last executing test programs:

8m35.262759939s ago: executing program 0 (id=48):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x1)

8m34.932723715s ago: executing program 0 (id=53):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = io_uring_setup(0x669, &(0x7f0000007940))
syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x981d41)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1410)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close_range(r0, 0xffffffffffffffff, 0x0)

8m33.994156225s ago: executing program 0 (id=55):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
getpid()
arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa100bb50caccad1d901"], 0x11)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}})
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2)

8m31.549395507s ago: executing program 0 (id=58):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, 0xfffffffffffffffd)

8m29.773275514s ago: executing program 0 (id=64):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5899a47b}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0)

8m28.16310946s ago: executing program 0 (id=70):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpgrp(0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
fchown(r6, r7, r8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, <r9=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r9}, 0xc)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000ec0), 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084)
close_range(r0, 0xffffffffffffffff, 0x0)

8m24.226767315s ago: executing program 4 (id=78):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000000)='./file0\x00')
socket(0x1000000010, 0x80002, 0x0)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001540))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00')
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)

8m23.276646115s ago: executing program 4 (id=83):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0)

8m22.796026194s ago: executing program 4 (id=86):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0xc00, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

8m21.359351534s ago: executing program 4 (id=89):
r0 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x8, 0x1, 0x9, 0xc, 0x2, 0xc}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x9, 0x7, 0x7ff}}]}}}]}, 0x60}}, 0x44080)
r1 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r1, &(0x7f0000000180)={0x2, 0xffff, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000)

8m21.193616444s ago: executing program 4 (id=90):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
close(r1)
sched_setaffinity(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000)

8m18.384905083s ago: executing program 4 (id=94):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
getpid()
arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}})
r3 = dup(r0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"})

8m12.532160656s ago: executing program 32 (id=70):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpgrp(0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
fchown(r6, r7, r8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, <r9=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r9}, 0xc)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000ec0), 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084)
close_range(r0, 0xffffffffffffffff, 0x0)

8m3.220590636s ago: executing program 33 (id=94):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
getpid()
arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}})
r3 = dup(r0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"})

7m7.607224558s ago: executing program 2 (id=291):
openat$tun(0xffffffffffffff9c, 0x0, 0xe7e778b4449e4ac4, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write(r4, &(0x7f00000003c0)="28eac7", 0x3)
write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x7, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x9, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x6, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xfbff3441, 0xfff]}, 0x45c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c)
epoll_create1(0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)

7m4.485489541s ago: executing program 2 (id=297):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r2, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x1}}], 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r7, 0x101)
r8 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0)

7m3.515700807s ago: executing program 2 (id=299):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9)

7m2.493158818s ago: executing program 2 (id=301):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080))
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
r2 = dup(r0)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2)

7m0.985841476s ago: executing program 2 (id=305):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

7m0.678485628s ago: executing program 2 (id=306):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
listen(0xffffffffffffffff, 0xda90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x2, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x2ae0, r0}, 0x0)
connect$inet6(r1, &(0x7f0000004040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket(0x2b, 0x5, 0x3)
migrate_pages(0x0, 0x8000, 0x0, &(0x7f0000000180)=0x9)

6m43.344570132s ago: executing program 34 (id=306):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
listen(0xffffffffffffffff, 0xda90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x2, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x2ae0, r0}, 0x0)
connect$inet6(r1, &(0x7f0000004040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket(0x2b, 0x5, 0x3)
migrate_pages(0x0, 0x8000, 0x0, &(0x7f0000000180)=0x9)

5m6.514309812s ago: executing program 1 (id=579):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r2, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x1}}], 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r7, 0x101)
r8 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESDEC]}]})

5m2.690021545s ago: executing program 1 (id=588):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xaf}, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000840)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

4m55.862541158s ago: executing program 1 (id=601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp\x00')
preadv(r2, &(0x7f0000000000), 0x0, 0x0, 0x6)
syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x52de994789af003)
pipe2$watch_queue(&(0x7f0000000500), 0x80)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f00000000c0), &(0x7f0000000240))
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x7d6, 0x1)
ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000340)=""/120)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"})

4m55.354354198s ago: executing program 1 (id=604):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_procfs(0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/meminfo\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000240)={0xffffff7f, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000080), 0x4)

4m51.462834821s ago: executing program 1 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$rtc(0x0, 0x2000000003, 0x50dc82)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
fcntl$dupfd(r7, 0x0, r6)
close_range(r3, 0xffffffffffffffff, 0x0)

4m48.891740081s ago: executing program 1 (id=614):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
getpid()
arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa100bb50caccad1d901"], 0x11)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}})
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2)

4m33.669832194s ago: executing program 35 (id=614):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
getpid()
arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa100bb50caccad1d901"], 0x11)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}})
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2)

15.388091788s ago: executing program 8 (id=1302):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)

15.279052026s ago: executing program 8 (id=1303):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r1, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x101)
setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)

14.261735205s ago: executing program 8 (id=1305):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000600)="6fe5fb", 0x3)

10.472438103s ago: executing program 8 (id=1316):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r2, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x1}}], 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6(0xa, 0x6, 0x0)
listen(r6, 0x101)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESDEC]}]})

9.555690024s ago: executing program 3 (id=1319):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc203800"], 0xfebe)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9)

9.319956164s ago: executing program 7 (id=1322):
ioprio_get$pid(0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='softirq_noise\x00'}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

8.119696874s ago: executing program 3 (id=1323):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0xf2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'})
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

7.595093125s ago: executing program 7 (id=1326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x0)

7.368566941s ago: executing program 6 (id=1328):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x1)
ptrace$cont(0x18, r1, 0x7, 0x3)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
sched_getattr(r1, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)}, {&(0x7f0000001bc0)="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", 0x1de}], 0x2}}], 0x2, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

7.158721612s ago: executing program 8 (id=1329):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
r2 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x4685, 0x40, 0xfffffffe, 0x340}, 0x0, &(0x7f0000002540))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0x0, 0x209, 0x0, 0x8, 0x8}, &(0x7f00000000c0)=0x14)

6.079195124s ago: executing program 7 (id=1330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x4000010)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x808, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x3a, 0x1, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0)

6.07847696s ago: executing program 6 (id=1331):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

5.811878493s ago: executing program 3 (id=1332):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000bc0)={0x2, 0x0, 0x3, {0x0, 0xfe000000, 0x1010, 0x6}})

5.548198927s ago: executing program 6 (id=1334):
ioperm(0x3, 0x4, 0x1000008)
statx(0xffffffffffffff9c, 0x0, 0x1000, 0xff00, &(0x7f0000005780))

5.338794603s ago: executing program 6 (id=1335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000)
chdir(0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), 0x0}, 0x20)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c)
socket$inet(0x2, 0x2, 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})
openat$vicodec0(0xffffff9c, &(0x7f0000000580), 0x2, 0x0)

5.293355349s ago: executing program 3 (id=1336):
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

3.69097757s ago: executing program 7 (id=1337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x32, 0x0, 0x0)
r2 = syz_open_pts(r1, 0x141601)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3.425108592s ago: executing program 5 (id=1338):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2)

3.424279145s ago: executing program 6 (id=1339):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close(r1)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00')

2.580586911s ago: executing program 7 (id=1340):
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2.40713287s ago: executing program 5 (id=1341):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x0)

2.406166731s ago: executing program 3 (id=1342):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r4 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40505330, &(0x7f0000000940)={{0xee}})
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @empty, 0x2}, 0x5a)
r6 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0))
socket$tipc(0x1e, 0x5, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0x40186f40, 0x20000502)
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40046f41, 0x20000502)

2.405454465s ago: executing program 6 (id=1343):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000fa0fffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000005dc0)={0x34, &(0x7f0000002b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

1.139872784s ago: executing program 5 (id=1344):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_test={0x51, 0x0, 0x6}})

975.622731ms ago: executing program 3 (id=1345):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
pwrite64(r0, 0x0, 0x0, 0x8000c5f)
open(0x0, 0x143042, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x0, 0x7, 0x1})
syz_clone3(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000fcff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

836.638735ms ago: executing program 5 (id=1346):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x26)

755.00533ms ago: executing program 5 (id=1347):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x7ffc}, 0x80, &(0x7f0000000280)}, 0x44410)
socket$packet(0x11, 0x2, 0x300)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

358.265483ms ago: executing program 8 (id=1348):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)

247.914324ms ago: executing program 7 (id=1349):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
write(r3, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f046})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001})
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}})

0s ago: executing program 5 (id=1350):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x32, 0x0, 0x0)
r2 = syz_open_pts(r1, 0x141601)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
close_range(r3, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 batadv_slave_1
[  227.090278][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.100317][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.110840][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.120778][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.131440][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.142535][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.173200][ T7099] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.183581][ T7099] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.222680][ T7099] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.249708][ T7099] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.337102][ T5151] Bluetooth: hci5: command 0x0406 tx timeout
[  227.387077][ T5889] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  227.399104][ T7368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.452989][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.494604][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.537150][ T5889] usb 4-1: Using ep0 maxpacket: 8
[  227.549658][ T5889] usb 4-1: config 0 has no interfaces?
[  227.579801][ T5889] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  227.697571][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.706159][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.797401][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  227.806123][ T5889] usb 4-1: Product: syz
[  227.810488][ T5889] usb 4-1: Manufacturer: syz
[  227.815277][ T5889] usb 4-1: SerialNumber: syz
[  227.827883][ T5889] usb 4-1: config 0 descriptor??
[  229.767903][ T5938] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  230.202436][ T7393] netlink: 'syz.1.422': attribute type 2 has an invalid length.
[  230.210660][ T7393] netlink: 'syz.1.422': attribute type 8 has an invalid length.
[  230.218751][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.422'.
[  230.321489][ T5981] usb 4-1: USB disconnect, device number 6
[  230.507089][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  231.824853][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  231.834135][ T5938] usb 7-1: unable to read config index 0 descriptor/start: -71
[  232.006239][ T5938] usb 7-1: can't read configurations, error -71
[  233.029778][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  233.167602][ T5151] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  233.240115][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.427'.
[  233.266884][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.462023][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.508339][ T5895] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  233.530188][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.593778][ T5895] usb 4-1: config 0 descriptor??
[  234.902649][ T7426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.519328][ T5895] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  235.749605][ T5895] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected
[  235.797600][ T5895] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  236.208662][ T5895] usb 4-1: USB disconnect, device number 7
[  236.237057][ T5895] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected
[  238.257004][ T5846] Bluetooth: hci4: command 0x0406 tx timeout
[  238.851956][ T5895] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  238.907363][ T5938] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  239.122091][ T5938] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  239.168401][ T5938] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  239.227153][ T5938] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  239.439302][ T5938] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  239.448484][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.457332][ T5938] usb 7-1: Product: syz
[  239.461993][ T5938] usb 7-1: Manufacturer: syz
[  239.467803][ T5938] usb 7-1: SerialNumber: syz
[  240.016978][ T7472] netlink: 'syz.3.444': attribute type 9 has an invalid length.
[  240.025359][ T7472] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.444'.
[  240.120289][ T7472] ubi0: attaching mtd0
[  240.153498][ T7472] ubi0: scanning is finished
[  241.369546][ T7472] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  241.992431][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.230279][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  243.618254][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.645125][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.754737][ T5895] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  243.918125][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.187929][ T5895] usb 4-1: config 0 descriptor??
[  244.883295][ T5895] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  244.893160][ T5895] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  244.924777][ T5895] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0004/input/input6
[  244.988101][ T5895] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  246.124989][ T5895] usb 4-1: USB disconnect, device number 8
[  247.336129][ T5938] usb 7-1: 0:2 : does not exist
[  247.344113][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.591662][  T118] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  247.799908][  T118] usb 2-1: Using ep0 maxpacket: 32
[  248.008229][  T118] usb 2-1: device descriptor read/all, error -71
[  248.254384][ T5938] usb 7-1: USB disconnect, device number 11
[  249.231056][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.035443][ T7534] input: syz0 as /devices/virtual/input/input7
[  251.634094][ T7565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.657920][ T5981] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  253.798549][ T7574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.532298][ T5895] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  254.747424][ T5981] usb 7-1: device not accepting address 12, error -71
[  256.067941][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  256.074267][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.787284][ T5981] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  257.916979][ T5981] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  258.247084][  T118] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  258.600508][ T5981] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.825183][ T5981] usb 7-1: config 0 interface 0 has no altsetting 0
[  259.372593][  T118] usb 4-1: Using ep0 maxpacket: 32
[  259.377945][ T5981] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  259.389063][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.403712][  T118] usb 4-1: unable to get BOS descriptor or descriptor too short
[  259.436500][  T118] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  259.518135][  T118] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  259.533444][ T5981] usb 7-1: config 0 descriptor??
[  259.568002][   T29] audit: type=1800 audit(1732908991.710:2): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.498" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  259.712739][  T118] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  259.722411][ T5981] usb 7-1: can't set config #0, error -71
[  259.729330][ T5981] usb 7-1: USB disconnect, device number 13
[  259.736018][  T118] usb 4-1: config 128 has no interface number 0
[  259.743551][  T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  259.754851][  T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  259.766195][  T118] usb 4-1: config 128 interface 127 has no altsetting 0
[  260.009056][  T118] usb 4-1: language id specifier not provided by device, defaulting to English
[  260.139690][  T118] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  260.421031][  T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.429264][  T118] usb 4-1: Product: syz
[  260.433698][  T118] usb 4-1: Manufacturer: syz
[  260.438545][  T118] usb 4-1: SerialNumber: syz
[  260.497081][ T5981] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  260.747028][ T5981] usb 7-1: Using ep0 maxpacket: 32
[  260.761464][ T5981] usb 7-1: unable to get BOS descriptor or descriptor too short
[  260.772568][ T5981] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  260.781133][ T5981] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  260.791886][ T5981] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  260.801366][ T5981] usb 7-1: config 128 has no interface number 0
[  260.815890][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  260.849731][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  260.938910][ T5981] usb 7-1: config 128 interface 127 has no altsetting 0
[  260.978175][ T5981] usb 7-1: language id specifier not provided by device, defaulting to English
[  261.058127][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  261.068139][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.079255][ T5981] usb 7-1: Product: syz
[  261.092967][ T5981] usb 7-1: Manufacturer: syz
[  261.104376][ T5981] usb 7-1: SerialNumber: syz
[  261.832095][  T118] usb 4-1: USB disconnect, device number 9
[  263.588130][ T7674] netlink: 'syz.7.509': attribute type 2 has an invalid length.
[  263.595955][ T7674] netlink: 'syz.7.509': attribute type 8 has an invalid length.
[  263.603874][ T7674] netlink: 132 bytes leftover after parsing attributes in process `syz.7.509'.
[  263.873052][ T7672] ������: renamed from syzkaller0
[  264.035606][ T5981] usb 7-1: USB disconnect, device number 14
[  265.257269][    T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  265.416640][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'.
[  265.427394][    T8] usb 8-1: Using ep0 maxpacket: 8
[  265.434329][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  265.445810][    T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  265.461569][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.496810][    T8] usb 8-1: config 0 descriptor??
[  265.735838][    T8] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  266.502377][ T5895] usb 8-1: USB disconnect, device number 2
[  266.521710][ T5895] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected
[  268.627085][ T5888] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  268.797193][ T5888] usb 7-1: Using ep0 maxpacket: 32
[  268.823916][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short
[  269.051244][ T5888] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  269.245147][ T5888] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  269.297383][ T5938] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  269.412484][ T5888] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  269.437200][ T5888] usb 7-1: config 128 has no interface number 0
[  269.444544][ T5888] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  269.456127][ T5888] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.466298][ T5888] usb 7-1: config 128 interface 127 has no altsetting 0
[  269.550711][ T5938] usb 4-1: Using ep0 maxpacket: 32
[  269.558028][ T5888] usb 7-1: language id specifier not provided by device, defaulting to English
[  269.572478][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short
[  269.582998][ T5888] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  269.592434][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.602476][ T5938] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  269.612653][ T5888] usb 7-1: Product: syz
[  269.616839][ T5888] usb 7-1: Manufacturer: syz
[  269.626037][ T5938] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  269.644941][ T5888] usb 7-1: SerialNumber: syz
[  269.851970][ T5938] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  269.862546][ T5938] usb 4-1: config 128 has no interface number 0
[  269.869389][ T5938] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  269.881550][ T5938] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.897208][ T5938] usb 4-1: config 128 interface 127 has no altsetting 0
[  269.907506][ T5938] usb 4-1: language id specifier not provided by device, defaulting to English
[  270.814261][ T5888] usb 7-1: can't set config #128, error -71
[  270.822217][ T5938] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  270.831740][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.839827][ T5938] usb 4-1: Product: syz
[  270.844006][ T5938] usb 4-1: Manufacturer: syz
[  270.848665][ T5938] usb 4-1: SerialNumber: syz
[  270.855702][ T5888] usb 7-1: USB disconnect, device number 15
[  271.007202][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.530'.
[  271.807885][ T5981] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  272.307886][ T5981] usb 2-1: Using ep0 maxpacket: 32
[  272.315216][ T5981] usb 2-1: unable to get BOS descriptor or descriptor too short
[  272.336000][ T5981] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  272.357054][ T5981] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  272.403572][ T5981] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  272.459295][ T5981] usb 2-1: config 128 has no interface number 0
[  272.490332][ T5981] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  272.536444][ T5938] usb 4-1: USB disconnect, device number 10
[  272.558962][ T5981] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  273.113734][ T5981] usb 2-1: config 128 interface 127 has no altsetting 0
[  274.267547][ T5981] usb 2-1: string descriptor 0 read error: -71
[  274.273833][ T5981] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  274.283639][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.354037][ T5981] usb 2-1: can't set config #128, error -71
[  274.512524][ T5981] usb 2-1: USB disconnect, device number 9
[  274.577027][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  274.745050][    T8] usb 6-1: Using ep0 maxpacket: 32
[  275.271322][ T5938] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  275.330654][ T7780] netlink: 'syz.1.540': attribute type 2 has an invalid length.
[  275.338906][ T7780] netlink: 'syz.1.540': attribute type 8 has an invalid length.
[  275.346688][ T7780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.540'.
[  275.497201][ T5938] usb 4-1: Using ep0 maxpacket: 32
[  275.515820][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.536031][ T5938] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  275.633007][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  275.732463][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[  275.793756][    T8] usb 6-1: unable to read config index 0 descriptor/start: -71
[  275.802172][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.804082][ T5938] usb 4-1: config 0 descriptor??
[  275.810379][    T8] usb 6-1: can't read configurations, error -71
[  275.957961][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.544'.
[  277.560627][ T5888] usb 4-1: USB disconnect, device number 11
[  277.827223][ T5938] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  278.144200][ T5938] usb 8-1: Using ep0 maxpacket: 32
[  278.155153][ T5938] usb 8-1: unable to get BOS descriptor or descriptor too short
[  278.164012][ T5938] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  278.173265][ T5938] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  278.189767][ T5938] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  278.202825][ T5938] usb 8-1: config 128 has no interface number 0
[  278.238816][ T5938] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  278.258849][   T29] audit: type=1326 audit(1732909010.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7815 comm="syz.1.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463b780849 code=0x0
[  278.381939][ T5938] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  278.393043][ T5938] usb 8-1: config 128 interface 127 has no altsetting 0
[  278.407576][ T5938] usb 8-1: language id specifier not provided by device, defaulting to English
[  278.435872][ T5938] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  278.445214][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.681546][ T5938] usb 8-1: Product: syz
[  278.683780][ T7825] netlink: 'syz.3.555': attribute type 2 has an invalid length.
[  278.693811][ T7825] netlink: 'syz.3.555': attribute type 8 has an invalid length.
[  278.701723][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.555'.
[  278.727159][ T5938] usb 8-1: Manufacturer: syz
[  278.759854][ T5938] usb 8-1: SerialNumber: syz
[  278.912146][ T5888] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  279.137689][ T5888] usb 2-1: device descriptor read/64, error -71
[  279.397203][ T5888] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  279.416338][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.557'.
[  279.547161][ T5888] usb 2-1: device descriptor read/64, error -71
[  279.671123][ T5888] usb usb2-port1: attempt power cycle
[  280.577702][ T5938] usb 8-1: USB disconnect, device number 3
[  280.617141][ T5981] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  280.723620][ T7846] netlink: 'syz.7.565': attribute type 2 has an invalid length.
[  280.733526][ T7846] netlink: 'syz.7.565': attribute type 8 has an invalid length.
[  280.746980][ T7846] netlink: 132 bytes leftover after parsing attributes in process `syz.7.565'.
[  280.769048][ T5981] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  280.784688][ T5981] usb 4-1: config 5 has no interface number 0
[  280.799694][ T5981] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  280.814724][ T5981] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  280.832583][ T5981] usb 4-1: config 5 interface 123 has no altsetting 0
[  280.843471][ T5981] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  280.865699][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.874180][ T5981] usb 4-1: Product: syz
[  280.878682][    T8] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  280.894052][ T5981] usb 4-1: Manufacturer: syz
[  280.900525][ T5981] usb 4-1: SerialNumber: syz
[  281.023276][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  281.041410][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.052758][    T8] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  281.057496][ T5888] usb 2-1: device descriptor read/8, error -71
[  281.062050][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.083960][    T8] usb 7-1: config 0 descriptor??
[  281.347590][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  281.805329][ T5888] usb 2-1: device descriptor read/8, error -71
[  281.876053][ T5981] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  281.891221][ T5981] usb 4-1: USB disconnect, device number 12
[  281.938127][ T5888] usb usb2-port1: unable to enumerate USB device
[  282.319555][    T8] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  282.392871][    T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input8
[  283.006104][ T7862] netlink: 'syz.5.569': attribute type 2 has an invalid length.
[  283.014236][ T7862] netlink: 'syz.5.569': attribute type 8 has an invalid length.
[  283.022214][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.569'.
[  284.196113][    T8] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  284.267544][    T8] usb 7-1: USB disconnect, device number 16
[  284.325728][ T5938] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  284.547014][ T5938] usb 8-1: Using ep0 maxpacket: 8
[  285.457134][    T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  285.479569][ T5938] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.489804][ T5938] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  285.501355][ T5938] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  285.516757][ T5938] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  285.526021][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  285.534301][ T5938] usb 8-1: Product: syz
[  285.538526][ T5938] usb 8-1: Manufacturer: syz
[  285.543137][ T5938] usb 8-1: SerialNumber: syz
[  285.559522][ T5938] usb 8-1: config 0 descriptor??
[  285.569887][ T5938] radio-si470x 8-1:0.0: could not find interrupt in endpoint
[  285.577548][ T5938] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5
[  285.588156][ T5938] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  285.657313][    T8] usb 6-1: Using ep0 maxpacket: 32
[  285.671185][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[  285.685139][   T29] audit: type=1326 audit(1732909017.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.6.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x0
[  285.712247][    T8] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  285.723958][    T8] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  285.738521][    T8] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  285.751105][    T8] usb 6-1: config 128 has no interface number 0
[  285.757569][    T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  285.769061][    T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  285.777048][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  285.780195][    T8] usb 6-1: config 128 interface 127 has no altsetting 0
[  285.797472][    T8] usb 6-1: language id specifier not provided by device, defaulting to English
[  285.808593][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  285.820016][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.828287][    T8] usb 6-1: Product: syz
[  285.832465][    T8] usb 6-1: Manufacturer: syz
[  285.837407][    T8] usb 6-1: SerialNumber: syz
[  285.937138][ T5888] usb 4-1: Using ep0 maxpacket: 32
[  285.952556][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short
[  285.963350][ T5888] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  285.972271][ T5888] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  285.983445][ T5888] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  285.992681][ T5888] usb 4-1: config 128 has no interface number 0
[  285.999186][ T5888] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  286.010596][ T5888] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.020925][ T5888] usb 4-1: config 128 interface 127 has no altsetting 0
[  286.028067][ T5938] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  286.040087][ T5888] usb 4-1: language id specifier not provided by device, defaulting to English
[  286.061032][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  286.070311][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.078487][ T5888] usb 4-1: Product: syz
[  286.082755][ T5888] usb 4-1: Manufacturer: syz
[  286.087481][ T5888] usb 4-1: SerialNumber: syz
[  286.177094][ T5938] usb 7-1: device descriptor read/64, error -71
[  286.427069][ T5938] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  286.587090][ T5938] usb 7-1: device descriptor read/64, error -71
[  286.699604][ T5938] usb usb7-port1: attempt power cycle
[  286.893847][ T5981] usb 8-1: USB disconnect, device number 4
[  287.251254][ T5938] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  287.296846][ T5938] usb 7-1: device descriptor read/8, error -71
[  288.273143][ T5938] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  288.337733][ T5938] usb 7-1: device descriptor read/8, error -71
[  288.344380][ T5888] usb 4-1: USB disconnect, device number 13
[  288.363797][    T8] usb 6-1: USB disconnect, device number 8
[  289.066626][ T5938] usb usb7-port1: unable to enumerate USB device
[  290.661817][ T5938] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  291.020927][ T7919] netlink: 'syz.6.584': attribute type 2 has an invalid length.
[  291.096014][ T7919] netlink: 'syz.6.584': attribute type 8 has an invalid length.
[  291.106963][ T7919] netlink: 132 bytes leftover after parsing attributes in process `syz.6.584'.
[  291.307305][ T5938] usb 2-1: device not accepting address 14, error -71
[  291.696557][ T7925] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  291.704030][ T7925] PKCS7: Only support pkcs7_signedData type
[  293.597704][ T5938] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  294.717118][ T5938] usb 2-1: Using ep0 maxpacket: 8
[  294.725675][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.737501][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  294.780282][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  294.833251][ T5938] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  294.850170][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  294.879110][ T5981] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  294.898422][ T5938] usb 2-1: Product: syz
[  294.905084][ T5938] usb 2-1: Manufacturer: syz
[  294.915262][ T5938] usb 2-1: SerialNumber: syz
[  294.930571][ T5938] usb 2-1: config 0 descriptor??
[  294.942753][ T5938] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[  294.957102][ T5938] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  294.977270][ T5938] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  295.051377][ T5981] usb 6-1: Using ep0 maxpacket: 32
[  295.061856][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short
[  295.083452][ T5981] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  295.106750][ T5981] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  295.144217][ T5981] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  295.377347][ T5981] usb 6-1: config 128 has no interface number 0
[  295.383667][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  295.395078][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.405281][ T5981] usb 6-1: config 128 interface 127 has no altsetting 0
[  295.797161][ T5938] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  296.037074][ T5981] usb 6-1: string descriptor 0 read error: -71
[  296.043519][ T5981] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  296.052754][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.079386][ T5981] usb 6-1: can't set config #128, error -71
[  296.088051][ T5981] usb 6-1: USB disconnect, device number 9
[  296.107085][   T29] audit: type=1800 audit(1732909028.250:5): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.596" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  296.240995][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  296.256375][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  296.265333][ T5938] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  296.273792][ T5938] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  296.284134][ T5938] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  296.293252][ T5938] usb 7-1: config 128 has no interface number 0
[  296.303342][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  297.336233][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  297.346432][ T5938] usb 7-1: config 128 interface 127 has no altsetting 0
[  297.357068][ T5938] usb 7-1: language id specifier not provided by device, defaulting to English
[  297.367765][ T5938] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  297.376845][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.384908][ T5938] usb 7-1: Product: syz
[  297.389125][ T5938] usb 7-1: Manufacturer: syz
[  297.393727][ T5938] usb 7-1: SerialNumber: syz
[  297.953630][ T5981] usb 2-1: USB disconnect, device number 16
[  298.047023][   T46] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  298.248498][ T7978] netlink: 'syz.1.601': attribute type 2 has an invalid length.
[  298.256394][ T7978] netlink: 'syz.1.601': attribute type 8 has an invalid length.
[  298.264244][ T7978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.601'.
[  298.940182][ T7987] ubi0: attaching mtd0
[  298.945783][ T7987] ubi0: scanning is finished
[  302.435400][ T7987] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  303.393714][   T46] usb 8-1: device descriptor read/all, error -71
[  303.645231][ T5938] usb 7-1: USB disconnect, device number 21
[  304.877018][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  305.877641][ T8023] netlink: 'syz.7.613': attribute type 2 has an invalid length.
[  305.885326][ T8023] netlink: 'syz.7.613': attribute type 8 has an invalid length.
[  305.893112][    T8] usb 4-1: Using ep0 maxpacket: 32
[  305.907420][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  305.915984][    T8] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  305.938326][    T8] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  305.953752][ T8023] netlink: 132 bytes leftover after parsing attributes in process `syz.7.613'.
[  305.992395][    T8] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  306.005029][    T8] usb 4-1: config 128 has no interface number 0
[  306.130512][    T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  306.142244][    T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  306.152498][    T8] usb 4-1: config 128 interface 127 has no altsetting 0
[  306.163033][    T8] usb 4-1: language id specifier not provided by device, defaulting to English
[  306.174734][    T8] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  306.184257][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.192341][    T8] usb 4-1: Product: syz
[  306.196740][    T8] usb 4-1: Manufacturer: syz
[  306.201574][    T8] usb 4-1: SerialNumber: syz
[  308.606638][    T8] usb 4-1: USB disconnect, device number 14
[  310.264498][ T8051] ubi0: attaching mtd0
[  312.533652][ T8051] __kmem_cache_create_args(ubi_aeb_slab_cache) failed with error -22
[  312.541863][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.6.620 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  312.552136][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  312.562249][ T8051] Call Trace:
[  312.565549][ T8051]  <TASK>
[  312.568493][ T8051]  dump_stack_lvl+0x241/0x360
[  312.573206][ T8051]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.578425][ T8051]  ? __pfx__printk+0x10/0x10
[  312.583015][ T8051]  ? kmem_cache_free+0x195/0x410
[  312.587941][ T8051]  ? __kmem_cache_create_args+0x1ed/0x320
[  312.593657][ T8051]  __kmem_cache_create_args+0x251/0x320
[  312.599196][ T8051]  ubi_attach+0x36c/0x5b80
[  312.603619][ T8051]  ? __pfx_ubi_attach+0x10/0x10
[  312.608475][ T8051]  ? ubi_attach_mtd_dev+0x19fa/0x3540
[  312.613834][ T8051]  ubi_attach_mtd_dev+0x1a3a/0x3540
[  312.619035][ T8051]  ctrl_cdev_ioctl+0x346/0x570
[  312.623789][ T8051]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  312.629071][ T8051]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  312.634347][ T8051]  __se_sys_ioctl+0xf5/0x170
[  312.638929][ T8051]  do_syscall_64+0xf3/0x230
[  312.643433][ T8051]  ? clear_bhb_loop+0x35/0x90
[  312.648110][ T8051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.653989][ T8051] RIP: 0033:0x7f0fa0f80849
[  312.658402][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.677996][ T8051] RSP: 002b:00007f0fa1d8c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  312.686421][ T8051] RAX: ffffffffffffffda RBX: 00007f0fa1146160 RCX: 00007f0fa0f80849
[  312.694401][ T8051] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 000000000000000a
[  312.702364][ T8051] RBP: 00007f0fa0ff3986 R08: 0000000000000000 R09: 0000000000000000
[  312.710325][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.718288][ T8051] R13: 0000000000000000 R14: 00007f0fa1146160 R15: 00007fff976d1ab8
[  312.726254][ T8051]  </TASK>
[  312.730206][ T8051] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12
[  316.210875][   T46] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  316.247510][ T5151] Bluetooth: hci3: link tx timeout
[  316.252930][ T5151] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  317.069060][    T8] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  318.128218][ T8086] netlink: 'syz.3.632': attribute type 2 has an invalid length.
[  318.135918][ T8086] netlink: 'syz.3.632': attribute type 8 has an invalid length.
[  318.143729][ T8086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.632'.
[  318.167554][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  318.173981][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.309814][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  318.603590][ T8092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.119634][    T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  321.417715][    T8] usb 6-1: Using ep0 maxpacket: 32
[  321.427016][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[  321.437587][    T8] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  321.468156][    T8] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  321.514971][    T8] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  321.709870][    T8] usb 6-1: config 128 has no interface number 0
[  321.789493][    T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  321.841018][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  321.854209][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  321.884701][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  321.914552][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  321.925653][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  321.935595][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  322.073044][    T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  322.097867][    T8] usb 6-1: config 128 interface 127 has no altsetting 0
[  322.119624][    T8] usb 6-1: language id specifier not provided by device, defaulting to English
[  322.188194][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  322.207053][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.215083][    T8] usb 6-1: Product: syz
[  322.219580][    T8] usb 6-1: Manufacturer: syz
[  322.224193][    T8] usb 6-1: SerialNumber: syz
[  322.393640][    T8] usb 6-1: can't set config #128, error -71
[  322.408309][    T8] usb 6-1: USB disconnect, device number 11
[  322.488799][ T8126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.206828][ T8135] ubi0: attaching mtd0
[  323.212027][ T8135] ubi0: scanning is finished
[  324.208800][ T5849] Bluetooth: hci1: command tx timeout
[  325.887297][ T8128] netlink: 'syz.6.646': attribute type 2 has an invalid length.
[  325.934352][ T8128] netlink: 'syz.6.646': attribute type 8 has an invalid length.
[  325.971279][ T8135] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  326.055473][ T8128] netlink: 132 bytes leftover after parsing attributes in process `syz.6.646'.
[  326.069294][ T8116] chnl_net:caif_netlink_parms(): no params data found
[  326.260402][ T5849] Bluetooth: hci1: command tx timeout
[  326.510428][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.573071][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.581599][ T8116] bridge_slave_0: entered allmulticast mode
[  326.590298][ T8116] bridge_slave_0: entered promiscuous mode
[  326.620659][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.632522][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.641665][ T8116] bridge_slave_1: entered allmulticast mode
[  326.654617][ T8116] bridge_slave_1: entered promiscuous mode
[  326.706612][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.732380][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.774680][ T8116] team0: Port device team_slave_0 added
[  326.803928][ T8116] team0: Port device team_slave_1 added
[  326.825801][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.834445][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.861749][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.874517][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.881697][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.936976][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.065025][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.154458][ T8116] hsr_slave_0: entered promiscuous mode
[  327.166682][ T8116] hsr_slave_1: entered promiscuous mode
[  327.292818][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.367877][ T5849] Bluetooth: hci1: command tx timeout
[  329.396548][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.377177][ T5849] Bluetooth: hci1: command tx timeout
[  330.834850][ T8116] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  330.959882][ T8116] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  331.329447][ T8190] ubi0: attaching mtd0
[  331.334560][ T8190] ubi0: scanning is finished
[  332.220108][ T8194] netlink: 'syz.7.664': attribute type 2 has an invalid length.
[  332.244520][ T8194] netlink: 'syz.7.664': attribute type 8 has an invalid length.
[  332.281314][ T8194] netlink: 132 bytes leftover after parsing attributes in process `syz.7.664'.
[  332.366360][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.429481][ T8116] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  332.445800][ T8116] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  332.465515][ T8190] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  333.547046][ T5938] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  334.023772][   T11] bridge_slave_1: left allmulticast mode
[  334.039862][   T11] bridge_slave_1: left promiscuous mode
[  334.073215][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.118394][   T11] bridge_slave_0: left allmulticast mode
[  334.144165][   T11] bridge_slave_0: left promiscuous mode
[  334.166985][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.461043][ T8243] netlink: 'syz.3.677': attribute type 9 has an invalid length.
[  339.468870][ T8243] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.677'.
[  340.155240][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.307568][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.318703][   T11] bond0 (unregistering): Released all slaves
[  340.369426][ T5938] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  340.419999][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.557157][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  340.580431][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  340.581896][ T8116] 8021q: adding VLAN 0 to HW filter on device team0
[  340.616537][ T5938] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  340.640718][ T8252] netlink: 'syz.7.679': attribute type 2 has an invalid length.
[  340.650222][ T5938] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  340.669505][ T8252] netlink: 'syz.7.679': attribute type 8 has an invalid length.
[  340.691984][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.699124][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.729183][ T5938] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  340.758559][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.765715][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.777260][ T5938] usb 7-1: config 128 has no interface number 0
[  340.801884][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  340.814555][ T8252] netlink: 132 bytes leftover after parsing attributes in process `syz.7.679'.
[  340.851840][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  340.933151][ T5938] usb 7-1: config 128 interface 127 has no altsetting 0
[  340.985380][ T5938] usb 7-1: language id specifier not provided by device, defaulting to English
[  341.053040][ T5938] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  341.094382][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.138558][ T5938] usb 7-1: Product: syz
[  341.157000][ T5938] usb 7-1: Manufacturer: syz
[  341.199740][ T5938] usb 7-1: SerialNumber: syz
[  341.232944][   T11] hsr_slave_0: left promiscuous mode
[  341.257218][ T5938] usb 7-1: can't set config #128, error -71
[  341.902558][ T5938] usb 7-1: USB disconnect, device number 24
[  341.912341][   T11] hsr_slave_1: left promiscuous mode
[  341.919008][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.926812][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.981706][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.989475][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.049011][   T11] veth1_macvtap: left promiscuous mode
[  342.071771][   T11] veth0_macvtap: left promiscuous mode
[  342.089507][   T11] veth1_vlan: left promiscuous mode
[  342.102311][   T11] veth0_vlan: left promiscuous mode
[  342.177896][ T5895] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  342.364217][ T5895] usb 8-1: Using ep0 maxpacket: 32
[  342.383634][ T5895] usb 8-1: unable to get BOS descriptor or descriptor too short
[  342.421501][ T5895] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  342.448218][ T5895] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  342.483429][ T5895] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  342.502816][ T5895] usb 8-1: config 128 has no interface number 0
[  342.517442][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  342.538554][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  342.554718][ T5895] usb 8-1: config 128 interface 127 has no altsetting 0
[  342.568797][ T5895] usb 8-1: language id specifier not provided by device, defaulting to English
[  342.592230][ T5895] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  342.606301][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.624970][ T5895] usb 8-1: Product: syz
[  342.642021][ T5895] usb 8-1: Manufacturer: syz
[  342.667196][ T5895] usb 8-1: SerialNumber: syz
[  344.414059][    T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  344.555146][ T5895] usb 8-1: USB disconnect, device number 7
[  344.622905][    T8] usb 4-1: Using ep0 maxpacket: 32
[  344.635732][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  345.157899][    T8] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  345.166581][    T8] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  345.176991][    T8] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  345.186045][    T8] usb 4-1: config 128 has no interface number 0
[  345.192442][    T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  345.203859][    T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  345.214163][    T8] usb 4-1: config 128 interface 127 has no altsetting 0
[  345.531432][ T8289] nvme_fabrics: missing parameter 'transport=%s'
[  345.538340][ T8289] nvme_fabrics: missing parameter 'nqn=%s'
[  345.758712][    T8] usb 4-1: language id specifier not provided by device, defaulting to English
[  345.818105][    T8] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  345.834604][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.842690][    T8] usb 4-1: Product: syz
[  345.846883][    T8] usb 4-1: Manufacturer: syz
[  345.852142][    T8] usb 4-1: SerialNumber: syz
[  345.891029][   T11] team0 (unregistering): Port device team_slave_1 removed
[  346.141176][   T11] team0 (unregistering): Port device team_slave_0 removed
[  346.178469][ T8302] netlink: 'syz.7.691': attribute type 2 has an invalid length.
[  346.186431][ T8302] netlink: 'syz.7.691': attribute type 8 has an invalid length.
[  346.487185][ T3076] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  346.981079][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.7.691'.
[  347.192594][ T3076] usb 7-1: Using ep0 maxpacket: 32
[  347.215016][    T8] usb 4-1: USB disconnect, device number 15
[  347.234466][ T3076] usb 7-1: unable to get BOS descriptor or descriptor too short
[  347.251343][ T3076] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  347.277160][ T3076] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  347.300858][ T3076] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  347.324051][ T3076] usb 7-1: config 128 has no interface number 0
[  347.336189][ T3076] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  347.347714][ T3076] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  347.387129][ T3076] usb 7-1: config 128 interface 127 has no altsetting 0
[  347.409389][ T3076] usb 7-1: language id specifier not provided by device, defaulting to English
[  347.437346][ T3076] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  347.446654][ T3076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.466058][ T3076] usb 7-1: Product: syz
[  347.471339][ T3076] usb 7-1: Manufacturer: syz
[  347.476071][ T3076] usb 7-1: SerialNumber: syz
[  348.086468][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.565502][ T8116] veth0_vlan: entered promiscuous mode
[  348.606345][ T8116] veth1_vlan: entered promiscuous mode
[  348.664116][ T8116] veth0_macvtap: entered promiscuous mode
[  348.679233][ T8116] veth1_macvtap: entered promiscuous mode
[  348.709121][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.719884][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.731644][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.743879][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.754214][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.765259][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.776434][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.788823][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.799295][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.810509][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.836769][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.881563][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.893867][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.904284][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.915608][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.932354][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.943464][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.954054][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.965022][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.975428][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.986443][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.114867][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.145442][ T8116] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.207227][ T8116] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.226289][ T8116] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.304706][ T8116] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.387639][ T3076] usb 7-1: USB disconnect, device number 25
[  349.719589][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.414151][ T7722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.455401][ T7722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.494592][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.548950][ T3076] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  353.867041][ T3076] usb 9-1: Using ep0 maxpacket: 32
[  353.873074][ T3076] usb 9-1: device descriptor read/all, error -71
[  354.981035][ T8374] netlink: 'syz.5.703': attribute type 2 has an invalid length.
[  354.989059][ T8374] netlink: 'syz.5.703': attribute type 8 has an invalid length.
[  354.996828][ T8374] netlink: 132 bytes leftover after parsing attributes in process `syz.5.703'.
[  359.677801][ T3076] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  359.837289][ T3076] usb 9-1: Using ep0 maxpacket: 32
[  359.848721][ T3076] usb 9-1: unable to get BOS descriptor or descriptor too short
[  359.869305][ T3076] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  359.936190][ T8434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.157139][ T3076] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  360.177783][ T3076] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  360.195870][ T3076] usb 9-1: config 128 has no interface number 0
[  360.206616][ T3076] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  360.221045][ T3076] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  360.231421][ T3076] usb 9-1: config 128 interface 127 has no altsetting 0
[  360.245036][ T3076] usb 9-1: language id specifier not provided by device, defaulting to English
[  360.306314][ T3076] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  360.323578][ T3076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.331991][ T3076] usb 9-1: Product: syz
[  360.336243][ T3076] usb 9-1: Manufacturer: syz
[  360.351462][ T3076] usb 9-1: SerialNumber: syz
[  360.578426][ T8444] binder: 8437:8444 ioctl 4018620d 0 returned -22
[  361.738385][ T3076] usb 9-1: USB disconnect, device number 4
[  362.303467][ T8455] nvme_fabrics: missing parameter 'transport=%s'
[  362.317005][ T8455] nvme_fabrics: missing parameter 'nqn=%s'
[  364.865414][ T8490] netlink: 'syz.5.740': attribute type 9 has an invalid length.
[  364.873220][ T8490] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.740'.
[  365.511616][   T46] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  365.577149][ T3076] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  365.680199][   T46] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  365.703016][   T46] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  365.721368][   T46] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  366.365581][ T3076] usb 9-1: Using ep0 maxpacket: 8
[  366.383858][   T46] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  366.393188][   T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.401350][   T46] usb 8-1: Product: syz
[  366.405586][   T46] usb 8-1: Manufacturer: syz
[  366.410319][   T46] usb 8-1: SerialNumber: syz
[  366.504990][   T46] usb 8-1: can't set config #1, error -71
[  366.514135][   T46] usb 8-1: USB disconnect, device number 8
[  366.522190][ T3076] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  366.531327][ T3076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.539754][ T3076] usb 9-1: Product: syz
[  366.545057][ T3076] usb 9-1: Manufacturer: syz
[  366.549790][ T3076] usb 9-1: SerialNumber: syz
[  366.559140][ T3076] usb 9-1: config 0 descriptor??
[  366.637268][ T5938] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  366.647406][   T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  366.773442][ T3076] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  366.809345][ T5938] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  366.818240][   T25] usb 4-1: Using ep0 maxpacket: 32
[  366.824587][ T5938] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  366.834941][ T5938] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  366.845367][   T25] usb 4-1: unable to get BOS descriptor or descriptor too short
[  366.855396][   T25] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  366.863962][ T5938] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  366.873064][   T25] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  366.883433][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.887597][ T5981] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  366.891481][ T5938] usb 6-1: Product: syz
[  366.903333][   T25] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  366.912441][   T25] usb 4-1: config 128 has no interface number 0
[  366.918741][ T5938] usb 6-1: Manufacturer: syz
[  366.923343][ T5938] usb 6-1: SerialNumber: syz
[  366.928080][   T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  366.941981][   T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  366.956050][   T25] usb 4-1: config 128 interface 127 has no altsetting 0
[  366.966156][   T25] usb 4-1: language id specifier not provided by device, defaulting to English
[  366.981759][   T25] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  366.992407][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.000592][   T25] usb 4-1: Product: syz
[  367.004824][   T25] usb 4-1: Manufacturer: syz
[  367.009602][   T25] usb 4-1: SerialNumber: syz
[  367.057200][ T5981] usb 7-1: Using ep0 maxpacket: 32
[  367.071671][ T5981] usb 7-1: unable to get BOS descriptor or descriptor too short
[  367.080641][ T5981] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  367.089127][ T5981] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  367.099489][ T5981] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  367.108571][ T5981] usb 7-1: config 128 has no interface number 0
[  367.114854][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  367.126110][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  367.140176][ T5981] usb 7-1: config 128 interface 127 has no altsetting 0
[  367.151417][ T5981] usb 7-1: language id specifier not provided by device, defaulting to English
[  367.164408][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  367.173533][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.182311][ T5981] usb 7-1: Product: syz
[  367.186542][ T5981] usb 7-1: Manufacturer: syz
[  367.191199][ T5981] usb 7-1: SerialNumber: syz
[  368.695214][ T3076] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  368.707283][ T3076] usb 9-1: USB disconnect, device number 5
[  368.813830][ T5938] usb 6-1: 0:2 : does not exist
[  368.944170][   T25] usb 4-1: USB disconnect, device number 16
[  368.951642][ T5938] usb 6-1: USB disconnect, device number 12
[  369.435863][ T5981] usb 7-1: USB disconnect, device number 26
[  370.552869][    T8] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  371.206952][    C0] hrtimer: interrupt took 49380 ns
[  373.897154][   T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  374.058741][   T25] usb 8-1: Using ep0 maxpacket: 32
[  374.075792][   T25] usb 8-1: unable to get BOS descriptor or descriptor too short
[  374.083782][ T5938] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  374.250735][   T25] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  374.379328][   T25] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  374.398041][   T25] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  374.437128][   T25] usb 8-1: config 128 has no interface number 0
[  374.453828][   T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  374.485675][   T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  374.516572][   T25] usb 8-1: config 128 interface 127 has no altsetting 0
[  374.557541][   T25] usb 8-1: language id specifier not provided by device, defaulting to English
[  374.574493][    T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  374.590025][   T25] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  374.607035][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.615800][   T25] usb 8-1: Product: syz
[  374.626999][   T25] usb 8-1: Manufacturer: syz
[  374.632491][   T25] usb 8-1: SerialNumber: syz
[  375.157003][    T8] usb 9-1: Using ep0 maxpacket: 32
[  375.164809][    T8] usb 9-1: unable to get BOS descriptor or descriptor too short
[  375.183084][    T8] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  375.195851][    T8] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  375.213460][    T8] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  375.222882][    T8] usb 9-1: config 128 has no interface number 0
[  375.233282][    T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  375.254063][    T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  375.266697][    T8] usb 9-1: config 128 interface 127 has no altsetting 0
[  375.298879][    T8] usb 9-1: language id specifier not provided by device, defaulting to English
[  375.324856][    T8] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  375.366818][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.386868][    T8] usb 9-1: Product: syz
[  375.391344][    T8] usb 9-1: Manufacturer: syz
[  375.396061][    T8] usb 9-1: SerialNumber: syz
[  376.248192][ T8582] netlink: 'syz.3.766': attribute type 9 has an invalid length.
[  376.256099][ T8582] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.766'.
[  376.862107][   T25] usb 8-1: USB disconnect, device number 9
[  377.186654][    T8] usb 9-1: USB disconnect, device number 7
[  378.997256][ T5938] usb 7-1: device descriptor read/64, error -71
[  379.267333][ T5938] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[  379.314608][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  379.322073][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  379.407314][ T8611] nvme_fabrics: missing parameter 'transport=%s'
[  379.413702][ T8611] nvme_fabrics: missing parameter 'nqn=%s'
[  379.547533][ T5938] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  379.556042][ T8614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.556246][ T5938] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  379.576792][ T5938] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  379.655587][ T5938] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  379.666458][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.680411][ T5938] usb 7-1: Product: syz
[  379.684672][ T5938] usb 7-1: Manufacturer: syz
[  379.694327][ T5938] usb 7-1: SerialNumber: syz
[  382.351923][ T5938] usb 7-1: 0:2 : does not exist
[  382.547165][ T5938] usb 7-1: USB disconnect, device number 28
[  382.563885][  T118] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  382.947390][ T5938] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  383.097161][  T118] usb 4-1: Using ep0 maxpacket: 32
[  383.105099][  T118] usb 4-1: unable to get BOS descriptor or descriptor too short
[  383.114410][  T118] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  383.122884][  T118] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  383.134662][  T118] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  383.147010][  T118] usb 4-1: config 128 has no interface number 0
[  383.153403][  T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  383.164848][  T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  383.175064][  T118] usb 4-1: config 128 interface 127 has no altsetting 0
[  383.190959][  T118] usb 4-1: language id specifier not provided by device, defaulting to English
[  383.201743][  T118] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  383.218986][  T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.237258][  T118] usb 4-1: Product: syz
[  383.247166][  T118] usb 4-1: Manufacturer: syz
[  383.257296][  T118] usb 4-1: SerialNumber: syz
[  385.037985][  T118] usb 4-1: USB disconnect, device number 17
[  389.394430][ T5938] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  389.507130][ T5895] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  389.747234][ T5895] usb 9-1: Using ep0 maxpacket: 32
[  389.753385][ T5938] usb 6-1: Using ep0 maxpacket: 32
[  389.762051][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short
[  389.771859][ T5938] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  389.780389][ T5938] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  389.792042][ T5938] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  389.801244][ T5938] usb 6-1: config 128 has no interface number 0
[  389.801530][ T5895] usb 9-1: unable to get BOS descriptor or descriptor too short
[  389.807692][ T5938] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  389.827199][ T5938] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  389.870703][ T5938] usb 6-1: config 128 interface 127 has no altsetting 0
[  389.891467][ T8710] ubi0: attaching mtd0
[  389.901000][ T8710] ubi0: scanning is finished
[  389.980460][ T5938] usb 6-1: language id specifier not provided by device, defaulting to English
[  390.122677][ T5895] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  390.161567][ T5938] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  390.306541][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.428974][ T5895] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  390.441195][ T5895] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  390.442661][ T8710] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  390.450397][ T5895] usb 9-1: config 128 has no interface number 0
[  390.466375][ T5895] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  390.467039][ T5938] usb 6-1: Product: syz
[  390.477628][ T5895] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  390.477657][ T5895] usb 9-1: config 128 interface 127 has no altsetting 0
[  390.489004][ T5895] usb 9-1: language id specifier not provided by device, defaulting to English
[  390.492110][ T5938] usb 6-1: Manufacturer: syz
[  390.511742][ T5895] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  390.515668][ T5938] usb 6-1: SerialNumber: syz
[  390.557022][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.575392][ T5895] usb 9-1: Product: syz
[  390.616661][ T5895] usb 9-1: Manufacturer: syz
[  390.635352][ T5895] usb 9-1: SerialNumber: syz
[  392.067066][ T5895] usb 9-1: USB disconnect, device number 8
[  392.916118][ T5938] usb 6-1: USB disconnect, device number 13
[  403.976638][ T8842] binder: 8838:8842 ioctl 4018620d 0 returned -22
[  405.014556][ T8847] nvme_fabrics: missing parameter 'transport=%s'
[  405.024228][ T8847] nvme_fabrics: missing parameter 'nqn=%s'
[  405.201795][   T29] audit: type=1326 audit(1732909137.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8849 comm="syz.7.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efde3780849 code=0x0
[  405.609378][   T46] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  405.778611][   T46] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  405.815687][   T46] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  405.882615][   T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.907895][   T46] usb 8-1: config 0 descriptor??
[  405.951442][   T46] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  406.168750][ T8862] ubi0: attaching mtd0
[  406.173888][ T8862] ubi0: scanning is finished
[  406.272009][ T8862] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  406.280142][ T8862] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  406.287963][ T8862] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  406.294921][ T8862] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  406.302752][ T8862] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  406.309924][ T8862] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  406.318086][ T8862] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1286338019
[  406.328111][ T8862] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  406.422836][ T8867] ubi0: background thread "ubi_bgt0d" started, PID 8867
[  409.534292][ T5895] usb 8-1: USB disconnect, device number 10
[  409.965867][ T8905] ubi: mtd0 is already attached to ubi0
[  410.051365][ T8908] binder: 8892:8908 ioctl 4018620d 0 returned -22
[  410.447207][   T46] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  414.117068][   T29] audit: type=1326 audit(1732909146.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8931 comm="syz.3.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc95f80849 code=0x0
[  415.817727][ T8936] netlink: 'syz.7.868': attribute type 9 has an invalid length.
[  415.825555][ T8936] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.868'.
[  416.494100][ T5895] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  416.708782][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  416.755017][ T5895] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  416.771757][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.782169][ T5895] usb 4-1: config 0 descriptor??
[  416.790765][ T5895] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  416.831919][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.745068][ T8968] binder: 8962:8968 ioctl 4018620d 0 returned -22
[  418.758895][    T8] usb 4-1: USB disconnect, device number 18
[  419.217060][ T8980] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  419.223826][ T8980] PKCS7: Only support pkcs7_signedData type
[  424.778442][   T29] audit: type=1326 audit(1732909156.520:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9018 comm="syz.6.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x0
[  425.697080][ T5895] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  425.868870][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.897058][ T5895] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  425.932315][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.961366][ T5895] usb 7-1: config 0 descriptor??
[  426.318710][ T5895] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  426.931537][ T5938] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  427.855642][ T5938] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  427.864466][ T5938] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  427.874630][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  427.895364][ T5938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  427.898488][ T5895] usb 7-1: USB disconnect, device number 30
[  427.917937][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.926016][ T5938] usb 4-1: Product: syz
[  427.930276][ T5938] usb 4-1: Manufacturer: syz
[  427.934888][ T5938] usb 4-1: SerialNumber: syz
[  428.153876][ T5938] usb 4-1: 0:2 : does not exist
[  428.237511][ T5938] usb 4-1: USB disconnect, device number 19
[  430.207413][   T29] audit: type=1326 audit(1732909162.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9092 comm="syz.3.910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc95f80849 code=0x0
[  431.088248][ T5938] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  431.278784][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.301492][ T5938] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  431.366103][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.441202][ T5938] usb 4-1: config 0 descriptor??
[  431.467424][ T5938] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  433.267048][ T5895] usb 4-1: USB disconnect, device number 20
[  433.267604][ T9119] capability: warning: `syz.6.917' uses 32-bit capabilities (legacy support in use)
[  433.564508][ T9124] nvme_fabrics: missing parameter 'transport=%s'
[  433.571067][ T9124] nvme_fabrics: missing parameter 'nqn=%s'
[  435.067028][   T29] audit: type=1326 audit(1732909167.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.8.926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7fab80849 code=0x0
[  435.417099][ T5895] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  435.477351][ T5981] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  436.847253][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.857142][ T5981] usb 7-1: Using ep0 maxpacket: 32
[  436.862408][ T5895] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  436.872306][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.887410][ T5981] usb 7-1: unable to get BOS descriptor or descriptor too short
[  436.991888][ T5895] usb 9-1: config 0 descriptor??
[  437.021273][ T5981] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  437.029791][ T5981] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  437.040106][ T5981] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  437.049228][ T5981] usb 7-1: config 128 has no interface number 0
[  437.050926][ T9166] nvme_fabrics: missing parameter 'transport=%s'
[  437.062534][ T9166] nvme_fabrics: missing parameter 'nqn=%s'
[  437.069297][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  437.080625][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  437.090882][ T5981] usb 7-1: config 128 interface 127 has no altsetting 0
[  437.106661][ T5895] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  437.118765][ T5981] usb 7-1: language id specifier not provided by device, defaulting to English
[  437.138376][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  437.147477][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.155446][ T5981] usb 7-1: Product: syz
[  437.159652][ T5981] usb 7-1: Manufacturer: syz
[  437.164264][ T5981] usb 7-1: SerialNumber: syz
[  437.333142][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2040
[  438.767243][   T29] audit: type=1326 audit(1732909170.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  438.808111][ T5981] usb 7-1: USB disconnect, device number 31
[  438.905748][   T29] audit: type=1326 audit(1732909170.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  438.927388][   T29] audit: type=1326 audit(1732909170.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  438.949318][   T29] audit: type=1326 audit(1732909170.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  439.193853][ T5889] usb 9-1: USB disconnect, device number 10
[  440.337583][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.343914][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  442.508616][   T29] audit: type=1326 audit(1732909174.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9246 comm="syz.3.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc95f80849 code=0x0
[  443.234682][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  443.420102][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.437515][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.454209][ T5889] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  443.492778][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.678152][ T5889] usb 4-1: config 0 descriptor??
[  445.397055][ T5895] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  445.479168][ T5981] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  445.599021][ T5895] usb 7-1: Using ep0 maxpacket: 32
[  445.626832][ T5895] usb 7-1: unable to get BOS descriptor or descriptor too short
[  445.670371][ T5895] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  445.687088][ T5895] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  445.745135][ T5981] usb 8-1: Using ep0 maxpacket: 32
[  445.758795][ T5895] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  445.789673][ T5981] usb 8-1: unable to get BOS descriptor or descriptor too short
[  445.807798][ T5895] usb 7-1: config 128 has no interface number 0
[  445.821576][ T5981] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  445.840449][ T5895] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  445.872589][ T5981] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  445.884874][ T9282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  446.128778][ T5895] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  446.150551][ T5981] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  446.237504][ T9304] netlink: 'syz.3.968': attribute type 9 has an invalid length.
[  446.245229][ T9304] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.968'.
[  446.292884][ T5895] usb 7-1: config 128 interface 127 has no altsetting 0
[  446.322397][ T5981] usb 8-1: config 128 has no interface number 0
[  446.376623][ T5981] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  446.412547][ T5895] usb 7-1: language id specifier not provided by device, defaulting to English
[  446.492744][ T5895] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  446.555948][ T5981] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  446.603347][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.751422][ T5981] usb 8-1: config 128 interface 127 has no altsetting 0
[  446.766992][ T5895] usb 7-1: Product: syz
[  446.771207][ T5895] usb 7-1: Manufacturer: syz
[  446.814547][ T5895] usb 7-1: SerialNumber: syz
[  446.821872][ T5981] usb 8-1: language id specifier not provided by device, defaulting to English
[  446.878685][ T5981] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  446.917854][ T5981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.962532][ T5981] usb 8-1: Product: syz
[  446.966774][ T5981] usb 8-1: Manufacturer: syz
[  446.997669][ T9306] netlink: 80 bytes leftover after parsing attributes in process `syz.3.969'.
[  447.008153][ T5981] usb 8-1: SerialNumber: syz
[  447.087060][ T5889] usbhid 4-1:0.0: can't add hid device: -71
[  447.093102][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  447.147053][ T5889] usb 4-1: USB disconnect, device number 21
[  447.429052][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  448.296682][ T5895] usb 7-1: USB disconnect, device number 32
[  448.454176][ T5981] usb 8-1: USB disconnect, device number 11
[  448.723252][ T9327] netlink: 'syz.7.974': attribute type 9 has an invalid length.
[  448.731075][ T9327] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.974'.
[  448.753568][ T9327] ubi: mtd0 is already attached to ubi0
[  448.762169][ T9327] ubi0: detaching mtd0
[  448.813389][ T9327] ubi0: mtd0 is detached
[  451.167045][ T5981] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  451.337078][ T5981] usb 6-1: Using ep0 maxpacket: 32
[  451.347794][ T9338] netlink: 80 bytes leftover after parsing attributes in process `syz.8.980'.
[  451.379914][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short
[  451.418283][ T5981] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  451.426676][ T5981] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  451.474161][ T5981] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  451.506983][ T5981] usb 6-1: config 128 has no interface number 0
[  451.513307][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  451.556964][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  451.592651][ T5981] usb 6-1: config 128 interface 127 has no altsetting 0
[  451.761754][ T5981] usb 6-1: string descriptor 0 read error: -71
[  451.768065][ T5981] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  451.777233][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.827073][ T5981] usb 6-1: can't set config #128, error -71
[  451.834252][ T5981] usb 6-1: USB disconnect, device number 14
[  452.767201][   T46] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  452.997354][   T46] usb 7-1: Using ep0 maxpacket: 32
[  453.012102][   T46] usb 7-1: unable to get BOS descriptor or descriptor too short
[  453.054409][   T46] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  453.073196][   T46] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  453.096979][   T46] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  453.107088][ T5981] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  453.115105][   T46] usb 7-1: config 128 has no interface number 0
[  453.132093][   T46] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  453.153764][   T46] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  453.177046][ T5151] Bluetooth: hci1: command 0x0406 tx timeout
[  453.183147][   T46] usb 7-1: config 128 interface 127 has no altsetting 0
[  453.187041][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.200038][   T46] usb 7-1: language id specifier not provided by device, defaulting to English
[  453.210906][   T46] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  453.220312][   T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.228434][   T46] usb 7-1: Product: syz
[  453.232835][   T46] usb 7-1: Manufacturer: syz
[  453.237543][   T46] usb 7-1: SerialNumber: syz
[  453.267096][ T5981] usb 6-1: Using ep0 maxpacket: 32
[  453.278656][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short
[  453.308696][ T5981] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  453.341555][ T5981] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  453.372803][ T5981] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  453.404593][ T5981] usb 6-1: config 128 has no interface number 0
[  453.417126][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  453.445217][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  453.468086][ T5981] usb 6-1: config 128 interface 127 has no altsetting 0
[  453.500859][ T5981] usb 6-1: language id specifier not provided by device, defaulting to English
[  453.517901][ T5981] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  453.543396][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.551897][ T5981] usb 6-1: Product: syz
[  453.566268][ T5981] usb 6-1: Manufacturer: syz
[  453.576375][ T5981] usb 6-1: SerialNumber: syz
[  456.027445][ T5981] usb 6-1: USB disconnect, device number 15
[  456.658732][   T46] usb 7-1: USB disconnect, device number 33
[  457.154338][ T9387] netlink: 'syz.7.993': attribute type 9 has an invalid length.
[  457.162146][ T9387] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.993'.
[  457.827227][   T29] audit: type=1326 audit(1732909189.960:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.6.994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x0
[  457.927595][   T25] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  458.076996][   T25] usb 9-1: Using ep0 maxpacket: 32
[  458.084539][   T25] usb 9-1: unable to get BOS descriptor or descriptor too short
[  458.114983][   T25] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  458.140041][   T25] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  458.167028][   T25] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  458.186420][   T25] usb 9-1: config 128 has no interface number 0
[  458.205390][   T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  458.224945][   T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  458.243134][   T25] usb 9-1: config 128 interface 127 has no altsetting 0
[  458.265871][    T8] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  458.270496][   T25] usb 9-1: language id specifier not provided by device, defaulting to English
[  458.458376][   T25] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  458.459324][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.476988][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.490318][   T25] usb 9-1: Product: syz
[  458.545044][   T25] usb 9-1: Manufacturer: syz
[  458.549925][   T25] usb 9-1: SerialNumber: syz
[  458.736194][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.818478][    T8] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  458.901220][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.046084][    T8] usb 7-1: config 0 descriptor??
[  459.352236][ T9410] ubi0: attaching mtd0
[  459.357471][ T9410] ubi0: scanning is finished
[  459.644037][ T9410] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  459.651803][ T9410] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  459.653909][ T9417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.659373][ T9410] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  459.659396][ T9410] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  459.683746][ T9410] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  459.690678][ T9410] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  459.699168][ T9410] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1286338019
[  459.709284][ T9410] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  459.737858][ T9416] ubi0: background thread "ubi_bgt0d" started, PID 9416
[  459.929865][   T25] usb 9-1: USB disconnect, device number 11
[  463.417213][    T8] usbhid 7-1:0.0: can't add hid device: -71
[  463.423392][    T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  463.443666][    T8] usb 7-1: USB disconnect, device number 34
[  465.537023][    T8] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  465.936281][ T9455] netlink: 'syz.3.1012': attribute type 9 has an invalid length.
[  465.944199][ T9455] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1012'.
[  465.956473][ T9455] ubi: mtd0 is already attached to ubi0
[  465.962815][ T9455] ubi0: detaching mtd0
[  465.980964][ T9455] ubi0: mtd0 is detached
[  466.017035][    T8] usb 7-1: Using ep0 maxpacket: 8
[  466.550867][    T8] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  466.629971][   T29] audit: type=1800 audit(1732909198.780:17): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1013" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  466.711517][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.719826][ T5895] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  466.737802][    T8] usb 7-1: Product: syz
[  466.742026][    T8] usb 7-1: Manufacturer: syz
[  466.746635][    T8] usb 7-1: SerialNumber: syz
[  466.861065][    T8] usb 7-1: config 0 descriptor??
[  466.916144][    T8] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71
[  466.923731][    T8] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  466.935178][    T8] usb 7-1: USB disconnect, device number 35
[  466.947439][ T5895] usb 8-1: Using ep0 maxpacket: 32
[  466.954625][ T5895] usb 8-1: unable to get BOS descriptor or descriptor too short
[  466.969806][ T5895] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  467.012630][ T5895] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  467.045213][ T5895] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  467.059820][ T5895] usb 8-1: config 128 has no interface number 0
[  467.072963][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  467.091536][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  467.145173][ T5895] usb 8-1: config 128 interface 127 has no altsetting 0
[  467.157015][ T5981] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  467.191362][ T5895] usb 8-1: language id specifier not provided by device, defaulting to English
[  467.241596][ T5895] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  467.283644][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.304375][ T5895] usb 8-1: Product: syz
[  467.313215][ T5895] usb 8-1: Manufacturer: syz
[  467.319240][ T5981] usb 4-1: Using ep0 maxpacket: 32
[  467.345976][ T5981] usb 4-1: unable to get BOS descriptor or descriptor too short
[  467.360829][ T5895] usb 8-1: SerialNumber: syz
[  467.511887][ T5981] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  467.527258][ T5981] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  467.824309][ T5981] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  467.856353][ T5981] usb 4-1: config 128 has no interface number 0
[  467.880143][ T5981] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  467.891799][ T5981] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  467.902300][ T5981] usb 4-1: config 128 interface 127 has no altsetting 0
[  467.922633][ T5981] usb 4-1: language id specifier not provided by device, defaulting to English
[  467.946028][ T5981] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  467.972171][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.980680][ T5981] usb 4-1: Product: syz
[  467.988023][ T5981] usb 4-1: Manufacturer: syz
[  467.993565][ T5981] usb 4-1: SerialNumber: syz
[  469.907080][    T8] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  470.189239][ T5895] usb 8-1: USB disconnect, device number 12
[  470.245429][    T8] usb 9-1: Using ep0 maxpacket: 32
[  470.367228][    T8] usb 9-1: unable to get BOS descriptor or descriptor too short
[  470.377444][    T8] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  470.385831][    T8] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  470.398781][    T8] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  470.409112][    T8] usb 9-1: config 128 has no interface number 0
[  470.416383][    T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  470.430843][ T5981] usb 4-1: USB disconnect, device number 22
[  470.439326][    T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  470.450966][    T8] usb 9-1: config 128 interface 127 has no altsetting 0
[  470.472232][    T8] usb 9-1: language id specifier not provided by device, defaulting to English
[  470.485637][    T8] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  470.501946][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.510014][    T8] usb 9-1: Product: syz
[  470.514192][    T8] usb 9-1: Manufacturer: syz
[  470.518802][    T8] usb 9-1: SerialNumber: syz
[  472.113573][    T8] usb 9-1: USB disconnect, device number 12
[  472.447123][   T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  472.667278][   T25] usb 4-1: Using ep0 maxpacket: 32
[  472.959504][ T9503] delete_channel: no stack
[  473.103598][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  473.137508][   T25] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  473.169514][ T9509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  473.179976][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.203765][   T25] usb 4-1: config 0 descriptor??
[  473.223391][ T9512] nvme_fabrics: missing parameter 'transport=%s'
[  473.229961][ T9512] nvme_fabrics: missing parameter 'nqn=%s'
[  473.763260][   T25] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0
[  473.807007][   T25] dragonrise 0003:0079:0006.0006: no inputs found
[  473.813478][   T25] dragonrise 0003:0079:0006.0006: force feedback init failed
[  473.971678][ T5889] usb 4-1: USB disconnect, device number 23
[  473.980413][   T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  474.147093][   T25] usb 8-1: Using ep0 maxpacket: 32
[  474.166740][   T25] usb 8-1: unable to get BOS descriptor or descriptor too short
[  474.192325][   T25] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  474.220416][   T25] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  474.244918][   T25] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  474.263873][   T25] usb 8-1: config 128 has no interface number 0
[  474.295807][   T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  474.333591][   T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  474.366338][   T25] usb 8-1: config 128 interface 127 has no altsetting 0
[  474.392475][   T25] usb 8-1: language id specifier not provided by device, defaulting to English
[  474.418636][   T25] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  474.447019][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.501794][   T25] usb 8-1: Product: syz
[  475.229872][   T25] usb 8-1: Manufacturer: syz
[  475.234523][   T25] usb 8-1: SerialNumber: syz
[  475.419911][ T9535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  477.045762][   T25] usb 8-1: USB disconnect, device number 13
[  477.232452][ T9552] tipc: Started in network mode
[  477.255391][ T9552] tipc: Node identity ac14142f, cluster identity 4711
[  477.273265][ T9552] tipc: New replicast peer: 0.0.0.0
[  477.279609][ T9552] tipc: Enabled bearer <udp:syz2>, priority 10
[  478.371313][ T5981] tipc: Node number set to 2886997039
[  482.554704][ T9603] tipc: Started in network mode
[  482.559971][ T9603] tipc: Node identity ac14142f, cluster identity 4711
[  482.610831][ T9603] tipc: New replicast peer: 0.0.0.0
[  482.624002][ T9603] tipc: Enabled bearer <udp:syz2>, priority 10
[  483.618477][    T8] tipc: Node number set to 2886997039
[  486.846462][ T9642] No control pipe specified
[  489.546967][ T9667] ieee802154 phy0 wpan0: encryption failed: -22
[  490.645562][ T9679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  491.989974][ T5938] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  492.827498][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  492.835047][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  492.878851][ T5938] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  492.929020][ T5938] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  492.963902][ T5938] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  492.973998][ T5938] usb 7-1: config 128 has no interface number 0
[  492.988565][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  493.019937][ T9698] No control pipe specified
[  493.081168][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  494.051127][ T5938] usb 7-1: config 128 interface 127 has no altsetting 0
[  494.058821][ T5938] usb 7-1: string descriptor 0 read error: -71
[  494.065083][ T5938] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  494.094646][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.133795][ T5938] usb 7-1: can't set config #128, error -71
[  494.158441][ T5938] usb 7-1: USB disconnect, device number 36
[  495.177343][ T9717] ieee802154 phy0 wpan0: encryption failed: -22
[  497.889933][ T9745] netlink: 'syz.8.1088': attribute type 9 has an invalid length.
[  497.898154][ T9745] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1088'.
[  497.926812][ T9745] ubi0: attaching mtd0
[  497.937719][ T9745] ubi0: scanning is finished
[  498.557353][ T9745] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  499.167074][ T5892] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  499.357187][ T5892] usb 8-1: Using ep0 maxpacket: 32
[  499.364822][ T5892] usb 8-1: unable to get BOS descriptor or descriptor too short
[  499.411598][ T5892] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  499.459397][ T5892] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  499.523801][ T5892] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  499.626490][ T5892] usb 8-1: config 128 has no interface number 0
[  499.632907][ T5892] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  499.657116][ T5892] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  499.680104][ T5892] usb 8-1: config 128 interface 127 has no altsetting 0
[  500.738756][ T5892] usb 8-1: string descriptor 0 read error: -71
[  500.747453][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  500.756647][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.846024][ T5892] usb 8-1: can't set config #128, error -71
[  500.854682][ T5892] usb 8-1: USB disconnect, device number 14
[  501.663222][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.670030][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  507.848108][ T5981] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  508.877161][   T25] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  509.337077][ T5981] usb 8-1: Using ep0 maxpacket: 32
[  509.391567][ T5981] usb 8-1: device descriptor read/all, error -71
[  509.476453][   T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  509.511383][ T9851] nvme_fabrics: missing parameter 'transport=%s'
[  509.527122][ T9851] nvme_fabrics: missing parameter 'nqn=%s'
[  509.562349][   T25] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  509.572705][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  509.608950][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  509.618204][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.626301][   T25] usb 4-1: Product: syz
[  509.656118][   T25] usb 4-1: Manufacturer: syz
[  509.813908][   T25] usb 4-1: SerialNumber: syz
[  511.659813][   T25] usb 4-1: 0:2 : does not exist
[  514.143220][   T25] usb 4-1: USB disconnect, device number 24
[  516.237172][ T5938] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  517.626512][ T5938] usb 9-1: Using ep0 maxpacket: 32
[  517.634106][ T5938] usb 9-1: unable to get BOS descriptor or descriptor too short
[  517.651581][ T5938] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  517.660756][ T5938] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  517.721116][ T5938] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  517.746993][ T5938] usb 9-1: config 128 has no interface number 0
[  517.753525][ T5938] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  517.806982][ T5938] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  517.824437][ T5938] usb 9-1: config 128 interface 127 has no altsetting 0
[  517.847261][ T5938] usb 9-1: language id specifier not provided by device, defaulting to English
[  517.909128][ T5938] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  517.929787][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.947326][ T5938] usb 9-1: Product: syz
[  517.972042][ T5938] usb 9-1: Manufacturer: syz
[  517.976687][ T5938] usb 9-1: SerialNumber: syz
[  518.480075][ T5938] usb 9-1: USB disconnect, device number 13
[  519.420072][   T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  521.227105][   T25] usb 4-1: Using ep0 maxpacket: 32
[  521.249701][   T25] usb 4-1: unable to get BOS descriptor or descriptor too short
[  521.262008][   T25] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  521.279148][   T25] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  521.617028][   T25] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  521.626127][   T25] usb 4-1: config 128 has no interface number 0
[  521.637132][   T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  521.648443][   T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  521.658592][   T25] usb 4-1: config 128 interface 127 has no altsetting 0
[  521.671175][   T25] usb 4-1: string descriptor 0 read error: -71
[  521.678740][   T25] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  521.824507][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.577297][   T25] usb 4-1: can't set config #128, error -71
[  522.626671][   T25] usb 4-1: USB disconnect, device number 25
[  522.726633][ T9964] nvme_fabrics: missing parameter 'transport=%s'
[  522.733210][ T9964] nvme_fabrics: missing parameter 'nqn=%s'
[  523.927059][ T5889] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  524.177019][ T5889] usb 6-1: Using ep0 maxpacket: 32
[  524.189504][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short
[  524.286527][ T5889] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  524.302191][ T5889] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  525.001348][ T9991] vivid-000: kernel_thread() failed
[  525.169693][ T5889] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  525.178869][ T5889] usb 6-1: config 128 has no interface number 0
[  525.185605][ T5889] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  525.197056][ T5889] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  525.207493][ T5889] usb 6-1: config 128 interface 127 has no altsetting 0
[  526.360570][ T5889] usb 6-1: language id specifier not provided by device, defaulting to English
[  526.605684][ T5889] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  527.151475][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.169130][ T5889] usb 6-1: can't set config #128, error -71
[  527.176398][ T5889] usb 6-1: USB disconnect, device number 16
[  532.766430][T10053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  534.901130][T10090] vivid-003: kernel_thread() failed
[  536.159373][T10103] ubi0: attaching mtd0
[  536.164584][T10103] ubi0: scanning is finished
[  536.432813][T10103] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  541.081371][T10154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  541.085117][ T5892] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  541.959046][ T5892] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  541.968443][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.980302][ T5892] usb 4-1: config 0 descriptor??
[  541.989176][ T5892] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  542.017245][   T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  542.066299][  T118] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  542.167028][   T25] usb 6-1: Using ep0 maxpacket: 32
[  542.187342][   T25] usb 6-1: unable to get BOS descriptor or descriptor too short
[  542.192424][ T5892] gp8psk: usb in 128 operation failed.
[  542.206075][   T25] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  542.217021][  T118] usb 7-1: Using ep0 maxpacket: 32
[  542.225212][   T25] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  542.251338][  T118] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  542.257333][   T25] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  542.267042][  T118] usb 7-1: config 0 has no interface number 0
[  542.306750][   T25] usb 6-1: config 128 has no interface number 0
[  542.329850][   T25] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  542.373695][   T25] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  542.412268][   T25] usb 6-1: config 128 interface 127 has no altsetting 0
[  542.437106][  T118] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  542.446193][  T118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.451821][   T25] usb 6-1: language id specifier not provided by device, defaulting to English
[  542.454547][ T5892] gp8psk: usb in 146 operation failed.
[  542.469694][  T118] usb 7-1: Product: syz
[  542.473877][  T118] usb 7-1: Manufacturer: syz
[  542.479183][ T5892] gp8psk: failed to get FW version
[  542.484443][  T118] usb 7-1: SerialNumber: syz
[  542.508357][  T118] usb 7-1: config 0 descriptor??
[  542.513547][ T5892] gp8psk: usb in 149 operation failed.
[  542.515235][   T25] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  542.519323][ T5892] gp8psk: failed to get FPGA version
[  542.544930][  T118] radio-si470x 7-1:0.35: could not find interrupt in endpoint
[  542.552593][  T118] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5
[  542.581772][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.622097][   T25] usb 6-1: Product: syz
[  542.630753][   T25] usb 6-1: Manufacturer: syz
[  542.640870][   T25] usb 6-1: SerialNumber: syz
[  542.757086][  T118] radio-raremono 7-1:0.35: this is not Thanko's Raremono.
[  542.765245][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  542.778494][  T118] usbhid 7-1:0.35: couldn't find an input interrupt endpoint
[  542.787871][ T5892] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  542.796843][ T5892] usb 4-1: media controller created
[  542.802496][  T118] usb 7-1: USB disconnect, device number 37
[  542.872347][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  542.915485][ T5892] gp8psk_fe: Frontend attached
[  542.925795][ T5892] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  542.948504][ T5892] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  543.081076][ T5892] gp8psk: usb in 138 operation failed.
[  543.086592][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  543.127084][ T5892] gp8psk: found Genpix USB device pID = 203 (hex)
[  543.142922][ T5892] usb 4-1: USB disconnect, device number 26
[  543.594139][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  544.366536][T10179] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  544.373240][T10179] PKCS7: Only support pkcs7_signedData type
[  544.651557][T10186] netlink: 'syz.3.1215': attribute type 1 has an invalid length.
[  546.747441][T10200] autofs: Bad value for 'fd'
[  547.015611][   T25] usb 6-1: USB disconnect, device number 17
[  547.026875][T10201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.970202][T10248] binder: 10243:10248 ioctl 4018620d 0 returned -22
[  557.994367][T10310] netlink: 'syz.6.1250': attribute type 9 has an invalid length.
[  558.002307][T10310] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1250'.
[  561.168361][T10327] ubi0: attaching mtd0
[  561.173051][T10327] ubi0: scanning is finished
[  561.604097][T10327] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  561.674806][T10327] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  561.735518][T10327] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  561.837039][T10327] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  561.844572][T10327] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  561.867191][T10327] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  561.875224][T10327] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1286338019
[  562.297015][T10327] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  562.367412][T10333] ubi0: background thread "ubi_bgt0d" started, PID 10333
[  563.102036][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.108481][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  568.422900][   T29] audit: type=1800 audit(1732909300.550:18): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1271" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  568.537144][ T5895] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  569.007161][ T5895] usb 6-1: Using ep0 maxpacket: 32
[  569.029349][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short
[  569.058929][ T5895] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  569.379735][ T5895] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  569.390156][ T5895] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  569.401732][ T5895] usb 6-1: config 128 has no interface number 0
[  569.408498][ T5895] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  569.420559][ T5895] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  569.431315][ T5895] usb 6-1: config 128 interface 127 has no altsetting 0
[  569.609479][ T5895] usb 6-1: language id specifier not provided by device, defaulting to English
[  569.869767][ T5895] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  569.879211][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.887475][ T5895] usb 6-1: Product: syz
[  569.892486][ T5895] usb 6-1: Manufacturer: syz
[  569.934629][ T5895] usb 6-1: SerialNumber: syz
[  572.450005][ T5895] usb 6-1: USB disconnect, device number 18
[  572.466270][   T29] audit: type=1326 audit(1732909304.610:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.5.1284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efecd780849 code=0x0
[  574.217065][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  574.388661][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.400030][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.439756][ T5895] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  574.499408][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.533268][ T5895] usb 6-1: config 0 descriptor??
[  574.990510][ T5895] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  574.997881][ T5895] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  575.008532][ T5895] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  575.054433][ T5895] cm6533_jd 0003:0D8C:0022.0007: No inputs registered, leaving
[  575.466375][   T29] audit: type=1800 audit(1732909307.610:20): pid=10457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1290" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  575.585166][ T5895] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  576.748598][ T5889] usb 6-1: USB disconnect, device number 19
[  577.797059][ T5895] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  577.915297][   T29] audit: type=1326 audit(1732909310.060:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  577.957261][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  577.970487][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short
[  577.993238][ T5895] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  578.005232][   T29] audit: type=1326 audit(1732909310.080:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  578.032396][ T5895] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  578.047804][ T5895] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  578.062112][   T29] audit: type=1326 audit(1732909310.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  578.090885][ T5895] usb 4-1: config 128 has no interface number 0
[  578.112833][ T5895] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  578.116202][   T29] audit: type=1326 audit(1732909310.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  578.156100][ T5895] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  578.176859][   T29] audit: type=1326 audit(1732909310.080:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  578.197070][ T5895] usb 4-1: config 128 interface 127 has no altsetting 0
[  578.233832][ T5895] usb 4-1: language id specifier not provided by device, defaulting to English
[  578.236026][   T29] audit: type=1326 audit(1732909310.080:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  578.265637][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  578.296960][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.302756][   T29] audit: type=1326 audit(1732909310.080:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  578.331094][ T5895] usb 4-1: Product: syz
[  578.348128][ T5895] usb 4-1: Manufacturer: syz
[  578.357042][   T29] audit: type=1326 audit(1732909310.080:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  578.377413][ T5895] usb 4-1: SerialNumber: syz
[  578.435327][   T29] audit: type=1326 audit(1732909310.080:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000
[  580.418586][   T25] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  580.503115][ T5895] usb 4-1: USB disconnect, device number 27
[  581.453830][   T25] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  581.472850][   T25] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  581.513944][   T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  581.579668][   T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  581.633267][   T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  581.682391][   T25] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  581.708101][   T25] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  581.754603][   T25] usb 9-1: Product: syz
[  581.777859][   T25] usb 9-1: Manufacturer: syz
[  583.104006][   T25] usb 9-1: can't set config #1, error -71
[  583.115387][   T25] usb 9-1: USB disconnect, device number 14
[  585.517060][   T25] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  586.057801][   T25] usb 9-1: Using ep0 maxpacket: 32
[  586.065058][   T25] usb 9-1: unable to get BOS descriptor or descriptor too short
[  586.075845][   T25] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  586.084297][   T25] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  586.105640][   T25] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  586.152425][   T25] usb 9-1: config 128 has no interface number 0
[  586.190476][   T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  586.258947][   T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  586.301627][   T25] usb 9-1: config 128 interface 127 has no altsetting 0
[  586.355838][   T25] usb 9-1: language id specifier not provided by device, defaulting to English
[  586.418091][   T25] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  586.757325][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  586.757368][   T29] audit: type=1326 audit(1732909318.880:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10574 comm="syz.5.1327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efecd780849 code=0x0
[  587.264348][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.272486][   T25] usb 9-1: Product: syz
[  587.276721][   T25] usb 9-1: Manufacturer: syz
[  587.281442][   T25] usb 9-1: SerialNumber: syz
[  587.510104][   T25] usb 9-1: can't set config #128, error -71
[  587.521778][T10581] random: crng reseeded on system resumption
[  587.773660][   T25] usb 9-1: USB disconnect, device number 15
[  590.092302][T10608] vivid-001: kernel_thread() failed
[  592.550548][T10637] netlink: 'syz.3.1342': attribute type 9 has an invalid length.
[  592.558475][T10637] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1342'.
[  592.570415][T10637] ubi: mtd0 is already attached to ubi0
[  592.576566][T10637] ubi0: detaching mtd0
[  592.609429][T10637] ubi0: mtd0 is detached
[  592.717189][ T5889] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  593.007635][ T5889] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  593.016725][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.049844][ T5889] usb 7-1: config 0 descriptor??
[  594.595156][ T5889] ------------[ cut here ]------------
[  594.600851][ T5889] WARNING: CPU: 1 PID: 5889 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x44a/0x590
[  594.612861][ T5889] Modules linked in:
[  594.616783][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  594.627307][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  594.637489][ T5889] Workqueue: usb_hub_wq hub_event
[  594.642558][ T5889] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[  594.649177][ T5889] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 a0 e9 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 de c1 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 de c1 fa 31 db e9 e5
[  594.669931][ T5889] RSP: 0018:ffffc9000416eb60 EFLAGS: 00010287
[  594.676047][ T5889] RAX: ffffffff86d40299 RBX: 0000000000000000 RCX: 0000000000100000
[  594.684310][ T5889] RDX: ffffc90019b6f000 RSI: 00000000000135ff RDI: 0000000000013600
[  594.693371][ T5889] RBP: ffffc9000416ec30 R08: ffffffff86d401f0 R09: 1ffffffff285dd20
[  594.702461][ T5889] R10: dffffc0000000000 R11: fffffbfff285dd21 R12: ffffc9000416ece4
[  594.710725][ T5889] R13: ffff88805ad90e40 R14: dffffc0000000000 R15: 1ffff9200082dd74
[  594.718761][ T5889] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  594.727803][ T5889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  594.734429][ T5889] CR2: 00007efecd90def8 CR3: 0000000034d34000 CR4: 00000000003526f0
[  594.742516][ T5889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  594.750625][ T5889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  594.758746][ T5889] Call Trace:
[  594.762052][ T5889]  <TASK>
[  594.765015][ T5889]  ? __warn+0x165/0x4d0
[  594.769260][ T5889]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  594.775195][ T5889]  ? report_bug+0x2b3/0x500
[  594.779810][ T5889]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  594.785747][ T5889]  ? handle_bug+0x60/0x90
[  594.790190][ T5889]  ? exc_invalid_op+0x1a/0x50
[  594.795533][ T5889]  ? asm_exc_invalid_op+0x1a/0x20
[  594.801272][ T5889]  ? ath6kl_bmi_get_target_info+0x3a0/0x590
[  594.807275][ T5889]  ? ath6kl_bmi_get_target_info+0x449/0x590
[  594.813209][ T5889]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  594.819167][ T5889]  ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[  594.825443][ T5889]  ? trace_kmalloc+0x1f/0xd0
[  594.830145][ T5889]  ? ath6kl_bmi_init+0x6d/0xf0
[  594.834946][ T5889]  ath6kl_core_init+0x1eb/0x1140
[  594.839946][ T5889]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  594.845787][ T5889]  ? __kasan_kmalloc+0x98/0xb0
[  594.850675][ T5889]  ? __pfx_ath6kl_core_init+0x10/0x10
[  594.856085][ T5889]  ? ath6kl_core_create+0x7d8/0x950
[  594.861628][ T5889]  ath6kl_usb_probe+0x129b/0x1390
[  594.866694][ T5889]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  594.872709][ T5889]  ? usb_disable_lpm+0x77/0x380
[  594.877651][ T5889]  usb_probe_interface+0x645/0xbb0
[  594.882803][ T5889]  ? __pfx_usb_probe_interface+0x10/0x10
[  594.888541][ T5889]  really_probe+0x2b8/0xad0
[  594.893087][ T5889]  __driver_probe_device+0x1a2/0x390
[  594.898991][ T5889]  driver_probe_device+0x50/0x430
[  594.904051][ T5889]  __device_attach_driver+0x2d6/0x530
[  594.910129][ T5889]  bus_for_each_drv+0x24e/0x2e0
[  594.915026][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  594.921022][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  594.926452][ T5889]  __device_attach+0x333/0x520
[  594.931309][ T5889]  ? __pfx_lock_release+0x10/0x10
[  594.936365][ T5889]  ? __pfx___device_attach+0x10/0x10
[  594.941760][ T5889]  ? do_raw_spin_unlock+0x13c/0x8b0
[  594.947053][ T5889]  bus_probe_device+0x189/0x260
[  594.951944][ T5889]  device_add+0x856/0xbf0
[  594.956311][ T5889]  usb_set_configuration+0x1976/0x1fb0
[  594.961864][ T5889]  usb_generic_driver_probe+0x88/0x140
[  594.967418][ T5889]  usb_probe_device+0x1b8/0x380
[  594.972305][ T5889]  ? __pfx_usb_probe_device+0x10/0x10
[  594.977757][ T5889]  really_probe+0x2b8/0xad0
[  594.982302][ T5889]  __driver_probe_device+0x1a2/0x390
[  594.987668][ T5889]  driver_probe_device+0x50/0x430
[  594.992722][ T5889]  __device_attach_driver+0x2d6/0x530
[  594.998795][ T5889]  bus_for_each_drv+0x24e/0x2e0
[  595.003682][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  595.010287][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  595.015717][ T5889]  __device_attach+0x333/0x520
[  595.020601][ T5889]  ? __pfx___device_attach+0x10/0x10
[  595.025927][ T5889]  bus_probe_device+0x189/0x260
[  595.030916][ T5889]  device_add+0x856/0xbf0
[  595.035278][ T5889]  usb_new_device+0x104a/0x19a0
[  595.040233][ T5889]  ? __pfx_usb_new_device+0x10/0x10
[  595.045476][ T5889]  ? _raw_spin_unlock_irq+0x23/0x50
[  595.050788][ T5889]  ? lockdep_hardirqs_on+0x99/0x150
[  595.056028][ T5889]  hub_event+0x2d6d/0x5150
[  595.060572][ T5889]  ? __pfx_hub_event+0x10/0x10
[  595.065370][ T5889]  ? __pfx_lock_acquire+0x10/0x10
[  595.070482][ T5889]  ? preempt_schedule+0xe1/0xf0
[  595.075357][ T5889]  ? __schedule+0x1111/0x4be0
[  595.080151][ T5889]  ? preempt_schedule_thunk+0x1a/0x30
[  595.085550][ T5889]  ? process_scheduled_works+0x976/0x1840
[  595.091425][ T5889]  process_scheduled_works+0xa66/0x1840
[  595.097177][ T5889]  ? __pfx_process_scheduled_works+0x10/0x10
[  595.103815][ T5889]  ? assign_work+0x364/0x3d0
[  595.109062][ T5889]  worker_thread+0x870/0xd30
[  595.113687][ T5889]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  595.119711][ T5889]  ? __kthread_parkme+0x169/0x1d0
[  595.124769][ T5889]  ? __pfx_worker_thread+0x10/0x10
[  595.129954][ T5889]  kthread+0x2f0/0x390
[  595.134055][ T5889]  ? __pfx_worker_thread+0x10/0x10
[  595.139247][ T5889]  ? __pfx_kthread+0x10/0x10
[  595.143868][ T5889]  ret_from_fork+0x4b/0x80
[  595.148365][ T5889]  ? __pfx_kthread+0x10/0x10
[  595.152987][ T5889]  ret_from_fork_asm+0x1a/0x30
[  595.157881][ T5889]  </TASK>
[  595.160922][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  595.168220][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  595.178648][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  595.188722][ T5889] Workqueue: usb_hub_wq hub_event
[  595.193781][ T5889] Call Trace:
[  595.197073][ T5889]  <TASK>
[  595.200021][ T5889]  dump_stack_lvl+0x241/0x360
[  595.204726][ T5889]  ? __pfx_dump_stack_lvl+0x10/0x10
[  595.209948][ T5889]  ? __pfx__printk+0x10/0x10
[  595.214564][ T5889]  ? _printk+0xd5/0x120
[  595.218750][ T5889]  ? __init_begin+0x41000/0x41000
[  595.223807][ T5889]  ? vscnprintf+0x5d/0x90
[  595.228164][ T5889]  panic+0x349/0x880
[  595.232092][ T5889]  ? __warn+0x174/0x4d0
[  595.236277][ T5889]  ? __pfx_panic+0x10/0x10
[  595.240736][ T5889]  ? ret_from_fork_asm+0x1a/0x30
[  595.245705][ T5889]  __warn+0x344/0x4d0
[  595.249716][ T5889]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  595.255631][ T5889]  report_bug+0x2b3/0x500
[  595.259966][ T5889]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  595.265869][ T5889]  handle_bug+0x60/0x90
[  595.270039][ T5889]  exc_invalid_op+0x1a/0x50
[  595.274539][ T5889]  asm_exc_invalid_op+0x1a/0x20
[  595.279388][ T5889] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[  595.285899][ T5889] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 a0 e9 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 de c1 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 de c1 fa 31 db e9 e5
[  595.305534][ T5889] RSP: 0018:ffffc9000416eb60 EFLAGS: 00010287
[  595.311632][ T5889] RAX: ffffffff86d40299 RBX: 0000000000000000 RCX: 0000000000100000
[  595.319609][ T5889] RDX: ffffc90019b6f000 RSI: 00000000000135ff RDI: 0000000000013600
[  595.327597][ T5889] RBP: ffffc9000416ec30 R08: ffffffff86d401f0 R09: 1ffffffff285dd20
[  595.335577][ T5889] R10: dffffc0000000000 R11: fffffbfff285dd21 R12: ffffc9000416ece4
[  595.343554][ T5889] R13: ffff88805ad90e40 R14: dffffc0000000000 R15: 1ffff9200082dd74
[  595.351534][ T5889]  ? ath6kl_bmi_get_target_info+0x3a0/0x590
[  595.357431][ T5889]  ? ath6kl_bmi_get_target_info+0x449/0x590
[  595.363336][ T5889]  ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[  595.369572][ T5889]  ? trace_kmalloc+0x1f/0xd0
[  595.374158][ T5889]  ? ath6kl_bmi_init+0x6d/0xf0
[  595.378931][ T5889]  ath6kl_core_init+0x1eb/0x1140
[  595.383865][ T5889]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  595.389677][ T5889]  ? __kasan_kmalloc+0x98/0xb0
[  595.394442][ T5889]  ? __pfx_ath6kl_core_init+0x10/0x10
[  595.399809][ T5889]  ? ath6kl_core_create+0x7d8/0x950
[  595.405014][ T5889]  ath6kl_usb_probe+0x129b/0x1390
[  595.410048][ T5889]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  595.415952][ T5889]  ? usb_disable_lpm+0x77/0x380
[  595.420822][ T5889]  usb_probe_interface+0x645/0xbb0
[  595.425944][ T5889]  ? __pfx_usb_probe_interface+0x10/0x10
[  595.431573][ T5889]  really_probe+0x2b8/0xad0
[  595.436086][ T5889]  __driver_probe_device+0x1a2/0x390
[  595.441370][ T5889]  driver_probe_device+0x50/0x430
[  595.446391][ T5889]  __device_attach_driver+0x2d6/0x530
[  595.451759][ T5889]  bus_for_each_drv+0x24e/0x2e0
[  595.456608][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  595.462495][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  595.467892][ T5889]  __device_attach+0x333/0x520
[  595.472669][ T5889]  ? __pfx_lock_release+0x10/0x10
[  595.477702][ T5889]  ? __pfx___device_attach+0x10/0x10
[  595.482993][ T5889]  ? do_raw_spin_unlock+0x13c/0x8b0
[  595.488203][ T5889]  bus_probe_device+0x189/0x260
[  595.493060][ T5889]  device_add+0x856/0xbf0
[  595.497393][ T5889]  usb_set_configuration+0x1976/0x1fb0
[  595.502870][ T5889]  usb_generic_driver_probe+0x88/0x140
[  595.508358][ T5889]  usb_probe_device+0x1b8/0x380
[  595.513222][ T5889]  ? __pfx_usb_probe_device+0x10/0x10
[  595.518595][ T5889]  really_probe+0x2b8/0xad0
[  595.523105][ T5889]  __driver_probe_device+0x1a2/0x390
[  595.528390][ T5889]  driver_probe_device+0x50/0x430
[  595.533410][ T5889]  __device_attach_driver+0x2d6/0x530
[  595.538778][ T5889]  bus_for_each_drv+0x24e/0x2e0
[  595.543626][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  595.549515][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  595.554895][ T5889]  __device_attach+0x333/0x520
[  595.559656][ T5889]  ? __pfx___device_attach+0x10/0x10
[  595.564943][ T5889]  bus_probe_device+0x189/0x260
[  595.569800][ T5889]  device_add+0x856/0xbf0
[  595.574126][ T5889]  usb_new_device+0x104a/0x19a0
[  595.578991][ T5889]  ? __pfx_usb_new_device+0x10/0x10
[  595.584191][ T5889]  ? _raw_spin_unlock_irq+0x23/0x50
[  595.589390][ T5889]  ? lockdep_hardirqs_on+0x99/0x150
[  595.594589][ T5889]  hub_event+0x2d6d/0x5150
[  595.599039][ T5889]  ? __pfx_hub_event+0x10/0x10
[  595.603797][ T5889]  ? __pfx_lock_acquire+0x10/0x10
[  595.608812][ T5889]  ? preempt_schedule+0xe1/0xf0
[  595.613656][ T5889]  ? __schedule+0x1111/0x4be0
[  595.618343][ T5889]  ? preempt_schedule_thunk+0x1a/0x30
[  595.623717][ T5889]  ? process_scheduled_works+0x976/0x1840
[  595.629437][ T5889]  process_scheduled_works+0xa66/0x1840
[  595.634999][ T5889]  ? __pfx_process_scheduled_works+0x10/0x10
[  595.640989][ T5889]  ? assign_work+0x364/0x3d0
[  595.645583][ T5889]  worker_thread+0x870/0xd30
[  595.650173][ T5889]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  595.656068][ T5889]  ? __kthread_parkme+0x169/0x1d0
[  595.661090][ T5889]  ? __pfx_worker_thread+0x10/0x10
[  595.666194][ T5889]  kthread+0x2f0/0x390
[  595.670256][ T5889]  ? __pfx_worker_thread+0x10/0x10
[  595.675362][ T5889]  ? __pfx_kthread+0x10/0x10
[  595.679948][ T5889]  ret_from_fork+0x4b/0x80
[  595.684445][ T5889]  ? __pfx_kthread+0x10/0x10
[  595.689043][ T5889]  ret_from_fork_asm+0x1a/0x30
[  595.693817][ T5889]  </TASK>
[  595.697091][ T5889] Kernel Offset: disabled
[  595.701455][ T5889] Rebooting in 86400 seconds..