last executing test programs:

39.065828217s ago: executing program 2 (id=357):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="02002dbd7000fbdbdf256f0000000c00990008000000230000000a00060008021104000100000504d600400000000500d600c800000005001901090000000800a1007f0000000800270001000000"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x804)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03022afd7000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="2400238008000b00230a000006000200d400000005000e00020000e8040013"], 0x40}, 0x1, 0x0, 0x0, 0x4e008}, 0x4000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x83, 0x3, 0xd1, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x3, 0x0, 0x10003, 0x7, 0xff, 0x4, 0x2, 0x12, '\x00', 0x5})

38.849577835s ago: executing program 2 (id=358):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x41, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x4000000}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x1)
splice(r2, 0x0, r1, 0x0, 0x2, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

38.26567123s ago: executing program 2 (id=361):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x2, 0xff, 0x1, 0xfffd}, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0)

38.230381224s ago: executing program 2 (id=363):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa2200, 0x0)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x1000000}}}, 0x90)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0xf, 0x1, 0x9, 0x4, 0x2, 0x0, 0x3, 0x80000000, 0x4, 0x10000, 0x54, 0x3, 0x6, 0x10000, 0x40, 0x6]}, {0x4, 0x0, [0x9, 0x7, 0x0, 0x2, 0x22a2, 0xfffffff7, 0xe, 0x4, 0x8, 0x6, 0x6, 0x6920e86d, 0x5, 0x7, 0x6, 0x4]}, {0x19, 0x0, [0xfffffffb, 0x80000000, 0x9cf0, 0x8, 0x0, 0x30f569f7, 0x5, 0x3c8, 0xaf1, 0x6, 0x6, 0xfff, 0xb, 0x854, 0x6, 0x4]}, {0x13, 0x0, [0x6, 0xa43, 0x4, 0x1, 0xfffffffa, 0x8, 0x100, 0xff, 0xa00, 0x7, 0x2, 0x3e7, 0x8, 0x0, 0xe000, 0xffff0001]}, {0x0, 0x0, [0x5, 0x400, 0x1, 0x3, 0x9, 0xbb4, 0x7, 0x0, 0x7, 0x9, 0x7fffffff, 0x2, 0x0, 0x7aa, 0x7, 0x2]}, {0x18, 0x0, [0x3, 0x9, 0x40, 0x1, 0x4, 0xfff, 0x4, 0x4, 0x48, 0xd, 0x8000, 0x7fffffff, 0x1, 0x7, 0xffffff81, 0xf]}, {0x23, 0x0, [0xb9bc, 0x1000, 0x2, 0x80000000, 0x0, 0x0, 0x4749, 0x4, 0x6, 0x8001, 0xe0000, 0x1, 0x2, 0x4, 0x4, 0x55]}, {0x8, 0x0, [0xfffffe01, 0x1, 0x1, 0x100, 0xe4a4, 0x6, 0x1, 0xd7, 0x1, 0x8, 0x0, 0x2, 0x6ad8000, 0x81, 0xfffffff9, 0xf]}, {0x14, 0x0, [0x8ffe, 0x4, 0x7f, 0x7b3, 0x2, 0x8, 0xd14, 0x4, 0x5, 0x7, 0x8000, 0x5, 0xadeb, 0x9, 0x4, 0x3]}, {0x24, 0x0, [0x8, 0x80, 0x5, 0x800, 0x12, 0xd93, 0x7fff, 0x4, 0x9f8, 0x1, 0x4, 0x0, 0x5, 0x10000, 0xfff, 0xcae1]}], r2, 0x1, 0x1, 0x2d0}}, 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(0x0, r6)
quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, r6, &(0x7f0000000400))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x39, 0xb, 0x70bd28, 0x25dfdbfb, {0xf}}, 0x14}}, 0x8010)

38.164975264s ago: executing program 2 (id=364):
pipe2$9p(0x0, 0x0)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$assume_authority(0x10, r0)
r2 = syz_open_dev$cec(0x0, 0x0, 0x0)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x11)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdbdf250900020073797a3100000000080041007369770014003300766972745f77696669300000000000000900020073797a31000000000800410073697700140002"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
r5 = fsopen(&(0x7f0000000280)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x180000000)
r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r9, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x1, 0x80000000})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
getdents64(r4, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

37.241330379s ago: executing program 2 (id=365):
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423", @ANYBLOB=',roo'])
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x8004000000000000)

21.782617536s ago: executing program 32 (id=365):
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423", @ANYBLOB=',roo'])
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x8004000000000000)

6.678121457s ago: executing program 4 (id=485):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
read$FUSE(r1, &(0x7f00000017c0)={0x2020}, 0x2020)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000080)=0xe4dd, 0x4)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x3, @pix_mp={0x9, 0x7, 0x32315659, 0x0, 0x0, [{0x2}, {0x3, 0x8}, {0xfffffffc, 0x5}, {0x484, 0x6}, {0x8, 0x1}, {0xb, 0x1}, {0x7fff, 0xfffffffa}, {0x9, 0x8}], 0x9, 0x6, 0x2, 0x2, 0x1}})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"})
r6 = syz_open_pts(r5, 0x80000)
splice(r6, 0x0, r4, 0x0, 0x3, 0xb)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

4.025728528s ago: executing program 1 (id=498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4100}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000028c0)=""/234, 0xea}, {&(0x7f0000005c00)=""/4116, 0x1014}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000001840)=""/240, 0xc2}], 0x4}, 0xb}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000001b80)=""/210, 0xd2}, {&(0x7f0000001a40)=""/134, 0x86}], 0x5}, 0xf6e}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x2000, 0x0)

3.925993195s ago: executing program 4 (id=499):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x13, 0x101301)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x6, 0x2, 0x0})

3.861721668s ago: executing program 1 (id=500):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
preadv(r0, &(0x7f00000005c0)=[{0x0}], 0x1, 0xfffc, 0x0)

3.753178825s ago: executing program 1 (id=501):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000200)={{0x2, 0x2, 0x7fff, 0x2, 0x1}, 0x1, 0x4})
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x0, 0x2, 0x3, 0x2, 0x4}})
read(r0, 0x0, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0xe, 0x80000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
unshare(0x42000000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20})
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854)
recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000500)=""/184, 0xb8}], 0x2}, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x400, @none, 0x3b7f}, 0xe)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x124c0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000480)={0x1, 0x1, &(0x7f0000000840)=""/255, &(0x7f0000000340)=""/92, &(0x7f0000000400)=""/125, 0x1000})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000040)=0xffffffff)

3.752966003s ago: executing program 4 (id=502):
r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00!'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.41352359s ago: executing program 3 (id=511):
r0 = socket$inet(0x2, 0x5, 0x2)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2], 0x2c}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000003000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
r5 = socket$inet(0x2, 0x802, 0x1)
read(r5, &(0x7f0000000040)=""/25, 0x19)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
ioctl$sock_netdev_private(r3, 0x8943, &(0x7f0000000000))

2.274371082s ago: executing program 1 (id=512):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e2, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="4001020000001223fa85017ffc5e459de91b7a66c267681c0fa471ce775e2c6660b75dc5e64f73a018d9cacce61fe7b7ced0f0133f6d2c1fecd7d5e3704e1a7f9f5d570c807285406469d067b2093fce6df12cc0b6d97e14348cc04d417273852f203224c2a69752bf874997e24b9e075a3be5ee206a9ed60a60552c97804a9f58ecd8cc271093c5367c073c2c30014c246439ba146fee2f2ef64e02ed24acdae6e66302cba5a0e0896b1fbc89cf37de35abb5627736beaf4f092a552f2cec0d2a86ec8d7885226007eb5a236f13"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

2.223695973s ago: executing program 3 (id=513):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f0000000180))
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x8400, 0x0)
preadv(r1, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r3, &(0x7f0000000000)=""/80, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x560a, &(0x7f0000000000)={0x20, 0x40000, 0x8, 0x0, 0x0, 0x0})
syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x20000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_open_dev$video(&(0x7f0000003d00), 0x9, 0x0)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x1)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r8=>0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38010000100033060000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000a000007000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x1}, 0x2})

1.903633364s ago: executing program 3 (id=514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe36030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a8609100000000bf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xc, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x0, 0x0, 0x52424752}})

1.809756132s ago: executing program 3 (id=515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000002002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)

1.707226236s ago: executing program 3 (id=516):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) (fail_nth: 27)

1.224559239s ago: executing program 0 (id=518):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x2, 0xff, 0x1, 0xfffd}, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
preadv(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}})
sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000004c0)="284ec63bcda1e5c05c9722af58e83f65d6179085e6def0faa267526db7f339219a0f2ff09f9841ba4204244883f732af33900a1bf31c5780afa3cf23d29c575afeaf83580449fc516c8e384db1f628c4840434ce0cea617db9caa0bf630f3e7043a7c4c38f610c7303591b096ef5eda9e313539b4248094f6da2dbeb372eca3c7047525b64083fc9afaf922816ed8fde36a01db239e58fba62ef190a0d0bc83f5603da47e965ad5a2deea991665823db31255ef5ff35f5", 0xb7}, {&(0x7f0000000400)}, {&(0x7f0000000e40)="35f7b7daa99916ad7c2396c2d5040f7e1719716e191591ed6cad6a53785c386fedbf17e78aa53a95bf677213133917d6b1fdca150f831f32f395ed6f48de67b6122322f3ec028ff38250", 0x4a}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="c8c46f04bc01369b9c94194cc13ab54a8ee0c008514f7c8b6c854f1172a803fb13c20913dd2fd05d81780aa8ff682ea9ae31e144b9600b51b449a57380ee0d8984ac3a4325840d401aa2a8fdce5da54826341ab116f66db2b8a1cf0854c65c86173e1f46f8a8806bf3fd1c2dc6ded54ccaeaa00f4545f2", 0x77}, {&(0x7f0000000440)="3873eedbcf65ab488a968b10bd495fc54ea8c62f6bc809c5bddfb1a224e5cceb3c668571", 0x24}, {&(0x7f0000001f40)="5a5895799047c8df9a68c5bf7d29df954c6281c8199f4664b72b4b20529bb5a3cdc89e7ebeea09df8bce33de9ac66f8506d234f9523b4213db865d45ce2d8c2b8ce31b9a9c1c0d048e9ef0e51adbce2701ac423c774f58921fa6e6b6a9fdfab042665be4a2d3c87b878c671535d45b81c6fe95ea4884f20c8ca0f7c94cd9b71ddddea526c4dc6605e186ec3c492c3a654eedc7b9a3a394ec420a0847d85efafcc5673a78aa1f7d827845427ee1baab2dff75b5815c92ce59cee0085b12ca63f2034874615f15574d723ee13efe0568f59b6a8413cdd54b815c2fc7b6caf125b651", 0xe1}, {&(0x7f0000002040)="de01ee2632757ea03a4c0abf40fccb5a2a958ef00e0dd9b90bac10c993bc53916cde54bebce33db8777e024e43a82a08a80ea68d8b267caa63545b1224f5fa3defc41f87ae7aba11b2ec66c41977aaac6744832cf46946f1bf3ab98157b8cf6e6e7d6796e56494296636914884f15826cca8065bd15088fe5b89e0bfb293ca93692595c567d5c3666cc21cf02f0a8b", 0x8f}, {&(0x7f0000002100)="3d61c605b55dc36efdb25a419f8b835c4227788dfebf0fb59aa4504c8ed2d0652d124bd55385b6a2d44a424d5c02f0fe05e0f14173d950154e54cffca473b4b854614baefd9a2558826f9c0432b7b7f82f62731aa143115d5844b30c99c4ddea82dd9d83b18942fa192affaf47b3e42b56c48b052f30e4749f569795e0259b2fb537cba6f66dadc3d0b6f9842250686bb031990bdc375e53d345e444d24aff1e97f68ec5370415fd95416d89a0d38814", 0xb0}], 0x9, &(0x7f0000002280)=[{0x50, 0x10c, 0x0, "3f30697443c0226896e11897ae4faf03bb6ab1a3487b9d2f755c88447e3e376a7292534a53d24cea058c9c17eca11a6ae96d9588a0c3970f06283b"}, {0x60, 0x116, 0x2, "f0b3f616022166eab8cd894905478fc82ffae3502332f304848e3af2c6c5701dadd5d2cced9be126886ce72befdd6abcb13bba6d6084cad6f6848ad35249902486d7f81cd74bc691ba2ae047"}, {0x48, 0x107, 0x2e302df3, "ef7a3caa04bb036ae4ee1cc97a352358325da044f063638abffab67c5f6718c669ea57781799ce944c088ede7164bed10d8b"}, {0x68, 0x113, 0x1, "f0d02cae057ee336c47e11a267ef01c246d68d59a63160576c09346f0336097df331acf19d6ea8d4955fd3716eb84ca565706d78c319401e90a7b93fc2a2e2ebd8d8aa1b0a2d51f9a2b25655563b226d51d83a92c9d651e6"}], 0x160}, 0x8001)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="10000000141401212dbd7000ffdbdf2511776700edbc8bacd27f7de1ca6a6b0cc5f64fc985a0f25c32320f61c1c9bc135e80578dd41e5dfb1f77a25f11aa68839cd31e281bc5b7d7fc17d3560fb03f2b14797885d326f9cc09b2d51154298d956f2ed2e33cc8df5b35f1a611e360043f3217c490220a350a7f39239fec0500722406a2402b50e226e5c40968f8e7cdb2ab78bede2484b72f23b5fc79508474aeb7a2cfe07f38635fc444d2f9b85255aed145bcc32f4cc146d14df3e4b8bbafa13b50f5ad9830bb333d72724ab417a32635"], 0x10}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000600))
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x1000)
r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7f, 0x20203143, 0x3, [0x2], [0x101], [0x0, 0x1]})
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100))

1.037686302s ago: executing program 0 (id=519):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x97}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.036353852s ago: executing program 4 (id=520):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = dup2(r2, r1)
close_range(r3, 0xffffffffffffffff, 0xff00000000000000)

915.447301ms ago: executing program 0 (id=521):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}], 0x1}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c)
getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000100))
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xd1, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0xc, 0x0, 0x10003, 0x7, 0xff, 0x4, 0x2, 0x15, '\x00', 0x8})

577.483392ms ago: executing program 4 (id=522):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) (async)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x10100)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) (async)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r6, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000005c0)={0x1, 0xfffffffc, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x5, 0x9, 0x0, 0x2c, 0x1, 0x1}) (async)
ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0)
socket$kcm(0x2, 0xa, 0x2) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002280), 0x101200, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002240)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c3a"], 0xfdef) (async)
r8 = socket$unix(0x1, 0x1, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00') (async)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x4, &(0x7f0000002880)=0x2, 0x4) (async)
bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7)

449.189763ms ago: executing program 4 (id=523):
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000001040)=""/4064, 0xfe0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(0x0, 0x1ad6, 0x100)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000180)={0x483a, [0x6, 0x4a6b, 0x4], [{0x7, 0x7, 0x1}, {0x2, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x141, 0xffffff80, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x1, 0x0, 0x1}, {0x10001, 0x3, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0x2, 0x1, 0x1, 0x1}, {0x1ff, 0x6, 0x1, 0x0, 0x1}, {0x7, 0xffffffff, 0x0, 0x1, 0x1}, {0x5, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x8000, 0x1}, {0x7, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1a800000, 0x7, 0x1, 0x1}], 0x2})
chdir(&(0x7f00000000c0)='./bus\x00')

321.443746ms ago: executing program 0 (id=524):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xc, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)

190.900414ms ago: executing program 0 (id=525):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfb, 0x20000)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x401, 0x0, '\x00', {0x0, @bt={0x8, 0x2, 0x1, 0x1, 0x17a, 0x5, 0x8, 0xc, 0x80, 0x9, 0x10001, 0x9, 0x7, 0x2, 0x0, 0x2a, {0x9, 0xa}, 0x40, 0xff}}})

190.693922ms ago: executing program 3 (id=526):
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000000040)=""/4081, 0xff1) (fail_nth: 4)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(0x0, 0x1ad6, 0x100)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000180)={0x483a, [0x6, 0x4a6b, 0x4], [{0x7, 0x7, 0x1}, {0x2, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x141, 0xffffff80, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x1, 0x0, 0x1}, {0x10001, 0x3, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0x2, 0x1, 0x1, 0x1}, {0x1ff, 0x6, 0x1, 0x0, 0x1}, {0x7, 0xffffffff, 0x0, 0x1, 0x1}, {0x5, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x8000, 0x1}, {0x7, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1a800000, 0x7, 0x1, 0x1}], 0x2})
chdir(&(0x7f00000000c0)='./bus\x00')

189.265089ms ago: executing program 1 (id=527):
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x4000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100}, 0x10)

9.504477ms ago: executing program 0 (id=528):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESDEC=r0], 0x44}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x38, {0x2, 0x4e22, @empty}, 'veth1_to_bond\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x8001}}, './file0\x00'})
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001540)={{0x12, 0x1, 0x200, 0x55, 0x26, 0xcc, 0x20, 0x1397, 0xbd, 0xa9ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0xff, 0xc0, 0xe0, [{{0x9, 0x4, 0xeb, 0x1, 0x0, 0x35, 0x17, 0x2a, 0x6}}]}}]}}, 0x0)
r9 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r9, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x201})
lseek(r9, 0x0, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

0s ago: executing program 1 (id=529):
r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00!'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

246 has no altsetting 0
[  127.897293][   T89] usb 3-1: New USB device found, idVendor=08e3, idProduct=0301, bcdDevice=71.d7
[  127.909325][ T1218] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  127.920423][   T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.933076][   T89] usb 3-1: Product: syz
[  127.940325][   T89] usb 3-1: Manufacturer: syz
[  127.946700][   T89] usb 3-1: SerialNumber: syz
[  127.959405][   T89] usb 3-1: config 0 descriptor??
[  127.977108][   T89] HFC-S_USB 3-1:0.246: probe with driver HFC-S_USB failed with error -5
[  128.074021][ T1218] usb 4-1: device descriptor read/64, error -71
[  128.112288][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'.
[  128.191028][ T1218] usb usb4-port1: attempt power cycle
[  128.221691][ T6813] binder: 6812:6813 ioctl c0306201 200000000500 returned -11
[  128.234108][ T5883] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  128.407867][ T5883] usb 2-1: config 6 has an invalid interface number: 31 but max is 2
[  128.418923][ T5883] usb 2-1: config 6 has an invalid interface number: 116 but max is 2
[  128.431179][ T5883] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  128.453051][ T5883] usb 2-1: config 6 has an invalid interface number: 23 but max is 2
[  128.463454][ T5883] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[  128.475210][ T5883] usb 2-1: config 6 has no interface number 0
[  128.483299][ T5883] usb 2-1: config 6 has no interface number 1
[  128.498866][ T5883] usb 2-1: config 6 has no interface number 2
[  128.506599][ T5883] usb 2-1: config 6 interface 31 altsetting 7 has an endpoint descriptor with address 0x2E, changing to 0xE
[  128.520420][ T5883] usb 2-1: config 6 interface 31 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  128.532278][ T5883] usb 2-1: config 6 interface 31 altsetting 7 endpoint 0xA has an invalid bInterval 255, changing to 11
[  128.547360][ T1218] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  128.556511][ T5883] usb 2-1: config 6 interface 116 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  128.568171][ T5883] usb 2-1: config 6 interface 116 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[  128.579670][ T5883] usb 2-1: config 6 interface 116 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  128.591391][ T5883] usb 2-1: config 6 interface 116 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[  128.606566][ T5883] usb 2-1: config 6 interface 116 altsetting 3 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  128.619824][ T5883] usb 2-1: config 6 interface 116 altsetting 3 has a duplicate endpoint with address 0x8D, skipping
[  128.619973][ T1218] usb 4-1: device descriptor read/8, error -71
[  128.639982][ T5883] usb 2-1: config 6 interface 116 altsetting 3 has a duplicate endpoint with address 0x3, skipping
[  128.652497][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  128.665525][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  128.676891][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[  128.688139][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  128.698473][ T5900] usb 3-1: USB disconnect, device number 26
[  128.700281][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  128.718340][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  128.734007][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  128.763914][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0x3, skipping
[  128.765047][   T89] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  128.788644][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0x3, skipping
[  128.821411][ T5883] usb 2-1: config 6 interface 23 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 16
[  128.835491][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  128.853345][ T5883] usb 2-1: config 6 interface 23 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  128.867060][ T5883] usb 2-1: config 6 interface 31 has no altsetting 0
[  128.874896][ T5883] usb 2-1: config 6 interface 116 has no altsetting 0
[  128.882902][ T5883] usb 2-1: config 6 interface 23 has no altsetting 0
[  128.904081][ T1218] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  128.915921][ T5883] usb 2-1: New USB device found, idVendor=5032, idProduct=0fa1, bcdDevice=59.f9
[  128.926541][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.936085][ T5883] usb 2-1: Product: ь
[  128.940975][ T5883] usb 2-1: Manufacturer: 왼뽌픢䔐鍺봄ᰆ喪⑔㈥睅ᗫ忆ⷢ캺ᆋ쥋눟鼼㢑뭦㰛늙﷨输荬ဗ㷻菊ᱰ㟒簧Ųꒃ偖쵧ѐჷ鹎﭅䃽ᕩ綶탺ꭔ낈䋆몤䳏ꄙ
[  128.941227][ T1218] usb 4-1: device descriptor read/8, error -71
[  128.974173][ T5883] usb 2-1: SerialNumber: 鶍쮪鉶蛔첏ƾ瞀壃僷㠢ꈺꆺ阤ᚍ绪쨞䣖ⲵڿࠊ蕅䵁ᮣ蓉쬲┺꫈鑜맞ꬾ넘緐놌劉꜁哪鏦ᐳ做ᕨ䉟죊ꯤꠗ抃⡚ﲻ
[  128.976022][   T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.020663][   T89] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  129.040901][   T89] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  129.050701][   T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.067021][   T89] usb 1-1: config 0 descriptor??
[  129.078022][   T89] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  129.114981][ T1218] usb usb4-port1: unable to enumerate USB device
[  129.228065][ T5883] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state.
[  129.237341][ T5883] dvb-usb: bulk message failed: -8 (3/0)
[  129.254038][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  129.271453][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.283089][ T5883] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T)
[  129.292064][ T5883] usb 2-1: media controller created
[  129.312716][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  129.333764][ T5883] dvb-usb: bulk message failed: -8 (6/0)
[  129.342866][ T5883] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T'
[  129.357360][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  129.375269][ T5883] dvb-usb: schedule remote query interval to 150 msecs.
[  129.383137][ T5883] dvb-usb: bulk message failed: -8 (3/0)
[  129.404190][ T5883] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected.
[  129.421106][ T5883] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state.
[  129.432373][ T5883] dvb-usb: bulk message failed: -8 (3/0)
[  129.442081][    T9] usb 3-1: Using ep0 maxpacket: 16
[  129.450980][    T9] usb 3-1: config 9 has an invalid interface number: 201 but max is 3
[  129.463217][    T9] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping
[  129.478660][    T9] usb 3-1: config 9 has an invalid interface number: 220 but max is 3
[  129.488549][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.498119][    T9] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[  129.507846][    T9] usb 3-1: config 9 has an invalid interface number: 136 but max is 3
[  129.517248][ T5883] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T)
[  129.525485][ T5883] usb 2-1: media controller created
[  129.535901][ T1218] dvb-usb: bulk message failed: -8 (1/0)
[  129.542212][ T1218] dvb-usb: error while querying for an remote control event.
[  129.551253][    T9] usb 3-1: config 9 has an invalid interface number: 149 but max is 3
[  129.563921][    T9] usb 3-1: config 9 has an invalid descriptor of length 152, skipping remainder of the config
[  129.584185][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  129.596612][    T9] usb 3-1: config 9 has no interface number 0
[  129.603448][    T9] usb 3-1: config 9 has no interface number 1
[  129.611461][    T9] usb 3-1: config 9 has no interface number 2
[  129.629177][    T9] usb 3-1: config 9 has no interface number 3
[  129.636609][ T5883] dvb-usb: bulk message failed: -8 (6/0)
[  129.643036][ T5883] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T'
[  129.652271][    T9] usb 3-1: config 9 interface 201 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  129.664045][    T9] usb 3-1: config 9 interface 201 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  129.677932][    T9] usb 3-1: config 9 interface 201 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.691944][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  129.704925][    T9] usb 3-1: config 9 interface 201 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.719569][    T9] usb 3-1: config 9 interface 201 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  129.732133][ T5883] dvb-usb: schedule remote query interval to 150 msecs.
[  129.739509][ T1218] dvb-usb: bulk message failed: -8 (1/0)
[  129.746515][ T5883] dvb-usb: bulk message failed: -8 (3/0)
[  129.755982][ T1218] dvb-usb: error while querying for an remote control event.
[  129.766444][    T9] usb 3-1: config 9 interface 201 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  129.779530][    T9] usb 3-1: config 9 interface 201 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  129.791935][ T5883] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected.
[  129.801960][    T9] usb 3-1: config 9 interface 201 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  129.818929][    T9] usb 3-1: config 9 interface 201 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8
[  129.830168][    T9] usb 3-1: config 9 interface 201 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.844409][ T5883] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state.
[  129.853518][ T5883] dvb-usb: bulk message failed: -8 (3/0)
[  129.860372][    T9] usb 3-1: config 9 interface 201 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  129.872682][    T9] usb 3-1: config 9 interface 201 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.889635][    T9] usb 3-1: config 9 interface 201 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  129.902458][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.912248][ T1218] dvb-usb: bulk message failed: -8 (1/0)
[  129.919024][ T1218] dvb-usb: error while querying for an remote control event.
[  129.927546][    T9] usb 3-1: config 9 interface 201 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  129.940061][  T798] dvb-usb: bulk message failed: -8 (1/0)
[  129.946972][ T5883] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T)
[  129.957024][  T798] dvb-usb: error while querying for an remote control event.
[  129.966070][ T5883] usb 2-1: media controller created
[  129.973072][    T9] usb 3-1: config 9 interface 220 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[  130.003938][    T9] usb 3-1: config 9 interface 220 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0
[  130.018215][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.027426][    T9] usb 3-1: config 9 interface 220 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  130.040030][    T9] usb 3-1: config 9 interface 220 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[  130.064971][    T9] usb 3-1: config 9 interface 220 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  130.076731][ T5883] dvb-usb: bulk message failed: -8 (6/0)
[  130.085296][ T5883] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T'
[  130.095070][    T9] usb 3-1: config 9 interface 220 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[  130.106412][    T9] usb 3-1: config 9 interface 220 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[  130.117679][  T798] dvb-usb: bulk message failed: -8 (1/0)
[  130.126107][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  130.139387][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0x6, skipping
[  130.150401][  T798] dvb-usb: error while querying for an remote control event.
[  130.159073][ T5876] dvb-usb: bulk message failed: -8 (1/0)
[  130.168432][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[  130.181083][ T5883] dvb-usb: schedule remote query interval to 150 msecs.
[  130.189619][ T5876] dvb-usb: error while querying for an remote control event.
[  130.197957][ T5883] dvb-usb: bulk message failed: -8 (3/0)
[  130.204767][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[  130.216903][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  130.227950][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[  130.240591][ T5883] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected.
[  130.269915][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  130.286458][ T5883] usb 2-1: USB disconnect, device number 22
[  130.307880][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[  130.323999][ T5876] dvb-usb: bulk message failed: -19 (1/0)
[  130.329987][ T5876] dvb-usb: error while querying for an remote control event.
[  130.337480][ T5147] Bluetooth: hci0: Unable to find connection with handle 0x0000
[  130.348853][ T5147] Bluetooth: hci0: Unable to find connection with handle 0x0000
[  130.362270][  T798] dvb-usb: bulk message failed: -19 (1/0)
[  130.388429][    T9] usb 3-1: config 9 interface 136 altsetting 8 endpoint 0xF has an invalid bInterval 253, changing to 7
[  130.402054][  T798] dvb-usb: error while querying for an remote control event.
[  130.435922][    T9] usb 3-1: config 9 interface 136 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[  130.470467][    T9] usb 3-1: config 9 interface 136 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  130.496643][ T5883] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected.
[  130.506279][    T9] usb 3-1: config 9 interface 149 altsetting 67 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  130.527674][    T9] usb 3-1: config 9 interface 220 has no altsetting 0
[  130.536690][    T9] usb 3-1: config 9 interface 136 has no altsetting 0
[  130.558596][    T9] usb 3-1: config 9 interface 149 has no altsetting 0
[  130.584021][    T9] usb 3-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=3f.94
[  130.594187][  T798] dvb-usb: bulk message failed: -19 (1/0)
[  130.600926][  T798] dvb-usb: error while querying for an remote control event.
[  130.624746][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.633607][    T9] usb 3-1: Product: ࠖ
[  130.641119][ T5883] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected.
[  130.657956][    T9] usb 3-1: Manufacturer: Н
[  130.662789][    T9] usb 3-1: SerialNumber: ఉ
[  130.693715][ T6829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.727487][ T5883] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected.
[  130.941048][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.951947][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.996726][    T9] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in cold state, will try to load a firmware
[  131.018736][    T9] usb 3-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2
[  131.030463][    T9] usb 3-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw
[  131.234102][   T89] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  131.334020][ T5863] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  131.384279][   T89] usb 4-1: Using ep0 maxpacket: 32
[  131.392080][   T89] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  131.401838][   T89] usb 4-1: config 0 has no interface number 0
[  131.408675][   T89] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  131.421585][   T89] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  131.439718][   T89] usb 4-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee
[  131.449353][   T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.457846][   T89] usb 4-1: Product: syz
[  131.462559][   T89] usb 4-1: Manufacturer: syz
[  131.467867][   T89] usb 4-1: SerialNumber: syz
[  131.478682][   T89] usb 4-1: config 0 descriptor??
[  131.485706][ T6862] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  131.493773][ T6862] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  131.515898][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.531596][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.552343][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  131.567927][ T5917] usb 1-1: USB disconnect, device number 22
[  131.575794][ T5863] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  131.596533][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.620475][ T5863] usb 2-1: config 0 descriptor??
[  131.670897][ T6868] syzkaller1: entered promiscuous mode
[  131.677727][ T6868] syzkaller1: entered allmulticast mode
[  131.687340][ T6868] FAULT_INJECTION: forcing a failure.
[  131.687340][ T6868] name failslab, interval 1, probability 0, space 0, times 0
[  131.701753][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) 
[  131.701778][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  131.701789][ T6868] Call Trace:
[  131.701796][ T6868]  <TASK>
[  131.701802][ T6868]  dump_stack_lvl+0x189/0x250
[  131.701819][ T6868]  ? __pfx____ratelimit+0x10/0x10
[  131.701831][ T6868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.701841][ T6868]  ? __pfx__printk+0x10/0x10
[  131.701860][ T6868]  ? __pfx___might_resched+0x10/0x10
[  131.701882][ T6868]  ? fs_reclaim_acquire+0x7d/0x100
[  131.701909][ T6868]  should_fail_ex+0x414/0x560
[  131.702076][ T6868]  should_failslab+0xa8/0x100
[  131.702122][ T6868]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  131.702143][ T6868]  ? __alloc_skb+0x112/0x2d0
[  131.702156][ T6868]  __alloc_skb+0x112/0x2d0
[  131.702167][ T6868]  alloc_skb_with_frags+0xca/0x890
[  131.702188][ T6868]  sock_alloc_send_pskb+0x84d/0x980
[  131.702344][ T6868]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  131.702359][ T6868]  ? is_bpf_text_address+0x26/0x2b0
[  131.702391][ T6868]  ? iov_iter_advance+0x8b/0x1c0
[  131.702479][ T6868]  tun_get_user+0xa43/0x3e90
[  131.702520][ T6868]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  131.702535][ T6868]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.702549][ T6868]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.702561][ T6868]  ? __pfx_tun_get_user+0x10/0x10
[  131.702722][ T6868]  ? save_netdev_trace_buffer+0x4cd/0x5e0
[  131.702755][ T6868]  ? __lock_acquire+0xab9/0xd20
[  131.702786][ T6868]  ? ref_tracker_alloc+0x318/0x460
[  131.702848][ T6868]  ? tun_get+0x157/0x2f0
[  131.702883][ T6868]  ? tun_chr_write_iter+0x60/0x210
[  131.702919][ T6868]  ? ksys_write+0x145/0x250
[  131.703017][ T6868]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  131.703039][ T6868]  ? tun_get+0x1c/0x2f0
[  131.703078][ T6868]  ? tun_get+0x1c/0x2f0
[  131.703097][ T6868]  ? tun_get+0x1c/0x2f0
[  131.703121][ T6868]  tun_chr_write_iter+0x113/0x210
[  131.703146][ T6868]  vfs_write+0x5c9/0xb30
[  131.703172][ T6868]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  131.703303][ T6868]  ? __pfx_vfs_write+0x10/0x10
[  131.703335][ T6868]  ? __fget_files+0x2a/0x420
[  131.703691][ T6868]  ksys_write+0x145/0x250
[  131.703789][ T6868]  ? __pfx_ksys_write+0x10/0x10
[  131.703813][ T6868]  ? do_syscall_64+0xbe/0xfa0
[  131.703836][ T6868]  do_syscall_64+0xfa/0xfa0
[  131.703853][ T6868]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.703871][ T6868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.703885][ T6868]  ? clear_bhb_loop+0x60/0xb0
[  131.703904][ T6868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.703918][ T6868] RIP: 0033:0x7fc8bbf8efc9
[  131.703934][ T6868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.703947][ T6868] RSP: 002b:00007fc8ba1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.703966][ T6868] RAX: ffffffffffffffda RBX: 00007fc8bc1e5fa0 RCX: 00007fc8bbf8efc9
[  131.703980][ T6868] RDX: 0000000000000024 RSI: 0000200000000240 RDI: 0000000000000004
[  131.703990][ T6868] RBP: 00007fc8ba1f6090 R08: 0000000000000000 R09: 0000000000000000
[  131.703999][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.704008][ T6868] R13: 00007fc8bc1e6038 R14: 00007fc8bc1e5fa0 R15: 00007ffff66387c8
[  131.704096][ T6868]  </TASK>
[  131.709474][   T89] hub 4-1:0.219: bad descriptor, ignoring hub
[  132.063744][   T89] hub 4-1:0.219: probe with driver hub failed with error -5
[  132.080209][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.088432][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.098830][   T89] option 4-1:0.219: GSM modem (1-port) converter detected
[  132.106736][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.117100][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.125113][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.137776][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.146509][   T89] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0
[  132.159864][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.168287][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.177850][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.186201][   T89] usb 4-1: USB disconnect, device number 33
[  132.196803][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  132.209455][   T89] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  132.236321][   T89] option 4-1:0.219: device disconnected
[  132.243544][ T5863] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  132.345073][  T798] usb 2-1: USB disconnect, device number 23
[  132.375877][ T6872] fido_id[6872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  132.588926][ T6879] =======================================================
[  132.588926][ T6879] WARNING: The mand mount option has been deprecated and
[  132.588926][ T6879]          and is ignored by this kernel. Remove the mand
[  132.588926][ T6879]          option from the mount to silence this warning.
[  132.588926][ T6879] =======================================================
[  132.627796][ T6879] /dev/nullb0: Can't open blockdev
[  132.810195][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.816892][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  132.985255][  T798] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  133.150409][  T798] usb 4-1: Using ep0 maxpacket: 8
[  133.165905][  T798] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  133.175153][  T798] usb 4-1: config 0 has no interface number 0
[  133.190620][  T798] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  133.204821][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.213927][  T798] usb 4-1: Product: syz
[  133.223205][  T798] usb 4-1: Manufacturer: syz
[  133.228088][  T798] usb 4-1: SerialNumber: syz
[  133.244561][  T798] usb 4-1: config 0 descriptor??
[  133.463471][  T798] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  133.482125][  T798] uvcvideo 4-1:0.31: No streaming interface found for terminal 6.
[  133.512188][  T798] usb 4-1: USB disconnect, device number 34
[  133.573465][ T6898] netlink: 'syz.1.291': attribute type 3 has an invalid length.
[  133.729348][ T6900] syzkaller1: entered promiscuous mode
[  133.735368][ T6900] syzkaller1: entered allmulticast mode
[  134.124210][ T5863] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  134.297703][ T5863] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  134.320792][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.332591][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.345585][ T5863] usb 2-1: Product: syz
[  134.350700][ T5863] usb 2-1: Manufacturer: syz
[  134.356824][ T5863] usb 2-1: SerialNumber: syz
[  134.582391][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.611922][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.677016][ T5863] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  134.699394][ T5863] cdc_ncm 2-1:1.0: bind() failure
[  134.747213][ T5863] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  134.767921][ T5863] cdc_ncm 2-1:1.1: bind() failure
[  134.784213][ T5863] usb 2-1: USB disconnect, device number 24
[  134.868630][ T6920] tipc: Started in network mode
[  134.874415][ T6920] tipc: Node identity 02a4c89721f4, cluster identity 4711
[  134.895014][ T6920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.917520][ T6921] tipc: Resetting bearer <eth:syzkaller0>
[  135.172769][ T6928] netlink: 'syz.2.300': attribute type 10 has an invalid length.
[  135.194367][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.300'.
[  135.230673][ T6928] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  135.285481][ T6928] team0: Failed to send options change via netlink (err -105)
[  135.293187][ T6928] team0: Port device geneve0 added
[  135.598054][ T6935] syzkaller1: entered promiscuous mode
[  135.614109][ T6935] syzkaller1: entered allmulticast mode
[  135.632860][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.304'.
[  135.667780][ T6919] tipc: Disabling bearer <eth:syzkaller0>
[  135.824758][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.835678][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.857306][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.870541][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.895449][  T798] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  136.077405][  T798] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  136.086112][  T798] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  136.097919][  T798] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  136.110461][  T798] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  136.123115][  T798] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  136.136771][  T798] usb 2-1: config 0 interface 0 has no altsetting 0
[  136.147082][  T798] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  136.157020][  T798] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  136.167119][  T798] usb 2-1: Product: syz
[  136.171942][  T798] usb 2-1: Manufacturer: syz
[  136.176760][  T798] usb 2-1: SerialNumber: syz
[  136.185523][ T5863] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  136.194883][  T798] usb 2-1: config 0 descriptor??
[  136.201042][ T6937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  136.211520][  T798] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  136.222489][  T798] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  136.323977][ T5863] usb 4-1: device descriptor read/64, error -71
[  136.425945][ T5917] usb 2-1: USB disconnect, device number 25
[  136.432634][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  136.442113][ T5917] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  136.574165][ T5863] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  136.714094][ T5863] usb 4-1: device descriptor read/64, error -71
[  136.824239][ T5863] usb usb4-port1: attempt power cycle
[  137.170806][ T5863] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  137.190817][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.317'.
[  137.205065][ T5863] usb 4-1: device descriptor read/8, error -71
[  137.464016][   T89] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  137.471711][ T5863] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  137.483995][ T5917] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  137.494961][ T5863] usb 4-1: device descriptor read/8, error -71
[  137.604369][ T5863] usb usb4-port1: unable to enumerate USB device
[  137.636210][   T89] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  137.645084][   T89] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  137.657364][   T89] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  137.670122][   T89] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  137.681918][   T89] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  137.695437][   T89] usb 1-1: config 0 interface 0 has no altsetting 0
[  137.703522][ T5917] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  137.713072][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.721370][ T5917] usb 2-1: Product: syz
[  137.730405][   T89] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  137.739578][ T5917] usb 2-1: Manufacturer: syz
[  137.744424][   T89] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  137.752883][   T89] usb 1-1: Product: syz
[  137.757401][ T5917] usb 2-1: SerialNumber: syz
[  137.763114][   T89] usb 1-1: Manufacturer: syz
[  137.769153][   T89] usb 1-1: SerialNumber: syz
[  137.781597][   T89] usb 1-1: config 0 descriptor??
[  137.787996][ T6951] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  137.798057][   T89] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  137.809088][   T89] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  138.015469][   T89] usb 1-1: USB disconnect, device number 24
[  138.021661][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  138.030318][   T89] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  138.435149][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.444233][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.009784][ T6967] netlink: 'syz.0.323': attribute type 2 has an invalid length.
[  139.017727][ T6967] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.323'.
[  139.037147][ T6969] syzkaller1: entered promiscuous mode
[  139.042721][ T6969] syzkaller1: entered allmulticast mode
[  139.443988][   T89] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  139.596252][   T89] usb 4-1: Using ep0 maxpacket: 32
[  139.605763][   T89] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  139.614476][   T89] usb 4-1: config 0 has no interface number 0
[  139.620765][   T89] usb 4-1: config 0 interface 184 has no altsetting 0
[  139.632079][   T89] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  139.641395][   T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.649692][   T89] usb 4-1: Product: syz
[  139.653930][   T89] usb 4-1: Manufacturer: syz
[  139.658586][   T89] usb 4-1: SerialNumber: syz
[  139.668224][   T89] usb 4-1: config 0 descriptor??
[  139.676960][   T89] smsc75xx v1.0.0
[  139.864448][ T5917] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE
[  139.877168][ T5917] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  139.889339][ T5917] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  139.900080][ T5917] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  140.019006][ T6978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.119650][ T6978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.204590][ T6978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.279892][   T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  140.291171][   T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  140.305045][ T6978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.421940][ T1029] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.447010][ T1029] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.471458][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.500074][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.897712][ T5883] usb 2-1: USB disconnect, device number 26
[  140.916533][   T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  140.928851][   T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  140.941429][   T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  140.951742][   T89] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61
[  141.442403][ T6990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.322'.
[  141.564055][ T5917] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  141.703958][ T5876] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  141.725722][ T5917] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  141.734343][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  141.745501][ T5917] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  141.765532][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  141.777344][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  141.791356][ T5917] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  141.799195][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  141.810381][ T5917] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  141.822561][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  141.834222][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  141.846936][ T5917] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  141.854510][ T5876] usb 1-1: Using ep0 maxpacket: 16
[  141.854780][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  141.871613][ T5917] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  141.872726][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.884423][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  141.894617][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  141.906892][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  141.918327][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  141.933386][ T5917] usb 2-1: string descriptor 0 read error: -22
[  141.939489][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.941969][ T5876] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  141.946734][ T5917] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  141.961572][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.970158][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.994651][ T5876] usb 1-1: Product: syz
[  141.998980][ T5876] usb 1-1: Manufacturer: syz
[  142.003690][ T5876] usb 1-1: SerialNumber: syz
[  142.008260][ T5917] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  142.018955][ T5876] usb 1-1: config 0 descriptor??
[  142.030862][ T5876] xbox_remote_probe: Unexpected endpoint_in
[  142.251110][ T5876] usb 1-1: USB disconnect, device number 25
[  142.269112][ T5917] usb 2-1: USB disconnect, device number 27
[  142.839301][ T6997] netlink: 'syz.0.325': attribute type 1 has an invalid length.
[  142.848474][ T6997] netlink: 'syz.0.325': attribute type 11 has an invalid length.
[  142.858081][ T6997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.325'.
[  142.870285][ T5876] usb 4-1: USB disconnect, device number 39
[  143.255530][ T5917] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  143.424021][ T5917] usb 1-1: Using ep0 maxpacket: 32
[  143.432377][ T5917] usb 1-1: config 4 has an invalid interface number: 60 but max is 0
[  143.443518][ T5917] usb 1-1: config 4 has no interface number 0
[  143.450065][ T5917] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=da.8d
[  143.459933][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.474971][ T5917] etas_es58x 1-1:4.60: Starting (null) (null) (Serial Number (null))
[  143.594079][   T89] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  143.679593][ T5876] usb 1-1: USB disconnect, device number 26
[  143.744034][   T89] usb 4-1: Using ep0 maxpacket: 16
[  143.750923][   T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.763913][   T89] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  143.778352][   T89] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  143.787832][   T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.804978][   T89] usb 4-1: config 0 descriptor??
[  143.907474][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'.
[  144.220535][   T89] HID 045e:07da: Invalid code 65791 type 1
[  144.247653][   T89] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input11
[  144.274557][ T5921] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  144.313200][   T89] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  144.457836][ T5921] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  144.467628][ T5921] usb 2-1: config 0 has no interface number 0
[  144.472653][ T5876] usb 4-1: USB disconnect, device number 40
[  144.493603][ T5921] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  144.507022][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.515685][ T5921] usb 2-1: Product: syz
[  144.542654][ T5921] usb 2-1: Manufacturer: syz
[  144.554238][ T5921] usb 2-1: SerialNumber: syz
[  144.582752][ T5921] usb 2-1: config 0 descriptor??
[  144.784003][   T89] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  144.815487][ T5921] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  144.855668][ T5921] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  144.884674][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  144.903786][ T5921] usb 2-1: media controller created
[  144.909988][   T30] audit: type=1326 audit(1760706913.558:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.3.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe67498efc9 code=0x0
[  144.932356][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.965426][   T89] usb 1-1: Using ep0 maxpacket: 16
[  144.972600][   T89] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  144.984273][   T89] usb 1-1: config 1 has no interface number 1
[  144.990691][   T89] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  145.002916][   T89] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  145.033924][   T89] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  145.057219][   T89] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  145.075507][   T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.105070][   T89] usb 1-1: Product: syz
[  145.109294][   T89] usb 1-1: Manufacturer: syz
[  145.132739][   T89] usb 1-1: SerialNumber: syz
[  145.223561][ T1218] usb 2-1: USB disconnect, device number 28
[  145.264008][ T5863] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  145.436409][ T5863] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  145.444943][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  145.456923][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  145.467968][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  145.479395][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.492438][ T5863] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.501854][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.511671][ T5863] usb 4-1: config 0 descriptor??
[  145.517858][ T7043] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  145.552646][   T89] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  146.033932][ T5921] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  146.204118][ T5921] usb 2-1: Using ep0 maxpacket: 16
[  146.213662][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.225339][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.238185][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  146.252558][ T5921] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  146.263441][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.280470][ T5921] usb 2-1: config 0 descriptor??
[  146.602533][   T89] usb 1-1: USB disconnect, device number 27
[  146.649662][ T6858] udevd[6858]: setting mode of /dev/dsp3 to 020660 failed: No such file or directory
[  146.662317][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  146.678579][ T6858] udevd[6858]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: No such file or directory
[  146.909709][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.922303][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.684056][   T89] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  147.856090][   T89] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  147.864785][   T89] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  147.882161][   T89] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  147.895792][   T89] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  147.907306][   T89] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  147.921191][   T89] usb 1-1: config 0 interface 0 has no altsetting 0
[  147.931581][   T89] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  147.941087][   T89] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  147.950197][   T89] usb 1-1: Product: syz
[  147.964196][   T89] usb 1-1: Manufacturer: syz
[  147.969809][ T5863] usbhid 4-1:0.0: can't add hid device: -71
[  147.978331][ T5863] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  147.991587][   T89] usb 1-1: SerialNumber: syz
[  148.007270][   T89] usb 1-1: config 0 descriptor??
[  148.014880][ T7058] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  148.026386][ T5863] usb 4-1: USB disconnect, device number 41
[  148.037864][   T89] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  148.065218][   T89] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  148.226957][ T7066] netlink: 'syz.2.357': attribute type 19 has an invalid length.
[  148.375455][ T7070] Zero length message leads to an empty skb
[  148.433644][ T5876] usb 1-1: USB disconnect, device number 28
[  148.445135][ T5876] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  148.543973][ T1218] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  148.694075][ T1218] usb 4-1: Using ep0 maxpacket: 8
[  148.701922][ T1218] usb 4-1: config index 0 descriptor too short (expected 38674, got 18)
[  148.710413][ T1218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.721394][ T1218] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 4
[  148.733105][ T1218] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  148.742505][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.750727][ T1218] usb 4-1: Product: syz
[  148.755177][ T1218] usb 4-1: Manufacturer: syz
[  148.759809][ T1218] usb 4-1: SerialNumber: syz
[  148.767773][ T1218] usb 4-1: config 0 descriptor??
[  148.819734][ T5921] usbhid 2-1:0.0: can't add hid device: -71
[  148.844210][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  148.875181][ T5921] usb 2-1: USB disconnect, device number 29
[  149.092955][   T30] audit: type=1326 audit(1760706917.738:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e12f8efc9 code=0x0
[  149.118610][ T1218] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  149.304464][ T1218] usb 1-1: Using ep0 maxpacket: 16
[  149.311907][ T1218] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  149.322011][ T1218] usb 1-1: config 1 has no interface number 1
[  149.328190][ T1218] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  149.339968][ T1218] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  149.344001][ T5921] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  149.354204][ T1218] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  149.356791][ T1218] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  149.383541][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.392229][ T1218] usb 1-1: Product: syz
[  149.396832][ T1218] usb 1-1: Manufacturer: syz
[  149.401478][ T1218] usb 1-1: SerialNumber: syz
[  149.516343][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.528033][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.540150][ T5921] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  149.550459][ T5921] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  149.559100][ T5921] usb 2-1: Manufacturer: syz
[  149.576144][ T5921] usb 2-1: config 0 descriptor??
[  149.821924][ T1218] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  150.008368][ T5921] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  150.455492][ T7078] capability: warning: `syz.1.362' uses 32-bit capabilities (legacy support in use)
[  150.618436][ T5921] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device
[  150.644467][ T5921] pyra 0003:1E7D:2CF6.0007: couldn't install mouse
[  150.657846][ T5921] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71
[  150.675288][ T5921] usb 2-1: USB disconnect, device number 30
[  150.755956][ T7091] fido_id[7091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  150.879662][ T1218] usb 1-1: USB disconnect, device number 29
[  150.931034][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.581064][ T1218] usb 4-1: USB disconnect, device number 42
[  151.646909][ T7108] syzkaller1: entered promiscuous mode
[  151.652518][ T7108] syzkaller1: entered allmulticast mode
[  152.245105][ T1218] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  152.324211][ T5921] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  152.406258][ T1218] usb 4-1: config 7 has an invalid interface number: 101 but max is 0
[  152.424952][ T1218] usb 4-1: config 7 has no interface number 0
[  152.444995][ T1218] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  152.461167][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.469649][ T1218] usb 4-1: Product: syz
[  152.473973][ T1218] usb 4-1: Manufacturer: syz
[  152.479222][ T1218] usb 4-1: SerialNumber: syz
[  152.514530][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.534979][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.548821][ T5921] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  152.559376][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.571530][ T5921] usb 1-1: config 0 descriptor??
[  152.813919][   T89] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  152.966656][   T89] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  152.977314][   T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.989605][ T5921] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  153.006355][   T89] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  153.021114][   T89] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  153.035475][ T5921] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input12
[  153.054197][   T89] usb 2-1: Manufacturer: syz
[  153.073060][   T89] usb 2-1: config 0 descriptor??
[  153.173989][   T89] rc_core: IR keymap rc-hauppauge not found
[  153.180037][   T89] Registered IR keymap rc-empty
[  153.201298][ T5921] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  153.230153][   T89] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  153.256981][ T5921] usb 1-1: USB disconnect, device number 30
[  153.264016][   T89] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  153.277213][ T1218] as10x_usb: device has been detected
[  153.283589][ T1218] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  153.369986][ T1218] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  153.394729][ T7126] fido_id[7126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  153.441142][ T1218] as10x_usb: error during firmware upload part1
[  153.458833][ T1218] Registered device Elgato EyeTV DTT Deluxe
[  153.776068][ T5921] usb 2-1: USB disconnect, device number 31
[  154.014380][ T1218] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  154.174298][ T1218] usb 1-1: Using ep0 maxpacket: 16
[  154.182706][ T1218] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  154.195567][ T1218] usb 1-1: config 1 has no interface number 1
[  154.202849][ T1218] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  154.214834][ T1218] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  154.228826][ T1218] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.245671][ T1218] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  154.256759][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.265356][ T1218] usb 1-1: Product: syz
[  154.269853][ T1218] usb 1-1: Manufacturer: syz
[  154.275280][ T1218] usb 1-1: SerialNumber: syz
[  154.622437][ T7137] FAULT_INJECTION: forcing a failure.
[  154.622437][ T7137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.640708][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT(full) 
[  154.640732][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  154.640743][ T7137] Call Trace:
[  154.640750][ T7137]  <TASK>
[  154.640758][ T7137]  dump_stack_lvl+0x189/0x250
[  154.640783][ T7137]  ? __pfx____ratelimit+0x10/0x10
[  154.640803][ T7137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.640832][ T7137]  ? __pfx__printk+0x10/0x10
[  154.640849][ T7137]  ? __might_fault+0xb0/0x130
[  154.640878][ T7137]  should_fail_ex+0x414/0x560
[  154.640905][ T7137]  _copy_from_iter+0x1de/0x1790
[  154.640937][ T7137]  ? rcu_is_watching+0x15/0xb0
[  154.640968][ T7137]  ? __pfx__copy_from_iter+0x10/0x10
[  154.640993][ T7137]  ? __build_skb_around+0x262/0x3f0
[  154.641023][ T7137]  ? netlink_sendmsg+0x642/0xb30
[  154.641039][ T7137]  ? skb_put+0x11b/0x210
[  154.641059][ T7137]  netlink_sendmsg+0x6b2/0xb30
[  154.641084][ T7137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.641105][ T7137]  ? aa_sock_msg_perm+0xf1/0x1d0
[  154.641128][ T7137]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  154.641149][ T7137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.641168][ T7137]  __sock_sendmsg+0x21c/0x270
[  154.641193][ T7137]  ____sys_sendmsg+0x505/0x830
[  154.641218][ T7137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.641245][ T7137]  ? import_iovec+0x74/0xa0
[  154.641265][ T7137]  ___sys_sendmsg+0x21f/0x2a0
[  154.641286][ T7137]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.641338][ T7137]  ? __fget_files+0x2a/0x420
[  154.641360][ T7137]  ? __fget_files+0x3a0/0x420
[  154.641390][ T7137]  __x64_sys_sendmsg+0x19b/0x260
[  154.641412][ T7137]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.641440][ T7137]  ? __pfx_ksys_write+0x10/0x10
[  154.641463][ T7137]  ? do_syscall_64+0xbe/0xfa0
[  154.641486][ T7137]  do_syscall_64+0xfa/0xfa0
[  154.641506][ T7137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.641522][ T7137]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  154.641539][ T7137]  ? clear_bhb_loop+0x60/0xb0
[  154.641559][ T7137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.641576][ T7137] RIP: 0033:0x7f8d3418efc9
[  154.641592][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.641607][ T7137] RSP: 002b:00007f8d34f8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.641626][ T7137] RAX: ffffffffffffffda RBX: 00007f8d343e5fa0 RCX: 00007f8d3418efc9
[  154.641637][ T7137] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004
[  154.641647][ T7137] RBP: 00007f8d34f8e090 R08: 0000000000000000 R09: 0000000000000000
[  154.641657][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.641666][ T7137] R13: 00007f8d343e6038 R14: 00007f8d343e5fa0 R15: 00007ffe10b8ca78
[  154.641694][ T7137]  </TASK>
[  154.935379][ T1218] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  155.093899][ T5921] usb 4-1: USB disconnect, device number 43
[  155.132891][ T5921] Unregistered device Elgato EyeTV DTT Deluxe
[  155.173381][ T5921] as10x_usb: device has been disconnected
[  155.300502][ T7143] FAULT_INJECTION: forcing a failure.
[  155.300502][ T7143] name failslab, interval 1, probability 0, space 0, times 0
[  155.324356][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.3.384 Not tainted syzkaller #0 PREEMPT(full) 
[  155.324382][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  155.324393][ T7143] Call Trace:
[  155.324400][ T7143]  <TASK>
[  155.324409][ T7143]  dump_stack_lvl+0x189/0x250
[  155.324432][ T7143]  ? __pfx____ratelimit+0x10/0x10
[  155.324454][ T7143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.324472][ T7143]  ? __pfx__printk+0x10/0x10
[  155.324496][ T7143]  ? __pfx___might_resched+0x10/0x10
[  155.324517][ T7143]  ? fs_reclaim_acquire+0x7d/0x100
[  155.324544][ T7143]  should_fail_ex+0x414/0x560
[  155.324571][ T7143]  should_failslab+0xa8/0x100
[  155.324596][ T7143]  __kmalloc_noprof+0xdf/0x800
[  155.324616][ T7143]  ? do_insn_ioctl+0x100/0x5a0
[  155.324641][ T7143]  do_insn_ioctl+0x100/0x5a0
[  155.324668][ T7143]  comedi_unlocked_ioctl+0x8b0/0x1020
[  155.324685][ T7143]  ? kasan_quarantine_put+0xdd/0x220
[  155.324713][ T7143]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  155.324741][ T7143]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  155.324764][ T7143]  ? do_vfs_ioctl+0xbe8/0x1430
[  155.324780][ T7143]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  155.324799][ T7143]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  155.324856][ T7143]  ? __fget_files+0x2a/0x420
[  155.324882][ T7143]  ? __fget_files+0x3a0/0x420
[  155.324902][ T7143]  ? __fget_files+0x2a/0x420
[  155.324927][ T7143]  ? bpf_lsm_file_ioctl+0x9/0x20
[  155.324950][ T7143]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  155.324969][ T7143]  __se_sys_ioctl+0xfc/0x170
[  155.324989][ T7143]  do_syscall_64+0xfa/0xfa0
[  155.325008][ T7143]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.325028][ T7143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.325046][ T7143]  ? clear_bhb_loop+0x60/0xb0
[  155.325067][ T7143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.325084][ T7143] RIP: 0033:0x7fe67498efc9
[  155.325100][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.325115][ T7143] RSP: 002b:00007fe6758c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.325134][ T7143] RAX: ffffffffffffffda RBX: 00007fe674be5fa0 RCX: 00007fe67498efc9
[  155.325147][ T7143] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000007
[  155.325159][ T7143] RBP: 00007fe6758c2090 R08: 0000000000000000 R09: 0000000000000000
[  155.325171][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.325181][ T7143] R13: 00007fe674be6038 R14: 00007fe674be5fa0 R15: 00007ffd383ccf28
[  155.325213][ T7143]  </TASK>
[  155.593285][   T30] audit: type=1326 audit(1760706924.238:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.3.384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe67498efc9 code=0x0
[  155.656346][   T30] audit: type=1800 audit(1760706924.248:20): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.384" name="memory.events" dev="tmpfs" ino=442 res=0 errno=0
[  155.708685][   T30] audit: type=1804 audit(1760706924.248:21): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.384" name="/newroot/81/memory.events" dev="tmpfs" ino=442 res=1 errno=0
[  156.297987][ T1218] usb 1-1: USB disconnect, device number 31
[  156.346481][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.988924][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.391'.
[  157.038075][ T7165] tipc: Invalid UDP bearer configuration
[  157.038130][ T7165] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  157.500166][ T1218] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  157.524707][ T5876] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  157.656795][ T1218] usb 1-1: config 7 has an invalid interface number: 101 but max is 0
[  157.665880][ T1218] usb 1-1: config 7 has no interface number 0
[  157.681670][ T1218] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  157.693313][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  157.703587][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.724234][ T1218] usb 1-1: Product: syz
[  157.730726][ T5876] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  157.754094][ T5876] usb 2-1: config 0 has no interface number 0
[  157.760248][ T5876] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  157.770574][ T1218] usb 1-1: Manufacturer: syz
[  157.784191][ T1218] usb 1-1: SerialNumber: syz
[  157.796658][ T5876] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  157.814156][ T5876] usb 2-1: config 0 interface 41 has no altsetting 0
[  157.826519][ T5876] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  157.854052][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.862299][ T5876] usb 2-1: Product: syz
[  157.885246][ T5876] usb 2-1: Manufacturer: syz
[  157.889953][ T5876] usb 2-1: SerialNumber: syz
[  157.911296][ T5876] usb 2-1: config 0 descriptor??
[  157.935148][ T7175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  157.943155][ T7175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  158.166684][ T7175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  158.174725][ T7175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  158.332804][ T7177] syzkaller1: entered promiscuous mode
[  158.339301][ T7177] syzkaller1: entered allmulticast mode
[  158.572760][ T1218] as10x_usb: device has been detected
[  158.582216][ T1218] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  158.609854][ T1218] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  158.626421][ T1218] as10x_usb: error during firmware upload part1
[  158.635547][ T1218] Registered device Elgato EyeTV DTT Deluxe
[  158.694080][ T5932] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  158.792338][ T5876] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  158.856488][ T5932] usb 4-1: Using ep0 maxpacket: 32
[  158.864675][ T5932] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  158.873266][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.884539][ T5932] usb 4-1: config 0 has no interface number 0
[  158.890825][ T5932] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  158.903482][ T5932] usb 4-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88
[  158.915648][ T5932] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  158.926166][ T5932] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  158.936530][ T5932] usb 4-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.953550][ T5932] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  158.964249][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.972461][ T5932] usb 4-1: Product: syz
[  158.977104][ T5932] usb 4-1: Manufacturer: syz
[  158.981894][ T5932] usb 4-1: SerialNumber: syz
[  158.996791][ T5932] usb 4-1: config 0 descriptor??
[  159.005314][ T7180] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  159.018406][ T5876] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  159.057812][ T5876] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  159.072288][ T5876] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  159.092803][ T5876] usb 2-1: USB disconnect, device number 32
[  159.286492][ T5932] usb 4-1: probing VID:PID(0424:012C)   
[  159.300724][ T5932] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B
[  159.308531][ T5932] usb 4-1: vub300 testing BULK IN EndPoint(1) 88
[  159.315138][ T5932] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  159.323363][ T5932] vub300 4-1:0.133: probe with driver vub300 failed with error -22
[  159.342447][ T5932] usb 4-1: USB disconnect, device number 44
[  159.677993][ T7183] syzkaller1: entered promiscuous mode
[  159.684975][ T7183] syzkaller1: entered allmulticast mode
[  160.007934][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'.
[  160.017131][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'.
[  160.026693][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'.
[  160.102957][ T7192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.124696][ T7192] Bluetooth: MGMT ver 1.23
[  160.247554][ T5863] usb 1-1: USB disconnect, device number 32
[  160.275844][ T5863] Unregistered device Elgato EyeTV DTT Deluxe
[  160.281231][ T5863] as10x_usb: device has been disconnected
[  160.293952][ T5932] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  160.460853][ T5932] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  160.470381][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.480239][ T5932] usb 2-1: Product: syz
[  160.484989][ T5932] usb 2-1: Manufacturer: syz
[  160.489718][ T5932] usb 2-1: SerialNumber: syz
[  160.654031][ T5863] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  160.815692][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.828662][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.843625][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  160.856994][ T5863] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.866150][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.884305][ T5863] usb 1-1: config 0 descriptor??
[  161.306268][ T5863] hid_parser_main: 28 callbacks suppressed
[  161.306293][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.323130][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.343163][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.357834][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.379681][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.407919][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.421969][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.429913][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.438731][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.459715][ T5863] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  161.480000][ T5863] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  161.515929][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.534534][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.561190][ T5863] usb 1-1: USB disconnect, device number 33
[  161.602325][ T7197] fido_id[7197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  161.684520][ T5921] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  161.845338][ T5921] usb 4-1: Using ep0 maxpacket: 32
[  161.856238][ T5921] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  161.864839][ T5921] usb 4-1: config 0 has no interface number 0
[  161.871011][ T5921] usb 4-1: config 0 interface 184 has no altsetting 0
[  161.885829][ T5921] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  161.895402][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.903778][ T5921] usb 4-1: Product: syz
[  161.909841][ T5921] usb 4-1: Manufacturer: syz
[  161.916260][ T5921] usb 4-1: SerialNumber: syz
[  161.923803][ T5921] usb 4-1: config 0 descriptor??
[  161.946688][ T5921] smsc75xx v1.0.0
[  162.171350][ T7202] syzkaller1: entered promiscuous mode
[  162.177399][ T7202] syzkaller1: entered allmulticast mode
[  162.181481][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  162.236767][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  162.264209][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  162.276806][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  162.287455][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  162.310094][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  162.320388][ T5921] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  162.359722][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE
[  162.362279][ T5921] usb 4-1: USB disconnect, device number 45
[  162.727764][ T7211] can0: slcan on ptm1.
[  162.845866][ T7211] can0 (unregistered): slcan off ptm1.
[  163.144075][ T5921] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  163.191825][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO
[  163.214357][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  163.245306][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  163.265119][ T5932] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  163.288082][ T5921] usb 4-1: device descriptor read/64, error -71
[  163.298367][ T5932] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  163.329741][ T5932] usb 2-1: USB disconnect, device number 33
[  163.413946][ T5876] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  163.543935][ T5921] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  163.574229][ T5876] usb 1-1: Using ep0 maxpacket: 16
[  163.581425][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  163.607418][ T5876] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  163.629315][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.654481][ T5876] usb 1-1: Product: syz
[  163.658983][ T5876] usb 1-1: Manufacturer: syz
[  163.663685][ T5876] usb 1-1: SerialNumber: syz
[  163.683999][ T5921] usb 4-1: device descriptor read/64, error -71
[  163.686635][ T5876] usb 1-1: config 0 descriptor??
[  163.716366][ T5876] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  163.759643][ T5876] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  163.800915][ T5921] usb usb4-port1: attempt power cycle
[  164.093958][ T5863] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  164.155524][ T5921] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  164.185052][ T5921] usb 4-1: device descriptor read/8, error -71
[  164.244417][ T5863] usb 2-1: Using ep0 maxpacket: 16
[  164.256431][ T5863] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  164.265892][ T5863] usb 2-1: config 1 has no interface number 1
[  164.272391][ T5863] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  164.285394][ T5863] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  164.300213][ T5863] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  164.313072][ T5876] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  164.326647][ T5863] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.336531][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.346070][ T5863] usb 2-1: Product: syz
[  164.350702][ T5863] usb 2-1: Manufacturer: syz
[  164.356762][ T5863] usb 2-1: SerialNumber: syz
[  164.434582][ T5921] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  164.464915][ T5921] usb 4-1: device descriptor read/8, error -71
[  164.574756][ T5921] usb usb4-port1: unable to enumerate USB device
[  164.763432][ T7227] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  164.775155][ T7227] block device autoloading is deprecated and will be removed.
[  164.788122][ T5863] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  164.804369][ T5921] kernel read not supported for file [fscontext] (pid: 5921 comm: kworker/1:7)
[  164.853479][ T5876] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  164.870011][ T5876] em28xx 1-1:0.0: board has no eeprom
[  164.943977][ T5876] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  164.951938][ T5876] em28xx 1-1:0.0: dvb set to bulk mode.
[  164.958747][ T5932] em28xx 1-1:0.0: Binding DVB extension
[  164.979681][ T5876] usb 1-1: USB disconnect, device number 34
[  165.005566][ T5876] em28xx 1-1:0.0: Disconnecting em28xx
[  165.066067][ T5932] em28xx 1-1:0.0: Registering input extension
[  165.079043][ T5876] em28xx 1-1:0.0: Closing input extension
[  165.113156][ T5876] em28xx 1-1:0.0: Freeing device
[  165.475015][ T7256] syzkaller1: entered promiscuous mode
[  165.480864][ T7256] syzkaller1: entered allmulticast mode
[  165.491124][ T7256] FAULT_INJECTION: forcing a failure.
[  165.491124][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.507467][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(full) 
[  165.507487][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  165.507495][ T7256] Call Trace:
[  165.507501][ T7256]  <TASK>
[  165.507507][ T7256]  dump_stack_lvl+0x189/0x250
[  165.507528][ T7256]  ? __pfx____ratelimit+0x10/0x10
[  165.507544][ T7256]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.507558][ T7256]  ? __pfx__printk+0x10/0x10
[  165.507571][ T7256]  ? __might_fault+0xb0/0x130
[  165.507600][ T7256]  should_fail_ex+0x414/0x560
[  165.507623][ T7256]  _copy_from_iter+0x1de/0x1790
[  165.507649][ T7256]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  165.507665][ T7256]  ? kmem_cache_alloc_node_noprof+0x48c/0x710
[  165.507693][ T7256]  ? __pfx__copy_from_iter+0x10/0x10
[  165.507717][ T7256]  ? alloc_pages_noprof+0xbe/0x190
[  165.507741][ T7256]  ? skb_page_frag_refill+0x199/0x320
[  165.507771][ T7256]  tcp_sendmsg_locked+0x2347/0x5540
[  165.507852][ T7256]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  165.507873][ T7256]  ? __local_bh_enable_ip+0x12d/0x1c0
[  165.507897][ T7256]  ? __local_bh_enable_ip+0x12d/0x1c0
[  165.507928][ T7256]  tcp_sendmsg+0x2f/0x50
[  165.507951][ T7256]  __sock_sendmsg+0xe5/0x270
[  165.507973][ T7256]  __sys_sendto+0x3bd/0x520
[  165.507992][ T7256]  ? __pfx___sys_sendto+0x10/0x10
[  165.508004][ T7256]  ? count_memcg_event_mm+0x21/0x260
[  165.508046][ T7256]  ? exc_page_fault+0x82/0x100
[  165.508067][ T7256]  ? do_user_addr_fault+0xc85/0x1380
[  165.508091][ T7256]  __x64_sys_sendto+0xde/0x100
[  165.508109][ T7256]  do_syscall_64+0xfa/0xfa0
[  165.508126][ T7256]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.508142][ T7256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.508157][ T7256]  ? clear_bhb_loop+0x60/0xb0
[  165.508176][ T7256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.508191][ T7256] RIP: 0033:0x7fc8bbf90e5c
[  165.508206][ T7256] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  165.508220][ T7256] RSP: 002b:00007fc8ba1f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  165.508242][ T7256] RAX: ffffffffffffffda RBX: 00007fc8ba1f4fc0 RCX: 00007fc8bbf90e5c
[  165.508254][ T7256] RDX: 0000000000000020 RSI: 00007fc8ba1f5010 RDI: 0000000000000004
[  165.508264][ T7256] RBP: 0000000000000000 R08: 00007fc8ba1f4f14 R09: 000000000000000c
[  165.508274][ T7256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  165.508284][ T7256] R13: 00007fc8ba1f4f68 R14: 00007fc8ba1f5010 R15: 0000000000000000
[  165.508314][ T7256]  </TASK>
[  166.008315][ T5863] usb 2-1: USB disconnect, device number 34
[  166.112285][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.152282][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.176723][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  166.187009][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  166.195355][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  166.205305][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  166.213539][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  166.300115][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.362408][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.424949][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.814754][ T7261] chnl_net:caif_netlink_parms(): no params data found
[  166.970526][   T13] bridge_slave_1: left allmulticast mode
[  166.977148][   T13] bridge_slave_1: left promiscuous mode
[  166.984837][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.024471][   T13] bridge_slave_0: left allmulticast mode
[  167.030344][   T13] bridge_slave_0: left promiscuous mode
[  167.043182][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.124409][ T5921] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  167.143966][ T5883] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  167.294042][ T5921] usb 1-1: Using ep0 maxpacket: 8
[  167.302967][ T5921] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  167.303998][ T5883] usb 2-1: Using ep0 maxpacket: 16
[  167.312078][ T5921] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  167.351189][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  167.364167][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  167.376564][ T5883] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  167.389707][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.398654][ T5883] usb 2-1: Product: syz
[  167.407805][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  167.413359][ T5883] usb 2-1: Manufacturer: syz
[  167.419723][ T5921] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.428502][ T5883] usb 2-1: SerialNumber: syz
[  167.448409][ T5921] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  167.455833][ T5883] usb 2-1: config 0 descriptor??
[  167.474582][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.475293][ T5883] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  167.512569][ T5883] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  167.624370][   T13] team0: Port device geneve0 removed
[  167.654142][   T89] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  167.726551][ T5921] usb 1-1: usb_control_msg returned -32
[  167.747045][ T5921] usbtmc 1-1:16.0: can't read capabilities
[  167.854310][   T89] usb 4-1: Using ep0 maxpacket: 16
[  167.862009][   T89] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  167.872299][   T89] usb 4-1: config 1 has no interface number 1
[  167.878980][   T89] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  167.898906][   T89] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  167.913496][   T89] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  167.927257][   T89] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.937680][   T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.946017][   T89] usb 4-1: Product: syz
[  167.950378][   T89] usb 4-1: Manufacturer: syz
[  167.955874][   T89] usb 4-1: SerialNumber: syz
[  167.962149][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.983461][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.996315][   T13] bond0 (unregistering): Released all slaves
[  168.087286][ T5883] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  168.088269][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.100976][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.109313][ T7261] bridge_slave_0: entered allmulticast mode
[  168.118593][ T7261] bridge_slave_0: entered promiscuous mode
[  168.133109][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.142084][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.150947][ T7261] bridge_slave_1: entered allmulticast mode
[  168.161154][ T7261] bridge_slave_1: entered promiscuous mode
[  168.168155][ T7314] usbtmc 1-1:16.0: control status returned 0
[  168.183463][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.197385][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.242153][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.257816][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.314293][ T5821] Bluetooth: hci1: command tx timeout
[  168.316738][ T7261] team0: Port device team_slave_0 added
[  168.331005][ T7261] team0: Port device team_slave_1 added
[  168.370681][ T5921] usb 1-1: USB disconnect, device number 35
[  168.400871][   T89] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  168.433358][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.441783][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  168.469766][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.492827][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.502108][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  168.531013][ T5883] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  168.541507][ T5883] em28xx 2-1:0.0: board has no eeprom
[  168.549623][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.624195][ T5883] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  168.632440][ T5883] em28xx 2-1:0.0: dvb set to bulk mode.
[  168.635996][ T7261] hsr_slave_0: entered promiscuous mode
[  168.639009][ T5876] em28xx 2-1:0.0: Binding DVB extension
[  168.645574][ T7261] hsr_slave_1: entered promiscuous mode
[  168.658554][ T7261] debugfs: 'hsr0' already exists in 'hsr'
[  168.683892][ T7261] Cannot create hsr debugfs directory
[  168.685840][ T5883] usb 2-1: USB disconnect, device number 35
[  168.752316][ T5883] em28xx 2-1:0.0: Disconnecting em28xx
[  168.780797][ T5876] em28xx 2-1:0.0: Registering input extension
[  168.792393][ T5883] em28xx 2-1:0.0: Closing input extension
[  168.824720][ T5883] em28xx 2-1:0.0: Freeing device
[  169.020434][ T7331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'.
[  169.178533][ T7336] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.224398][ T7261] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  169.237110][ T7261] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  169.250281][ T7336] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.266413][ T7261] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  169.278799][ T7261] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  169.321882][ T7336] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.376099][ T7336] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.481973][   T89] usb 4-1: USB disconnect, device number 50
[  169.549750][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.557349][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.593512][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.649356][ T2132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.682144][ T7261] 8021q: adding VLAN 0 to HW filter on device team0
[  169.689928][ T2132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.720255][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.767790][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.775420][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.902118][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.909558][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.395977][ T5821] Bluetooth: hci1: command tx timeout
[  170.408633][   T13] hsr_slave_0: left promiscuous mode
[  170.414073][ T1218] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  170.435589][   T13] hsr_slave_1: left promiscuous mode
[  170.448969][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.470615][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.508908][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.521730][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.547413][ T1218] usb 2-1: device descriptor read/64, error -71
[  170.599328][   T13] veth1_macvtap: left promiscuous mode
[  170.617866][   T13] veth0_macvtap: left promiscuous mode
[  170.623800][   T13] veth1_vlan: left promiscuous mode
[  170.644515][   T13] veth0_vlan: left promiscuous mode
[  170.814973][ T1218] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  170.955015][ T1218] usb 2-1: device descriptor read/64, error -71
[  171.064419][ T1218] usb usb2-port1: attempt power cycle
[  171.284329][ T5921] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  171.292643][   T13] team0 (unregistering): Port device team_slave_1 removed
[  171.339238][   T13] team0 (unregistering): Port device team_slave_0 removed
[  171.414059][ T1218] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  171.436397][ T5921] usb 4-1: Using ep0 maxpacket: 8
[  171.443727][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.445083][ T1218] usb 2-1: device descriptor read/8, error -71
[  171.457431][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  171.473254][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  171.484546][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  171.497177][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  171.508709][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.524559][ T5921] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  171.535386][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.553365][ T5921] usb 4-1: Product: syz
[  171.561483][ T5921] usb 4-1: Manufacturer: syz
[  171.567210][ T5921] usb 4-1: SerialNumber: syz
[  171.575637][ T5921] usb 4-1: config 0 descriptor??
[  171.582854][ T7384] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  171.704532][ T1218] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  171.724951][ T1218] usb 2-1: device descriptor read/8, error -71
[  171.844528][ T1218] usb usb2-port1: unable to enumerate USB device
[  172.199118][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.482428][ T5821] Bluetooth: hci1: command tx timeout
[  172.847731][ T7261] veth0_vlan: entered promiscuous mode
[  172.901105][ T7261] veth1_vlan: entered promiscuous mode
[  172.966343][ T7261] veth0_macvtap: entered promiscuous mode
[  172.978861][ T7261] veth1_macvtap: entered promiscuous mode
[  172.985483][ T5921] rc_core: IR keymap rc-snapstream-firefly not found
[  172.992274][ T5921] Registered IR keymap rc-empty
[  173.006371][ T5921] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  173.020452][ T5921] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16
[  173.021973][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.043606][ T5921] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17
[  173.075104][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.127698][ T1029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.194272][ T5917] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  173.228546][ T1029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.272290][ T1029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.308282][ T1029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.396216][ T5917] usb 1-1: Using ep0 maxpacket: 16
[  173.412708][ T5917] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  173.439929][ T5917] usb 1-1: config 1 has no interface number 1
[  173.449524][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  173.520872][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  173.553389][ T5917] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  173.600875][ T5917] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  173.600907][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.600925][ T5917] usb 1-1: Product: syz
[  173.601005][ T5917] usb 1-1: Manufacturer: syz
[  173.601019][ T5917] usb 1-1: SerialNumber: syz
[  173.635691][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.635744][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.687047][ T7425] tty tty4: ldisc open failed (-12), clearing slot 3
[  173.698079][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.708793][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.843610][ T7432] syzkaller1: entered promiscuous mode
[  173.850227][ T7432] syzkaller1: entered allmulticast mode
[  173.883815][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'.
[  174.017785][ T5917] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  174.127511][ T5932] usb 4-1: USB disconnect, device number 51
[  174.127616][    C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  174.254314][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  174.353724][ T7447] IPVS: length: 70 != 8
[  174.365316][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  174.441606][ T5876] usb 5-1: Using ep0 maxpacket: 8
[  174.477127][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.492603][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  174.506233][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  174.523996][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  174.535548][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  174.562040][ T5821] Bluetooth: hci1: command tx timeout
[  174.577050][ T5876] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  174.588230][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  174.598442][ T5876] usb 5-1: Product: syz
[  174.602681][ T5876] usb 5-1: Manufacturer: syz
[  174.607496][ T5876] usb 5-1: SerialNumber: syz
[  174.616070][ T5876] usb 5-1: config 0 descriptor??
[  174.833112][ T5876] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  174.841905][ T5876] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  174.999598][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  175.009498][ T5932] usb 4-1: new low-speed USB device number 52 using dummy_hcd
[  175.047145][ T7437] openvswitch: netlink: IP tunnel dst address not specified
[  175.057632][ T5876] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32
[  175.067410][ T5876] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[  175.078442][ T5876] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  175.109047][ T5917] usb 1-1: USB disconnect, device number 36
[  175.148067][ T5876] usb 5-1: USB disconnect, device number 2
[  175.173695][ T5932] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  175.192320][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.218433][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  175.248131][ T5932] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  175.281826][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  175.301134][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  175.318509][ T5932] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  175.327726][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  175.338933][ T5932] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  175.353323][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  175.365476][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  175.385272][ T5932] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  175.392787][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  175.404312][ T5932] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  175.416280][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  175.429401][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  175.447070][ T5932] usb 4-1: string descriptor 0 read error: -22
[  175.453750][ T5932] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  175.462902][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.493044][ T5932] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  175.788004][ T7490] input: syz1 as /devices/virtual/input/input18
[  175.793798][ T1218] usb 4-1: USB disconnect, device number 52
[  176.185744][ T5917] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  176.264255][   T89] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  176.359456][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.372302][ T5917] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  176.384111][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.401332][ T5917] usb 2-1: config 0 descriptor??
[  176.449733][   T89] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  176.460121][   T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  176.471780][   T89] usb 1-1: SerialNumber: syz
[  176.487679][   T89] usb 1-1: config 0 descriptor??
[  176.828391][   T89] hackrf 1-1:0.0: usb_control_msg() failed -32 request 0e
[  176.840246][ T5917] zydacron 0003:13EC:0006.000A: item fetching failed at offset 4/5
[  176.852661][   T89] hackrf 1-1:0.0: Could not detect board
[  176.863628][ T5917] zydacron 0003:13EC:0006.000A: parse failed
[  176.870017][   T89] hackrf 1-1:0.0: probe with driver hackrf failed with error -32
[  176.889425][ T5917] zydacron 0003:13EC:0006.000A: probe with driver zydacron failed with error -22
[  177.077036][ T5876] usb 2-1: USB disconnect, device number 40
[  177.264039][ T1218] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  177.429776][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.464060][ T1218] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  177.484367][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.528756][ T1218] usb 5-1: config 0 descriptor??
[  177.945838][ T1218] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  177.961996][ T1218] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input19
[  178.073007][ T1218] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  178.144166][   T89] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  178.319158][   T89] usb 2-1: config 7 has an invalid interface number: 101 but max is 0
[  178.333926][   T89] usb 2-1: config 7 has no interface number 0
[  178.347190][   T89] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  178.356597][   T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.364669][   T89] usb 2-1: Product: syz
[  178.369930][   T89] usb 2-1: Manufacturer: syz
[  178.375065][   T89] usb 2-1: SerialNumber: syz
[  178.484325][ T1218] usb 5-1: USB disconnect, device number 3
[  178.816342][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.477'.
[  178.827820][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.477'.
[  178.838102][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.477'.
[  178.935734][ T7571] syzkaller1: entered promiscuous mode
[  178.941360][ T7571] syzkaller1: entered allmulticast mode
[  179.128893][ T5876] usb 1-1: USB disconnect, device number 37
[  179.165843][   T89] as10x_usb: device has been detected
[  179.197808][   T89] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  179.243037][   T89] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  179.276084][   T89] as10x_usb: error during firmware upload part1
Stopping sshd: stopped /usr/sbin/sshd (pid 5582)
OK
[  179.283244][   T89] Registered device Elgato EyeTV DTT Deluxe
[  179.393931][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd
Stopping crond: [  179.463930][ T5917] usb 4-1: new high-speed USB device number 53 using dummy_hcd
stopped /usr/sbin/crond (pid 5565)
OK
[  179.554680][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  179.564212][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.577085][ T5921] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  179.587282][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.607257][ T5921] usb 5-1: config 0 descriptor??
[  179.613990][ T5917] usb 4-1: Using ep0 maxpacket: 16
[  179.622849][ T5921] dvb-usb: found a 'TeVii S662' in warm state.
[  179.629819][ T5921] dw2102: su3000_power_ctrl: 1, initialized 0
[  179.638542][ T5921] dvb-usb: bulk message failed: -22 (2/0)
Stopping dhcpcd.[  179.653777][ T5917] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
..
[  179.663873][ T5917] usb 4-1: config 1 has no interface number 1
[  179.672550][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  179.685649][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  179.695591][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  179.709584][ T5921] dvbdev: DVB: registering new adapter (TeVii S662)
[  179.716682][ T5921] usb 5-1: media controller created
[  179.722335][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  179.729694][ T5917] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
stopped /sbin/dhcpcd (pid 5490)[  179.742605][ T5921] dw2102: i2c transfer failed.

[  179.752432][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  179.768750][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  179.784306][ T5921] dw2102: i2c transfer failed.
[  179.791809][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.806630][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  179.818195][ T5917] usb 4-1: Product: syz
[  179.833578][ T5921] dw2102: i2c transfer failed.
[  179.841139][ T5917] usb 4-1: Manufacturer: syz
[  179.848088][ T7577] dvb-usb: bulk message failed: -22 (27/0)
[  179.855620][ T7577] dw2102: i2c transfer failed.
[  179.864045][ T5917] usb 4-1: SerialNumber: syz
[  179.869155][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  179.886909][ T5921] dw2102: i2c transfer failed.
[  179.890870][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.891821][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  179.926029][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
Stopping network: [  179.955247][ T5921] dw2102: i2c transfer failed.
[  179.970604][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  179.991102][ T5921] dw2102: i2c transfer failed.
[  180.011390][ T5921] dvb-usb: MAC address: 02:02:02:02:02:02
[  180.079052][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.163424][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  180.198348][ T5921] dw2102: command 0x0e transfer failed.
[  180.215187][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  180.221137][ T5921] dw2102: command 0x0e transfer failed.
[  180.324412][ T5917] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  180.534354][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  180.550649][ T5921] dw2102: command 0x0e transfer failed.
[  180.561184][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  180.576267][ T5921] dw2102: command 0x0e transfer failed.
[  180.608009][ T5921] dvb-usb: bulk message failed: -22 (1/0)
[  180.632296][ T5921] dw2102: command 0x51 transfer failed.
[  180.643699][ T5921] dvb-usb: bulk message failed: -22 (5/0)
[  180.664028][ T5921] dw2102: i2c probe for address 0x68 failed.
[  180.669850][ T7615] syzkaller1: entered promiscuous mode
[  180.675651][ T5921] dvb-usb: bulk message failed: -22 (5/0)
[  180.689785][ T5921] dw2102: i2c probe for address 0x69 failed.
[  180.708905][ T5921] dvb-usb: bulk message failed: -22 (5/0)
[  180.712627][ T7615] syzkaller1: entered allmulticast mode
[  180.726629][ T5921] dw2102: i2c probe for address 0x6a failed.
[  180.740796][ T5921] dw2102: probing for demodulator failed. Is the external power switched on?
[  180.766098][ T5921] dvb-usb: no frontend was attached by 'TeVii S662'
[  180.921520][ T5921] rc_core: IR keymap rc-tt-1500 not found
OK
[  180.938924][ T5921] Registered IR keymap rc-empty
[  180.942917][ T5876] usb 2-1: USB disconnect, device number 41
[  180.955406][ T5921] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  180.992690][ T5921] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input20
[  181.027005][ T5876] Unregistered device Elgato EyeTV DTT Deluxe
[  181.039350][ T5876] as10x_usb: device has been disconnected
[  181.053049][ T5921] dvb-usb: schedule remote query interval to 250 msecs.
[  181.101311][ T5921] dw2102: su3000_power_ctrl: 0, initialized 1
[  181.143298][ T5921] dvb-usb: TeVii S662 successfully initialized and connected.
[  181.198005][ T5921] usb 5-1: USB disconnect, device number 4
Stopping iptables: [  181.341753][ T5921] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  181.546056][ T5917] usb 4-1: USB disconnect, device number 53
OK
Stopping system message bus: [  181.823964][   T89] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  182.054102][   T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.072449][   T89] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  182.095102][   T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.144894][   T89] usb 1-1: config 0 descriptor??
[  182.538054][ T7641] [U] done
[  182.564080][   T89] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  182.579540][   T89] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000C/input/input21
[  182.854904][   T89] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  183.115954][   T89] usb 1-1: USB disconnect, device number 38
[  183.385061][ T7679] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.499' sets config #6
[  183.784233][ T1218] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  183.794033][   T89] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  183.953236][ T1218] usb 5-1: Using ep0 maxpacket: 16
[  183.959207][   T89] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  183.974762][ T1218] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  183.984452][   T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.984480][   T89] usb 2-1: Product: syz
[  183.984495][   T89] usb 2-1: Manufacturer: syz
[  183.984509][   T89] usb 2-1: SerialNumber: syz
[  183.987767][   T89] usb 2-1: config 0 descriptor??
[  184.000735][ T1218] usb 5-1: config 1 has no interface number 1
[  184.028983][ T1218] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  184.040162][ T1218] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  184.058535][ T1218] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  184.072274][ T1218] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  184.088857][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.097437][ T5876] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[  184.109074][ T1218] usb 5-1: Product: syz
[  184.113402][ T1218] usb 5-1: Manufacturer: syz
[  184.119042][ T1218] usb 5-1: SerialNumber: syz
[  184.128939][ T7692] [U] Stopping klogd: OK
[  184.267970][ T5876] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  184.294264][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  184.318468][ T5876] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.372946][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  184.398110][ T5932] usb 2-1: USB disconnect, device number 42
[  184.417566][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  184.446461][ T5876] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  184.457637][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  184.469466][ T5876] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.482776][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  184.496319][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  184.511300][ T5876] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  184.520490][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  184.532202][ T5876] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.544445][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  184.556515][ T1218] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  184.565706][ T5876] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  184.583276][ T5876] usb 1-1: string descriptor 0 read error: -22
[  184.590751][ T5876] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  184.600352][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.617613][ T5876] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  184.627683][ T7709] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.508'.
[  184.821548][ T5932] usb 1-1: USB disconnect, device number 39
[  184.852835][ T7718] netlink: 'syz.3.511': attribute type 10 has an invalid length.
[  185.224051][  T798] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  185.386073][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.397708][  T798] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  185.412026][  T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.418433][ T7699] [U] Stopping acpid: OK
[  185.423944][  T798] usb 2-1: config 0 descriptor??
[  185.589948][ T1218] usb 5-1: USB disconnect, device number 5
[  185.591569][ T7742] [U] Stopping syslogd: stopped /sbin/syslogd (pid 5178)
[  185.617581][ T7741] [U] OK
[  185.784240][ T5921] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  185.843132][  T798] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  185.862625][  T798] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input22
[  185.882958][ T7749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'.
[  185.893992][ T7749] tipc: Invalid UDP bearer configuration
[  185.894119][ T7749] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  185.962445][ T5921] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  185.968563][  T798] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  185.975336][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.000859][ T5921] usb 4-1: Product: syz
[  186.012034][ T7750] [U] umount: can't remount debugfs read-only
[  186.020693][ T5921] usb 4-1: Manufacturer: syz
[  186.027179][ T7750] [U] umount: tmpfs busy - remounted read-only
[  186.036386][ T5921] usb 4-1: SerialNumber: syz
[  186.049911][ T5921] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  186.059433][ T7752] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.518'.
[  186.068422][   T89] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  186.286717][ T7744] random: crng reseeded on system resumption
[  186.323313][ T7744] FAULT_INJECTION: forcing a failure.
[  186.323313][ T7744] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  186.387798][ T5932] usb 2-1: USB disconnect, device number 43
[  186.394208][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.3.516 Not tainted syzkaller #0 PREEMPT(full) 
[  186.394233][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  186.394244][ T7744] Call Trace:
[  186.394252][ T7744]  <TASK>
[  186.394259][ T7744]  dump_stack_lvl+0x189/0x250
[  186.394291][ T7744]  ? __pfx____ratelimit+0x10/0x10
[  186.394313][ T7744]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.394409][ T7744]  ? __pfx__printk+0x10/0x10
[  186.394433][ T7744]  ? fs_reclaim_acquire+0x7d/0x100
[  186.394460][ T7744]  should_fail_ex+0x414/0x560
[  186.394489][ T7744]  prepare_alloc_pages+0x22b/0x650
[  186.394520][ T7744]  __alloc_frozen_pages_noprof+0x123/0x370
[  186.394547][ T7744]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  186.394589][ T7744]  alloc_pages_mpol+0x232/0x4a0
[  186.394619][ T7744]  alloc_pages_noprof+0xa9/0x190
[  186.394645][ T7744]  get_zeroed_page_noprof+0x1a/0x90
[  186.394668][ T7744]  get_image_page+0x36/0x330
[  186.394699][ T7744]  memory_bm_create+0x736/0xdc0
[  186.394737][ T7744]  create_basic_memory_bitmaps+0x98/0x3d0
[  186.394759][ T7744]  snapshot_open+0x1aa/0x280
[  186.394782][ T7744]  ? __pfx_snapshot_open+0x10/0x10
[  186.394800][ T7744]  misc_open+0x2d5/0x350
[  186.394829][ T7744]  chrdev_open+0x4cc/0x5e0
[  186.394856][ T7744]  ? __pfx_chrdev_open+0x10/0x10
[  186.394881][ T7744]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  186.394911][ T7744]  ? __pfx_chrdev_open+0x10/0x10
[  186.394931][ T7744]  do_dentry_open+0x953/0x13f0
[  186.394965][ T7744]  vfs_open+0x3b/0x340
[  186.394986][ T7744]  ? path_openat+0x2ecd/0x3830
[  186.395004][ T7744]  path_openat+0x2ee5/0x3830
[  186.395051][ T7744]  ? __pfx_path_openat+0x10/0x10
[  186.395086][ T7744]  do_filp_open+0x1fa/0x410
[  186.395104][ T7744]  ? __lock_acquire+0xab9/0xd20
[  186.395129][ T7744]  ? __pfx_do_filp_open+0x10/0x10
[  186.395178][ T7744]  ? _raw_spin_unlock+0x28/0x50
[  186.395197][ T7744]  ? alloc_fd+0x64c/0x6c0
[  186.395230][ T7744]  do_sys_openat2+0x121/0x1c0
[  186.395259][ T7744]  ? __pfx_do_sys_openat2+0x10/0x10
[  186.395290][ T7744]  ? ksys_write+0x22a/0x250
[  186.395319][ T7744]  ? __pfx_ksys_write+0x10/0x10
[  186.395345][ T7744]  __x64_sys_openat+0x138/0x170
[  186.395370][ T7744]  do_syscall_64+0xfa/0xfa0
[  186.395390][ T7744]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.395412][ T7744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.395431][ T7744]  ? clear_bhb_loop+0x60/0xb0
[  186.395453][ T7744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.395471][ T7744] RIP: 0033:0x7fe67498efc9
[  186.395500][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.395516][ T7744] RSP: 002b:00007fe6758c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  186.395541][ T7744] RAX: ffffffffffffffda RBX: 00007fe674be5fa0 RCX: 00007fe67498efc9
[  186.395556][ T7744] RDX: 0000000000008001 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  186.395569][ T7744] RBP: 00007fe6758c2090 R08: 0000000000000000 R09: 0000000000000000
[  186.395581][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  186.395591][ T7744] R13: 00007fe674be6038 R14: 00007fe674be5fa0 R15: 00007ffd383ccf28
[  186.395624][ T7744]  </TASK>
[  186.432863][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'.
[  186.454203][ T5921] usb 4-1: USB disconnect, device number 54
[  187.114153][   T89] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  187.129178][   T89] ath9k_htc: Failed to initialize the device
[  187.148627][ T5921] usb 4-1: ath9k_htc: USB layer deinitialized
[  187.183974][  T798] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  187.357004][  T798] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  187.368764][  T798] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  187.385393][  T798] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  187.397420][  T798] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  187.410147][  T798] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  187.425080][  T798] usb 5-1: config 0 interface 0 has no altsetting 0
[  187.435340][  T798] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  187.451568][  T798] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  187.460225][  T798] usb 5-1: Product: syz
[  187.464856][  T798] usb 5-1: Manufacturer: syz
[  187.469472][  T798] usb 5-1: SerialNumber: syz
[  187.470642][ T5921] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  187.477129][  T798] usb 5-1: config 0 descriptor??
[  187.488079][ T7765] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  187.498147][  T798] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  187.509550][  T798] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  187.544002][ T5900] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  187.655909][ T5921] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  187.664977][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  187.679508][ T5921] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  187.691412][ T5921] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  187.705162][ T5863] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  187.713497][ T5921] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  187.727135][ T5900] usb 2-1: Using ep0 maxpacket: 16
[  187.736924][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  187.745937][ T5900] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  187.755396][ T5900] usb 2-1: config 1 has no interface number 1
[  187.762277][ T5900] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  187.775967][ T5900] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  187.790038][ T5900] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  187.801704][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  187.811753][ T5921] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  187.823728][ T5921] usb 4-1: Product: syz
[  187.828507][ T5921] usb 4-1: Manufacturer: syz
[  187.838363][ T5921] usb 4-1: SerialNumber: syz
[  187.859549][ T7750] [U] umount: sysfs busy - remounted read-only
[  187.870514][ T5900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.870537][ T7750] [U] umount: devtmpfs busy - remounted read-only
[  187.878346][ T7750] [U] umount: can't remount /dev/root read-only
[  187.881280][ T5921] usb 4-1: config 0 descriptor??
[  187.898538][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.914321][ T5863] usb 1-1: Using ep0 maxpacket: 32
[  187.919911][    T1] [U] The system is going down NOW!
[  187.920787][ T5900] usb 2-1: Product: syz
[  187.931903][ T7769] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  187.955399][ T5196] udevd[5196]: could not touch /run/udev/queue: Read-only file system
[  188.004001][    T1] [U] Sent SIGTERM to all processes
[  188.004081][ T5900] usb 2-1: Manufacturer: syz
[  188.048707][ T5932] usb 5-1: USB disconnect, device number 6
[  188.083953][ T5900] usb 2-1: SerialNumber: syz
Connection to 10.128.0.168 closed by remote host.
[  188.107286][ T5932] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  188.124707][ T5900] usb 2-1: can't set config #1, error -71
[  188.147974][ T5921] usb 4-1: can't set config #0, error -71
[  188.163073][ T5863] usb 1-1: unable to read config index 0 descriptor/all
[  188.170519][ T5900] usb 2-1: USB disconnect, device number 44
[  188.184226][ T5863] usb 1-1: can't read configurations, error -71
[  188.194010][ T5921] usb 4-1: USB disconnect, device number 55
[  188.850799][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.101764][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.148580][    T1] [U] Sent SIGKILL to all processes
[  189.174980][    T1] [U] Requesting system poweroff
[  189.188315][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.284979][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.380350][   T12] bridge_slave_1: left allmulticast mode
[  189.386180][   T12] bridge_slave_1: left promiscuous mode
[  189.393250][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.405768][   T12] bridge_slave_0: left allmulticast mode
[  189.411506][   T12] bridge_slave_0: left promiscuous mode
[  189.417264][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.759132][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.770491][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.782122][   T12] bond0 (unregistering): Released all slaves
[  189.873360][   T12] tipc: Left network mode
[  189.961658][   T12] hsr_slave_0: left promiscuous mode
[  189.969156][   T12] hsr_slave_1: left promiscuous mode
[  189.975449][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.982954][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.991484][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.999299][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.017983][   T12] veth1_macvtap: left promiscuous mode
[  190.023552][   T12] veth0_macvtap: left promiscuous mode
[  190.029345][   T12] veth1_vlan: left promiscuous mode
[  190.034808][   T12] veth0_vlan: left promiscuous mode
[  190.439005][   T12] team0 (unregistering): Port device team_slave_1 removed
[  190.488175][   T12] team0 (unregistering): Port device team_slave_0 removed
[  191.197972][    T9] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  191.214985][    T9] dvb_usb_dibusb_mb 3-1:9.201: probe with driver dvb_usb_dibusb_mb failed with error -22
[  191.238906][    T9] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in cold state, will try to load a firmware
[  191.241333][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.251544][    T9] usb 3-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2
[  191.270141][    T9] usb 3-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw
[  191.280534][    T9] ------------[ cut here ]------------
[  191.286151][    T9] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0x9b0, CPU#0: kworker/0:0/9
[  191.298485][    T9] Modules linked in:
[  191.302640][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  191.312006][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  191.323581][    T9] Workqueue: usb_hub_wq hub_event
[  191.328980][    T9] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0
[  191.335422][    T9] Code: ea fb e9 5d fc ff ff e8 f8 91 ea fb c6 05 35 27 b2 09 01 48 c7 c7 40 cc e8 8b e8 25 c3 51 fb e9 85 fc ff ff e8 db 91 ea fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 cd e8 8b 4c 89 e2 e8 75 6f 56 fb e9
[  191.356935][    T9] RSP: 0018:ffffc900000e6870 EFLAGS: 00010246
[  191.363257][    T9] RAX: ffffffff85d5cad5 RBX: dffffc0000000000 RCX: 0000000000100000
[  191.371721][    T9] RDX: ffffc900162d1000 RSI: 00000000000fffff RDI: 0000000000100000
[  191.381659][    T9] RBP: 0000000000000001 R08: ffffffff8f9dd677 R09: 1ffffffff1f3bace
[  191.391093][    T9] R10: dffffc0000000000 R11: fffffbfff1f3bacf R12: ffffffff8c320400
[  191.399630][    T9] R13: 0000000000001770 R14: ffff88823bf580b0 R15: 00000000fffffff5
[  191.407988][    T9] FS:  0000000000000000(0000) GS:ffff888125d22000(0000) knlGS:0000000000000000
[  191.417534][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  191.425499][    T9] CR2: 00007fd0a23f84c0 CR3: 0000000032e00000 CR4: 00000000003526f0
[  191.434583][    T9] Call Trace:
[  191.438142][    T9]  <TASK>
[  191.441262][    T9]  ? kmem_cache_free+0x19b/0x690
[  191.446277][    T9]  ? _request_firmware+0x6be/0x15b0
[  191.451613][    T9]  _request_firmware+0xf83/0x15b0
[  191.456820][    T9]  ? __pfx__request_firmware+0x10/0x10
[  191.462393][    T9]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[  191.468039][    T9]  request_firmware+0x36/0x50
[  191.472740][    T9]  dvb_usb_download_firmware+0xaf/0x260
[  191.478812][    T9]  ? __pfx__printk+0x10/0x10
[  191.483488][    T9]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[  191.489931][    T9]  ? dvb_usb_device_init+0x14c/0x2580
[  191.495545][    T9]  dvb_usb_device_init+0xdd2/0x2580
[  191.500954][    T9]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  191.506973][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.512256][    T9]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  191.518449][    T9]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  191.525313][    T9]  ? __pfx_dvb_usb_device_init+0x10/0x10
[  191.531598][    T9]  ? __update_runtime_status+0x1b3/0x390
[  191.538369][    T9]  ? __pm_runtime_set_status+0x785/0xa50
[  191.545149][    T9]  dibusb_probe+0x89/0xf0
[  191.549877][    T9]  usb_probe_interface+0x668/0xc30
[  191.555855][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[  191.561703][    T9]  really_probe+0x26d/0x9e0
[  191.566260][    T9]  __driver_probe_device+0x18c/0x2f0
[  191.571803][    T9]  driver_probe_device+0x4f/0x430
[  191.577223][    T9]  __device_attach_driver+0x2ce/0x530
[  191.582693][    T9]  bus_for_each_drv+0x251/0x2e0
[  191.587629][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  191.593558][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  191.599042][    T9]  __device_attach+0x2b8/0x400
[  191.604032][    T9]  ? __pfx___device_attach+0x10/0x10
[  191.609427][    T9]  ? do_raw_spin_unlock+0x122/0x240
[  191.614871][    T9]  bus_probe_device+0x185/0x260
[  191.619913][    T9]  device_add+0x7b6/0xb50
[  191.624648][    T9]  usb_set_configuration+0x1a87/0x20e0
[  191.630231][    T9]  usb_generic_driver_probe+0x8d/0x150
[  191.635972][    T9]  usb_probe_device+0x1c4/0x390
[  191.641135][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[  191.647254][    T9]  really_probe+0x26d/0x9e0
[  191.651946][    T9]  __driver_probe_device+0x18c/0x2f0
[  191.657390][    T9]  driver_probe_device+0x4f/0x430
[  191.662957][    T9]  __device_attach_driver+0x2ce/0x530
[  191.668515][    T9]  bus_for_each_drv+0x251/0x2e0
[  191.673375][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  191.679466][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  191.684978][    T9]  __device_attach+0x2b8/0x400
[  191.689766][    T9]  ? __pfx___device_attach+0x10/0x10
[  191.695141][    T9]  ? do_raw_spin_unlock+0x122/0x240
[  191.700383][    T9]  bus_probe_device+0x185/0x260
[  191.705470][    T9]  device_add+0x7b6/0xb50
[  191.710002][    T9]  usb_new_device+0xa39/0x16f0
[  191.714838][    T9]  ? __pfx_usb_new_device+0x10/0x10
[  191.720039][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.725771][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.731015][    T9]  hub_event+0x2958/0x4a20
[  191.735742][    T9]  ? __pfx_hub_event+0x10/0x10
[  191.740567][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[  191.746334][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.751639][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[  191.757636][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[  191.763652][    T9]  process_scheduled_works+0xae1/0x17b0
[  191.769370][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  191.775772][    T9]  worker_thread+0x8a0/0xda0
[  191.780520][    T9]  kthread+0x711/0x8a0
[  191.784981][    T9]  ? __pfx_worker_thread+0x10/0x10
[  191.790414][    T9]  ? __pfx_kthread+0x10/0x10
[  191.795050][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.800253][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.805503][    T9]  ? __pfx_kthread+0x10/0x10
[  191.810106][    T9]  ret_from_fork+0x4bc/0x870
[  191.814789][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  191.819999][    T9]  ? __switch_to_asm+0x39/0x70
[  191.824833][    T9]  ? __switch_to_asm+0x33/0x70
[  191.830131][    T9]  ? __pfx_kthread+0x10/0x10
[  191.835131][    T9]  ret_from_fork_asm+0x1a/0x30
[  191.840114][    T9]  </TASK>
[  191.843146][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  191.850538][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  191.859676][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  191.869773][    T9] Workqueue: usb_hub_wq hub_event
[  191.875577][    T9] Call Trace:
[  191.879340][    T9]  <TASK>
[  191.882728][    T9]  dump_stack_lvl+0x99/0x250
[  191.887623][    T9]  ? __asan_memcpy+0x40/0x70
[  191.892313][    T9]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.897549][    T9]  ? __pfx__printk+0x10/0x10
[  191.902312][    T9]  vpanic+0x237/0x6d0
[  191.906429][    T9]  ? __pfx_vpanic+0x10/0x10
[  191.911370][    T9]  ? is_bpf_text_address+0x26/0x2b0
[  191.916619][    T9]  panic+0xb9/0xc0
[  191.920361][    T9]  ? __pfx_panic+0x10/0x10
[  191.925327][    T9]  __warn+0x334/0x4c0
[  191.929597][    T9]  ? firmware_fallback_sysfs+0x746/0x9b0
[  191.935739][    T9]  ? firmware_fallback_sysfs+0x746/0x9b0
[  191.941584][    T9]  report_bug+0x2be/0x4f0
[  191.946018][    T9]  ? firmware_fallback_sysfs+0x746/0x9b0
[  191.951820][    T9]  ? firmware_fallback_sysfs+0x746/0x9b0
[  191.957816][    T9]  ? firmware_fallback_sysfs+0x748/0x9b0
[  191.963735][    T9]  handle_bug+0x84/0x160
[  191.968091][    T9]  exc_invalid_op+0x1a/0x50
[  191.972723][    T9]  asm_exc_invalid_op+0x1a/0x20
[  191.977976][    T9] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0
[  191.984488][    T9] Code: ea fb e9 5d fc ff ff e8 f8 91 ea fb c6 05 35 27 b2 09 01 48 c7 c7 40 cc e8 8b e8 25 c3 51 fb e9 85 fc ff ff e8 db 91 ea fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 cd e8 8b 4c 89 e2 e8 75 6f 56 fb e9
[  192.004888][    T9] RSP: 0018:ffffc900000e6870 EFLAGS: 00010246
[  192.010963][    T9] RAX: ffffffff85d5cad5 RBX: dffffc0000000000 RCX: 0000000000100000
[  192.019742][    T9] RDX: ffffc900162d1000 RSI: 00000000000fffff RDI: 0000000000100000
[  192.028333][    T9] RBP: 0000000000000001 R08: ffffffff8f9dd677 R09: 1ffffffff1f3bace
[  192.036597][    T9] R10: dffffc0000000000 R11: fffffbfff1f3bacf R12: ffffffff8c320400
[  192.044591][    T9] R13: 0000000000001770 R14: ffff88823bf580b0 R15: 00000000fffffff5
[  192.052993][    T9]  ? firmware_fallback_sysfs+0x745/0x9b0
[  192.058666][    T9]  ? kmem_cache_free+0x19b/0x690
[  192.063732][    T9]  ? _request_firmware+0x6be/0x15b0
[  192.069232][    T9]  _request_firmware+0xf83/0x15b0
[  192.074302][    T9]  ? __pfx__request_firmware+0x10/0x10
[  192.080047][    T9]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[  192.086127][    T9]  request_firmware+0x36/0x50
[  192.091116][    T9]  dvb_usb_download_firmware+0xaf/0x260
[  192.096868][    T9]  ? __pfx__printk+0x10/0x10
[  192.101558][    T9]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[  192.108006][    T9]  ? dvb_usb_device_init+0x14c/0x2580
[  192.113645][    T9]  dvb_usb_device_init+0xdd2/0x2580
[  192.119001][    T9]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  192.125094][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.130443][    T9]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.136642][    T9]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.143159][    T9]  ? __pfx_dvb_usb_device_init+0x10/0x10
[  192.149079][    T9]  ? __update_runtime_status+0x1b3/0x390
[  192.154727][    T9]  ? __pm_runtime_set_status+0x785/0xa50
[  192.160560][    T9]  dibusb_probe+0x89/0xf0
[  192.165077][    T9]  usb_probe_interface+0x668/0xc30
[  192.170293][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[  192.176047][    T9]  really_probe+0x26d/0x9e0
[  192.180566][    T9]  __driver_probe_device+0x18c/0x2f0
[  192.185940][    T9]  driver_probe_device+0x4f/0x430
[  192.190965][    T9]  __device_attach_driver+0x2ce/0x530
[  192.196411][    T9]  bus_for_each_drv+0x251/0x2e0
[  192.201270][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  192.207171][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  192.212579][    T9]  __device_attach+0x2b8/0x400
[  192.217430][    T9]  ? __pfx___device_attach+0x10/0x10
[  192.222716][    T9]  ? do_raw_spin_unlock+0x122/0x240
[  192.227913][    T9]  bus_probe_device+0x185/0x260
[  192.232778][    T9]  device_add+0x7b6/0xb50
[  192.237213][    T9]  usb_set_configuration+0x1a87/0x20e0
[  192.242696][    T9]  usb_generic_driver_probe+0x8d/0x150
[  192.248172][    T9]  usb_probe_device+0x1c4/0x390
[  192.253047][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[  192.258432][    T9]  really_probe+0x26d/0x9e0
[  192.262955][    T9]  __driver_probe_device+0x18c/0x2f0
[  192.268714][    T9]  driver_probe_device+0x4f/0x430
[  192.273845][    T9]  __device_attach_driver+0x2ce/0x530
[  192.279343][    T9]  bus_for_each_drv+0x251/0x2e0
[  192.284509][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  192.290425][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  192.295903][    T9]  __device_attach+0x2b8/0x400
[  192.300681][    T9]  ? __pfx___device_attach+0x10/0x10
[  192.306146][    T9]  ? do_raw_spin_unlock+0x122/0x240
[  192.311450][    T9]  bus_probe_device+0x185/0x260
[  192.316418][    T9]  device_add+0x7b6/0xb50
[  192.322536][    T9]  usb_new_device+0xa39/0x16f0
[  192.327341][    T9]  ? __pfx_usb_new_device+0x10/0x10
[  192.332553][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.337779][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.343072][    T9]  hub_event+0x2958/0x4a20
[  192.347542][    T9]  ? __pfx_hub_event+0x10/0x10
[  192.352308][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[  192.358041][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.363238][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[  192.368975][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[  192.374963][    T9]  process_scheduled_works+0xae1/0x17b0
[  192.380540][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  192.386708][    T9]  worker_thread+0x8a0/0xda0
[  192.391437][    T9]  kthread+0x711/0x8a0
[  192.395522][    T9]  ? __pfx_worker_thread+0x10/0x10
[  192.400678][    T9]  ? __pfx_kthread+0x10/0x10
[  192.405368][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.410663][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.415855][    T9]  ? __pfx_kthread+0x10/0x10
[  192.420459][    T9]  ret_from_fork+0x4bc/0x870
[  192.425669][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  192.431265][    T9]  ? __switch_to_asm+0x39/0x70
[  192.436395][    T9]  ? __switch_to_asm+0x33/0x70
[  192.441615][    T9]  ? __pfx_kthread+0x10/0x10
[  192.446299][    T9]  ret_from_fork_asm+0x1a/0x30
[  192.451578][    T9]  </TASK>
[  192.454994][    T9] Kernel Offset: disabled
[  192.459577][    T9] Rebooting in 86400 seconds..