.
[  523.365065][T11420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1769'.
[  524.147061][  T808] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  524.374629][  T808] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  525.204641][ T6101] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  526.187209][ T5875] usb 2-1: USB disconnect, device number 84
[  526.493200][ T6101] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  526.493235][ T6101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.493257][ T6101] usb 6-1: Product: syz
[  526.493273][ T6101] usb 6-1: Manufacturer: syz
[  526.493288][ T6101] usb 6-1: SerialNumber: syz
[  526.592515][ T6101] usb 6-1: config 0 descriptor??
[  526.681320][T11462] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1777'.
[  526.681798][T11462] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1777'.
[  526.855166][ T6101] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  526.950055][T11473] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  527.029619][   T36] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  527.079749][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1778'.
[  527.164636][   T36] usb 7-1: device descriptor read/64, error -71
[  527.604752][   T36] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  528.463019][   T36] usb 7-1: device descriptor read/64, error -71
[  528.463089][ T8112] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  528.566109][   T36] usb usb7-port1: attempt power cycle
[  528.640196][T11524] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1784'.
[  528.640224][T11524] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1784'.
[  528.884457][ T8112] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  528.884534][ T8112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.884556][ T8112] usb 2-1: Product: syz
[  528.884571][ T8112] usb 2-1: Manufacturer: syz
[  528.884586][ T8112] usb 2-1: SerialNumber: syz
[  528.898209][ T8112] usb 2-1: config 0 descriptor??
[  529.224910][   T36] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  529.246133][   T36] usb 7-1: device descriptor read/8, error -71
[  529.494867][   T36] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  529.515717][   T36] usb 7-1: device descriptor read/8, error -71
[  529.604619][ T1231] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  529.703902][   T36] usb usb7-port1: unable to enumerate USB device
[  529.715734][ T8112] usb 2-1: Firmware version (0.0) predates our first public release.
[  529.715760][ T8112] usb 2-1: Please update to version 0.2 or newer
[  529.744793][ T6101] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  529.846946][ T8112] usb 2-1: USB disconnect, device number 85
[  529.865528][ T1231] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  529.865564][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.865586][ T1231] usb 1-1: Product: syz
[  529.865611][ T1231] usb 1-1: Manufacturer: syz
[  529.865626][ T1231] usb 1-1: SerialNumber: syz
[  529.916033][ T1231] usb 1-1: config 0 descriptor??
[  530.087125][  T808] usb 6-1: USB disconnect, device number 30
[  530.141507][ T1231] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  530.293802][T11577] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1789'.
[  530.293938][T11577] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1789'.
[  530.349293][ T1231] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  530.402218][ T1231] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  530.424078][ T1231] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  531.155496][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'.
[  531.842691][ T6101] usb 1-1: USB disconnect, device number 56
[  531.957797][T11627] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1795'.
[  531.957815][T11627] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1795'.
[  534.074667][   T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  534.247040][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  534.247061][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.247073][   T10] usb 6-1: Product: syz
[  534.247082][   T10] usb 6-1: Manufacturer: syz
[  534.247091][   T10] usb 6-1: SerialNumber: syz
[  534.303442][   T10] usb 6-1: config 0 descriptor??
[  534.414655][ T6687] Bluetooth: hci6: command 0x0406 tx timeout
[  534.651159][   T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  534.771540][T11653] sit1: entered allmulticast mode
[  534.886990][T11658] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1801'.
[  534.887040][T11658] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1801'.
[  535.953850][   T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  537.079356][ T8112] usb 6-1: USB disconnect, device number 31
[  537.311051][T11683] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1806'.
[  537.311080][T11683] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1806'.
[  539.065727][T11704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  539.390817][T11715] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1817'.
[  539.594912][ T1231] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  540.861276][ T1231] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  540.861298][ T1231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.861310][ T1231] usb 2-1: Product: syz
[  540.861319][ T1231] usb 2-1: Manufacturer: syz
[  540.861328][ T1231] usb 2-1: SerialNumber: syz
[  540.904697][ T5882] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  541.008038][ T1231] usb 2-1: config 0 descriptor??
[  541.134870][ T5882] usb 1-1: Using ep0 maxpacket: 32
[  541.137562][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.137598][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.137639][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  541.137664][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.211302][ T5882] usb 1-1: config 0 descriptor??
[  541.257042][ T1231] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  541.279289][ T5882] hub 1-1:0.0: USB hub found
[  541.451376][ T5882] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  541.703397][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  541.717525][ T5882] usbhid 1-1:0.0: can't add hid device: -71
[  541.719030][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  541.802080][ T5882] usb 1-1: USB disconnect, device number 57
[  542.530668][ T1231] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  542.845625][ T5882] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  542.870877][ T5882] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  543.114634][ T5882] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  543.289723][ T5882] usb 1-1: config 0 has no interfaces?
[  543.291393][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  543.291412][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  543.291430][ T5882] usb 1-1: SerialNumber: syz
[  543.333730][ T5882] usb 1-1: config 0 descriptor??
[  543.601332][T11788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1825'.
[  543.628841][ T5882] usb 2-1: USB disconnect, device number 86
[  547.721510][  T826] usb 1-1: USB disconnect, device number 58
[  548.134721][  T826] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  548.287985][  T826] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  548.288024][  T826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  548.288053][  T826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  548.288077][  T826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  548.288123][  T826] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  548.288149][  T826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.414145][  T826] usb 1-1: config 0 descriptor??
[  549.399984][  T826] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  550.094622][ T5882] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  550.275949][ T5882] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  550.275971][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.275983][ T5882] usb 7-1: Product: syz
[  550.275992][ T5882] usb 7-1: Manufacturer: syz
[  550.276000][ T5882] usb 7-1: SerialNumber: syz
[  550.279517][ T5882] usb 7-1: config 0 descriptor??
[  550.499077][ T5882] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  550.728146][ T5884] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  550.887362][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  550.901117][ T5884] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  550.901181][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.901193][ T5884] usb 3-1: Product: syz
[  550.901202][ T5884] usb 3-1: Manufacturer: syz
[  550.901211][ T5884] usb 3-1: SerialNumber: syz
[  551.007248][ T5884] usb 3-1: config 0 descriptor??
[  551.031399][ T8112] usb 1-1: USB disconnect, device number 59
[  551.146530][ T5884] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  552.782123][ T5882] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  553.374718][ T5884] gspca_topro: reg_r err -32
[  553.374747][ T5884] gspca_topro: Sensor soi763a
[  553.430450][ T5884] usb 3-1: USB disconnect, device number 63
[  553.923095][ T5884] usb 7-1: USB disconnect, device number 21
[  555.840077][T11962] sit1: entered allmulticast mode
[  555.880109][T11964] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1850'.
[  555.880130][T11964] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1850'.
[  556.024891][T11972] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1852'.
[  556.024935][T11972] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1852'.
[  557.164713][ T6101] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  557.335643][ T6101] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  557.335665][ T6101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.335677][ T6101] usb 6-1: Product: syz
[  557.335686][ T6101] usb 6-1: Manufacturer: syz
[  557.335694][ T6101] usb 6-1: SerialNumber: syz
[  557.340892][ T6101] usb 6-1: config 0 descriptor??
[  557.611668][ T6101] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  558.377695][T12003] sit1: entered allmulticast mode
[  558.890694][ T6101] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  559.946337][T12025] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1863'.
[  559.946416][T12025] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1863'.
[  560.027908][ T5861] usb 6-1: USB disconnect, device number 32
[  561.934666][ T6101] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  562.105174][ T6101] usb 1-1: Using ep0 maxpacket: 32
[  562.107746][ T6101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.107780][ T6101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.107822][ T6101] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  562.107848][ T6101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.176416][ T6101] usb 1-1: config 0 descriptor??
[  562.181300][ T6101] hub 1-1:0.0: USB hub found
[  562.305720][ T5884] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  562.385435][ T6101] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  562.444886][ T5882] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  562.464610][ T5884] usb 2-1: Using ep0 maxpacket: 8
[  562.468098][ T5884] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  562.468116][ T5884] usb 2-1: config 0 has no interface number 0
[  562.468156][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  562.468182][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  562.468208][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  562.468233][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  562.468269][ T5884] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  562.468283][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.482951][ T5884] usb 2-1: config 0 descriptor??
[  562.503624][ T5884] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  562.605932][ T5882] usb 7-1: Using ep0 maxpacket: 32
[  562.617411][ T5882] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  562.617441][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.617470][ T5882] usb 7-1: Product: syz
[  562.617483][ T5882] usb 7-1: Manufacturer: syz
[  562.617497][ T5882] usb 7-1: SerialNumber: syz
[  562.636168][ T5882] usb 7-1: config 0 descriptor??
[  562.647529][ T5882] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  562.664656][ T5884] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  562.793981][ T6101] usbhid 1-1:0.0: can't add hid device: -32
[  562.794120][ T6101] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  562.860392][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  562.860521][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  562.860548][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  562.860572][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  562.860890][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  562.860906][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.928734][ T6101] usb 1-1: USB disconnect, device number 60
[  563.053583][ T5884] usb 6-1: config 0 descriptor??
[  563.586251][ T5884] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  563.615022][  T808] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  563.829542][  T808] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  563.829712][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.829734][  T808] usb 3-1: Product: syz
[  563.829757][  T808] usb 3-1: Manufacturer: syz
[  563.829773][  T808] usb 3-1: SerialNumber: syz
[  563.869953][  T808] usb 3-1: config 0 descriptor??
[  564.090822][  T808] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  564.219388][ T5882] gspca_topro: reg_r err -32
[  564.219411][ T5882] gspca_topro: Sensor soi763a
[  564.272206][ T5882] usb 7-1: USB disconnect, device number 22
[  564.829690][ T5884] usb 2-1: USB disconnect, device number 87
[  564.909451][ T5884] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  565.550442][ T5884] usb 6-1: USB disconnect, device number 33
[  566.626137][  T808] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  566.835765][T12179] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1885'.
[  567.016904][T12165] sit1: entered allmulticast mode
[  567.901757][  T808] usb 3-1: USB disconnect, device number 64
[  568.180143][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  568.180190][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  571.044612][   T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  571.214862][   T10] usb 2-1: Using ep0 maxpacket: 8
[  571.222128][   T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  571.222161][   T10] usb 2-1: config 0 has no interface number 0
[  571.222280][   T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  571.222306][   T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  571.222333][   T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  571.222362][   T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  571.222408][   T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  571.222431][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.298398][   T10] usb 2-1: config 0 descriptor??
[  571.400335][   T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  571.529598][ T5884] usb 2-1: USB disconnect, device number 88
[  571.533140][ T5884] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  573.124714][ T5861] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  573.274661][ T5861] usb 3-1: Using ep0 maxpacket: 32
[  573.282487][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.282532][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.282575][ T5861] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  573.282600][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.287667][ T5861] usb 3-1: config 0 descriptor??
[  573.431824][ T5861] hub 3-1:0.0: USB hub found
[  573.524938][ T5861] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  573.941896][ T5861] usbhid 3-1:0.0: can't add hid device: -71
[  573.942044][ T5861] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  573.986946][ T5861] usb 3-1: USB disconnect, device number 65
[  574.832678][T12289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  575.204712][ T5861] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  575.354631][ T5861] usb 6-1: Using ep0 maxpacket: 8
[  575.357836][ T5861] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  575.357866][ T5861] usb 6-1: config 0 has no interface number 0
[  575.357915][ T5861] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  575.357941][ T5861] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  575.357967][ T5861] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  575.357994][ T5861] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  575.358040][ T5861] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  575.358065][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.498451][ T5861] usb 6-1: config 0 descriptor??
[  575.525467][T12311] netlink: 'syz.0.1910': attribute type 1 has an invalid length.
[  575.634012][ T5861] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  575.648543][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'.
[  575.790062][T12318] bond1: entered promiscuous mode
[  575.790094][T12318] bond1: entered allmulticast mode
[  575.795686][T12318] 8021q: adding VLAN 0 to HW filter on device bond1
[  576.007107][T12345] 8021q: adding VLAN 0 to HW filter on device bond1
[  576.067042][T12345] geneve2: entered promiscuous mode
[  576.067254][T12345] geneve2: entered allmulticast mode
[  576.086984][T12345] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  576.121770][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  576.124423][ T1169] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  576.170436][ T1169] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  576.170498][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  578.778286][ T6101] usb 6-1: USB disconnect, device number 34
[  578.800453][ T6101] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  578.974607][ T5882] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  579.154585][ T5882] usb 1-1: Using ep0 maxpacket: 32
[  579.173246][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.173282][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.173325][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  579.173348][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.227552][ T5882] usb 1-1: config 0 descriptor??
[  579.256354][ T5882] hub 1-1:0.0: USB hub found
[  579.481441][ T5882] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  579.904238][ T5882] usbhid 1-1:0.0: can't add hid device: -71
[  579.904325][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  579.945591][ T5882] usb 1-1: USB disconnect, device number 61
[  582.867570][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'.
[  582.994926][T12449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1930'.
[  583.510077][T12455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  587.432221][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'.
[  587.514170][T12494] bond0: entered promiscuous mode
[  587.514187][T12494] bond_slave_0: entered promiscuous mode
[  587.529218][T12494] bond_slave_1: entered promiscuous mode
[  587.529362][T12494] bridge0: entered promiscuous mode
[  587.582605][T12494] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  587.611188][T12494] bond0: left promiscuous mode
[  587.611207][T12494] bond_slave_0: left promiscuous mode
[  587.611430][T12494] bond_slave_1: left promiscuous mode
[  587.611558][T12494] bridge0: left promiscuous mode
[  588.163832][T12502] netlink: 'syz.1.1941': attribute type 1 has an invalid length.
[  588.250259][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1941'.
[  588.719525][T12543] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1943'.
[  589.654610][ T1231] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  589.807386][ T1231] usb 7-1: config 0 has an invalid interface number: 74 but max is 1
[  589.807407][ T1231] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.807419][ T1231] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  589.807431][ T1231] usb 7-1: config 0 has no interface number 0
[  589.807459][ T1231] usb 7-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  589.807472][ T1231] usb 7-1: config 0 interface 74 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  589.813076][ T1231] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  589.813111][ T1231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.813133][ T1231] usb 7-1: Product: syz
[  589.813148][ T1231] usb 7-1: Manufacturer: syz
[  589.813163][ T1231] usb 7-1: SerialNumber: syz
[  589.983616][ T1231] usb 7-1: config 0 descriptor??
[  590.365571][ T1231] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected
[  590.395904][ T1231] cyphidcom ttyUSB0: required endpoint is missing
[  590.427662][ T1231] usb 7-1: USB disconnect, device number 23
[  590.457071][ T1231] cypress_m8 7-1:0.74: device disconnected
[  593.091066][   T37] kauditd_printk_skb: 58 callbacks suppressed
[  593.091089][   T37] audit: type=1326 audit(1775331721.774:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12583 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f778fc819 code=0x7ffc0000
[  593.091142][   T37] audit: type=1326 audit(1775331721.774:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12583 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f778fc819 code=0x7ffc0000
[  593.115602][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1953'.
[  594.392947][T12624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1957'.
[  594.393657][T12624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1957'.
[  595.549892][T12634] netlink: 'syz.2.1960': attribute type 1 has an invalid length.
[  595.807417][T12647] bond1: (slave geneve2): making interface the new active one
[  595.831803][T12647] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  595.831945][   T93] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  595.831998][   T93] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  595.832036][   T93] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  595.832075][   T93] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  597.261370][T12688] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1966'.
[  597.385527][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'.
[  597.415596][T12692] ip6gretap0: entered promiscuous mode
[  597.428508][T12692] ip6gretap0: left promiscuous mode
[  598.129463][T12710] vlan2: entered allmulticast mode
[  598.129493][T12710] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  598.381000][   T37] audit: type=1326 audit(1775331727.114:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12702 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac467c819 code=0x7ffc0000
[  598.383207][   T37] audit: type=1326 audit(1775331727.114:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12702 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac467c819 code=0x7ffc0000
[  598.385443][ T1231] usb 3-1: new full-speed USB device number 66 using dummy_hcd
[  598.543251][   T37] audit: type=1326 audit(1775331727.274:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12702 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4ac467c819 code=0x7ffc0000
[  598.610401][ T1231] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  598.610423][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.610435][ T1231] usb 3-1: Product: syz
[  598.610444][ T1231] usb 3-1: Manufacturer: syz
[  598.610452][ T1231] usb 3-1: SerialNumber: syz
[  598.633509][ T1231] usb 3-1: config 0 descriptor??
[  598.680232][   T37] audit: type=1326 audit(1775331727.414:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12702 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac467c819 code=0x7ffc0000
[  598.680290][   T37] audit: type=1326 audit(1775331727.414:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12702 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac467c819 code=0x7ffc0000
[  598.878066][ T1231] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  600.576199][ T1231] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  601.644720][ T8112] usb 3-1: USB disconnect, device number 66
[  607.584747][  T826] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  607.771728][  T826] usb 1-1: config 0 has an invalid interface number: 74 but max is 1
[  607.771761][  T826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  607.771782][  T826] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  607.771814][  T826] usb 1-1: config 0 has no interface number 0
[  607.771866][  T826] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  607.771889][  T826] usb 1-1: config 0 interface 74 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  607.810565][  T826] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  607.810596][  T826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.810616][  T826] usb 1-1: Product: syz
[  607.810630][  T826] usb 1-1: Manufacturer: syz
[  607.810643][  T826] usb 1-1: SerialNumber: syz
[  607.883487][  T826] usb 1-1: config 0 descriptor??
[  608.354916][  T826] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected
[  608.357437][  T826] cyphidcom ttyUSB0: required endpoint is missing
[  608.405198][  T826] usb 1-1: USB disconnect, device number 62
[  608.487114][  T826] cypress_m8 1-1:0.74: device disconnected
[  611.155250][T12882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2011'.
[  612.485066][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'.
[  614.034707][ T1231] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  614.187120][ T1231] usb 3-1: config 0 has an invalid interface number: 74 but max is 1
[  614.187142][ T1231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  614.187153][ T1231] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  614.187165][ T1231] usb 3-1: config 0 has no interface number 0
[  614.187193][ T1231] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  614.187205][ T1231] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  614.192964][ T1231] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  614.192986][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.192998][ T1231] usb 3-1: Product: syz
[  614.193007][ T1231] usb 3-1: Manufacturer: syz
[  614.193016][ T1231] usb 3-1: SerialNumber: syz
[  614.353086][ T1231] usb 3-1: config 0 descriptor??
[  614.451409][T12902] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2018'.
[  614.618655][ T1231] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected
[  614.620849][ T1231] cyphidcom ttyUSB0: required endpoint is missing
[  614.666762][ T1231] usb 3-1: USB disconnect, device number 67
[  614.670855][ T1231] cypress_m8 3-1:0.74: device disconnected
[  624.654757][ T5882] usb 1-1: new low-speed USB device number 63 using dummy_hcd
[  624.838361][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short
[  624.840716][ T5882] usb 1-1: config 172 has an invalid interface number: 182 but max is 1
[  624.840747][ T5882] usb 1-1: config 172 has an invalid interface association descriptor of length 7, skipping
[  624.840768][ T5882] usb 1-1: config 172 has an invalid interface number: 190 but max is 1
[  624.840789][ T5882] usb 1-1: config 172 has an invalid interface association descriptor of length 2, skipping
[  624.840809][ T5882] usb 1-1: config 172 has no interface number 0
[  624.840827][ T5882] usb 1-1: config 172 has no interface number 1
[  624.840891][ T5882] usb 1-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  624.840933][ T5882] usb 1-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  624.840959][ T5882] usb 1-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  624.840986][ T5882] usb 1-1: config 172 interface 182 has no altsetting 0
[  624.841006][ T5882] usb 1-1: config 172 interface 190 has no altsetting 0
[  624.967854][ T5882] usb 1-1: string descriptor 0 read error: -22
[  624.967977][ T5882] usb 1-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  624.967992][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.271905][T13041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.285303][T13041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.906433][  T826] usb 1-1: USB disconnect, device number 63
[  633.136007][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  633.136086][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  633.651736][T13102] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  637.965059][T13147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  639.234666][ T6101] usb 1-1: new low-speed USB device number 64 using dummy_hcd
[  639.389427][ T6101] usb 1-1: unable to get BOS descriptor or descriptor too short
[  639.391322][ T6101] usb 1-1: config 172 has an invalid interface number: 182 but max is 1
[  639.391349][ T6101] usb 1-1: config 172 has an invalid interface association descriptor of length 7, skipping
[  639.391369][ T6101] usb 1-1: config 172 has an invalid interface number: 190 but max is 1
[  639.391389][ T6101] usb 1-1: config 172 has an invalid interface association descriptor of length 2, skipping
[  639.391408][ T6101] usb 1-1: config 172 has no interface number 0
[  639.391425][ T6101] usb 1-1: config 172 has no interface number 1
[  639.391487][ T6101] usb 1-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  639.391538][ T6101] usb 1-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  639.391564][ T6101] usb 1-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  639.391591][ T6101] usb 1-1: config 172 interface 182 has no altsetting 0
[  639.391609][ T6101] usb 1-1: config 172 interface 190 has no altsetting 0
[  639.505609][ T6101] usb 1-1: string descriptor 0 read error: -22
[  639.505772][ T6101] usb 1-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  639.505798][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.591142][T13167] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  639.651186][ T6101] ==================================================================
[  639.651199][ T6101] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  639.651224][ T6101] Read of size 8 at addr ffffc9001029a008 by task kworker/0:7/6101
[  639.651235][ T6101] 
[  639.651243][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  639.651257][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  639.651266][ T6101] Workqueue: usb_hub_wq hub_event
[  639.651284][ T6101] Call Trace:
[  639.651289][ T6101]  <TASK>
[  639.651295][ T6101]  dump_stack_lvl+0xe8/0x150
[  639.651314][ T6101]  print_report+0xba/0x230
[  639.651330][ T6101]  ? __list_add_valid_or_report+0x4e/0x130
[  639.651344][ T6101]  kasan_report+0x117/0x150
[  639.651358][ T6101]  ? __list_add_valid_or_report+0x4e/0x130
[  639.651374][ T6101]  __list_add_valid_or_report+0x4e/0x130
[  639.651389][ T6101]  kcov_remote_stop+0x457/0x680
[  639.651411][ T6101]  hub_event+0x49d8/0x4f60
[  639.651432][ T6101]  ? __kasan_slab_free+0x5c/0x80
[  639.651459][ T6101]  ? kfree+0x1c1/0x6c0
[  639.651518][ T6101]  ? __pfx_hub_event+0x10/0x10
[  639.651547][ T6101]  ? process_scheduled_works+0xa8d/0x18c0
[  639.651574][ T6101]  ? process_scheduled_works+0xa8d/0x18c0
[  639.651593][ T6101]  process_scheduled_works+0xb6e/0x18c0
[  639.651617][ T6101]  ? __pfx_process_scheduled_works+0x10/0x10
[  639.651634][ T6101]  ? assign_work+0x3d5/0x5e0
[  639.651650][ T6101]  worker_thread+0xa53/0xfc0
[  639.651673][ T6101]  kthread+0x388/0x470
[  639.651685][ T6101]  ? __pfx_worker_thread+0x10/0x10
[  639.651701][ T6101]  ? __pfx_kthread+0x10/0x10
[  639.651713][ T6101]  ret_from_fork+0x51e/0xb90
[  639.651730][ T6101]  ? __pfx_ret_from_fork+0x10/0x10
[  639.651746][ T6101]  ? __switch_to+0xc7d/0x1450
[  639.651763][ T6101]  ? __pfx_kthread+0x10/0x10
[  639.651776][ T6101]  ret_from_fork_asm+0x1a/0x30
[  639.651791][ T6101]  </TASK>
[  639.651796][ T6101] 
[  639.651799][ T6101] The buggy address belongs to a vmalloc virtual mapping
[  639.651812][ T6101] Memory state around the buggy address:
[  639.651819][ T6101]  ffffc90010299f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  639.651827][ T6101]  ffffc90010299f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  639.651835][ T6101] >ffffc9001029a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  639.651841][ T6101]                       ^
[  639.651848][ T6101]  ffffc9001029a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  639.651855][ T6101]  ffffc9001029a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  639.651861][ T6101] ==================================================================
[  639.652630][ T6101] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  639.652648][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  639.652672][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  639.652685][ T6101] Workqueue: usb_hub_wq hub_event
[  639.652710][ T6101] Call Trace:
[  639.652718][ T6101]  <TASK>
[  639.652726][ T6101]  vpanic+0x56c/0xa60
[  639.652759][ T6101]  ? __pfx_vpanic+0x10/0x10
[  639.652788][ T6101]  ? __pfx___schedule+0x10/0x10
[  639.652813][ T6101]  panic+0xc5/0xd0
[  639.652841][ T6101]  ? __pfx_panic+0x10/0x10
[  639.652869][ T6101]  ? preempt_schedule_thunk+0x16/0x30
[  639.652896][ T6101]  ? __list_add_valid_or_report+0x4e/0x130
[  639.652921][ T6101]  check_panic_on_warn+0x89/0xb0
[  639.652944][ T6101]  ? __list_add_valid_or_report+0x4e/0x130
[  639.652970][ T6101]  end_report+0x73/0x180
[  639.652991][ T6101]  ? __list_add_valid_or_report+0x4e/0x130
[  639.653014][ T6101]  kasan_report+0x128/0x150
[  639.653035][ T6101]  ? __list_add_valid_or_report+0x4e/0x130
[  639.653064][ T6101]  __list_add_valid_or_report+0x4e/0x130
[  639.653091][ T6101]  kcov_remote_stop+0x457/0x680
[  639.653119][ T6101]  hub_event+0x49d8/0x4f60
[  639.653141][ T6101]  ? __kasan_slab_free+0x5c/0x80
[  639.653171][ T6101]  ? kfree+0x1c1/0x6c0
[  639.653220][ T6101]  ? __pfx_hub_event+0x10/0x10
[  639.653248][ T6101]  ? process_scheduled_works+0xa8d/0x18c0
[  639.653275][ T6101]  ? process_scheduled_works+0xa8d/0x18c0
[  639.653302][ T6101]  process_scheduled_works+0xb6e/0x18c0
[  639.653344][ T6101]  ? __pfx_process_scheduled_works+0x10/0x10
[  639.653374][ T6101]  ? assign_work+0x3d5/0x5e0
[  639.653403][ T6101]  worker_thread+0xa53/0xfc0
[  639.653443][ T6101]  kthread+0x388/0x470
[  639.653463][ T6101]  ? __pfx_worker_thread+0x10/0x10
[  639.653489][ T6101]  ? __pfx_kthread+0x10/0x10
[  639.653581][ T6101]  ret_from_fork+0x51e/0xb90
[  639.653612][ T6101]  ? __pfx_ret_from_fork+0x10/0x10
[  639.653638][ T6101]  ? __switch_to+0xc7d/0x1450
[  639.653663][ T6101]  ? __pfx_kthread+0x10/0x10
[  639.653685][ T6101]  ret_from_fork_asm+0x1a/0x30
[  639.653711][ T6101]  </TASK>
[  639.653879][ T6101] Kernel Offset: disabled