last executing test programs:

13m2.735468636s ago: executing program 3 (id=3553):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006000000ffa6e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
recvmsg(r0, 0x0, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xfffffffffffffdab, 0x0, 0x73f, 0x70bd26, 0x25dfdbfb, {0x1, 0x0, 0xffa1}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10)

13m2.632016903s ago: executing program 3 (id=3554):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x402040, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x6) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c80)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) (async)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0})

12m59.597391734s ago: executing program 3 (id=3574):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0xbfffffffffffffff)

12m59.414658291s ago: executing program 3 (id=3575):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003e70300080026000816"], 0x40}}, 0x0)

12m59.247415624s ago: executing program 3 (id=3576):
r0 = syz_usb_connect(0x0, 0x3f5, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xc1, 0xb0, 0xdd, 0x40, 0x1199, 0x6835, 0x534a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e3, 0x1, 0x73, 0x4, 0x60, 0x4, [{{0x9, 0x4, 0x79, 0x5, 0xa, 0xde, 0xeb, 0xe7, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x40, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0x1, 0x4}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x4c, 0x76, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0xa5, 0x4, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xd1528510625593e0, 0x8, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x3, 0x2, [@generic={0x72, 0x21, "c85639ecc6f7a037ed8485b997d4f6719b2b89699525da434c1dc5a986fe0717a0aa2ee7bfea74fdeb3afc8e3806c56cacb4baf81d1be37ad8a1f64161771b2d79d0a3d58f254e24a44043a9e09148da07a058a020e23e251d04c928be8c2eff5e6800d7fd180f27cd9aa30451f60a8c"}, @generic={0xb8, 0x3, "9a75fde31f8ac1a4b5ef05ca9a57a6daae8ffc8a874fd6fd0a62ccb795f25d7f873aed94b2465f81507eb91f0a1acdec32dbf7d5dcb97b138536a91540be49e28cecfac32ecc8d5326b1c524d243cc703056e4b24521fef95b11991bf8efc1f9da900976bfd742696aad934329863a64fbe72f57ba8e21919cc9d4d28f9d90787b174d0c5c6d079d3dea0da6b4aa6fc8b16e90a2e1bcddbe6fb35ba33e2ca007654738071793d7f7e9a2bbf7c31502edd7bbf85bdd83"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x84, 0xab, 0x2, [@generic={0x98, 0x21, "8824ce3a208ad51df15f6ebb116a6e20e848aacf730b72c96e35e5852941c84537ce8ef480be5ec41c17cdf02959b4dad77c008d5bb49ed99eef7c5a8e94f574bc3137fb2e7a3d1cbbc1e822e9f09ba81679503c3136b332b49cfa64e50dae482fd52ba84d816b8644f31d39e18f2481a053192cf7050805a1b64d37971600e7df7eb30ac61d80e61f105973a42ad689b1f708572155"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x8, 0xd, 0x74, [@generic={0x6, 0xa, "a7f7c4f2"}, @generic={0x77, 0x7, "2caaeb51544662a78509c57f6797fdb01fa7f9102c1d00dcfb4e9437a5ffa8cefb90604e49710e6c7aa2be08dd1495587c68c3397619cdff0096b91cdcf6f5b0951e7c9278627b561620f8c5acbbb55e86878448ff5e8733c96f46b2e614b5a0b02d205a83147bc4d470d553612d7219bc3933b06b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd6, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x4, 0xca, 0xd, [@generic={0x7c, 0xd, "bddb956e7a3e9116f47df082dd110896875511ece59d0a68b539d5fe00d64d6253a8a6703864552a99ebcdae97bb780e22aa2b237a2476059e7ad2bc89c215eac3342234aa1abf799daa193e44064943085b8115123c3f3fda661bcc3b3c3ab25765d7e27eebf233203a6bc56532dde70286e892f0ca644b1c32"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x8, 0x2, 0x2, [@generic={0x6e, 0x30, "60750b8568a18f6abe3668c7e993205212db8fbe8b1f032e9c35dfa207b4933ad5e4d1b56621ba337dddc6a16e8ac2508f5d5decd7e209ab520cf52b98b691b627deac7aa47989ad590de8ef36de4b54f8df20db754cf49366b4fc1f44f2c08b0015181ca4acb2e95c659c37"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xef, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x5baa648f6b2161a0, 0x3, 0x6, 0x7, 0x20, 0xb}, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2d, 0x0, 0xbb, 0x6, 0x2}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4ff}}]})
syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000880)={0x0, 0x23, 0x93, {0x93, 0x11, "55413a6e990df15cc39fbd0da03839b9c6c81633052ebf8d7d4ec769339887199ea2db7dcd6139d67a8bd14317b0e312fc4233e7ed3da7a57e56b1849dbf09d8937a74981419eaf14df32c8b8d3f4e093b0949baf3c719cc4ff52fd67a67ad23ed2fd0b0f5bb361c4e0c386082372b0b93b2026a7d81008017ce4c40ddd465f08ce400edcef7080e74d4e065a67271a41b"}}, &(0x7f0000000940)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "4df8034a084f277da50331a752bf9f8838abd94f429bf4f02bc6d0ed38c60f97f167112d14d1862cbd513e9784b97fb875dea73926789d47309957ada85ee5169fcc5ddecab219a3b54a46c0cb76c32d51b15c806e4f2e7a07c9e480f6bf0725e7359c0632a7f89757713ea312e3136e8ecc9e9ebe1cff72"}}, &(0x7f00000009c0)={0x0, 0xf, 0xfe, {0x5, 0xf, 0xfe, 0x2, [@generic={0xef, 0x10, 0xb, "3f428baf41c172a47f2bfbf31b08b5a71f6d182cb44fcb1d80140cca9e56f7ea45a1e6cedceb64035b7762038bf1c06303d7578ec5306c5102d6f681ad748ef577b695bcf64b75b6d1249d690c06a2a88bdb143304169d8cc5f5e364eaca9f08d1b52ef393ff14f2ac023dc4ba0cdf5d6defb056ec30e05a1b259a91a4f6d6b489184e6913ff805a94526a2443906a6dd37897fde38d31a123769a124a9f9d51c77efcf5855055c7fdbb38e48d7211fd337cd6cda0b9dcfc2ae35f875cbe574440d04ffa3638b00769ba938b5a90991e9e7764b073c98193352e39161252f04ff6acf298cd3aba38e9d8a1d0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x5, 0x8}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x8, 0xa1, "bd53022d", "34ecc30f"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0xfb, 0x4, 0xef, 0x2, 0x8f22}}}, &(0x7f0000001000)={0x84, &(0x7f0000000bc0)={0x60, 0x12, 0x6a, "e92b0261b15db41e734e16f50974d490bdaeab8ee824a8b6a4dba86109bb63dd0c5eeb5c5cb963024f116590b11fd1f3268fcd80bbec5d00df7e2cb05ce979ff26b5668df329cb80bdb3a105aa69e02ad12d7f65cdcb192036f66da7ddcb9242a92b16a8889d69a7c68b"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000cc0)={0x20, 0x0, 0x4}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000d80)={0x40, 0x9, 0x1}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "d01b"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "a434"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x20}})
syz_usb_control_io$uac1(r0, &(0x7f0000001280)={0x14, &(0x7f0000001100)={0x20, 0xa, 0xfd, {0xfd, 0x2, "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"}}, &(0x7f0000001240)={0x0, 0x3, 0xb, @string={0xb, 0x3, "c452028a0149827516"}}}, &(0x7f0000001500)={0x44, &(0x7f00000012c0)={0x0, 0x14, 0x65, "aae8c3c6111014dc5aed091fcc8963ce60194d960faa96ccfa16ef6245db47905b9f0af48b18939e7367ca2d5a98c238a3dfe4f8adfc3ad9c002e0573e4c1788661d35fb871c2e99d297ea9151d7e8d5e1c64273a39f7f8bcbed9fedf735564c2967030c79"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000013c0)={0x20, 0x81, 0x2, 'z_'}, &(0x7f0000001400)={0x20, 0x82, 0x1, "ca"}, &(0x7f0000001440)={0x20, 0x83, 0x3, "6567b9"}, &(0x7f0000001480)={0x20, 0x84, 0x3, "281a5b"}, &(0x7f00000014c0)={0x20, 0x85, 0x3, "fe6c13"}})
r1 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
lremovexattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)=@random={'security.', 'sysfs\x00'})
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x7048, 0x1)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r2, 0x10000, {0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x6, 0x19, 0x15, "ed9b224bff15d4745b5296b481a05a447066d82bad2dc1ef444f07ffa663d12745dedb7b486c4356aa74f46b7ae01c7b62d3a2bfed3b3d0b7242140ad569afa8", "d8ecdc879e10831aa08c48a0ef77ea95780eef4c12b0e91c90c4737124a0cee20ec1e7bbcdd394ec04e1a54566642b54bcd46439b53ea8a459a306f5e57fcd14", "54f99cf6dbdbe297ef4e6b6ac59960f10428ab6c196a49f82d8a8310b45a43a0", [0xffffffffffffff14, 0x9]}})
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xaac1c1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x21, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x20000000)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000010c0)=@rose={'rose', 0x0}, 0x10)
syz_usb_connect(0x0, 0x3f5, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xc1, 0xb0, 0xdd, 0x40, 0x1199, 0x6835, 0x534a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e3, 0x1, 0x73, 0x4, 0x60, 0x4, [{{0x9, 0x4, 0x79, 0x5, 0xa, 0xde, 0xeb, 0xe7, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x40, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0x1, 0x4}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x4c, 0x76, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0xa5, 0x4, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xd1528510625593e0, 0x8, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x3, 0x2, [@generic={0x72, 0x21, "c85639ecc6f7a037ed8485b997d4f6719b2b89699525da434c1dc5a986fe0717a0aa2ee7bfea74fdeb3afc8e3806c56cacb4baf81d1be37ad8a1f64161771b2d79d0a3d58f254e24a44043a9e09148da07a058a020e23e251d04c928be8c2eff5e6800d7fd180f27cd9aa30451f60a8c"}, @generic={0xb8, 0x3, "9a75fde31f8ac1a4b5ef05ca9a57a6daae8ffc8a874fd6fd0a62ccb795f25d7f873aed94b2465f81507eb91f0a1acdec32dbf7d5dcb97b138536a91540be49e28cecfac32ecc8d5326b1c524d243cc703056e4b24521fef95b11991bf8efc1f9da900976bfd742696aad934329863a64fbe72f57ba8e21919cc9d4d28f9d90787b174d0c5c6d079d3dea0da6b4aa6fc8b16e90a2e1bcddbe6fb35ba33e2ca007654738071793d7f7e9a2bbf7c31502edd7bbf85bdd83"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x84, 0xab, 0x2, [@generic={0x98, 0x21, "8824ce3a208ad51df15f6ebb116a6e20e848aacf730b72c96e35e5852941c84537ce8ef480be5ec41c17cdf02959b4dad77c008d5bb49ed99eef7c5a8e94f574bc3137fb2e7a3d1cbbc1e822e9f09ba81679503c3136b332b49cfa64e50dae482fd52ba84d816b8644f31d39e18f2481a053192cf7050805a1b64d37971600e7df7eb30ac61d80e61f105973a42ad689b1f708572155"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x8, 0xd, 0x74, [@generic={0x6, 0xa, "a7f7c4f2"}, @generic={0x77, 0x7, "2caaeb51544662a78509c57f6797fdb01fa7f9102c1d00dcfb4e9437a5ffa8cefb90604e49710e6c7aa2be08dd1495587c68c3397619cdff0096b91cdcf6f5b0951e7c9278627b561620f8c5acbbb55e86878448ff5e8733c96f46b2e614b5a0b02d205a83147bc4d470d553612d7219bc3933b06b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd6, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x4, 0xca, 0xd, [@generic={0x7c, 0xd, "bddb956e7a3e9116f47df082dd110896875511ece59d0a68b539d5fe00d64d6253a8a6703864552a99ebcdae97bb780e22aa2b237a2476059e7ad2bc89c215eac3342234aa1abf799daa193e44064943085b8115123c3f3fda661bcc3b3c3ab25765d7e27eebf233203a6bc56532dde70286e892f0ca644b1c32"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x8, 0x2, 0x2, [@generic={0x6e, 0x30, "60750b8568a18f6abe3668c7e993205212db8fbe8b1f032e9c35dfa207b4933ad5e4d1b56621ba337dddc6a16e8ac2508f5d5decd7e209ab520cf52b98b691b627deac7aa47989ad590de8ef36de4b54f8df20db754cf49366b4fc1f44f2c08b0015181ca4acb2e95c659c37"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xef, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x5baa648f6b2161a0, 0x3, 0x6, 0x7, 0x20, 0xb}, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2d, 0x0, 0xbb, 0x6, 0x2}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4ff}}]}) (async)
syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000880)={0x0, 0x23, 0x93, {0x93, 0x11, "55413a6e990df15cc39fbd0da03839b9c6c81633052ebf8d7d4ec769339887199ea2db7dcd6139d67a8bd14317b0e312fc4233e7ed3da7a57e56b1849dbf09d8937a74981419eaf14df32c8b8d3f4e093b0949baf3c719cc4ff52fd67a67ad23ed2fd0b0f5bb361c4e0c386082372b0b93b2026a7d81008017ce4c40ddd465f08ce400edcef7080e74d4e065a67271a41b"}}, &(0x7f0000000940)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "4df8034a084f277da50331a752bf9f8838abd94f429bf4f02bc6d0ed38c60f97f167112d14d1862cbd513e9784b97fb875dea73926789d47309957ada85ee5169fcc5ddecab219a3b54a46c0cb76c32d51b15c806e4f2e7a07c9e480f6bf0725e7359c0632a7f89757713ea312e3136e8ecc9e9ebe1cff72"}}, &(0x7f00000009c0)={0x0, 0xf, 0xfe, {0x5, 0xf, 0xfe, 0x2, [@generic={0xef, 0x10, 0xb, "3f428baf41c172a47f2bfbf31b08b5a71f6d182cb44fcb1d80140cca9e56f7ea45a1e6cedceb64035b7762038bf1c06303d7578ec5306c5102d6f681ad748ef577b695bcf64b75b6d1249d690c06a2a88bdb143304169d8cc5f5e364eaca9f08d1b52ef393ff14f2ac023dc4ba0cdf5d6defb056ec30e05a1b259a91a4f6d6b489184e6913ff805a94526a2443906a6dd37897fde38d31a123769a124a9f9d51c77efcf5855055c7fdbb38e48d7211fd337cd6cda0b9dcfc2ae35f875cbe574440d04ffa3638b00769ba938b5a90991e9e7764b073c98193352e39161252f04ff6acf298cd3aba38e9d8a1d0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x5, 0x8}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x8, 0xa1, "bd53022d", "34ecc30f"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0xfb, 0x4, 0xef, 0x2, 0x8f22}}}, &(0x7f0000001000)={0x84, &(0x7f0000000bc0)={0x60, 0x12, 0x6a, "e92b0261b15db41e734e16f50974d490bdaeab8ee824a8b6a4dba86109bb63dd0c5eeb5c5cb963024f116590b11fd1f3268fcd80bbec5d00df7e2cb05ce979ff26b5668df329cb80bdb3a105aa69e02ad12d7f65cdcb192036f66da7ddcb9242a92b16a8889d69a7c68b"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000cc0)={0x20, 0x0, 0x4}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000d80)={0x40, 0x9, 0x1}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "d01b"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "a434"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x20}}) (async)
syz_usb_control_io$uac1(r0, &(0x7f0000001280)={0x14, &(0x7f0000001100)={0x20, 0xa, 0xfd, {0xfd, 0x2, "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"}}, &(0x7f0000001240)={0x0, 0x3, 0xb, @string={0xb, 0x3, "c452028a0149827516"}}}, &(0x7f0000001500)={0x44, &(0x7f00000012c0)={0x0, 0x14, 0x65, "aae8c3c6111014dc5aed091fcc8963ce60194d960faa96ccfa16ef6245db47905b9f0af48b18939e7367ca2d5a98c238a3dfe4f8adfc3ad9c002e0573e4c1788661d35fb871c2e99d297ea9151d7e8d5e1c64273a39f7f8bcbed9fedf735564c2967030c79"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000013c0)={0x20, 0x81, 0x2, 'z_'}, &(0x7f0000001400)={0x20, 0x82, 0x1, "ca"}, &(0x7f0000001440)={0x20, 0x83, 0x3, "6567b9"}, &(0x7f0000001480)={0x20, 0x84, 0x3, "281a5b"}, &(0x7f00000014c0)={0x20, 0x85, 0x3, "fe6c13"}}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
lremovexattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)=@random={'security.', 'sysfs\x00'}) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x7048, 0x1) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r2, 0x10000, {0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x6, 0x19, 0x15, "ed9b224bff15d4745b5296b481a05a447066d82bad2dc1ef444f07ffa663d12745dedb7b486c4356aa74f46b7ae01c7b62d3a2bfed3b3d0b7242140ad569afa8", "d8ecdc879e10831aa08c48a0ef77ea95780eef4c12b0e91c90c4737124a0cee20ec1e7bbcdd394ec04e1a54566642b54bcd46439b53ea8a459a306f5e57fcd14", "54f99cf6dbdbe297ef4e6b6ac59960f10428ab6c196a49f82d8a8310b45a43a0", [0xffffffffffffff14, 0x9]}}) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) (async)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xaac1c1, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x21, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x20000000) (async)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000010c0)=@rose={'rose', 0x0}, 0x10) (async)

12m57.748613714s ago: executing program 3 (id=3593):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0)

12m42.269527696s ago: executing program 32 (id=3593):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0)

10m46.675939544s ago: executing program 1 (id=4536):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080284000000401296a1180002600000010000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (fail_nth: 3)

10m46.656462792s ago: executing program 1 (id=4537):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e26, 0x1, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x3, @mcast2, 0xfffffffc}, 0x1c, &(0x7f0000000400)}}], 0x2, 0x140408f4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYRES16=r3], 0x1000f)
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4, 0x3ff, @empty, 0x8}, 0x1c)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000240), 0x4) (async)
setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000240), 0x4)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000000080)=""/169, &(0x7f0000000140)=0xa9)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000380)={0x1}, 0x8)
shutdown(r7, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r9, 0x4008ae48, 0x0)
ioctl$sock_SIOCOUTQ(r5, 0x8905, &(0x7f0000000040))
fanotify_init(0x20, 0x1000) (async)
r10 = fanotify_init(0x20, 0x1000)
write(r10, &(0x7f0000000180)="59f543de6c64c6322d32de9050afe91103737c726ce0c8c8830f9a88539b0cb9f71bd6ce1d1aac6010c05d25d99e55139fbca51f12f4847dedf76063693c2bc3307a280661f769e17123f3a0ccb6ad69d4d02045cdceea7dedc16bfcaf8f6897d1275287127f8dd7c94e2f414aaefdf21a50af450eafda7c45d718a34a22a7e138b64d5ea3fd3a5c79021ab403074fc1857b5731ea612cb4622bf650b5ca58f2f5db5a859e167ee635ec149036be9683c04ecdbe67134a86b8025ba6", 0xbc)

10m46.407332187s ago: executing program 1 (id=4538):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xb000000}, 0x0)

10m46.302816332s ago: executing program 1 (id=4539):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x24060680)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x202851, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000010f3045507000000000001090224000103000100092105004001220500090581030002000007000000000000000000ddd7e458f57857cd231798b96e416d627b91b23b674b04f48603ca53632d7d04f1a547776579ed0339deb109394a29d8d897af3506ad7699398681f3c4969d27"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x52010000)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x7e2f)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000725250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRES16=r1], 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x4b30, 0x0)
preadv2(r2, &(0x7f0000003680)=[{&(0x7f0000000440)=""/29, 0x1d}], 0x1, 0x2, 0x0, 0x1)
request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0)

10m45.507102067s ago: executing program 1 (id=4543):
ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0xf58, 0xf, '\x00', &(0x7f0000000000)=0x10})
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
close(r0)
syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x4000) (async)
r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x4000)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x9, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000740)=[{}, {}]})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000840)={0x4, 0x3, 0x5, 0xfffffff8, 0x3, 0x0, [{0x852, 0x7, 0x9, '\x00', 0x101}, {0xd0, 0x5, 0x1fb4, '\x00', 0x2000}, {0xfe00000000000000, 0xfb, 0x8, '\x00', 0x805}]})
add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0x0) (async)
r2 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000009c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xbb)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
fstat(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000902, r6, &(0x7f0000000a80)) (async)
quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000902, r6, &(0x7f0000000a80))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r7=>r0, {<r8=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000c40), 0x7ff, 0x10000)
signalfd(r9, &(0x7f0000000c80), 0x8)
mount$cgroup(0x0, &(0x7f0000000cc0)='./file0/file0\x00', &(0x7f0000000d00), 0x0, &(0x7f0000000d40)={[{@name={'name', 0x3d, '^\xa8--{'}}, {@cpuset_v2_mode}, {@subsystem='net'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@favordynmods}, {@subsystem='blkio'}, {@noprefix}], [{@subj_user={'subj_user', 0x3d, 'keyring\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz0\x00'}}, {@flag='rw'}, {@measure}, {@euid_lt={'euid<', r6}}, {@hash}, {@permit_directio}]})
close(r3)
write$UHID_SET_REPORT_REPLY(r8, &(0x7f0000000e00)={0xe, {0x9, 0x7f, 0x8, 0x1000, "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"}}, 0x100c) (async)
write$UHID_SET_REPORT_REPLY(r8, &(0x7f0000000e00)={0xe, {0x9, 0x7f, 0x8, 0x1000, "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"}}, 0x100c)
ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000001e40))
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001e80)={<r10=>0x0}, &(0x7f0000001ec0)=0xc)
read$FUSE(r4, &(0x7f0000001f00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
kcmp(r10, r11, 0x4, r8, r0) (async)
kcmp(r10, r11, 0x4, r8, r0)
ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000003f40))
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000003f80)={0x1, 0xfffffffffffeffff}, 0x0)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
fsetxattr$trusted_overlay_origin(r12, &(0x7f0000003fc0), &(0x7f0000004000), 0x2, 0x2) (async)
fsetxattr$trusted_overlay_origin(r12, &(0x7f0000003fc0), &(0x7f0000004000), 0x2, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000004040)={{0xa, 0x4e20, 0x2, @mcast2, 0x7ff}, {0xa, 0x4e22, 0x9, @private2, 0x9}, 0xffffffffffffffff, {[0x9, 0x5c, 0x7f, 0x6, 0x1000, 0x3, 0xe8, 0x1]}}, 0x5c) (async)
setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000004040)={{0xa, 0x4e20, 0x2, @mcast2, 0x7ff}, {0xa, 0x4e22, 0x9, @private2, 0x9}, 0xffffffffffffffff, {[0x9, 0x5c, 0x7f, 0x6, 0x1000, 0x3, 0xe8, 0x1]}}, 0x5c)
syz_open_dev$tty1(0xc, 0x4, 0x1)

10m45.071692812s ago: executing program 1 (id=4546):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r1=>0x0, 0xad, "abc42c307e349bcc6513d0d7881afd4445766196a898a97c0c996862e9ee8e367949b9df0929fd117a036ac30ef2487cc788c04d6201ba4a5269af0c068f7e95b5fc32434b8c612ffb4ffa5385dc10a409634c74ae6940e78fda953d989726572d1b4fe41587ad74965a6e94aa30624bd8dd2341b9626019a78b3b7270d13fa711db3f8744a0ab1ddd038bd2aba1f72940f5affae9bdae8398274ba45f44ccc1a0a7392bd3ae4d8624a3482e5e"}, &(0x7f00000000c0)=0xb5)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={<r2=>r1, 0x1ff}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200)=0x6, 0x4)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000340)='macvlan1\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='fdinfo/4\x00')
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000003c0))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r6=>0x0})
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000440)=<r7=>0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x7, 0x4e22, 0x5, 0x2, 0x80, 0x0, 0x0, r6, r7}, {0x8, 0x5, 0x0, 0xffffffffffffffff, 0x7fff, 0x8, 0x8, 0x3}, {0x3, 0x1, 0x4, 0x9}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3507, 0x3, 0x0, 0x9, 0x400, 0x24, 0x4}}, 0xe8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000580)={r2, 0x1, 0x3b, 0x3}, &(0x7f00000005c0)=0x10)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000640)=@req={0x28, &(0x7f0000000600)={'macsec0\x00', @ifru_addrs=@isdn={0x22, 0x5, 0x0, 0xc, 0x6}}})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000680)=""/66, &(0x7f0000000700)=0x42)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), r9)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000780)={<r10=>r2, 0x2, 0x10, 0xfffffffffffffe14, 0x7}, &(0x7f00000007c0)=0x18)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000800)={r10, 0x4}, &(0x7f0000000840)=0x8)
ioctl$NBD_CLEAR_SOCK(r8, 0xab04)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000008c0)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x20, 0x0, "da67cbc2a8bf85a1443930490023d5eb3ee0cf366aec54aa82a7d759fa276765e8d2c39b9f63651610e6e3419192d74ec027a67589f3a2a4886a3b60ee827b16f2199752fe41e316a5aca6829dbd1680"}, 0xd8)
accept(r0, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r12=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000a40)=0x80)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r12)
sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r13, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4400)

10m44.633316981s ago: executing program 33 (id=4546):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r1=>0x0, 0xad, "abc42c307e349bcc6513d0d7881afd4445766196a898a97c0c996862e9ee8e367949b9df0929fd117a036ac30ef2487cc788c04d6201ba4a5269af0c068f7e95b5fc32434b8c612ffb4ffa5385dc10a409634c74ae6940e78fda953d989726572d1b4fe41587ad74965a6e94aa30624bd8dd2341b9626019a78b3b7270d13fa711db3f8744a0ab1ddd038bd2aba1f72940f5affae9bdae8398274ba45f44ccc1a0a7392bd3ae4d8624a3482e5e"}, &(0x7f00000000c0)=0xb5)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={<r2=>r1, 0x1ff}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200)=0x6, 0x4)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000340)='macvlan1\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='fdinfo/4\x00')
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000003c0))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r6=>0x0})
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000440)=<r7=>0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x7, 0x4e22, 0x5, 0x2, 0x80, 0x0, 0x0, r6, r7}, {0x8, 0x5, 0x0, 0xffffffffffffffff, 0x7fff, 0x8, 0x8, 0x3}, {0x3, 0x1, 0x4, 0x9}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3507, 0x3, 0x0, 0x9, 0x400, 0x24, 0x4}}, 0xe8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000580)={r2, 0x1, 0x3b, 0x3}, &(0x7f00000005c0)=0x10)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000640)=@req={0x28, &(0x7f0000000600)={'macsec0\x00', @ifru_addrs=@isdn={0x22, 0x5, 0x0, 0xc, 0x6}}})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000680)=""/66, &(0x7f0000000700)=0x42)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), r9)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000780)={<r10=>r2, 0x2, 0x10, 0xfffffffffffffe14, 0x7}, &(0x7f00000007c0)=0x18)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000800)={r10, 0x4}, &(0x7f0000000840)=0x8)
ioctl$NBD_CLEAR_SOCK(r8, 0xab04)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000008c0)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x20, 0x0, "da67cbc2a8bf85a1443930490023d5eb3ee0cf366aec54aa82a7d759fa276765e8d2c39b9f63651610e6e3419192d74ec027a67589f3a2a4886a3b60ee827b16f2199752fe41e316a5aca6829dbd1680"}, 0xd8)
accept(r0, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r12=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000a40)=0x80)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r12)
sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r13, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4400)

4m6.715966889s ago: executing program 2 (id=7059):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffff69}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000840)={0x0, 0x1, 0x401, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24, 0x1f4}, 0x9c)

4m6.344873867s ago: executing program 2 (id=7060):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000000000000000)

4m6.231167913s ago: executing program 2 (id=7061):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2, 0x1}, 0x2)
poll(&(0x7f0000000b40)=[{r0, 0x20}, {0xffffffffffffffff, 0x9090}, {0xffffffffffffffff, 0x4044}, {r0, 0x4080}], 0x4, 0xbb)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, 0xffffffffffffffff, 0x0)

4m5.92642737s ago: executing program 2 (id=7062):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
getpeername(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206030000000000000000000500000705000100070000000900020073797a31000000000c00078048001300000000000500050002000000050004000100000010000300686173683a69702c6d616300"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc4e08000007094f2927000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001300)={'team0\x00', <r6=>0x0})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'caif0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000005c0)={0x0, 0x5c, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000010", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x8094}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0))
ptrace$cont(0x9, r9, 0x10000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x4, 0x1, 0x28, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7888, 0x8000, 0x4, 0x7fff}})
socket$nl_generic(0x10, 0x3, 0x10)

4m5.203527772s ago: executing program 2 (id=7067):
syslog(0x4, &(0x7f0000001000)=""/4096, 0x1000)
syslog(0x4, &(0x7f0000000400)=""/1, 0x1)
r0 = syz_clone(0x216a500, &(0x7f0000000600)="93efb1c5be7e04342958ffd2859a6734bb473772935829164911a97ece1b045776d81195c912e7819d49a94aaab454de0a6393aa5a3012605918053b81f34d366703e3de96adc228e9ad217c01e14ab1b659e37474d6c79743e28e5dc384f71dc91494f0ee988a3800e0479d2671921d3b4c8b1c4293ca99039f7622e9ee725c1212254e16dd7d0913fb8a9607b3d69c7483cc4d98da25a3c7b9b5f9aa3d01ac64de23f1671185bad49428709dbdb832dda1db23f817e3771e7a7eaa0ef4", 0xbe, &(0x7f00000003c0), &(0x7f0000000500), &(0x7f0000000740)="c12681f0c7e3949f7e4a1c8e0f6ee321120795805933d04fd4ad7bae14c72481a9342ddfca0d50048acf548176b6311852280bac170661fff98b84d40f843b7751397479b22a18d9479b877466650eec962b307bebfe2f7f5bb0a28a3d88ef9bcfbbfef554edd11b3fe22f48d7847b1e3caefb1836744ba1600332e1df4977fbaeefcfe938f2683cb0925d985e85bdbea7ee56f3b61452e7694aa4212ae5ce7575a84104f81395dd8fa0dd6525224dab4b96ebb9db09cbaf5e11866024a6feef2bb6b2e19fba46889a1a39dcd07997d1587f16")
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000006c0)={0x1, 0x2, 0xaf3d, 0x0, r0})
mmap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x2000004, 0x8130, 0xffffffffffffffff, 0x6cb8a000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000f45000/0x4000)=nil, 0x4000, 0x19)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r1 = userfaultfd(0x1)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000734000/0x1000)=nil)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f00006d6000/0x4000)=nil, 0x4000})
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x654601, 0x0)
r3 = dup(r2)
ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000300))
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)
syz_clone(0x4000000, &(0x7f0000000000)="b5d29c230ab027196f698d1f607555b9f5d60fecfd4ded538ebb456449472007a1725f4b88f177b5a59445b4f99d442db7eea4e9feab337cacaa0db4d7061c55d3032400513d0fab3e6f6da5d71b9b12d0369433a642ca9465e78a1db28ae8233a68ab10a8099c548d0bd9c3ccea2d3ef01376859c8789da4dfbefeebaca7d403e6b6e2cb58533bd718e9ab951ce1b7480ab37a5768afbb222d3443cf8ad24e3c9f3edfd666a248339049bcc5e7d068530f4da8fe8a65a0324e68d9ea7bea4e771921e0e51c021aa90780dd9613927866c314ee79bd33f3b74e2f3d0b805826cda05aca980d4b7", 0xe7, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="bb18806c11898c807e6d85ad93b3adaef7f0eee175540f4c94740cd5f3ec2e1d51bf30b94e6d6a3591ce28669d7de3983df63d5e69afdd43d4b6494b93fa6aaf56e3521731189be0861adab94d1f313e03365f1ddb845383dad55322ff87ef8b8c17759e53eeede02842bdf0dc4f0d2c6fcfc35d32f91ffdef891497c378b007a3ea3e09a4a57bae4ea7492ea11b90291fe68ba06c")
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000000000)="fd", 0xfd9e}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
dup(r4)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
syslog(0x4, &(0x7f0000000440)=""/162, 0xa2)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}})
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x80000, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)

4m3.208626714s ago: executing program 2 (id=7077):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480060005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

4m2.721480466s ago: executing program 34 (id=7077):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480060005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2m39.068431341s ago: executing program 4 (id=7473):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000700007415"})

2m35.963856686s ago: executing program 4 (id=7477):
socket(0x23, 0x3, 0xffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x8, 0x1})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TCFLSH(r3, 0x400455c8, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffdc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
r6 = accept(r5, 0x0, 0x0)
close(r6)
read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0xa, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x34325842})
dup3(0xffffffffffffffff, r4, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0xfffffffffffffe70}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b04027f0130090904ab020002"], 0x0)

2m33.015863503s ago: executing program 4 (id=7496):
mknod$loop(0x0, 0xfff, 0x1)
syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010309024800010100000309040000ff02"], 0x0)
syz_usb_connect$uac1(0x2, 0xe5, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x3e, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x2, 0x4, 0x3}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0xfc, "a6ae8ebe8d"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0xd9, 'gP'}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x400, 0xc, '!'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x2, 0xd5, 0x1, 0x8, 0xff}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x4, 0x7, "4dcb9491894d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8000, 0x3, 0x1, "f30c1f39551150e53f"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x0, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xe, 0x1, 0x4, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x3, 0x12, 0x80, "ba40", "67eca0"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x1, 0x7f, "", "62461a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x3, 0x6, {0x7, 0x25, 0x1, 0x2, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x6, 0x10, {0x7, 0x25, 0x1, 0x2, 0x5, 0x7f}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x8, 0xc9, 0x0, 0x10, 0x80}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x5e, &(0x7f0000000480)=@string={0x5e, 0x3, "8d32cb8c8467045406acb3604adb68f8a3e3d4436c87d3a1e60fad0729046c18fa053422befd13d1d7cbfef397998406c32f70c163105af1422c3671ee5558e75ea5ed494438f66458bd9fdc0db684d2d88583d264daf3733cde4b72"}}, {0xa9, &(0x7f0000000500)=@string={0xa9, 0x3, "67797cf657b921bec03417775f4da33a6cfb354bfe733adfc1eee2c36dbdc3b17a5996dc37dc5661f9623f62163a3a26b8d2a97487cfa4fd6f12ed6fa1709fc71d0483e8329588d5aef269d3072d3186473f523a02ec705f8129b871e4c8388eb0118cbb9490d470ba332e3052ed49bdf508113705323198a4fa61b45cc0bb11704474d507e54805e7eae8d5bdd86d9e85b014b0f34d42439ca92a6b958e602084ec988c22b945"}}, {0xa0, &(0x7f00000005c0)=@string={0xa0, 0x3, "c25f5eed182b7530f3d7fa8f9fa064f063b4ad8ccff8df50a4cb3230d66ba94de634d7600900ebf70cc9a863611947350b7b8869f8d02ba1fb261b7de60443efbeb98e8d9505771e666257981ca993e92cefdae3296bc2437cd0cb2225615823b3353ffece4e978125162d785bcdfd2ad4f4b7842483743403ec72977db7ad1f0db3d59091fdd921435e909d36b1b4afefe245dc3bd2066637f1f1c1b77a"}}, {0x1f, &(0x7f0000000680)=@string={0x1f, 0x3, "806d256c6f8943cc830c0c231c9da8010b178f1d58ae9c22f88f26f014"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc0a}}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xb8, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x72}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x8084)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x9, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2m30.909370935s ago: executing program 4 (id=7511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r3, 0x29, 0x24, 0x0, &(0x7f0000000100))
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x3, "99bdb1b0c7251b080600f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"})
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

2m30.768336992s ago: executing program 4 (id=7513):
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000500)={0x0, &(0x7f00000001c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000700)={r3, 0x0, 0x4, 0x8, 0xfa})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8, 0x3, 0xd, 0xfffffffd, 0x10, "fe99010021ca0f00000004b1d000"})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0)

2m29.77685046s ago: executing program 4 (id=7516):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0xe9, 0xb9, 0x10, 0x54c, 0x2b, 0x103, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x2, 0x2, 0x6b, 0xe0, 0x22, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0x63}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) (async)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/165)
syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x6, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x9, "45e7a3"}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, 0x2, [0xa, 0x3], 0xb}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x8, 0x37, "4ea9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x4, 0x3, {0x7, 0x25, 0x1, 0x0, 0xd, 0x5d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x3, 0x47, {0x7, 0x25, 0x1, 0x0, 0x2, 0xffff}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0xa, 0x6, 0x8, 0xa}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}]})

2m14.669208731s ago: executing program 35 (id=7516):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0xe9, 0xb9, 0x10, 0x54c, 0x2b, 0x103, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x2, 0x2, 0x6b, 0xe0, 0x22, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0x63}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) (async)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/165)
syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x6, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x9, "45e7a3"}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, 0x2, [0xa, 0x3], 0xb}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x8, 0x37, "4ea9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x4, 0x3, {0x7, 0x25, 0x1, 0x0, 0xd, 0x5d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x3, 0x47, {0x7, 0x25, 0x1, 0x0, 0x2, 0xffff}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0xa, 0x6, 0x8, 0xa}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}]})

5.454365248s ago: executing program 0 (id=8253):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x40000000}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})

5.283897552s ago: executing program 6 (id=8255):
r0 = socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
sendmmsg(r1, &(0x7f0000005740)=[{{&(0x7f0000000100)=@ll={0x11, 0x2f, r2, 0x1, 0x8, 0x6, @random="c7272be696be"}, 0x80, 0x0}}], 0x1, 0x4040040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000040)={'wlan0\x00'})

5.283497092s ago: executing program 0 (id=8256):
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf}]}, 0x24}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"})
ppoll(&(0x7f0000000100)=[{r1, 0x4}, {r1, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8)

5.164735287s ago: executing program 0 (id=8258):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060203e700000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

5.059835719s ago: executing program 6 (id=8259):
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003040040000000000109022472510000000009040000120701030009050102cb0a00000009058202"], 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x5d550000)
syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x8, 0x90, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x7ff, 0x9466, 0xf5}, {0x6, 0x24, 0x1a, 0x5, 0x8}, [@obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x5, 0x6, [0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x4, 0xbaf2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x6, 0x40}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x6, 0x80, 0x9, 0x20, 0x7}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x80, 0x57, 0x400, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x2, 0x3, 0x1ff}]}, 0x7, [{0x2e, &(0x7f00000001c0)=@string={0x2e, 0x3, "687943ea7f9ec2ff6ffce393d1195f7ef79a31a4a70692ca2183bf2be521d8e8bcd796ec02c022191187f442"}}, {0xea, &(0x7f0000000200)=@string={0xea, 0x3, "85a0b0c93326c1a0d595eb6704c638833e96520d203e83c4786379ca4bc41b577fc9861a6c2953b8fb00aaee0317831f267ea783e63c2555f2635969d8c19509b2069365702a8fb8372c8897ad0cacf92bc7173f0d560e952d8429b643bba55decb24b458a0a6937ef6ecc2e7d01382ea3f2212080228d8caf3340b140f7a8429eddb0ebc2975423a961cfeaf9f6a3f5f98690d4b6e27c7c750c8fe7d0228f4e795cf1a859a0bdb40dd72fe14a53809329830c035a6ed15bc970605175585cddff76963cb9ccb4398486bcd0e5a4304632ff391906da94a8c8ea472d5b93a28e87e54fbed2b618ea"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x300a}}, {0xf6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x32, &(0x7f0000000480)=@string={0x32, 0x3, "c19e8f8b8474f3b053f0ed2dcf328ccaf1e7d73fb17439722ceb15f4935d44e1e38b823ce5083c01b158ccafc5dc13fe"}}, {0xed, &(0x7f00000004c0)=@string={0xed, 0x3, "34f7bd58203a3d181cd697998d8c4298505e22b455cc7c27bd845f119eb4a08b840b73ca2c6b5dcd03c95e9be509332bdbe763e09d605ad1ce1a984908bf478ff61760140e6aa9ce6be930f7cddf0fc570566abbf5b7fd021bea0b149d04c6569faa8644d56867e83816de8a673e63b83a606672316ffe167bea8cfa0d20d9e49929f9b0f40f21cd02cf64eecc67057dc1faf4d5a9797cff5835223c9acbb439b14228292caf1a9e6dff44926ef939b4b227dbd1d6aa322df0f6dc869225ca9f2067d61707fa8691730e2a415a5f4255750f95ed7ed2b184e958144173f9ab10edca712f1f58e5f7d38d59"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43e}}]})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.041885173s ago: executing program 7 (id=8260):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000007b008188e6b62aa73772cc9f1ba1f848420000005e140602fffe00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

5.000077764s ago: executing program 0 (id=8261):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

4.88873817s ago: executing program 0 (id=8262):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c050200002c71c0a17c45dc177a4f1324e55a0a000000af9617000109022400010000000209040000050300020009210000330581030000"], 0x0) (async)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c050200002c71c0a17c45dc177a4f1324e55a0a000000af9617000109022400010000000209040000050300020009210000330581030000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (async)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x140}, 0x40800)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00045700000012f44b97"], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.815781645s ago: executing program 7 (id=8263):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x5, @private2, 0x6}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
close(0x3)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x5, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @private=0xa010102}}}})

4.687541328s ago: executing program 7 (id=8264):
syslog(0x4, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000006c0)={0x1, 0x2, 0xaf3d})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000f45000/0x4000)=nil, 0x4000, 0x19)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f00006d6000/0x4000)=nil, 0x4000})
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x500, 0x2)
syz_clone(0x4000000, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
syslog(0x4, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}})
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

3.139907407s ago: executing program 7 (id=8269):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}, 0xffff0000}], 0x1, 0x0)

2.808081823s ago: executing program 7 (id=8270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

2.515808614s ago: executing program 7 (id=8271):
syz_emit_vhci(&(0x7f0000002fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x1, @any, 0xb, 0x0, 0x4, 0x7, 0x56, 0xf60, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}}}}, 0x1d)
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}})
r1 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0xfff5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0xf367, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0xf94, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb, 0x8, 0xe8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x29, 0x7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x6, 0x5, 0x7, 0x10, 0x81}, 0x16, &(0x7f0000000100)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xd, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6, 0x9}]}, 0x3, [{0x46, &(0x7f0000000140)=@string={0x46, 0x3, "e7723d23ff41a084f2727abe65d79b8f4e6c09c64eafa0e8bfaeef84804483d0b0d5a8699566a86c2ee8789d98015520abc6ccbbcb4345523ca68b23b539ccfb53795c04"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
preadv(r2, &(0x7f0000001500)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x1, 0x2)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x20, 0x24, 0x2c, {0x2c, 0x1, "166715eac5457f586661ecb5f07fb57af8560d47555c94d98696bb870041567337087a8adb19967d5727"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000300)={0x0, 0xf, 0x28, {0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0xa, 0xff00, 0x4f9b, [0xff0030, 0xf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xd3, 0x7, 0x9, 0x1, 0xb}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbb, 0x4, 0x6, 0x8, "bda87a33", "a91a7dcf"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x43, 0x3, 0x5, 0x3, 0xff, 0x7ff, 0xa2}}}, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x7, 0xb9, "df634f5b283eebd372a49720f708437b08b8b820fc59934b06b77040aa131b05581b536bf7b78eb0bc873c769605aa3642f3cf03a75491dcf9c4f69fc774ec1d9b971ac464d4bdc2c380a3326fb1141278c1cc3e537496c97936dfdfef044d178bbde7c6eb0fe2c9424608ffdcf62cc1132ae42a6f4828319275cb7aa46a09e9c52e93324835b8ff4cecfa6f919fb549d17a64a3707b48061a4148ebd92b7b01ec31ba830604b68ecff5ecb8969f8fe616175e401d4ee12ecf"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x0, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x9c}, &(0x7f0000000640)={0x40, 0xb, 0x2, "b411"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @random="fe3e1d24f166"}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "bdda"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xa0b5}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xd4}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x3}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)

2.032071394s ago: executing program 5 (id=8272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x140000000000000, 0x0, 0x10000082}, 0x80)

1.776913227s ago: executing program 0 (id=8273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e010600bc5cb60128876360864666702c1ffe80000078000000eac7fdd7f8b5187978"], 0xffdd)

1.760547639s ago: executing program 5 (id=8274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)={0xe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x86, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, "639d29c1e152"}, {0xdd, 0x13, "8d36639ec7cf7126d1f68da10b7d6a963465d0"}, {0xdd, 0x6, "91647dbc815a"}, {0xdd, 0x27, "9698717672b641597c57084ef024ca323c22f76cda378be34d595f00fb145a23b75320381c5641"}, {0xdd, 0x6, "371d2d4d2241"}, {0xdd, 0x6, "3dc2b0926489"}]}}, @NL80211_ATTR_PROBE_RESP={0x22, 0x91, "7c47a18ffe2092bd1717c48013e0b2df9e5a72a67a4d93e3925f6fe80ec8"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe0}, 0x1, 0x7000000}, 0x0)

1.063960061s ago: executing program 6 (id=8275):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x148, 0x34324142, 0x4, 0xfffefffe, 0x0, 0x5, 0x10, 0x0, 0x2}}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (rerun: 32)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @local, 0x0, "84eb1897c4efaac9f6b0055287801f4db0b1d41ba22b1781608632ae02f0a916", 0xd549, 0x8, 0x3, 0x7fff}, 0x3c) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) (async)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f00000000c0))

1.061728929s ago: executing program 5 (id=8276):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010118188e6b62aa73772cc9f1ba1f848420000005e140602fffe00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

921.278412ms ago: executing program 6 (id=8277):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7fff, 0x3}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000840)='sched\x00') (async)
syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x1d, 0xe8, 0xbd, 0xa9b53eb93a32542c, 0xbda, 0x8191, 0x341b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0xd0, 0x19, [{{0x9, 0x4, 0xe4, 0x7, 0x0, 0xd6, 0xe3, 0x99, 0x98}}]}}]}}, 0x0)
lseek(r2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

860.908893ms ago: executing program 5 (id=8278):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc00000000000000000080ffeb"], 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

619.771403ms ago: executing program 5 (id=8279):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

499.735361ms ago: executing program 5 (id=8280):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060280fe00000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

176.238621ms ago: executing program 6 (id=8281):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r1 = ioctl$TIOCGPTPEER(r0, 0x4004092b, 0x200000000005) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_open_dev$midi(&(0x7f0000000000), 0x8000000000000001, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000080)) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffe}, 0x8) (async)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0bd82cbd7000fddbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="5328bbefa2dbef68d6385bb19e641b6c5c4cbe5170600d9fd4b4149d5c20"], 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) (async)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = fsopen(&(0x7f0000000000)='hfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f00000005c0)) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@local, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000100)=0xa9b, 0x4)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
write(r6, &(0x7f0000000080)="861a", 0xa9b)
r10 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x6a, 0x4, 0x20000002, 0x101)
syz_usb_connect(0x0, 0x24, &(0x7f0000001f80)=ANY=[@ANYRESHEX=r2, @ANYRES64=r10, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES8=r2, @ANYRES64=r2, @ANYRES16=0x0, @ANYBLOB="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"], 0x0)

0s ago: executing program 6 (id=8282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}, 0xffffff8d}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

4 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04
[ 1234.114108][T20689] RSP: 002b:00007f8accc06ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 1234.114127][T20689] RAX: ffffffffffffffda RBX: 00007f8accc06fc0 RCX: 00007f8acbd90d94
[ 1234.114141][T20689] RDX: 0000000000001000 RSI: 00007f8accc07010 RDI: 0000000000000004
[ 1234.114153][T20689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1234.114164][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1234.114175][T20689] R13: 00007f8accc06f68 R14: 00007f8accc07010 R15: 0000000000000000
[ 1234.114203][T20689]  </TASK>
[ 1234.768566][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1234.793929][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[ 1234.823993][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1234.855663][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1234.887521][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1234.923592][T20717] netlink: 'syz.5.7559': attribute type 4 has an invalid length.
[ 1234.931371][T20717] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7559'.
[ 1234.940917][   T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1234.978968][   T24] usb 1-1: USB disconnect, device number 68
[ 1235.124441][    T9] usb 7-1: new low-speed USB device number 21 using dummy_hcd
[ 1235.275878][T20727] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7561'.
[ 1235.309131][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1235.339184][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1235.356249][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1235.392845][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1235.408109][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1235.551247][T20741] FAULT_INJECTION: forcing a failure.
[ 1235.551247][T20741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1235.567524][T20741] CPU: 0 UID: 0 PID: 20741 Comm: syz.5.7565 Not tainted syzkaller #0 PREEMPT(full) 
[ 1235.567548][T20741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1235.567559][T20741] Call Trace:
[ 1235.567569][T20741]  <TASK>
[ 1235.567578][T20741]  dump_stack_lvl+0x189/0x250
[ 1235.567603][T20741]  ? __pfx____ratelimit+0x10/0x10
[ 1235.567628][T20741]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1235.567649][T20741]  ? __pfx__printk+0x10/0x10
[ 1235.567688][T20741]  should_fail_ex+0x414/0x560
[ 1235.567719][T20741]  _copy_to_user+0x31/0xb0
[ 1235.567743][T20741]  simple_read_from_buffer+0xe1/0x170
[ 1235.567768][T20741]  proc_fail_nth_read+0x1b3/0x220
[ 1235.567789][T20741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1235.567810][T20741]  ? rw_verify_area+0x2a6/0x4d0
[ 1235.567827][T20741]  ? __lock_acquire+0xab9/0xd20
[ 1235.567849][T20741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1235.567868][T20741]  vfs_read+0x200/0xa30
[ 1235.567885][T20741]  ? fdget_pos+0x247/0x320
[ 1235.567910][T20741]  ? __pfx___mutex_lock+0x10/0x10
[ 1235.567929][T20741]  ? __pfx_vfs_read+0x10/0x10
[ 1235.567949][T20741]  ? __fget_files+0x2a/0x420
[ 1235.567973][T20741]  ? __fget_files+0x3a0/0x420
[ 1235.567991][T20741]  ? __fget_files+0x2a/0x420
[ 1235.568019][T20741]  ksys_read+0x145/0x250
[ 1235.568040][T20741]  ? __pfx_ksys_read+0x10/0x10
[ 1235.568062][T20741]  ? do_syscall_64+0xbe/0xfa0
[ 1235.568083][T20741]  do_syscall_64+0xfa/0xfa0
[ 1235.568100][T20741]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1235.568117][T20741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1235.568135][T20741]  ? clear_bhb_loop+0x60/0xb0
[ 1235.568155][T20741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1235.568172][T20741] RIP: 0033:0x7fd3f158d9dc
[ 1235.568188][T20741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1235.568202][T20741] RSP: 002b:00007fd3f2347030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1235.568221][T20741] RAX: ffffffffffffffda RBX: 00007fd3f17e5fa0 RCX: 00007fd3f158d9dc
[ 1235.568234][T20741] RDX: 000000000000000f RSI: 00007fd3f23470a0 RDI: 0000000000000004
[ 1235.568245][T20741] RBP: 00007fd3f2347090 R08: 0000000000000000 R09: 0000000000000000
[ 1235.568257][T20741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1235.568267][T20741] R13: 00007fd3f17e6038 R14: 00007fd3f17e5fa0 R15: 00007fff3d57ec28
[ 1235.568298][T20741]  </TASK>
[ 1236.772073][ T5890] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1236.941962][ T5890] usb 1-1: Using ep0 maxpacket: 8
[ 1236.953609][ T5890] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1236.954366][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7570'.
[ 1236.972501][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1236.991967][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1237.001732][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1237.051873][ T5890] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1237.075489][ T5890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1237.086817][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1237.305373][ T5890] usb 1-1: usb_control_msg returned -32
[ 1237.322006][ T5890] usbtmc 1-1:16.0: can't read capabilities
[ 1237.834970][    T9] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1237.854463][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1237.896745][    T9] usb 7-1: config 0 descriptor??
[ 1237.911182][    T9] usb 7-1: can't set config #0, error -71
[ 1237.940938][    T9] usb 7-1: USB disconnect, device number 21
[ 1238.650523][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.656958][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.831641][  T985] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[ 1238.999382][  T985] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1239.022257][  T985] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1239.051625][  T985] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1239.076192][  T985] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 156, setting to 64
[ 1239.105690][  T985] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1239.139912][  T985] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1239.155893][  T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.173799][  T985] usb 6-1: Product: syz
[ 1239.181832][  T985] usb 6-1: Manufacturer: syz
[ 1239.186529][  T985] usb 6-1: SerialNumber: syz
[ 1239.197090][T20806] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1239.213836][    C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1239.259434][  T985] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input196
[ 1239.394791][T20821] syzkaller0: entered promiscuous mode
[ 1239.410821][T20821] syzkaller0: entered allmulticast mode
[ 1239.421606][  T985] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1239.445261][  T985]  (id 0x00)
[ 1239.572896][ T5877] usb 1-1: USB disconnect, device number 69
[ 1239.608297][  T985] rc_core: IR keymap rc-imon-pad not found
[ 1239.624152][  T985] Registered IR keymap rc-empty
[ 1239.629866][  T985] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1239.661335][  T985] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1239.733148][  T985] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[ 1239.778252][  T985] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input197
[ 1239.842001][  T985] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:15> initialized
[ 1240.132296][T18637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1240.155119][T18637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1240.169821][T18637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1240.177960][T18637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1240.188975][T18637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1240.421816][  T985] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[ 1240.581823][  T985] usb 1-1: device descriptor read/64, error -71
[ 1240.851294][  T985] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[ 1241.006646][  T985] usb 1-1: device descriptor read/64, error -71
[ 1241.135454][  T985] usb usb1-port1: attempt power cycle
[ 1241.531611][  T985] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[ 1241.572109][  T985] usb 1-1: device descriptor read/8, error -71
[ 1241.841322][  T985] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[ 1241.872062][  T985] usb 1-1: device descriptor read/8, error -71
[ 1241.991854][  T985] usb usb1-port1: unable to enumerate USB device
[ 1242.241494][ T5840] Bluetooth: hci4: command tx timeout
[ 1243.013463][   T24] usb 6-1: USB disconnect, device number 15
[ 1244.036720][T20896] FAULT_INJECTION: forcing a failure.
[ 1244.036720][T20896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1244.081285][T20896] CPU: 1 UID: 0 PID: 20896 Comm: syz.0.7585 Not tainted syzkaller #0 PREEMPT(full) 
[ 1244.081312][T20896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1244.081323][T20896] Call Trace:
[ 1244.081330][T20896]  <TASK>
[ 1244.081338][T20896]  dump_stack_lvl+0x189/0x250
[ 1244.081363][T20896]  ? __pfx____ratelimit+0x10/0x10
[ 1244.081388][T20896]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1244.081406][T20896]  ? __pfx__printk+0x10/0x10
[ 1244.081436][T20896]  should_fail_ex+0x414/0x560
[ 1244.081466][T20896]  _copy_to_user+0x31/0xb0
[ 1244.081489][T20896]  simple_read_from_buffer+0xe1/0x170
[ 1244.081514][T20896]  proc_fail_nth_read+0x1b3/0x220
[ 1244.081533][T20896]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1244.081553][T20896]  ? rw_verify_area+0x2a6/0x4d0
[ 1244.081569][T20896]  ? __lock_acquire+0xab9/0xd20
[ 1244.081590][T20896]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1244.081608][T20896]  vfs_read+0x200/0xa30
[ 1244.081625][T20896]  ? fdget_pos+0x247/0x320
[ 1244.081648][T20896]  ? __pfx___mutex_lock+0x10/0x10
[ 1244.081667][T20896]  ? __pfx_vfs_read+0x10/0x10
[ 1244.081687][T20896]  ? __fget_files+0x2a/0x420
[ 1244.081710][T20896]  ? __fget_files+0x3a0/0x420
[ 1244.081728][T20896]  ? __fget_files+0x2a/0x420
[ 1244.081755][T20896]  ksys_read+0x145/0x250
[ 1244.081775][T20896]  ? __pfx_ksys_read+0x10/0x10
[ 1244.081797][T20896]  ? do_syscall_64+0xbe/0xfa0
[ 1244.081818][T20896]  do_syscall_64+0xfa/0xfa0
[ 1244.081833][T20896]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1244.081851][T20896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1244.081868][T20896]  ? clear_bhb_loop+0x60/0xb0
[ 1244.081888][T20896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1244.081904][T20896] RIP: 0033:0x7fa61d98d9dc
[ 1244.081921][T20896] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1244.081935][T20896] RSP: 002b:00007fa61bbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1244.081955][T20896] RAX: ffffffffffffffda RBX: 00007fa61dbe5fa0 RCX: 00007fa61d98d9dc
[ 1244.081968][T20896] RDX: 000000000000000f RSI: 00007fa61bbf60a0 RDI: 0000000000000004
[ 1244.081979][T20896] RBP: 00007fa61bbf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1244.081990][T20896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1244.082000][T20896] R13: 00007fa61dbe6038 R14: 00007fa61dbe5fa0 R15: 00007ffd82490ae8
[ 1244.082030][T20896]  </TASK>
[ 1244.503746][ T5840] Bluetooth: hci4: command tx timeout
[ 1244.861001][  T798] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1245.046467][  T798] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.088607][  T798] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1245.133120][  T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1245.150941][    T9] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[ 1245.193626][  T798] usb 7-1: config 0 descriptor??
[ 1245.234538][  T798] pwc: Askey VC010 type 2 USB webcam detected.
[ 1245.301314][    T9] usb 6-1: device descriptor read/64, error -71
[ 1245.393384][T20852] chnl_net:caif_netlink_parms(): no params data found
[ 1245.551862][    T9] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[ 1245.612554][  T798] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1245.620752][  T798] pwc: recv_control_msg error -32 req 02 val 2700
[ 1245.631104][  T798] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1245.720913][    T9] usb 6-1: device descriptor read/64, error -71
[ 1245.831295][    T9] usb usb6-port1: attempt power cycle
[ 1245.863238][T21076] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7591'.
[ 1245.875992][T20911] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1245.902918][T20852] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.940561][T20852] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1245.961611][T20852] bridge_slave_0: entered allmulticast mode
[ 1245.993260][T20852] bridge_slave_0: entered promiscuous mode
[ 1246.024765][T20852] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1246.053377][T20852] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1246.081489][T20852] bridge_slave_1: entered allmulticast mode
[ 1246.090258][T20852] bridge_slave_1: entered promiscuous mode
[ 1246.182139][    T9] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[ 1246.270670][    T9] usb 6-1: device descriptor read/8, error -71
[ 1246.273021][T20852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1246.323652][T20852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1246.454179][T20852] team0: Port device team_slave_0 added
[ 1246.485372][T20852] team0: Port device team_slave_1 added
[ 1246.513704][    T9] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[ 1246.561029][ T5840] Bluetooth: hci4: command tx timeout
[ 1246.569349][    T9] usb 6-1: device descriptor read/8, error -71
[ 1246.615752][T20852] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1246.646889][T20852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1246.706239][    T9] usb usb6-port1: unable to enumerate USB device
[ 1246.708576][T20852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1246.745908][T20852] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1246.763057][T20852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1246.823938][T20852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1247.007020][T20852] hsr_slave_0: entered promiscuous mode
[ 1247.025269][T20852] hsr_slave_1: entered promiscuous mode
[ 1247.042069][T20852] debugfs: 'hsr0' already exists in 'hsr'
[ 1247.054423][T20852] Cannot create hsr debugfs directory
[ 1247.495793][T21227] syzkaller0: entered allmulticast mode
[ 1247.642418][  T798] pwc: recv_control_msg error -71 req 04 val 1300
[ 1247.691462][  T798] pwc: recv_control_msg error -71 req 04 val 1400
[ 1247.700691][  T798] pwc: recv_control_msg error -71 req 02 val 2000
[ 1247.737991][  T798] pwc: recv_control_msg error -71 req 02 val 2100
[ 1247.751248][  T798] pwc: recv_control_msg error -71 req 04 val 1500
[ 1247.761881][  T798] pwc: recv_control_msg error -71 req 02 val 2500
[ 1247.779823][  T798] pwc: recv_control_msg error -71 req 02 val 2400
[ 1247.795581][  T798] pwc: recv_control_msg error -71 req 02 val 2600
[ 1247.812075][  T798] pwc: recv_control_msg error -71 req 02 val 2900
[ 1247.847615][  T798] pwc: recv_control_msg error -71 req 02 val 2800
[ 1247.863718][T20852] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1247.880652][  T798] pwc: recv_control_msg error -71 req 04 val 1100
[ 1247.896568][T20852] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1247.905539][  T798] pwc: recv_control_msg error -71 req 04 val 1200
[ 1247.937240][  T798] pwc: Registered as video103.
[ 1247.942244][T21276] binder: 21269:21276 ioctl c0306201 0 returned -14
[ 1247.943194][T20852] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1247.966946][  T798] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input198
[ 1248.014157][  T798] usb 7-1: USB disconnect, device number 22
[ 1248.015233][T20852] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1248.298181][T20852] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1248.355075][T20852] 8021q: adding VLAN 0 to HW filter on device team0
[ 1248.411146][T21315] netlink: 'syz.6.7604': attribute type 4 has an invalid length.
[ 1248.418935][T21315] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7604'.
[ 1248.432537][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1248.439728][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1248.502661][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1248.509852][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1248.526445][T21315] .`A: renamed from bond0
[ 1248.641591][ T5840] Bluetooth: hci4: command tx timeout
[ 1248.710676][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1248.781001][  T985] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1248.912539][   T24] usb 6-1: Using ep0 maxpacket: 8
[ 1248.936141][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1248.950596][  T985] usb 1-1: Using ep0 maxpacket: 16
[ 1248.964865][   T24] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[ 1248.975223][  T985] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1249.010485][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.018519][   T24] usb 6-1: Product: syz
[ 1249.023218][  T985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1249.051088][   T24] usb 6-1: Manufacturer: syz
[ 1249.055730][   T24] usb 6-1: SerialNumber: syz
[ 1249.063879][  T985] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1249.082621][  T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.092084][   T24] usb 6-1: config 0 descriptor??
[ 1249.112904][  T985] usb 1-1: Product: syz
[ 1249.117126][  T985] usb 1-1: Manufacturer: syz
[ 1249.122719][   T24] usb 6-1: bad CDC descriptors
[ 1249.141529][   T24] usb 6-1: unsupported MDLM descriptors
[ 1249.148416][  T985] usb 1-1: SerialNumber: syz
[ 1249.169270][  T985] usb 1-1: config 0 descriptor??
[ 1249.186915][  T985] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1249.211223][  T985] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1249.221990][T20852] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1249.799511][    T9] usb 6-1: USB disconnect, device number 20
[ 1249.812988][  T985] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1249.833462][  T985] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 1249.988845][T20852] veth0_vlan: entered promiscuous mode
[ 1250.033537][T20852] veth1_vlan: entered promiscuous mode
[ 1250.151826][T20852] veth0_macvtap: entered promiscuous mode
[ 1250.195462][T20852] veth1_macvtap: entered promiscuous mode
[ 1250.212215][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1250.264970][T20852] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1250.299843][T20852] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1250.333465][ T1168] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1250.373386][ T1168] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1250.400330][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1250.407829][ T1168] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1250.412192][    T9] usb 6-1: config 53 has an invalid interface number: 240 but max is 0
[ 1250.440390][    T9] usb 6-1: config 53 has no interface number 0
[ 1250.446730][ T1168] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1250.467902][    T9] usb 6-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[ 1250.468135][  T985] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[ 1250.509693][    T9] usb 6-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024
[ 1250.527140][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 2
[ 1250.548456][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 4
[ 1250.563986][    T9] usb 6-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1250.603481][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 6
[ 1250.610180][    T9] usb 6-1: config 53 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1250.631203][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 54
[ 1250.665888][    T9] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89
[ 1250.688287][T31665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1250.706402][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.724619][T31665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1250.740361][    T9] usb 6-1: Product: syz
[ 1250.754799][    T9] usb 6-1: Manufacturer: syz
[ 1250.759423][    T9] usb 6-1: SerialNumber: syz
[ 1250.791258][T21366] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1250.805371][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1250.815846][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1250.843843][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 56
[ 1251.028513][    T9] kvaser_usb 6-1:53.240: error -ENODEV: Cannot get usb endpoint(s)
[ 1251.061412][    T9] usb 6-1: USB disconnect, device number 21
[ 1251.064252][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 2
[ 1251.100818][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 4
[ 1251.107242][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 6
[ 1251.148594][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 54
[ 1251.172894][  T985] em28xx 1-1:0.0: couldn't setup AC97 register 56
[ 1251.194749][  T985] usb 1-1: USB disconnect, device number 74
[ 1251.470316][   T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1251.587751][T21429] netlink: 'syz.7.7618': attribute type 10 has an invalid length.
[ 1251.881653][T21447] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7624'.
[ 1252.052169][T21453] sg_write: data in/out 209152/6 bytes for SCSI command 0x0-- guessing data in;
[ 1252.052169][T21453]    program syz.0.7626 not setting count and/or reply_len properly
[ 1252.098936][T21460] syzkaller0: entered allmulticast mode
[ 1252.374699][T21477] binder: 21471:21477 ioctl c0306201 0 returned -14
[ 1252.605928][    C0] IPv4: Oversized IP packet from 172.20.20.24
[ 1252.742202][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7634'.
[ 1252.795103][T21500] syzkaller1: entered promiscuous mode
[ 1252.808627][T21500] syzkaller1: entered allmulticast mode
[ 1252.830608][T21508] binder: 21501:21508 ioctl c0306201 0 returned -14
[ 1252.850064][T21509] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7639'.
[ 1252.944140][T21508] tmpfs: Bad value for 'mpol'
[ 1253.100106][ T5877] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[ 1253.240292][ T5890] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1253.282312][ T5877] usb 1-1: config 3 has an invalid interface number: 179 but max is 0
[ 1253.301443][ T5877] usb 1-1: config 3 has no interface number 0
[ 1253.307686][ T5877] usb 1-1: config 3 interface 179 has no altsetting 0
[ 1253.333450][ T5877] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[ 1253.357387][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1253.366805][ T5877] usb 1-1: Product: syz
[ 1253.373806][ T5877] usb 1-1: Manufacturer: syz
[ 1253.378433][ T5877] usb 1-1: SerialNumber: syz
[ 1253.402075][ T5890] usb 7-1: Using ep0 maxpacket: 16
[ 1253.424565][ T5890] usb 7-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59
[ 1253.441704][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1253.462553][ T5890] usb 7-1: Product: syz
[ 1253.466732][ T5890] usb 7-1: Manufacturer: syz
[ 1253.482619][ T5890] usb 7-1: SerialNumber: syz
[ 1253.493852][ T5890] usb 7-1: config 0 descriptor??
[ 1253.513642][ T5890] pwc: Logitech QuickCam 4000 Pro USB webcam detected.
[ 1253.529998][    T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1253.601698][ T5877] go7007 1-1:3.179: probe with driver go7007 failed with error -12
[ 1253.631166][ T5877] usb 1-1: USB disconnect, device number 75
[ 1253.690137][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1253.701633][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1253.723396][ T5890] pwc: Failed to set LED on/off time (-71)
[ 1253.733765][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1253.752255][ T5890] pwc: send_video_command error -71
[ 1253.767659][ T5890] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1253.791251][ T5890] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[ 1253.801560][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1253.812942][ T5890] usb 7-1: USB disconnect, device number 24
[ 1253.819706][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1253.835377][    T9] usb 6-1: Product: syz
[ 1253.844890][    T9] usb 6-1: Manufacturer: syz
[ 1253.849508][    T9] usb 6-1: SerialNumber: syz
[ 1253.858128][    T9] usb 6-1: config 0 descriptor??
[ 1253.868813][    T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1253.878119][    T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1254.343317][T21567] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7646'.
[ 1254.372681][T21567] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7646'.
[ 1254.473541][    T9] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1254.490460][    T9] em28xx 6-1:0.0: Config register raw data: 0x21
[ 1254.496866][    T9] em28xx 6-1:0.0: I2S Audio (1 sample rate(s))
[ 1254.522679][    T9] em28xx 6-1:0.0: No AC97 audio processor
[ 1254.609339][T21577] netlink: 'syz.6.7651': attribute type 1 has an invalid length.
[ 1254.618122][T21577] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.7651'.
[ 1254.746401][T21583] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.7653'.
[ 1255.060016][    T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1255.209804][    T9] usb 7-1: device descriptor read/64, error -71
[ 1255.425876][T21593] netlink: 'syz.0.7656': attribute type 10 has an invalid length.
[ 1255.437494][ T5890] usb 6-1: USB disconnect, device number 22
[ 1255.450060][    T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1255.523969][T21593] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1255.600203][    T9] usb 7-1: device descriptor read/64, error -71
[ 1255.634630][T21605] usb usb8: usbfs: process 21605 (syz.5.7658) did not claim interface 0 before use
[ 1255.719000][    T9] usb usb7-port1: attempt power cycle
[ 1255.973342][T21625] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7664'.
[ 1255.984259][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7664'.
[ 1256.019796][ T5877] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[ 1256.084211][T18637] Bluetooth: hci3: command 0x0405 tx timeout
[ 1256.091222][    T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1256.140524][    T9] usb 7-1: device descriptor read/8, error -71
[ 1256.171224][ T5877] usb 6-1: device descriptor read/64, error -71
[ 1256.389838][    T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1256.413006][ T5877] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[ 1256.432712][    T9] usb 7-1: device descriptor read/8, error -71
[ 1256.569716][ T5877] usb 6-1: device descriptor read/64, error -71
[ 1256.581119][    T9] usb usb7-port1: unable to enumerate USB device
[ 1256.690041][ T5877] usb usb6-port1: attempt power cycle
[ 1256.859776][T21647] binder: 21640:21647 ioctl c0306201 0 returned -14
[ 1257.042210][ T5877] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[ 1257.093148][ T5877] usb 6-1: device descriptor read/8, error -71
[ 1257.329686][ T5877] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[ 1257.360653][ T5877] usb 6-1: device descriptor read/8, error -71
[ 1257.379582][    T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1257.471693][ T5877] usb usb6-port1: unable to enumerate USB device
[ 1257.539564][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1257.559263][    T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1257.571077][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1257.599697][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1257.624158][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1257.639509][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1257.660455][    T9] usb 1-1: Product: syz
[ 1257.664656][    T9] usb 1-1: Manufacturer: syz
[ 1257.669258][    T9] usb 1-1: SerialNumber: syz
[ 1257.967431][T21662] syzkaller1: entered promiscuous mode
[ 1257.983415][T21662] syzkaller1: entered allmulticast mode
[ 1258.193543][    T9] usb 1-1: 0:2 : does not exist
[ 1258.417515][    T9] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1)
[ 1258.468727][    T9] usb 1-1: USB disconnect, device number 76
[ 1258.991338][T21694] pim6reg1: entered promiscuous mode
[ 1258.997495][T21694] pim6reg1: entered allmulticast mode
[ 1259.007333][T21694] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7675'.
[ 1259.287485][T21720] netlink: 'syz.6.7679': attribute type 4 has an invalid length.
[ 1259.299375][T21720] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7679'.
[ 1259.312838][T21720] .`: renamed from .`A
[ 1259.318265][T21716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7678'.
[ 1259.434044][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f046000: rx timeout, send abort
[ 1259.643321][T21741] netlink: 'syz.6.7682': attribute type 5 has an invalid length.
[ 1259.679267][T21741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7682'.
[ 1259.697296][T21741] netlink: 'syz.6.7682': attribute type 1 has an invalid length.
[ 1259.942341][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f046000: abort rx timeout. Force session deactivation
[ 1260.740952][    T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1260.978850][T21841] binder: 21836:21841 ioctl c0306201 0 returned -14
[ 1261.067564][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1261.104723][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1261.123021][    T9] usb 1-1: can't read configurations, error -71
[ 1261.309144][   T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1261.359506][ T5890] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1261.459154][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1261.473871][   T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1261.500354][   T10] usb 6-1: config 0 has no interface number 0
[ 1261.509574][   T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1261.519861][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.528123][   T10] usb 6-1: Product: syz
[ 1261.532925][   T10] usb 6-1: Manufacturer: syz
[ 1261.538094][ T5890] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1261.546327][   T10] usb 6-1: SerialNumber: syz
[ 1261.550986][ T5890] usb 7-1: config 0 has no interface number 0
[ 1261.559971][   T10] usb 6-1: config 0 descriptor??
[ 1261.568222][ T5890] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1261.579430][   T10] smsc95xx v2.0.0
[ 1261.587416][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.595559][ T5890] usb 7-1: Product: syz
[ 1261.599826][ T5890] usb 7-1: Manufacturer: syz
[ 1261.604453][ T5890] usb 7-1: SerialNumber: syz
[ 1261.612717][ T5890] usb 7-1: config 0 descriptor??
[ 1261.856109][T21853] kAFS: unable to lookup cell '/yz1'
[ 1261.872170][T21853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1261.895502][T21853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1261.973956][   T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1261.998517][ T5890] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[ 1262.022357][   T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1262.044494][ T5890] usb 7-1: USB disconnect, device number 29
[ 1262.207375][T21890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7706'.
[ 1262.337833][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7707'.
[ 1262.565576][T21896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7708'.
[ 1262.881503][T21905] binder: 21902:21905 ioctl c0306201 0 returned -14
[ 1262.907853][T21905] openvswitch: netlink: Flow key attr not present in new flow.
[ 1263.669987][ T5890] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1263.679387][T21848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1263.708564][T21848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1263.848862][ T5890] usb 7-1: Using ep0 maxpacket: 32
[ 1263.873043][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1263.889365][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1263.918986][ T5890] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 1263.936227][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.960005][ T5890] usb 7-1: config 0 descriptor??
[ 1264.240967][ T5890] usbhid 7-1:0.0: can't add hid device: -71
[ 1264.249223][ T5890] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1264.290839][ T5890] usb 7-1: USB disconnect, device number 30
[ 1264.536258][T21848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.559641][T21848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1264.598492][   T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1264.630458][   T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[ 1264.662120][   T10] usb 6-1: USB disconnect, device number 27
[ 1265.019538][   T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1265.199140][   T24] usb 1-1: Using ep0 maxpacket: 16
[ 1265.230640][   T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1265.265975][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.295752][   T24] usb 1-1: Product: syz
[ 1265.309864][   T24] usb 1-1: Manufacturer: syz
[ 1265.333763][   T24] usb 1-1: SerialNumber: syz
[ 1265.366355][   T24] usb 1-1: config 0 descriptor??
[ 1265.396240][   T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1265.568949][ T5877] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1265.593465][   T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71
[ 1265.636730][   T24] usb 1-1: USB disconnect, device number 79
[ 1265.738815][ T5877] usb 7-1: Using ep0 maxpacket: 32
[ 1265.755728][ T5877] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1265.792220][ T5877] usb 7-1: config 0 has no interface number 0
[ 1265.819501][ T5877] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 48, changing to 9
[ 1265.973262][ T5877] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1266.023396][ T5877] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1266.121211][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.168600][ T5877] usb 7-1: Product: syz
[ 1266.204005][ T5877] usb 7-1: Manufacturer: syz
[ 1266.236115][ T5877] usb 7-1: SerialNumber: syz
[ 1266.288677][ T5877] usb 7-1: config 0 descriptor??
[ 1266.777083][ T5877] appletouch 7-1:0.85: Geyser mode initialized.
[ 1266.811133][ T5877] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input199
[ 1266.826950][T22040] syzkaller0: entered promiscuous mode
[ 1266.853014][T22040] syzkaller0: entered allmulticast mode
[ 1268.951008][T22078] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7735'.
[ 1269.341935][ T5877] usb 7-1: USB disconnect, device number 31
[ 1269.411806][ T5877] appletouch 7-1:0.85: input: appletouch disconnected
[ 1269.707126][T22089] kvm: kvm [22088]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xff
[ 1269.738332][T22089] kvm: kvm [22088]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1
[ 1269.778316][T22089] kvm: kvm [22088]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xff
[ 1269.800993][T22089] kvm: kvm [22088]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xff
[ 1269.836168][T22089] kvm: kvm [22088]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1
[ 1269.860530][T22089] kvm_intel: kvm [22088]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0xff
[ 1269.888736][T22098] ieee802154 phy0 wpan0: encryption failed: -22
[ 1272.253439][T22056] tipc: Started in network mode
[ 1272.259895][T22056] tipc: Node identity fe80000000000000000000000000002c, cluster identity 4711
[ 1272.271293][T22056] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1272.433148][T22095] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1272.440221][T22095] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1272.451198][T22095] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1272.472366][T22095] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1272.545470][T22095] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1272.557485][T22118] netlink: 'syz.6.7739': attribute type 4 has an invalid length.
[ 1272.570595][T22095] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1272.582245][T22118] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7739'.
[ 1272.582949][T22095] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1272.636391][T22095] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1272.659405][T22095] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1272.665517][T22095] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1272.689477][T22095] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1272.894949][T22135] syzkaller0: entered allmulticast mode
[ 1272.967996][   T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1273.149631][T22151] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7746'.
[ 1273.158829][   T10] usb 1-1: Using ep0 maxpacket: 8
[ 1273.188874][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1273.218356][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.237756][   T10] usb 1-1: Product: syz
[ 1273.249470][   T10] usb 1-1: Manufacturer: syz
[ 1273.264390][   T10] usb 1-1: SerialNumber: syz
[ 1273.275514][   T10] usb 1-1: config 0 descriptor??
[ 1273.479454][T22164] block nbd6: NBD_DISCONNECT
[ 1273.484330][T22164] block nbd6: Disconnected due to user request.
[ 1273.497873][   T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1273.527747][T22164] block nbd6: shutting down sockets
[ 1273.809231][T22170] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1274.133634][ T5890] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1274.228114][T22186] Mount JFS Failure: -5
[ 1274.232335][T22186] jfs_mount failed w/return code = -5
[ 1274.262690][T22187] Mount JFS Failure: -5
[ 1274.266928][T22187] jfs_mount failed w/return code = -5
[ 1274.327225][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1274.367682][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1274.377384][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1274.426860][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1274.470758][ T5890] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1274.489242][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1274.490108][T18637] Bluetooth: hci3: command 0x0405 tx timeout
[ 1274.495957][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[ 1274.501591][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.524015][   T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1274.543836][ T5890] usb 7-1: Product: syz
[ 1274.554145][   T10] usb 1-1: USB disconnect, device number 80
[ 1274.567704][ T5890] usb 7-1: Manufacturer: syz
[ 1274.572315][ T5890] usb 7-1: SerialNumber: syz
[ 1274.600393][T22209] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7754'.
[ 1274.612054][ T5890] usb 7-1: config 0 descriptor??
[ 1274.642487][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1274.677705][T19955] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1274.717781][T22215] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1274.832652][T19955] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1274.838043][ T5890] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1274.848411][T19955] usb 6-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1274.884336][T19955] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1274.902372][T19955] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[ 1274.929294][T19955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1274.951437][T19955] usb 6-1: config 0 descriptor??
[ 1275.258909][T22227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7756'.
[ 1275.277739][T22227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7756'.
[ 1275.376381][T19955] logitech 0003:046D:CA03.0070: hidraw0: USB HID v8.80 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0
[ 1275.420652][T19955] logitech 0003:046D:CA03.0070: no inputs found
[ 1275.584974][T22198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1275.608076][T22198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1275.637378][T22198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1275.637569][   T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1275.665686][T22198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1275.685567][T22198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1275.709434][T22198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1275.731394][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7753'.
[ 1275.767161][T19955] usb 6-1: USB disconnect, device number 28
[ 1275.850729][   T10] usb 1-1: Using ep0 maxpacket: 16
[ 1275.876878][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1275.907589][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1275.958745][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1275.987617][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.005940][   T10] usb 1-1: Product: syz
[ 1276.016259][   T10] usb 1-1: Manufacturer: syz
[ 1276.036318][   T10] usb 1-1: SerialNumber: syz
[ 1276.049724][   T10] usb 1-1: config 0 descriptor??
[ 1276.080027][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1276.107543][   T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1276.559119][T17537] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1276.636554][T22273] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7762'.
[ 1276.666580][   T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1276.698931][   T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 1276.717596][T17537] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1276.797597][T17537] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1276.891220][T19955] usb 7-1: USB disconnect, device number 32
[ 1277.112843][   T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[ 1277.125854][   T10] em28xx 1-1:0.0: No AC97 audio processor
[ 1277.488617][   T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1277.667415][   T10] usb 7-1: Using ep0 maxpacket: 8
[ 1277.695246][   T10] usb 7-1: config 5 has an invalid interface number: 232 but max is 0
[ 1277.717348][   T10] usb 7-1: config 5 has no interface number 0
[ 1277.739083][   T10] usb 7-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=90.db
[ 1277.767312][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.786056][   T10] usb 7-1: Product: syz
[ 1277.803035][   T10] usb 7-1: Manufacturer: syz
[ 1277.827467][   T10] usb 7-1: SerialNumber: syz
[ 1278.108891][   T10] usb 7-1: USB disconnect, device number 33
[ 1278.452931][   T10] usb 1-1: USB disconnect, device number 81
[ 1278.502423][   T10] em28xx 1-1:0.0: Disconnecting em28xx
[ 1278.546070][   T10] em28xx 1-1:0.0: Freeing device
[ 1278.637342][T17537] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1278.797447][T17537] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1278.820931][T22358] syzkaller0: entered promiscuous mode
[ 1278.833697][T22375] binder: 22350:22375 ioctl c0306201 0 returned -14
[ 1278.855453][T22358] syzkaller0: entered allmulticast mode
[ 1278.875444][    T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[ 1278.891802][T17537] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1279.059237][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.100203][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1279.151403][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1279.187171][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1279.195195][    T9] usb 6-1: Product: syz
[ 1279.208376][    T9] usb 6-1: Manufacturer: syz
[ 1279.237225][    T9] usb 6-1: SerialNumber: syz
[ 1279.337405][ T5890] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1279.356972][   T30] audit: type=1326 audit(1761725416.570:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.430097][   T30] audit: type=1326 audit(1761725416.570:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.477535][    T9] usb 6-1: 0:2 : does not exist
[ 1279.496171][   T30] audit: type=1326 audit(1761725416.570:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.514487][    T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1279.553061][   T30] audit: type=1326 audit(1761725416.570:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.558352][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1279.639414][   T30] audit: type=1326 audit(1761725416.570:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.647355][    T9] usb 6-1: USB disconnect, device number 29
[ 1279.677314][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1279.706474][ T5890] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1279.727168][   T30] audit: type=1326 audit(1761725416.570:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.752899][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.798580][ T5890] usb 7-1: config 0 descriptor??
[ 1279.819007][   T30] audit: type=1326 audit(1761725416.570:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.895247][   T30] audit: type=1326 audit(1761725416.570:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1279.947076][   T30] audit: type=1326 audit(1761725416.570:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1280.001207][   T30] audit: type=1326 audit(1761725416.570:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22350 comm="syz.7.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab338efc9 code=0x7fc00000
[ 1280.289874][ T5890] lenovo 0003:17EF:6047.0071: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0
[ 1280.707242][  T985] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1280.851792][T22429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1280.873776][T22429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1280.895124][  T985] usb 6-1: config 4 has 1 interface, different from the descriptor's value: 2
[ 1280.916594][  T985] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1280.930757][T22429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1280.936922][  T985] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1280.949979][T22429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1280.963973][  T985] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[ 1280.976997][T17537] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1280.998118][  T985] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1281.016596][  T985] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1281.025952][  T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.250639][T22425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1281.287444][T22425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1281.350500][  T985] ath6kl: Failed to submit usb control message: -71
[ 1281.386880][  T985] ath6kl: unable to send the bmi data to the device: -71
[ 1281.407639][  T985] ath6kl: Unable to send get target info: -71
[ 1281.436619][  T985] ath6kl: Failed to init ath6kl core: -71
[ 1281.458600][  T985] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1281.499947][  T985] usb 6-1: USB disconnect, device number 30
[ 1282.074208][ T5877] usb 7-1: USB disconnect, device number 34
[ 1283.844239][T22523] netlink: 'syz.0.7793': attribute type 4 has an invalid length.
[ 1283.862698][T22523] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7793'.
[ 1283.875521][T22523] wlan1: mtu less than device minimum
[ 1284.003598][T22527] netlink: 'syz.0.7795': attribute type 10 has an invalid length.
[ 1285.079991][T22568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7805'.
[ 1285.226565][    T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 1285.388597][    T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1285.398780][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1285.414418][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1285.433790][    T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1285.446700][ T5890] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[ 1285.456438][    T9] usb 6-1: Product: syz
[ 1285.460613][    T9] usb 6-1: Manufacturer: syz
[ 1285.470425][    T9] usb 6-1: SerialNumber: syz
[ 1285.480033][    T9] usb 6-1: config 0 descriptor??
[ 1285.495607][    T9] usb 6-1: selecting invalid altsetting 0
[ 1285.628884][ T5890] usb 1-1: No LPM exit latency info found, disabling LPM.
[ 1285.638006][ T5890] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[ 1285.656771][ T5890] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt
[ 1285.669979][ T5890] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x3 is Bulk; changing to Interrupt
[ 1285.683171][ T5890] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1285.701220][T22558] vxcan0: tx address claim with dest, not broadcast
[ 1285.834837][ T5877] usb 6-1: USB disconnect, device number 31
[ 1286.950096][T22643] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7818'.
[ 1286.963313][T22643] binder: 22636:22643 ioctl c0306201 0 returned -14
[ 1287.146395][    T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1287.328716][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1287.339754][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1287.356896][    T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1287.365975][    T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1287.393705][    T9] usb 7-1: Manufacturer: syz
[ 1287.412079][    T9] usb 7-1: config 0 descriptor??
[ 1287.548387][ T5832] libceph: connect (1)[c::]:6789 error -101
[ 1287.567867][ T5832] libceph: mon0 (1)[c::]:6789 connect error
[ 1287.841388][ T5832] libceph: connect (1)[c::]:6789 error -101
[ 1287.844677][T22639] loop7: detected capacity change from 0 to 7
[ 1287.856860][    C1] blk_print_req_error: 5 callbacks suppressed
[ 1287.856877][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1287.856908][ T5832] libceph: mon0 (1)[c::]:6789 connect error
[ 1287.862976][    C1] buffer_io_error: 4 callbacks suppressed
[ 1287.862989][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1287.892373][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1287.901591][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1287.920608][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1287.929805][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1287.940971][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1287.950145][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1287.961870][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1287.971079][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1287.979685][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1287.988882][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1288.001498][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1288.010714][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1288.019927][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1288.022883][    T9] pyra 0003:1E7D:2CF6.0072: unknown main item tag 0x0
[ 1288.029149][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1288.029250][T22639] ldm_validate_partition_table(): Disk read failed.
[ 1288.030181][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1288.037042][    T9] pyra 0003:1E7D:2CF6.0072: unknown main item tag 0x0
[ 1288.043925][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1288.050602][    T9] pyra 0003:1E7D:2CF6.0072: unknown main item tag 0x0
[ 1288.071813][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 1288.074521][    T9] pyra 0003:1E7D:2CF6.0072: unknown main item tag 0x0
[ 1288.081152][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1288.112532][    T9] pyra 0003:1E7D:2CF6.0072: unknown main item tag 0x0
[ 1288.115634][T22639] Dev loop7: unable to read RDB block 0
[ 1288.119978][    T9] pyra 0003:1E7D:2CF6.0072: unknown main item tag 0x0
[ 1288.137608][T22639]  loop7: unable to read partition table
[ 1288.143583][T22639] loop7: partition table beyond EOD, truncated
[ 1288.150598][T22639] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[ 1288.159976][    T9] pyra 0003:1E7D:2CF6.0072: unknown main item tag 0x0
[ 1288.172009][    T9] pyra 0003:1E7D:2CF6.0072: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 1288.195831][ T5198] ldm_validate_partition_table(): Disk read failed.
[ 1288.218843][ T5198] Dev loop7: unable to read RDB block 0
[ 1288.219296][ T5890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1288.251216][ T5198]  loop7: unable to read partition table
[ 1288.260458][ T5198] loop7: partition table beyond EOD, truncated
[ 1288.263965][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1288.281898][T22658] ceph: No mds server is up or the cluster is laggy
[ 1288.314037][T22676] netlink: 'syz.0.7824': attribute type 4 has an invalid length.
[ 1288.315396][ T5890] usb 1-1: can't set config #1, error -71
[ 1288.352113][ T5890] usb 1-1: USB disconnect, device number 82
[ 1288.363799][T22676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7824'.
[ 1288.420449][T22676] wlan1: mtu less than device minimum
[ 1288.443645][T22687] netlink: 'syz.5.7825': attribute type 10 has an invalid length.
[ 1288.487359][ T5198] ldm_validate_partition_table(): Disk read failed.
[ 1288.497184][ T5198] Dev loop7: unable to read RDB block 0
[ 1288.503630][ T5198]  loop7: unable to read partition table
[ 1288.516479][ T5198] loop7: partition table beyond EOD, truncated
[ 1288.536848][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7826'.
[ 1288.624957][ T5198] ldm_validate_partition_table(): Disk read failed.
[ 1288.635247][ T5198] Dev loop7: unable to read RDB block 0
[ 1288.644999][T22696] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7828'.
[ 1288.645589][ T5198]  loop7: unable to read partition table
[ 1288.662941][ T5198] loop7: partition table beyond EOD, truncated
[ 1288.718307][ T5198] ldm_validate_partition_table(): Disk read failed.
[ 1288.741213][ T5198] Dev loop7: unable to read RDB block 0
[ 1288.757587][ T5198]  loop7: unable to read partition table
[ 1288.773682][ T5198] loop7: partition table beyond EOD, truncated
[ 1289.166480][ T5890] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1289.239271][    T9] pyra 0003:1E7D:2CF6.0072: couldn't init struct pyra_device
[ 1289.257617][    T9] pyra 0003:1E7D:2CF6.0072: couldn't install mouse
[ 1289.285442][    T9] pyra 0003:1E7D:2CF6.0072: probe with driver pyra failed with error -71
[ 1289.325594][    T9] usb 7-1: USB disconnect, device number 35
[ 1289.380348][ T5890] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[ 1289.395970][ T5890] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1289.419222][ T5890] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1289.431371][ T5890] usb 6-1: config 220 has no interface number 2
[ 1289.438502][ T5890] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1289.452676][ T5890] usb 6-1: config 220 interface 0 has no altsetting 0
[ 1289.459965][ T5890] usb 6-1: config 220 interface 76 has no altsetting 0
[ 1289.480904][ T5890] usb 6-1: config 220 interface 1 has no altsetting 0
[ 1289.498842][ T5890] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1289.518455][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1289.536298][ T5890] usb 6-1: Product: syz
[ 1289.546897][ T5890] usb 6-1: Manufacturer: syz
[ 1289.560676][ T5890] usb 6-1: SerialNumber: syz
[ 1289.594410][T22745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7837'.
[ 1289.802656][T22752] binder: 22746:22752 ioctl c0306201 0 returned -14
[ 1289.806857][ T5890] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1289.840109][ T5890] uvcvideo 6-1:220.0: No valid video chain found.
[ 1289.868154][ T5890] usb 6-1: selecting invalid altsetting 0
[ 1289.898089][ T5890] usb 6-1: selecting invalid altsetting 0
[ 1289.914211][ T5890] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[ 1289.944848][ T5890] usb 6-1: USB disconnect, device number 32
[ 1290.084571][  T985] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1290.236322][    T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1290.255920][  T985] usb 1-1: Using ep0 maxpacket: 8
[ 1290.271015][  T985] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1290.290555][  T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.305986][  T985] usb 1-1: Product: syz
[ 1290.331199][  T985] usb 1-1: Manufacturer: syz
[ 1290.351475][  T985] usb 1-1: SerialNumber: syz
[ 1290.377074][  T985] usb 1-1: config 0 descriptor??
[ 1290.431470][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1290.456099][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1290.506105][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1290.549010][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1290.589196][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1290.604956][  T985] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1290.625834][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 1290.674719][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb
[ 1290.708333][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.740248][    T9] usb 7-1: config 0 descriptor??
[ 1290.770393][    T9] appledisplay 7-1:0.0: Submitting URB failed
[ 1290.796104][    T9] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -5
[ 1290.958796][ T5877] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1290.981582][    T9] usb 7-1: USB disconnect, device number 36
[ 1291.136061][ T5877] usb 6-1: Using ep0 maxpacket: 32
[ 1291.148911][ T5877] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 1291.162838][T22809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7847'.
[ 1291.165892][ T5877] usb 6-1: config 0 has no interface number 0
[ 1291.196493][ T5877] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1291.238770][ T5877] usb 6-1: config 0 interface 85 has no altsetting 0
[ 1291.258489][ T5877] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1291.285850][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1291.314441][ T5877] usb 6-1: Product: syz
[ 1291.322269][ T5877] usb 6-1: Manufacturer: syz
[ 1291.335937][ T5877] usb 6-1: SerialNumber: syz
[ 1291.367025][ T5877] usb 6-1: config 0 descriptor??
[ 1291.625644][T22758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7840'.
[ 1291.672316][  T985] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1291.722850][  T985] usb 1-1: USB disconnect, device number 83
[ 1291.864406][T22832] syzkaller0: entered allmulticast mode
[ 1291.994189][ T5877] appletouch 6-1:0.85: Geyser mode initialized.
[ 1292.030493][ T5877] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input200
[ 1293.255784][T22876] netlink: 'syz.7.7859': attribute type 4 has an invalid length.
[ 1293.294029][T22876] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7859'.
[ 1293.328116][T22878] netlink: 'syz.0.7860': attribute type 10 has an invalid length.
[ 1293.354237][T22876] .`: renamed from bond0 (while UP)
[ 1293.381419][T22880] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7861'.
[ 1293.628408][  T985] IPVS: starting estimator thread 0...
[ 1293.691433][ T5832] usb 6-1: USB disconnect, device number 33
[ 1293.725589][T22894] IPVS: using max 37 ests per chain, 88800 per kthread
[ 1293.747443][ T5832] appletouch 6-1:0.85: input: appletouch disconnected
[ 1293.836079][  T985] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1293.905003][T22909] syzkaller0: entered promiscuous mode
[ 1293.922349][T22909] syzkaller0: entered allmulticast mode
[ 1294.009070][  T985] usb 7-1: Using ep0 maxpacket: 32
[ 1294.031469][  T985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1294.065485][  T985] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1294.094966][  T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1294.134390][  T985] usb 7-1: config 0 descriptor??
[ 1294.510350][T22932] openvswitch: netlink: nsh attr 8192 is out of range max 3
[ 1294.533996][T22932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1296.646239][  T985] usbhid 7-1:0.0: can't add hid device: -71
[ 1296.655620][  T985] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1296.685541][  T985] usb 7-1: USB disconnect, device number 37
[ 1296.958432][T22958] Bluetooth: MGMT ver 1.23
[ 1296.963068][T22958] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[ 1297.691015][T22966] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7879'.
[ 1297.849738][T22976] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7880'.
[ 1297.869658][T22976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7880'.
[ 1298.049789][T23000] netlink: 'syz.0.7882': attribute type 4 has an invalid length.
[ 1298.084814][T23000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7882'.
[ 1298.094549][T23002] netlink: 'syz.5.7883': attribute type 10 has an invalid length.
[ 1298.223168][T23002] wlan1: mtu less than device minimum
[ 1298.265070][T23002] .`: (slave wlan1): Error -22 calling dev_set_mtu
[ 1298.294810][T23000] wlan1: mtu less than device minimum
[ 1298.483434][T23014] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7886'.
[ 1298.745082][T23027] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20000
[ 1298.880329][T23034] QAT: failed to copy from user cfg_data.
[ 1298.975332][T23037] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7895'.
[ 1299.069481][T23044] dvmrp0: entered allmulticast mode
[ 1299.170713][T23050] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7899'.
[ 1299.238733][T23054] syzkaller0: entered allmulticast mode
[ 1300.090567][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.097074][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.348356][T23091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7907'.
[ 1300.402293][T23101] binder: 23090:23101 ioctl c0306201 0 returned -14
[ 1300.669738][T23106] dvmrp1: entered allmulticast mode
[ 1300.864802][ T5832] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1300.910300][T23122] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1301.089655][ T5832] usb 6-1: config 0 has an invalid interface number: 16 but max is 0
[ 1301.138184][ T5832] usb 6-1: config 0 has no interface number 0
[ 1301.154413][ T5832] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1301.188374][ T5832] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 1301.221814][ T5832] usb 6-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77
[ 1301.244340][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.248146][T23133] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7913'.
[ 1301.265128][ T5832] usb 6-1: Product: syz
[ 1301.273812][ T5832] usb 6-1: Manufacturer: syz
[ 1301.302285][ T5832] usb 6-1: SerialNumber: syz
[ 1301.316954][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7913'.
[ 1301.339332][ T5832] usb 6-1: config 0 descriptor??
[ 1301.362739][T23109] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1301.390838][T23109] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1301.480449][T23131] syzkaller0: entered promiscuous mode
[ 1301.494206][T23131] syzkaller0: entered allmulticast mode
[ 1301.671869][ T5832] pl2303 6-1:0.16: required interrupt-in endpoint missing
[ 1301.715069][ T5832] usb 6-1: USB disconnect, device number 34
[ 1301.886554][T23159] binder: 23156:23159 ioctl c0306201 0 returned -14
[ 1302.749267][ T5832] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1302.919742][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1302.940391][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1302.950967][ T5832] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1302.976205][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.004771][ T5832] usb 7-1: config 0 descriptor??
[ 1303.439136][ T5832] cm6533_jd 0003:0D8C:0022.0073: item fetching failed at offset 3/5
[ 1303.448441][ T5832] cm6533_jd 0003:0D8C:0022.0073: parse failed
[ 1303.455155][ T5832] cm6533_jd 0003:0D8C:0022.0073: probe with driver cm6533_jd failed with error -22
[ 1304.373700][ T5877] usb 7-1: USB disconnect, device number 38
[ 1304.568873][T23221] netlink: 'syz.0.7919': attribute type 4 has an invalid length.
[ 1304.584662][T23221] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7919'.
[ 1304.644134][T23221] wlan1: mtu less than device minimum
[ 1304.706301][T23225] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7921'.
[ 1304.768498][T23229] netlink: 'syz.7.7922': attribute type 21 has an invalid length.
[ 1304.804048][T23229] netlink: 'syz.7.7922': attribute type 30 has an invalid length.
[ 1304.993747][T23246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1305.014678][T23246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1305.204553][T19955] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[ 1305.205486][    T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1305.364294][T19955] usb 6-1: device descriptor read/64, error -71
[ 1305.428623][    T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 239
[ 1305.447558][    T9] usb 1-1: can't read configurations, error -22
[ 1305.594523][    T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1305.604292][T19955] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[ 1305.754511][T19955] usb 6-1: device descriptor read/64, error -71
[ 1305.757281][    T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 239
[ 1305.779887][    T9] usb 1-1: can't read configurations, error -22
[ 1305.790440][    T9] usb usb1-port1: attempt power cycle
[ 1305.876244][T19955] usb usb6-port1: attempt power cycle
[ 1306.149159][    T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1306.224237][T19955] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[ 1306.226114][    T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 239
[ 1306.254793][T19955] usb 6-1: device descriptor read/8, error -71
[ 1306.262220][    T9] usb 1-1: can't read configurations, error -22
[ 1306.394206][    T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1306.436288][    T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 239
[ 1306.446746][    T9] usb 1-1: can't read configurations, error -22
[ 1306.466080][    T9] usb usb1-port1: unable to enumerate USB device
[ 1306.486439][T23279] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[ 1306.495119][T23279] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1306.504511][T19955] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[ 1306.511833][T23279] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1306.521984][T23279] comedi comedi3: 8255: I/O port conflict (0xc,4)
[ 1306.536036][T19955] usb 6-1: device descriptor read/8, error -71
[ 1306.543041][T23279] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1306.562485][T23279] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[ 1306.572587][T23279] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1306.585341][T23279] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1306.607364][T23279] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[ 1306.624195][T23279] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1306.638588][T23279] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1306.645832][T19955] usb usb6-port1: unable to enumerate USB device
[ 1306.665502][T23282] comedi comedi0: pcl730: I/O port conflict (0x10000200,4)
[ 1307.309338][T23284] syzkaller1: entered promiscuous mode
[ 1307.326279][T23284] syzkaller1: entered allmulticast mode
[ 1307.345199][T23284] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.7935'.
[ 1307.555265][T23290] netlink: 'syz.6.7936': attribute type 10 has an invalid length.
[ 1307.598916][T23290] wlan1: mtu less than device minimum
[ 1307.616258][T23290] .`: (slave wlan1): Error -22 calling dev_set_mtu
[ 1307.988944][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7940'.
[ 1308.256406][T23342] syzkaller0: entered promiscuous mode
[ 1308.262086][T23342] syzkaller0: entered allmulticast mode
[ 1308.334173][T19955] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1308.433901][    T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1308.499359][T19955] usb 7-1: config 4 has an invalid interface number: 28 but max is 0
[ 1308.517529][T19955] usb 7-1: config 4 has no interface number 0
[ 1308.536873][T19955] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[ 1308.555645][T19955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.563964][T19955] usb 7-1: Product: syz
[ 1308.568275][T19955] usb 7-1: Manufacturer: syz
[ 1308.572967][T19955] usb 7-1: SerialNumber: syz
[ 1308.598019][T19955] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.28/input/input201
[ 1308.624093][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1308.638947][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1308.650584][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1308.662454][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1308.679302][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1308.689404][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1308.710247][    T9] usb 1-1: config 0 descriptor??
[ 1308.867885][ T5183] bcm5974 7-1:4.28: could not read from device
[ 1308.910671][T19955] usb 7-1: USB disconnect, device number 39
[ 1308.911177][ T5183] bcm5974 7-1:4.28: could not read from device
[ 1308.942716][ T5183] bcm5974 7-1:4.28: could not read from device
[ 1309.152572][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0074/input/input202
[ 1309.214501][    T9] microsoft 0003:045E:07DA.0074: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[ 1309.299677][T23387] binder: 23365:23387 ioctl c0306201 0 returned -14
[ 1309.351249][T23366] syz.7.7945 (23366): drop_caches: 2
[ 1309.373864][T19955] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1309.544118][T19955] usb 7-1: too many configurations: 129, using maximum allowed: 8
[ 1309.569962][T19955] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1309.579869][T19955] usb 7-1: can't read configurations, error -61
[ 1309.737127][T19955] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1309.904587][T19955] usb 7-1: too many configurations: 129, using maximum allowed: 8
[ 1309.927469][T19955] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1309.945262][T19955] usb 7-1: can't read configurations, error -61
[ 1309.952134][T19955] usb usb7-port1: attempt power cycle
[ 1310.296516][T19955] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1310.342502][T19955] usb 7-1: too many configurations: 129, using maximum allowed: 8
[ 1310.369772][T19955] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1310.377663][T19955] usb 7-1: can't read configurations, error -61
[ 1310.530531][T19955] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1310.580581][T19955] usb 7-1: too many configurations: 129, using maximum allowed: 8
[ 1310.609979][T19955] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1310.620426][T19955] usb 7-1: can't read configurations, error -61
[ 1310.628974][T19955] usb usb7-port1: unable to enumerate USB device
[ 1311.298609][  T985] usb 1-1: USB disconnect, device number 88
[ 1311.414517][T23415] netlink: 'syz.5.7950': attribute type 4 has an invalid length.
[ 1311.422438][T23415] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7950'.
[ 1311.433075][T23415] .`��: renamed from .`
[ 1312.203533][ T5832] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1312.384264][ T5832] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[ 1312.416200][ T5832] usb 6-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[ 1312.446137][ T5832] usb 6-1: config 0 has no interface number 0
[ 1312.464777][ T5832] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 511
[ 1312.497389][ T5832] usb 6-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1312.524209][T23472] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7963'.
[ 1312.546159][ T5832] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1312.557713][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.566279][ T5832] usb 6-1: Product: syz
[ 1312.570666][ T5832] usb 6-1: Manufacturer: syz
[ 1312.576270][ T5832] usb 6-1: SerialNumber: syz
[ 1312.584273][ T5832] usb 6-1: config 0 descriptor??
[ 1312.590260][T23444] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1312.605775][ T5832] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 1312.636322][ T5832] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[ 1312.650699][ T5832] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1312.682565][T23486] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7965'.
[ 1312.805639][ T5877] usb 6-1: USB disconnect, device number 39
[ 1312.807529][   T30] kauditd_printk_skb: 57 callbacks suppressed
[ 1312.807544][   T30] audit: type=1326 audit(1761725450.024:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.0.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61d98efc9 code=0x7ffc0000
[ 1312.853283][ T5877] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1312.877325][   T30] audit: type=1326 audit(1761725450.054:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.0.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa61d98efc9 code=0x7ffc0000
[ 1312.918278][ T5877] cyberjack 6-1:0.69: device disconnected
[ 1312.931077][   T30] audit: type=1326 audit(1761725450.064:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.0.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61d98efc9 code=0x7ffc0000
[ 1313.012230][   T30] audit: type=1326 audit(1761725450.064:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.0.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61d98efc9 code=0x7ffc0000
[ 1313.235161][T23508] binder: 23506:23508 ioctl c0306201 0 returned -14
[ 1313.709781][T23521] syzkaller0: entered allmulticast mode
[ 1313.863355][T19955] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[ 1314.058107][T19955] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1314.087620][T19955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.117935][T19955] usb 1-1: Product: syz
[ 1314.122168][T19955] usb 1-1: Manufacturer: syz
[ 1314.145686][T19955] usb 1-1: SerialNumber: syz
[ 1314.156201][T19955] usb 1-1: config 0 descriptor??
[ 1314.233366][    T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1314.423271][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1314.440431][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1314.472289][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1314.502913][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1314.546398][    T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1314.566500][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7974'.
[ 1314.573236][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1314.584936][T19955] airspy 1-1:0.0: Board ID: 00
[ 1314.589753][T19955] airspy 1-1:0.0: Firmware version: 
[ 1314.616073][    T9] usb 6-1: config 0 descriptor??
[ 1315.234757][    T9] usbhid 6-1:0.0: can't add hid device: -71
[ 1315.261209][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1315.294593][    T9] usb 6-1: USB disconnect, device number 40
[ 1315.513304][  T985] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1315.600858][T19955] airspy 1-1:0.0: Registered as swradio24
[ 1315.618560][T19955] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1315.673095][  T985] usb 7-1: Using ep0 maxpacket: 16
[ 1315.690667][  T985] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[ 1315.709216][  T985] usb 7-1: config 1 has no interface number 0
[ 1315.726624][  T985] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1315.737600][  T985] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1315.748340][  T985] usb 7-1: config 1 interface 105 has no altsetting 0
[ 1315.759033][  T985] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1315.783111][  T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.803149][  T985] usb 7-1: Product: syz
[ 1315.812903][  T985] usb 7-1: Manufacturer: syz
[ 1315.841898][  T985] usb 7-1: SerialNumber: syz
[ 1315.884580][T23550] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1315.891877][T23550] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1315.919413][T19955] usb 1-1: USB disconnect, device number 89
[ 1316.018825][T23578] syzkaller0: entered promiscuous mode
[ 1316.024630][T23578] syzkaller0: entered allmulticast mode
[ 1316.360033][T23550] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1316.393145][T23550] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1316.883238][  T985] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1316.930525][  T985] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1317.179423][T23606] sctp: [Deprecated]: syz.6.7977 (pid 23606) Use of int in max_burst socket option.
[ 1317.179423][T23606] Use struct sctp_assoc_value instead
[ 1319.056704][  T985] aqc111 7-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:da:34:ad:77:f5
[ 1319.146632][    T9] usb 7-1: USB disconnect, device number 44
[ 1319.204696][    T9] aqc111 7-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1319.356835][    T9] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1319.391295][    T9] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1319.413157][T23643] binder: 23642:23643 ioctl 81f8943c 2000000003c0 returned -22
[ 1319.434155][    T9] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1319.437180][T23643] binder: 23642:23643 ioctl c0306201 0 returned -14
[ 1319.467941][T23643] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1319.510118][T23643] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1319.696858][T23674] 9pnet_fd: Insufficient options for proto=fd
[ 1320.158581][T23699] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8000'.
[ 1320.290436][T23708] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8002'.
[ 1320.301363][T23702] syzkaller0: entered allmulticast mode
[ 1320.314220][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8002'.
[ 1320.704199][T23727] netlink: 'syz.0.8008': attribute type 10 has an invalid length.
[ 1320.962804][   T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1320.989066][T23736] syzkaller0: entered promiscuous mode
[ 1321.013971][T23736] syzkaller0: entered allmulticast mode
[ 1321.152720][   T24] usb 1-1: Using ep0 maxpacket: 8
[ 1321.183320][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1321.202637][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1321.237982][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1321.271030][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1321.299505][   T24] usb 1-1: SerialNumber: syz
[ 1321.334331][   T24] cdc_acm 1-1:1.0: skipping garbage
[ 1321.357403][   T24] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[ 1321.387387][   T24] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[ 1321.411982][   T24] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[ 1321.534868][    T9] usb 1-1: USB disconnect, device number 90
[ 1321.712903][ T5890] usb 7-1: new low-speed USB device number 45 using dummy_hcd
[ 1321.905214][ T5890] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1321.930106][ T5890] usb 7-1: config 9 has an invalid interface number: 166 but max is 1
[ 1321.944898][ T5890] usb 7-1: config 9 has an invalid interface number: 224 but max is 1
[ 1321.972299][ T5890] usb 7-1: config 9 has no interface number 0
[ 1321.989161][ T5890] usb 7-1: config 9 has no interface number 1
[ 1322.003320][ T5890] usb 7-1: config 9 interface 166 has no altsetting 0
[ 1322.020347][ T5890] usb 7-1: config 9 interface 224 has no altsetting 0
[ 1322.036546][ T5890] usb 7-1: string descriptor 0 read error: -22
[ 1322.046539][ T5890] usb 7-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=d8.0a
[ 1322.066128][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1322.239708][T23772] netlink: 'syz.0.8012': attribute type 10 has an invalid length.
[ 1322.308362][   T30] audit: type=1326 audit(1761725459.525:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23753 comm="syz.6.8011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8acbd8efc9 code=0x0
[ 1322.404679][T23773] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8011'.
[ 1322.427727][T23773] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8011'.
[ 1322.514744][    T9] usb 7-1: USB disconnect, device number 45
[ 1323.299863][    T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1323.472474][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1323.495725][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1323.523467][    T9] usb 6-1: config 16 has an invalid interface number: 4 but max is 0
[ 1323.541842][    T9] usb 6-1: config 16 has no interface number 0
[ 1323.562132][    T9] usb 6-1: config 16 interface 4 has no altsetting 0
[ 1323.571275][    T9] usb 6-1: New USB device found, idVendor=1546, idProduct=1342, bcdDevice=eb.4e
[ 1323.593891][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1323.601896][    T9] usb 6-1: Product: syz
[ 1323.623849][    T9] usb 6-1: Manufacturer: syz
[ 1323.632434][    T9] usb 6-1: SerialNumber: syz
[ 1323.863756][T23805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1323.873804][T23805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1323.905676][    T9] usb 6-1: USB disconnect, device number 41
[ 1326.161995][T23784] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8014'.
[ 1326.384917][T23841] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8022'.
[ 1326.419607][T23841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8022'.
[ 1327.442026][ T5832] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1327.475629][T23901] netlink: 'syz.0.8038': attribute type 10 has an invalid length.
[ 1327.623434][ T5832] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1327.651747][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.680858][ T5832] usb 7-1: config 0 descriptor??
[ 1327.699106][ T5832] cp210x 7-1:0.0: cp210x converter detected
[ 1327.764290][T23904] syzkaller0: entered promiscuous mode
[ 1327.769815][T23904] syzkaller0: entered allmulticast mode
[ 1327.907971][T23894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1327.943287][T23894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1328.197844][ T5832] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -121
[ 1328.217821][T23894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1328.253133][T23927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1328.263287][T23894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1328.263322][T23927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1328.409861][ T5832] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71
[ 1328.443989][ T5832] cp210x 7-1:0.0: GPIO initialisation failed: -71
[ 1328.526227][ T5832] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1328.579774][ T5832] usb 7-1: USB disconnect, device number 46
[ 1328.639099][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1328.658884][ T5832] cp210x 7-1:0.0: device disconnected
[ 1329.356731][T23978] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8046'.
[ 1330.788322][T23995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8050'.
[ 1331.342307][  T985] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1331.511432][  T985] usb 6-1: Using ep0 maxpacket: 16
[ 1331.543975][  T985] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1331.557787][  T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1331.599794][  T985] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1331.612790][  T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.631434][  T985] usb 6-1: Product: syz
[ 1331.649280][  T985] usb 6-1: Manufacturer: syz
[ 1331.656167][  T985] usb 6-1: SerialNumber: syz
[ 1331.677706][  T985] usb 6-1: config 0 descriptor??
[ 1331.708033][  T985] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1331.728744][  T985] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1331.783365][T24028] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8061'.
[ 1331.924678][T24032] binder: 24029:24032 ioctl c0306201 0 returned -14
[ 1332.317135][  T985] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1332.331114][  T985] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1332.349567][  T985] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 1332.368457][  T985] em28xx 6-1:0.0: No AC97 audio processor
[ 1332.394012][  T985] usb 6-1: USB disconnect, device number 42
[ 1332.412937][  T985] em28xx 6-1:0.0: Disconnecting em28xx
[ 1332.420047][  T985] em28xx 6-1:0.0: Freeing device
[ 1332.969779][T24052] tmpfs: Unknown parameter 's�ze'
[ 1332.978444][T24054] tmpfs: Unknown parameter 's�ze'
[ 1333.634190][T24071] netlink: 'syz.0.8067': attribute type 4 has an invalid length.
[ 1333.652703][T24071] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8067'.
[ 1333.685925][T24071] wlan1: mtu less than device minimum
[ 1333.814292][T24088] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8073'.
[ 1333.856288][    T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1333.942817][T24094] binder: 24089:24094 ioctl c0306201 0 returned -14
[ 1334.011407][    T9] usb 6-1: Using ep0 maxpacket: 8
[ 1334.027212][    T9] usb 6-1: config index 0 descriptor too short (expected 42530, got 34)
[ 1334.039749][    T9] usb 6-1: config 244 has too many interfaces: 229, using maximum allowed: 32
[ 1334.059507][    T9] usb 6-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1334.085091][    T9] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 229
[ 1334.133500][    T9] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1334.162425][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1334.180760][    T9] usb 6-1: Product: syz
[ 1334.185046][    T9] usb 6-1: Manufacturer: syz
[ 1334.189649][    T9] usb 6-1: SerialNumber: syz
[ 1334.332549][T24109] netlink: 'syz.0.8077': attribute type 29 has an invalid length.
[ 1334.369566][T24109] netlink: 'syz.0.8077': attribute type 29 has an invalid length.
[ 1334.388685][T24109] netlink: 500 bytes leftover after parsing attributes in process `syz.0.8077'.
[ 1334.408213][T24109] unsupported nla_type 58
[ 1334.435049][T24070] Invalid source name
[ 1334.449328][T24070] UBIFS error (pid: 24070): cannot open "./file0", error -22
[ 1334.450766][T24070] hugetlbfs: Unknown parameter '$�*Z{'
[ 1334.541288][    T9] usb 6-1: USB disconnect, device number 43
[ 1335.102173][ T5832] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1335.142764][T24136] syzkaller0: entered promiscuous mode
[ 1335.148296][T24136] syzkaller0: entered allmulticast mode
[ 1335.261121][ T5832] usb 1-1: device descriptor read/64, error -71
[ 1335.267728][T24148] nbd: must specify at least one socket
[ 1335.521806][ T5832] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1335.650911][ T5832] usb 1-1: device descriptor read/64, error -71
[ 1335.767862][ T5832] usb usb1-port1: attempt power cycle
[ 1335.980996][   T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1336.140066][ T5832] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1336.147884][   T24] usb 6-1: Using ep0 maxpacket: 8
[ 1336.169157][ T5832] usb 1-1: device descriptor read/8, error -71
[ 1336.176727][   T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1336.200922][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.219262][   T24] usb 6-1: Product: syz
[ 1336.224112][   T24] usb 6-1: Manufacturer: syz
[ 1336.228749][   T24] usb 6-1: SerialNumber: syz
[ 1336.258990][   T24] usb 6-1: config 0 descriptor??
[ 1336.413768][ T5832] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1336.459693][ T5832] usb 1-1: device descriptor read/8, error -71
[ 1336.509456][   T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1336.573018][ T5832] usb usb1-port1: unable to enumerate USB device
[ 1337.248013][T24171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[ 1338.636675][   T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1338.926860][T24157] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.8086'.
[ 1338.955677][    T9] usb 6-1: USB disconnect, device number 44
[ 1339.235073][T24236] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8094'.
[ 1339.250779][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8094'.
[ 1339.267887][T22215] Bluetooth: hci3: unexpected event for opcode 0x1004
[ 1339.314869][T24242] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8095'.
[ 1339.341217][T24242] xt_policy: neither incoming nor outgoing policy selected
[ 1339.371824][T24242] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.8095'.
[ 1339.404667][T24242] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1339.570825][ T5832] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1339.691755][T24268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8097'.
[ 1339.720459][ T5832] usb 7-1: Using ep0 maxpacket: 32
[ 1339.729710][ T5832] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1339.749301][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1339.780075][ T5832] usb 7-1: config 0 descriptor??
[ 1339.797592][ T5832] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1339.990750][ T5890] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1340.162444][ T5890] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[ 1340.171257][ T5890] usb 1-1: config 0 has no interface number 0
[ 1340.181326][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 1340.190856][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.199651][ T5890] usb 1-1: Product: syz
[ 1340.205867][ T5890] usb 1-1: Manufacturer: syz
[ 1340.212337][ T5890] usb 1-1: SerialNumber: syz
[ 1340.223781][ T5890] usb 1-1: config 0 descriptor??
[ 1340.452935][ T5890] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823)
[ 1340.462153][ T5890] uvcvideo 1-1:0.64: No valid video chain found.
[ 1340.475257][ T5890] usb 1-1: USB disconnect, device number 95
[ 1340.538546][T24297] binder: 24296:24297 ioctl 4018620d 0 returned -22
[ 1340.549836][T24297] IPVS: set_ctl: invalid protocol: 137 172.20.20.47:20000
[ 1340.562387][T24298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1341.539663][T24321] netlink: 'syz.0.8108': attribute type 10 has an invalid length.
[ 1341.679397][T24330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8110'.
[ 1342.438724][ T5832] gspca_vc032x: reg_r err -71
[ 1342.487017][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.540421][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.558318][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.585429][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.754429][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.774351][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.794626][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.809556][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.852850][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1342.899278][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.002696][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.078184][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.124002][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.158103][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.203760][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.227722][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.247683][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[ 1343.273856][T22215] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1343.284266][T22215] Bluetooth: hci3: Injecting HCI hardware error event
[ 1343.294215][T22215] Bluetooth: hci3: hardware error 0x00
[ 1343.308978][ T5832] gspca_vc032x: Unknown sensor...
[ 1343.323313][ T5832] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[ 1343.337309][ T5832] usb 7-1: USB disconnect, device number 47
[ 1343.435838][T24368] netlink: 'syz.6.8117': attribute type 4 has an invalid length.
[ 1343.500769][T24368] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8117'.
[ 1343.765050][T24387] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8121'.
[ 1343.920161][    T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1344.115090][T24397] syzkaller0: entered allmulticast mode
[ 1344.132123][    T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[ 1344.150068][    T9] usb 6-1: config 1 has no interface number 0
[ 1344.156228][    T9] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1344.210826][    T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1344.231572][    T9] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1344.271138][    T9] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1344.293881][    T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1344.315693][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.341486][    T9] usb 6-1: Product: syz
[ 1344.345723][    T9] usb 6-1: Manufacturer: syz
[ 1344.361920][    T9] usb 6-1: SerialNumber: syz
[ 1344.383406][T24380] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1344.392672][T24380] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1344.419491][    T9] usb 6-1: Expected 3 endpoints, found: 2
[ 1345.430018][T22215] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1345.605849][T24437] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8134'.
[ 1346.806133][    T9] usb 6-1: USB disconnect, device number 45
[ 1347.139926][    T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1347.296421][T24463] netlink: 'syz.6.8138': attribute type 4 has an invalid length.
[ 1347.304363][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1347.319925][    T9] usb 6-1: too many configurations: 17, using maximum allowed: 8
[ 1347.328576][T24463] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8138'.
[ 1347.338865][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.356941][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.369610][T24463] .`����: renamed from .`
[ 1347.376820][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.405583][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.417812][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.436221][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.448108][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.466575][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.482763][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.499604][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.518279][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.529624][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.547562][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.559591][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.581458][    T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1347.599621][    T9] usb 6-1: config 0 has no interface number 0
[ 1347.614595][    T9] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[ 1347.634106][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.649594][    T9] usb 6-1: Product: syz
[ 1347.653951][    T9] usb 6-1: Manufacturer: syz
[ 1347.668767][    T9] usb 6-1: SerialNumber: syz
[ 1347.682742][    T9] usb 6-1: config 0 descriptor??
[ 1347.701874][    T9] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz)
[ 1348.080933][T24473] syzkaller0: entered allmulticast mode
[ 1348.535920][    T9] etas_es58x 6-1:0.2: could not retrieve the product info string
[ 1348.620074][    T9] usb 6-1: USB disconnect, device number 46
[ 1348.627946][    T9] etas_es58x 6-1:0.2: Disconnecting syz syz
[ 1348.740434][T24520] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8148'.
[ 1349.141601][  T985] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1349.310079][  T985] usb 7-1: Using ep0 maxpacket: 32
[ 1349.362010][  T985] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1349.379574][  T985] usb 7-1: config 0 has no interface number 0
[ 1349.408962][  T985] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1349.428532][  T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1349.467452][  T985] usb 7-1: Product: syz
[ 1349.478375][T24562] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8151'.
[ 1349.497960][  T985] usb 7-1: Manufacturer: syz
[ 1349.503301][  T985] usb 7-1: SerialNumber: syz
[ 1349.530074][  T985] usb 7-1: config 0 descriptor??
[ 1349.542040][  T985] smsc95xx v2.0.0
[ 1349.958176][  T985] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1349.969219][  T985] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1350.090689][    T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1350.259462][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1350.270633][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1350.285742][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1350.292594][    T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1350.301927][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.315194][    T9] usb 1-1: config 0 descriptor??
[ 1350.457021][T24580] netlink: 'syz.5.8154': attribute type 4 has an invalid length.
[ 1350.466337][T24580] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8154'.
[ 1350.478571][T24580] .`: renamed from .`��
[ 1350.741304][    T9] nzxt-smart2 0003:1E71:2009.0075: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[ 1350.784745][  T985] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1350.799079][   T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1350.808573][  T985] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61
[ 1350.932612][T24569] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.8152'.
[ 1350.942168][T24568] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.8152'.
[ 1350.955579][   T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1350.965489][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.980494][   T24] usb 6-1: config 0 descriptor??
[ 1350.990167][   T24] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1351.161958][    T9] usb 1-1: USB disconnect, device number 96
[ 1351.479948][   T24] gspca_spca508: reg_read err -71
[ 1351.495365][   T24] gspca_spca508: reg_read err -71
[ 1351.515068][   T24] gspca_spca508: reg_read err -71
[ 1351.521112][T24624] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8157'.
[ 1351.522407][   T24] gspca_spca508: reg_read err -71
[ 1351.556392][   T24] gspca_spca508: reg write: error -71
[ 1351.566228][   T24] spca508 6-1:0.0: probe with driver spca508 failed with error -71
[ 1351.599314][   T24] usb 6-1: USB disconnect, device number 47
[ 1352.034514][T24650] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8164'.
[ 1352.054056][    T9] usb 7-1: USB disconnect, device number 48
[ 1352.129207][ T5832] usb 1-1: new full-speed USB device number 97 using dummy_hcd
[ 1352.301911][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1352.322459][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1352.342081][ T5832] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1352.351725][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.359974][ T5832] usb 1-1: Product: syz
[ 1352.364360][ T5832] usb 1-1: Manufacturer: syz
[ 1352.369236][ T5832] usb 1-1: SerialNumber: syz
[ 1352.378547][ T5832] usb 1-1: config 0 descriptor??
[ 1352.401664][ T5832] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1352.414387][ T5832] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1352.436752][ T5832] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input203
[ 1352.578298][T24685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8171'.
[ 1352.740040][ T5877] usb 1-1: USB disconnect, device number 97
[ 1352.870194][   T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1352.918539][T24703] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8173'.
[ 1353.010545][T24709] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8175'.
[ 1353.023271][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8175'.
[ 1353.041408][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1353.073782][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1353.094362][   T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1353.120904][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1353.139287][   T24] usb 7-1: SerialNumber: syz
[ 1353.228043][T24726] sctp: [Deprecated]: syz.5.8179 (pid 24726) Use of int in max_burst socket option.
[ 1353.228043][T24726] Use struct sctp_assoc_value instead
[ 1353.355754][T24687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1353.401902][T24687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1353.436537][T24687] netlink: 'syz.6.8172': attribute type 7 has an invalid length.
[ 1353.454775][T24687] netlink: 'syz.6.8172': attribute type 8 has an invalid length.
[ 1353.454826][T24687] netlink: 'syz.6.8172': attribute type 7 has an invalid length.
[ 1353.454841][T24687] netlink: 208780 bytes leftover after parsing attributes in process `syz.6.8172'.
[ 1353.464660][   T24] usb 7-1: 0:2 : does not exist
[ 1353.464754][   T24] usb 7-1: unit 5: unexpected type 0x09
[ 1353.509025][   T24] usb 7-1: USB disconnect, device number 49
[ 1354.187871][T24776] nvme_fabrics: missing parameter 'transport=%s'
[ 1354.204819][T24776] nvme_fabrics: missing parameter 'nqn=%s'
[ 1354.433699][T24792] netlink: 'syz.6.8192': attribute type 10 has an invalid length.
[ 1354.442096][T24792] wlan1: mtu less than device minimum
[ 1354.447562][T24792] .`����: (slave wlan1): Error -22 calling dev_set_mtu
[ 1354.568875][    T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1354.585618][T24796] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8195'.
[ 1354.728905][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1354.744821][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1354.763174][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1354.784828][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1354.796253][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1354.804425][    T9] usb 6-1: Product: syz
[ 1354.809828][    T9] usb 6-1: Manufacturer: syz
[ 1354.814436][    T9] usb 6-1: SerialNumber: syz
[ 1354.830236][    T9] usb 6-1: config 0 descriptor??
[ 1354.841706][    T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1354.856313][    T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1355.005299][   T24] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1355.160027][   T24] usb 1-1: Using ep0 maxpacket: 16
[ 1355.168024][   T24] usb 1-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config
[ 1355.178664][   T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1355.193467][   T24] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[ 1355.204040][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1355.216095][   T24] usb 1-1: config 0 descriptor??
[ 1355.449394][    T9] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1355.462244][    T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1355.798854][   T24] usb 7-1: new full-speed USB device number 50 using dummy_hcd
[ 1355.962671][   T24] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[ 1355.972577][   T24] usb 7-1: config 0 has no interface number 0
[ 1355.983976][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1356.000495][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.019190][   T24] usb 7-1: Product: syz
[ 1356.027975][   T24] usb 7-1: Manufacturer: syz
[ 1356.042162][   T24] usb 7-1: SerialNumber: syz
[ 1356.062596][   T24] usb 7-1: config 0 descriptor??
[ 1356.085397][   T30] audit: type=1326 audit(1761725493.298:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.5.8190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3f158efc9 code=0x0
[ 1356.162970][    T9] em28xx 6-1:0.0: AC97 command still being executed: not handled properly!
[ 1356.181006][    T9] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[ 1356.293977][   T24] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1356.311743][   T24] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized!
[ 1356.331399][   T24] uvcvideo 7-1:0.31: Failed to create links for entity 5
[ 1356.341961][   T24] uvcvideo 7-1:0.31: Failed to register entities (-22).
[ 1356.382118][   T24] usb 7-1: USB disconnect, device number 50
[ 1356.427888][T24842] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8190'.
[ 1356.452980][T24842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8190'.
[ 1356.498819][    T9] em28xx 6-1:0.0: AC97 command still being executed: not handled properly!
[ 1356.536340][    T9] em28xx 6-1:0.0: couldn't setup AC97 register 2
[ 1357.589698][    T9] em28xx 6-1:0.0: couldn't setup AC97 register 4
[ 1357.612828][    T9] em28xx 6-1:0.0: couldn't setup AC97 register 6
[ 1357.640729][    T9] em28xx 6-1:0.0: couldn't setup AC97 register 54
[ 1357.664457][    T9] em28xx 6-1:0.0: couldn't setup AC97 register 56
[ 1357.781730][    T9] usb 6-1: USB disconnect, device number 48
[ 1357.812020][ T5832] usb 1-1: USB disconnect, device number 98
[ 1358.123385][T24885] block device autoloading is deprecated and will be removed.
[ 1358.523474][  T985] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1358.556781][T24902] netlink: 'syz.5.8209': attribute type 10 has an invalid length.
[ 1358.675343][T24902] wlan1: mtu less than device minimum
[ 1358.689855][  T985] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1358.727540][  T985] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1358.749935][T24902] .`: (slave wlan1): Error -22 calling dev_set_mtu
[ 1358.773354][  T985] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1358.800580][  T985] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[ 1358.879648][  T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1358.942743][  T985] usb 1-1: config 0 descriptor??
[ 1359.446668][  T985] holtek_mouse 0003:04D9:A04A.0076: unknown main item tag 0x0
[ 1359.468388][  T985] holtek_mouse 0003:04D9:A04A.0076: unknown main item tag 0x0
[ 1359.476092][  T985] holtek_mouse 0003:04D9:A04A.0076: unknown main item tag 0x0
[ 1359.497054][  T985] holtek_mouse 0003:04D9:A04A.0076: unknown main item tag 0x0
[ 1359.516725][  T985] holtek_mouse 0003:04D9:A04A.0076: unknown main item tag 0x0
[ 1359.526841][  T985] holtek_mouse 0003:04D9:A04A.0076: unknown main item tag 0x0
[ 1359.544691][  T985] holtek_mouse 0003:04D9:A04A.0076: unknown main item tag 0x0
[ 1359.569807][  T985] holtek_mouse 0003:04D9:A04A.0076: hidraw0: USB HID v0.00 Device [HID 04d9:a04a] on usb-dummy_hcd.0-1/input0
[ 1359.854190][T24923] batadv_slave_0: entered promiscuous mode
[ 1359.937324][T24919] batadv_slave_0: left promiscuous mode
[ 1360.473505][T24940] syzkaller0: entered promiscuous mode
[ 1360.498320][T24940] syzkaller0: entered allmulticast mode
[ 1360.579555][T24961] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1360.599211][T24961] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1361.304871][ T5890] usb 1-1: USB disconnect, device number 99
[ 1361.516537][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.523002][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.612775][T24998] netlink: 'syz.5.8226': attribute type 10 has an invalid length.
[ 1365.334104][T24998] wlan1: mtu less than device minimum
[ 1365.339949][T24998] .`: (slave wlan1): Error -22 calling dev_set_mtu
[ 1365.527149][T25022] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8229'.
[ 1365.578367][T25024] loop8: detected capacity change from 0 to 7
[ 1365.587903][T25024] Dev loop8: unable to read RDB block 7
[ 1365.593516][T25024]  loop8: unable to read partition table
[ 1365.649554][T25024] loop8: partition table beyond EOD, truncated
[ 1365.673084][T25024] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1365.903611][T25038] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8233'.
[ 1366.087054][T25048] binder: 25047:25048 ioctl 80044948 200000000100 returned -22
[ 1366.158530][T25051] netlink: 'syz.5.8236': attribute type 4 has an invalid length.
[ 1366.178505][T25051] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8236'.
[ 1366.248456][ T5832] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1366.323854][T25060] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8238'.
[ 1366.358338][   T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1366.381585][T25060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8238'.
[ 1366.422601][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1366.462427][ T5832] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1366.501547][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1366.540698][ T5832] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1366.579079][ T5832] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1366.618756][ T5832] usb 7-1: Manufacturer: syz
[ 1366.640836][ T5832] usb 7-1: config 0 descriptor??
[ 1366.668348][ T5832] smsusb:smsusb_probe: board id=9, interface number 0
[ 1366.698815][ T5832] smsusb:smsusb_probe: Device initialized with return code -19
[ 1366.890645][T25041] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1366.930259][T25077] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8240'.
[ 1366.932726][T25041] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1366.982106][ T5832] usb 7-1: USB disconnect, device number 51
[ 1368.048291][T25112] tipc: Enabling of bearer <udP:s> rejected, media not registered
[ 1368.733601][T25127] tipc: Started in network mode
[ 1368.756349][T25127] tipc: Node identity ac14140f, cluster identity 4711
[ 1368.778071][T25127] tipc: New replicast peer: 255.255.255.255
[ 1368.801414][T25127] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1368.820706][T25132] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8251'.
[ 1369.074200][T25143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8256'.
[ 1369.084921][T25143] mac80211_hwsim hwsim137 
4

: renamed from wlan1
[ 1369.262092][T25149] netlink: 'syz.0.8258': attribute type 10 has an invalid length.
[ 1369.494426][T25162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1369.539443][ T5832] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1369.547711][T25162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1369.707299][ T5832] usb 7-1: Using ep0 maxpacket: 32
[ 1369.728494][    T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1369.760503][ T5832] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1369.761187][T25176] random: crng reseeded on system resumption
[ 1369.786669][ T5832] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1369.817669][ T5832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1369.848111][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[ 1369.890685][ T5832] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1369.908471][  T798] tipc: Node number set to 2886997007
[ 1369.929538][    T9] usb 1-1: too many configurations: 124, using maximum allowed: 8
[ 1369.943953][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1369.962756][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1369.985008][    T9] usb 1-1: can't read configurations, error -61
[ 1369.993875][ T5832] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1370.003021][T25182] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8266'.
[ 1370.026384][ T5832] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1370.072911][ T5832] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[ 1370.107273][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.144822][ T5832] usb 7-1: config 0 descriptor??
[ 1370.151931][    T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1370.174464][T25151] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1370.202988][ T5832] usblp0: Disabling reads from problematic bidirectional printer
[ 1370.333785][    T9] usb 1-1: too many configurations: 124, using maximum allowed: 8
[ 1370.390427][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1370.417214][    T9] usb 1-1: can't read configurations, error -61
[ 1370.450117][    T9] usb usb1-port1: attempt power cycle
[ 1370.867460][    T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1370.920832][    T9] usb 1-1: too many configurations: 124, using maximum allowed: 8
[ 1370.950026][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1370.987410][    T9] usb 1-1: can't read configurations, error -61
[ 1371.167310][    T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1371.258061][    T9] usb 1-1: too many configurations: 124, using maximum allowed: 8
[ 1371.276155][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1371.314344][    T9] usb 1-1: can't read configurations, error -61
[ 1371.366778][    T9] usb usb1-port1: unable to enumerate USB device
[ 1372.386351][ T5832] usblp 7-1:0.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[ 1372.441235][ T5832] usb 7-1: USB disconnect, device number 52
[ 1372.465405][ T5832] usblp0: removed
[ 1372.898296][T25229] syzkaller0: entered promiscuous mode
[ 1372.924113][T25229] syzkaller0: entered allmulticast mode
[ 1373.573435][T25255] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8278'.
[ 1373.898234][T25261] netlink: 'syz.5.8280': attribute type 10 has an invalid length.
[ 1374.312341][   T31] INFO: task syz.4.7516:20411 blocked for more than 143 seconds.
[ 1374.328039][   T31]       Not tainted syzkaller #0
[ 1374.338141][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1374.356750][   T31] task:syz.4.7516      state:D stack:28616 pid:20411 tgid:20408 ppid:10686  task_flags:0x400040 flags:0x00080002
[ 1374.385009][   T31] Call Trace:
[ 1374.393725][   T31]  <TASK>
[ 1374.402201][   T31]  __schedule+0x17c4/0x4d60
[ 1374.411499][   T31]  ? security_file_ioctl+0xcb/0x2d0
[ 1374.423793][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1374.436748][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1374.446917][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1374.458621][   T31]  ? __pfx___schedule+0x10/0x10
[ 1374.472554][   T31]  ? schedule+0x91/0x360
[ 1374.481783][   T31]  schedule+0x165/0x360
[ 1374.493729][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1374.505025][   T31]  __mutex_lock+0x7e6/0x1350
[ 1374.518014][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1374.528570][   T31]  ? usbdev_ioctl+0x140/0x20b0
[ 1374.539099][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1374.556286][   T31]  usbdev_ioctl+0x140/0x20b0
[ 1374.566702][   T31]  ? __fget_files+0x2a/0x420
[ 1374.575872][   T31]  ? __pfx_usbdev_ioctl+0x10/0x10
[ 1374.587856][   T31]  ? __fget_files+0x3a0/0x420
[ 1374.600681][   T31]  ? __fget_files+0x2a/0x420
[ 1374.611014][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1374.623792][   T31]  ? __pfx_usbdev_ioctl+0x10/0x10
[ 1374.635755][   T31]  __se_sys_ioctl+0xfc/0x170
[ 1374.645101][   T31]  do_syscall_64+0xfa/0xfa0
[ 1374.656647][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1374.666051][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1374.672675][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1374.677808][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1374.683877][   T31] RIP: 0033:0x7ff12398efc9
[ 1374.688812][   T31] RSP: 002b:00007ff121bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1374.697853][   T31] RAX: ffffffffffffffda RBX: 00007ff123be5fa0 RCX: 00007ff12398efc9
[ 1374.705979][   T31] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000003
[ 1374.718405][   T31] RBP: 00007ff123a11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1374.729847][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1374.738174][   T31] R13: 00007ff123be6038 R14: 00007ff123be5fa0 R15: 00007ffd1a96c488
[ 1374.746328][   T31]  </TASK>
[ 1374.749890][   T31] 
[ 1374.749890][   T31] Showing all locks held in the system:
[ 1374.803210][   T31] 3 locks held by kworker/u8:1/13:
[ 1374.818438][   T31]  #0: ffff88801b069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0
[ 1374.848612][   T31]  #1: ffffc90000127ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x868/0x15d0
[ 1374.873742][   T31]  #2: ffffffff8f6ed388 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1374.896631][   T31] 1 lock held by khungtaskd/31:
[ 1374.901533][   T31]  #0: ffffffff8e33d620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1374.922677][   T31] 2 locks held by getty/5588:
[ 1374.933240][   T31]  #0: ffff88814e30f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1374.963255][   T31]  #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1375.006663][   T31] 5 locks held by kworker/1:7/19959:
[ 1375.012065][   T31]  #0: ffff8880216f8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0
[ 1375.033109][   T31]  #1: ffffc9000bed7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15d0
[ 1375.064814][   T31]  #2: ffff888143ffb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0
[ 1375.084973][   T31]  #3: ffff88802a26a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[ 1375.105431][   T31]  #4: ffff88804ef61160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[ 1375.116684][   T31] 1 lock held by syz.4.7516/20411:
[ 1375.127473][   T31]  #0: ffff888143ffb198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x20b0
[ 1375.147725][   T31] 2 locks held by syz.0.8273/25227:
[ 1375.166613][   T31]  #0: ffffffff8f6ed388 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1375.175688][   T31]  #1: ffffffff8e3430b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 1375.216722][   T31] 1 lock held by syz.5.8280/25261:
[ 1375.226623][   T31]  #0: ffffffff8f6ed388 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80
[ 1375.256120][   T31] 
[ 1375.260396][   T31] =============================================
[ 1375.260396][   T31] 
[ 1375.336017][   T31] NMI backtrace for cpu 0
[ 1375.336038][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1375.336059][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1375.336069][   T31] Call Trace:
[ 1375.336076][   T31]  <TASK>
[ 1375.336085][   T31]  dump_stack_lvl+0x189/0x250
[ 1375.336112][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1375.336133][   T31]  ? __pfx__printk+0x10/0x10
[ 1375.336163][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1375.336189][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1375.336213][   T31]  ? __pfx__printk+0x10/0x10
[ 1375.336235][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1375.336261][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1375.336286][   T31]  watchdog+0xfa9/0xff0
[ 1375.336305][   T31]  ? watchdog+0x1f4/0xff0
[ 1375.336327][   T31]  kthread+0x711/0x8a0
[ 1375.336349][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1375.336364][   T31]  ? __pfx_kthread+0x10/0x10
[ 1375.336385][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1375.336409][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1375.336425][   T31]  ? __pfx_kthread+0x10/0x10
[ 1375.336446][   T31]  ret_from_fork+0x4bc/0x870
[ 1375.336472][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1375.336505][   T31]  ? __switch_to_asm+0x39/0x70
[ 1375.336522][   T31]  ? __switch_to_asm+0x33/0x70
[ 1375.336540][   T31]  ? __pfx_kthread+0x10/0x10
[ 1375.336559][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1375.336590][   T31]  </TASK>
[ 1375.476412][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1375.481981][    C1] NMI backtrace for cpu 1
[ 1375.482007][    C1] CPU: 1 UID: 0 PID: 1168 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[ 1375.482026][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1375.482036][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1375.482063][    C1] RIP: 0010:unwind_next_frame+0xa74/0x2390
[ 1375.482084][    C1] Code: 17 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 99 17 00 00 48 0f bf 02 49 01 c4 48 8d 5e 01 48 8b 44 24 40 0f b6 04 28 <84> c0 0f 85 78 13 00 00 49 89 df 49 c1 ef 03 41 0f b6 04 2f 84 c0
[ 1375.482097][    C1] RSP: 0018:ffffc900039e7478 EFLAGS: 00000282
[ 1375.482110][    C1] RAX: 0000000000000000 RBX: ffffffff904f38cb RCX: ffffffff8fd35bb8
[ 1375.482121][    C1] RDX: ffffffff904f38c6 RSI: ffffffff904f38ca RDI: ffffffff8be0ec60
[ 1375.482133][    C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81741f85
[ 1375.482144][    C1] R10: ffffc900039e7598 R11: ffffffff81acfdf0 R12: ffffc900039e7c68
[ 1375.482156][    C1] R13: ffffc900039e7598 R14: ffffc900039e7548 R15: ffffc900039e7580
[ 1375.482168][    C1] FS:  0000000000000000(0000) GS:ffff888125ba3000(0000) knlGS:0000000000000000
[ 1375.482180][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1375.482191][    C1] CR2: 000000110c24791c CR3: 00000000116d6000 CR4: 00000000003526f0
[ 1375.482205][    C1] Call Trace:
[ 1375.482211][    C1]  <TASK>
[ 1375.482222][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1375.482237][    C1]  ? process_one_work+0x94a/0x15d0
[ 1375.482253][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1375.482271][    C1]  arch_stack_walk+0x11c/0x150
[ 1375.482290][    C1]  ? process_one_work+0x94a/0x15d0
[ 1375.482305][    C1]  stack_trace_save+0x9c/0xe0
[ 1375.482321][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1375.482340][    C1]  ? stack_trace_save+0x9c/0xe0
[ 1375.482359][    C1]  kasan_save_track+0x3e/0x80
[ 1375.482467][    C1]  ? kasan_save_track+0x3e/0x80
[ 1375.482488][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[ 1375.482507][    C1]  ? kmem_cache_alloc_node_noprof+0x43c/0x710
[ 1375.482527][    C1]  ? __alloc_skb+0x112/0x2d0
[ 1375.482540][    C1]  ? nsim_dev_trap_report_work+0x29a/0xb80
[ 1375.482560][    C1]  ? process_one_work+0x94a/0x15d0
[ 1375.482597][    C1]  __kasan_slab_alloc+0x6c/0x80
[ 1375.482617][    C1]  kmem_cache_alloc_node_noprof+0x43c/0x710
[ 1375.482636][    C1]  ? __alloc_skb+0x112/0x2d0
[ 1375.482652][    C1]  __alloc_skb+0x112/0x2d0
[ 1375.482668][    C1]  nsim_dev_trap_report_work+0x29a/0xb80
[ 1375.482697][    C1]  ? process_one_work+0x868/0x15d0
[ 1375.482709][    C1]  process_one_work+0x94a/0x15d0
[ 1375.482722][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1375.482751][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1375.482769][    C1]  ? assign_work+0x3a1/0x410
[ 1375.482791][    C1]  worker_thread+0x9b0/0xee0
[ 1375.482816][    C1]  kthread+0x711/0x8a0
[ 1375.482834][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1375.482848][    C1]  ? __pfx_kthread+0x10/0x10
[ 1375.482865][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1375.482887][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1375.482901][    C1]  ? __pfx_kthread+0x10/0x10
[ 1375.482917][    C1]  ret_from_fork+0x4bc/0x870
[ 1375.482938][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1375.482961][    C1]  ? __switch_to_asm+0x39/0x70
[ 1375.482978][    C1]  ? __switch_to_asm+0x33/0x70
[ 1375.482994][    C1]  ? __pfx_kthread+0x10/0x10
[ 1375.483010][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1375.483036][    C1]  </TASK>
[ 1377.863190][T25261] wlan1: mtu less than device minimum
[ 1377.868815][T25261] .`: (slave wlan1): Error -22 calling dev_set_mtu