last executing test programs:

9.92261935s ago: executing program 1 (id=2851):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x42000006, 0x801)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd0102030109028e0703020910000904"], 0x0)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0)

8.690083044s ago: executing program 3 (id=2860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
syz_usb_connect$cdc_ncm(0x6, 0x9b, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
syz_usb_connect(0x3, 0xf5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000340))
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x119483, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0)
lsm_set_self_attr(0x64, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x31, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10003}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

8.627402827s ago: executing program 0 (id=2861):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x3, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e2030200010006000609240305050306058109240306010304050507240405"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003040000000403bfdde81e16397a430410623f6b0aff"], 0x0, 0x0}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000033c0)='/proc/asound/seq/timer\x00', 0x0, 0x0)
close_range(r2, r2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x10001, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x4, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0x9f, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000180)=0x7)

8.390081076s ago: executing program 1 (id=2862):
userfaultfd(0x80801)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x8, 0x8})
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001200010000000000000000000a0600fd00004e22fcff"], 0x50}}, 0x20000080)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2], 0x80}}, 0x2000c081)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))

7.289150173s ago: executing program 1 (id=2865):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x66842, 0x90)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x81, {0x81, 0x26, "d4815c3da636d506c5ad4e712aeb0ca9ac265574770c7d3114d958633ea06bad614b4858618c4309d6b4a27fca6aa1d23ac446d3f520ef1d7b191a590ecb12d570754ac0939eb485eaab00714dea12cbc7623d220878ff5b3ad7f484e4bca815b41e0c0b1677b225fdc7ce655b9ceb6724bc6eab8831960d6d7f3e7b330871"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff})
io_setup(0x8f0, &(0x7f0000002400))

7.164687693s ago: executing program 3 (id=2866):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000040)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@generic={0x1, 0x0, 0x2, 0x3, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x40, 0x7e, &(0x7f0000000380)=""/126, 0x41100, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xa, 0xd41, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000500), 0x10, 0xff}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000240000000f0000000300000000100000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x4, 0xc, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x80, 0x3c, &(0x7f0000000140)=""/60, 0x40f00, 0x1, '\x00', r1, @fallback=0x12, r2, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x6075, 0x80000001}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000000700)=[0xffffffffffffffff, r4], &(0x7f0000000740)=[{0x4, 0x4, 0x3, 0x8}, {0x97b, 0x5, 0x10, 0x2}, {0x5, 0x3, 0xc, 0xb}, {0x3, 0x3, 0x10}, {0x3, 0x4, 0x8}, {0x3, 0x1, 0x1, 0x6}, {0x1, 0x4, 0xd, 0xb}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x6}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r5, 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x405e, 0x3c1de0d13abee234)
recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r8)
renameat(r6, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', r6, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00')
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000200)="cfc850defd27f31e2d20223673feacf3b7545c037b5222", 0xfdef, 0x3b00, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaa0516907800000000ffffffff2b9c6b3fd360740a00"/42], 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)

6.984596323s ago: executing program 0 (id=2868):
r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x1, 0x101})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
socket$inet(0x2, 0x80001, 0x84)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))

6.978351753s ago: executing program 3 (id=2869):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
ftruncate(r1, 0x80)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x5}, {0x20, 0x2}}, 0x24, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x18a)
r2 = syz_io_uring_setup(0x3158, &(0x7f0000000280)={0x0, 0x4000cfcb, 0x1042, 0x8003, 0x354}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000000)=0x9ecf, 0x4)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
write$P9_RLOPEN(r5, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x3}, 0x1}}, 0x18)
ptrace(0x10, 0x0)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff14}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23)

6.308083561s ago: executing program 2 (id=2871):
socket$l2tp(0x2, 0x2, 0x73)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x1, 0x8010800000000084)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

6.135143466s ago: executing program 2 (id=2872):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x20008080)
recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x102)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000003c0)={@dev={0xfe, 0x80, '\x00', 0x21}, r2}, 0x14)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x2000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0)

5.964140196s ago: executing program 3 (id=2873):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x74)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)

5.369130366s ago: executing program 2 (id=2876):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.360796811s ago: executing program 3 (id=2877):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe4e834bffb6da656)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0))
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53)
pread64(r0, &(0x7f0000000040)=""/198, 0xc6, 0xfffffffffffffffd)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00')
openat(r1, &(0x7f0000000440)='./cgroup\x00', 0x440, 0x80)
r2 = socket$inet(0x2, 0x1, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x2, 0x4acf, 0x8000000000000003, 0x5], 0x5, &(0x7f0000000140), 0x0, [{}, {}, {}, {}, {}]}, 0xc8)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x8c012, r3, 0x343e2000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r6, &(0x7f0000000840)=""/39, 0xfffffce5)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1})

5.052156615s ago: executing program 0 (id=2878):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/230, 0xe6}, {0x0}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40012032, 0x0)
syz_open_dev$loop(0x0, 0x9, 0xe900)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00', &(0x7f0000000200)='{\x00', 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r7, 0x4b48, &(0x7f0000000080))
bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0)

5.048174354s ago: executing program 1 (id=2879):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000040)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@generic={0x1, 0x0, 0x2, 0x3, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x40, 0x7e, &(0x7f0000000380)=""/126, 0x41100, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xa, 0xd41, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000500), 0x10, 0xff}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000240000000f0000000300000000100000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x4, 0xc, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x80, 0x3c, &(0x7f0000000140)=""/60, 0x40f00, 0x1, '\x00', r1, @fallback=0x12, r2, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x6075, 0x80000001}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000000700)=[0xffffffffffffffff, r4], &(0x7f0000000740)=[{0x4, 0x4, 0x3, 0x8}, {0x97b, 0x5, 0x10, 0x2}, {0x5, 0x3, 0xc, 0xb}, {0x3, 0x3, 0x10}, {0x3, 0x4, 0x8}, {0x3, 0x1, 0x1, 0x6}, {0x1, 0x4, 0xd, 0xb}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x6}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r5, 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x405e, 0x3c1de0d13abee234)
recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r8)
renameat(r6, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', r6, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00')
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000200)="cfc850defd27f31e2d20223673feacf3b7545c037b5222", 0xfdef, 0x3b00, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaa0516907800000000ffffffff2b9c6b3fd360740a00"/42], 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)

4.741876687s ago: executing program 1 (id=2880):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x565a}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x11)
ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3)
syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010b519210040000102030109027a0003010e0002080b0102010030400904000000010130000a24010e"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6bba919736d34290000"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000), 0x0, 0x8)
dup2(r2, r3)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x13)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045})
socket$netlink(0x10, 0x3, 0x5)
ppoll(&(0x7f0000000000)=[{r0, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x2)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)

4.271710847s ago: executing program 0 (id=2881):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
inotify_init1(0x800)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
set_mempolicy_home_node(&(0x7f00004b4000/0x3000)=nil, 0x3000, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newnexthop={0x48, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

4.268184737s ago: executing program 2 (id=2882):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49)
r2 = fanotify_init(0x200, 0x0)
r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r4 = dup(r3)
fanotify_mark(r2, 0x1, 0x8001000, r4, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'vlan0\x00', @broadcast})
r5 = socket$kcm(0x11, 0x3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
msync(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x6)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000340)={0x0, 0xb}, &(0x7f00000001c0)=0x8)
syz_emit_ethernet(0x62, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa420180c20000008100190008004908005000650000040690780a010102ac1414aa00880fe9c017335e0d519d9b4b039c6a9917d0bb6dae56c18e1dd2b59c0000000000000000000000000000000400004e220000870386e439f863b54e220000000000000002000000"], &(0x7f0000000180)={0x1, 0x4, [0x527, 0xfc0, 0xa9b, 0xbf7]})
sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x7, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='G', 0x28}], 0x1}, 0x200480c0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="9fcf"], 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x80840)
ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000080)=""/82)

4.151445118s ago: executing program 3 (id=2883):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7d03, 0xbd, 0x6, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

3.870174838s ago: executing program 4 (id=2885):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x8000000)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x5, 0x0})
r3 = io_uring_setup(0x1bfb, &(0x7f0000000040)={0x0, 0x970, 0x200, 0x80000000, 0x3dd, 0x0, r1})
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x2004c080)
io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r5, &(0x7f0000002300)=""/4108, 0x100c)

3.744408568s ago: executing program 4 (id=2886):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x801, 0x84)
io_setup(0x3fd, &(0x7f0000000500)=<r1=>0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4001, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x15, 0x3, 'ovf\x00', 0x1, 0x6, 0x3d}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r5, 0x0, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0xfdfe, 0x400000000000000}])

3.453133708s ago: executing program 0 (id=2887):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xa652, 0xc8001)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[<r1=>0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x1, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x9, 0x7})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x3d, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[<r5=>0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x3, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x7, 0x3})
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x6, 0x8})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000700)={0x0, 0x0, <r10=>0x0})
r11 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000380)=[<r12=>0x0]})
ioctl$DRM_IOCTL_MODE_SETCRTC(r11, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, r12, 0x0, 0x2, 0x7, 0x9, 0xfffffffb, {0x8, 0xbd60, 0x9, 0x0, 0x5b8a, 0x2, 0x4, 0x200, 0x3, 0x1, 0x8, 0x4, 0x400, 0x200, "62ffb534b06ad9b80e89305cd7c8bd71ab7370e47d084bfde117d562d75afa61"}})
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000101010200000000000000000a000002100001800c00028012000100010500000c00198008000100b803"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4080)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={&(0x7f00000006c0)=[r1, r2, r4, 0x0, r5, r6, r8, r9], 0x8, r10, r12, 0x1ff, 0x8, 0x7dc9, 0x0, {0x2, 0x6, 0x0, 0x805, 0x6, 0x2, 0xf28, 0x3, 0x2, 0x4, 0xb, 0xff, 0x2, 0x3, "385285117ef2f81d39d371026dd5ee1d2140901d0bf7a3a0ce4b574485576e84"}})
r14 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOBLANK(r14, 0x4611, 0x0)

3.444062387s ago: executing program 4 (id=2888):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8002, 0x3, 0x2}, 0x18, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10)
connect$vsock_stream(r5, 0x0, 0x0)
connect$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10)
bind$inet6(r3, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000000)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x0)
dup(r0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)

3.247796108s ago: executing program 0 (id=2889):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000380)=0x10001, 0x4)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
getpid()
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f00000009c0)=[<r1=>0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x2, 0x5, 0x2, 0x3})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000b40)={0x0, 0x0, r1, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@broadcast}]}, @lsrr={0x83, 0x7, 0x40, [@loopback]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
fsopen(0x0, 0x1)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80)

3.24261539s ago: executing program 4 (id=2890):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000040)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@generic={0x1, 0x0, 0x2, 0x3, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x40, 0x7e, &(0x7f0000000380)=""/126, 0x41100, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xa, 0xd41, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000500), 0x10, 0xff}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000240000000f0000000300000000100000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x4, 0xc, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x80, 0x3c, &(0x7f0000000140)=""/60, 0x40f00, 0x1, '\x00', r1, @fallback=0x12, r2, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x6075, 0x80000001}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000000700)=[0xffffffffffffffff, r4], &(0x7f0000000740)=[{0x4, 0x4, 0x3, 0x8}, {0x97b, 0x5, 0x10, 0x2}, {0x5, 0x3, 0xc, 0xb}, {0x3, 0x3, 0x10}, {0x3, 0x4, 0x8}, {0x3, 0x1, 0x1, 0x6}, {0x1, 0x4, 0xd, 0xb}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x6}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r5, 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x405e, 0x3c1de0d13abee234)
recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r8)
renameat(r6, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', r6, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00')
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000200)="cfc850defd27f31e2d20223673feacf3b7545c037b5222", 0xfdef, 0x3b00, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaa0516907800000000ffffffff2b9c6b3fd360740a00"/42], 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)

3.051680695s ago: executing program 4 (id=2891):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65ffff64656661756c7420757365723a73717a20"], 0x2a, 0xfffffffffffffff9)
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, 0xfffffffffffffffe})
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885fec2e72c56542d8a7a3c63e598a354755c27793f2bc59c65980a0ddaf01b51253cf82ae7a3db51d1b962ffbd9cfd36b0036b550f6b441727d3030fe5b798f065f694619e1fb1d2da0", 0x4a}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "05bef2a0ba57e8c1", "6dae7fd38fb2a187322e750f0c24a985", "9b99a3c8", "d3b30d165d678510"}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
r4 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1)
fsmount(r4, 0x0, 0x86)
setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f00000000c0), 0x4)
sendmsg$nl_generic(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040))

2.807663336s ago: executing program 4 (id=2892):
unshare(0x24040400)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r3})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000})
close_range(r1, r4, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0)
eventfd(0x1ff)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x1009, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d84bd8191f589ecd2f50cc9b8e07f76ea782d8cecdf9ec"}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)
readv(r6, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80a41, 0x0)

1.028434431s ago: executing program 2 (id=2893):
keyctl$unlink(0x9, 0x0, 0x0)
add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000640)={0x1, 0x0, @d}, 0x18, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.027005428s ago: executing program 1 (id=2903):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f387bdf01ff822a6a26b4cbd04523921adb0bddfd4c657e626ffa46f0a565ee807b56f98d90a48858679c0e5cada93389b479e4547690951c952e877d4139aaddd84d8b01dd791eff7b2c20cad352b1499ae1afe7b871f84a31447a312d7208bd10f4bb618cd4125d4a6f7e505084229dcd6302e14997c31c84275dc1d439f3a59ec9178f3a1a709658df92a85e2aa1a27c14f60a0e558f5d819468f01b7930de", 0x18c}, {&(0x7f0000000280)="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", 0x24c}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc70", 0xeb}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$sock(r2, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/79, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680))
r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
fsmount(r6, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

0s ago: executing program 2 (id=2894):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
io_setup(0x23, &(0x7f0000000280)=<r1=>0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket(0x2, 0x80805, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffffffffffe})
fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
openat$cgroup_pressure(r4, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ppoll(&(0x7f0000000100)=[{r5, 0x2005}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

yzkaller0>
[  543.964758][ T9663] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  544.104725][ T9663] usb 3-1: device descriptor read/64, error -71
[  544.346701][ T9663] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  544.514708][ T9663] usb 3-1: device descriptor read/64, error -71
[  544.552774][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.563597][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.575627][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.587598][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.611185][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.625381][ T9663] usb usb3-port1: attempt power cycle
[  544.633267][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.644925][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.658334][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.674523][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.674809][ T5694] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  544.701637][T13820] kvm_intel: kvm [13819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa
[  544.866694][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.884691][ T9665] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  544.903393][ T5694] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  544.934530][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.964699][ T9663] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  544.981175][ T5694] usb 5-1: config 0 descriptor??
[  545.004990][ T9663] usb 3-1: device descriptor read/8, error -71
[  545.016913][ T5694] pwc: Askey VC010 type 2 USB webcam detected.
[  545.058068][ T9665] usb 1-1: Using ep0 maxpacket: 32
[  545.089368][ T9665] usb 1-1: config 0 has no interfaces?
[  545.124512][ T9665] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  545.149795][ T9665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.190134][ T9665] usb 1-1: Product: syz
[  545.203026][ T9665] usb 1-1: Manufacturer: syz
[  545.218772][ T9665] usb 1-1: SerialNumber: syz
[  545.240410][ T9665] usb 1-1: config 0 descriptor??
[  545.418334][ T5694] pwc: recv_control_msg error -32 req 02 val 2b00
[  545.435772][ T5694] pwc: recv_control_msg error -32 req 02 val 2700
[  545.451948][ T5694] pwc: recv_control_msg error -32 req 02 val 2c00
[  545.469738][ T5694] pwc: recv_control_msg error -32 req 04 val 1000
[  545.476281][ T9663] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  545.492409][ T5694] pwc: recv_control_msg error -32 req 04 val 1300
[  545.501838][ T5694] pwc: recv_control_msg error -32 req 04 val 1400
[  545.513110][ T5694] pwc: recv_control_msg error -32 req 02 val 2000
[  545.522937][ T9663] usb 3-1: config index 0 descriptor too short (expected 1426, got 146)
[  545.533784][ T5694] pwc: recv_control_msg error -32 req 02 val 2100
[  545.541574][ T9663] usb 3-1: config 113 has an invalid descriptor of length 0, skipping remainder of the config
[  545.555699][ T5694] pwc: recv_control_msg error -32 req 04 val 1500
[  545.564110][ T9663] usb 3-1: config 113 has 0 interfaces, different from the descriptor's value: 4
[  545.577905][ T5694] pwc: recv_control_msg error -32 req 02 val 2500
[  545.587435][ T5694] pwc: recv_control_msg error -32 req 02 val 2400
[  545.597068][ T9663] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  545.606878][ T9663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  545.616604][ T9663] usb 3-1: SerialNumber: syz
[  545.821995][ T5694] pwc: recv_control_msg error -71 req 02 val 2900
[  545.848968][ T5694] pwc: recv_control_msg error -71 req 02 val 2800
[  545.890404][ T5694] pwc: recv_control_msg error -71 req 04 val 1100
[  545.914380][ T5694] pwc: recv_control_msg error -71 req 04 val 1200
[  545.959557][ T5694] pwc: Registered as video103.
[  545.972211][T13839] syzkaller0: entered promiscuous mode
[  545.996545][T13839] syzkaller0: entered allmulticast mode
[  546.002960][ T5694] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50
[  546.074279][ T5694] usb 5-1: USB disconnect, device number 50
[  546.104883][T13839] 0: reclassify loop, rule prio 0, protocol 800
[  546.654848][   T12] wlan1: Trigger new scan to find an IBSS to join
[  546.703422][T13847] syzkaller0: entered promiscuous mode
[  546.728342][T13847] syzkaller0: entered allmulticast mode
[  546.872509][ T9663] usb 3-1: USB disconnect, device number 52
[  546.994706][ T5631] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  547.124716][ T5631] usb 4-1: device descriptor read/64, error -71
[  547.364728][ T5631] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  547.440280][ T5694] usb 1-1: USB disconnect, device number 54
[  547.507956][ T5631] usb 4-1: device descriptor read/64, error -71
[  547.627051][T13860] syzkaller0: entered promiscuous mode
[  547.632774][T13860] syzkaller0: entered allmulticast mode
[  547.638949][ T5631] usb usb4-port1: attempt power cycle
[  547.876067][T13870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  547.920068][T13870] netlink: 'syz.1.2577': attribute type 10 has an invalid length.
[  547.986556][ T5631] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  548.027229][ T5631] usb 4-1: device descriptor read/8, error -71
[  548.278999][ T5631] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  548.327348][ T5631] usb 4-1: device descriptor read/8, error -71
[  548.456008][ T5631] usb usb4-port1: unable to enumerate USB device
[  549.620021][T13884] tipc: Started in network mode
[  549.630108][T13884] tipc: Node identity 2a2346ed930f, cluster identity 4711
[  549.640298][T13884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.655555][T13884] syzkaller0: entered promiscuous mode
[  549.662331][T13884] syzkaller0: entered allmulticast mode
[  549.703642][T11932] wlan1: Trigger new scan to find an IBSS to join
[  549.727339][T13884] tipc: Resetting bearer <eth:syzkaller0>
[  549.781678][T13883] tipc: Resetting bearer <eth:syzkaller0>
[  549.836322][T13883] tipc: Disabling bearer <eth:syzkaller0>
[  549.883730][T13888] binder: 13887:13888 ioctl c0306201 200000000180 returned -14
[  550.018644][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'.
[  550.059607][T13891] binder: 13890:13891 ioctl c0145608 200000000140 returned -22
[  550.465839][ T5631] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  550.605063][   T12] wlan1: Creating new IBSS network, BSSID 2a:56:42:af:69:a8
[  550.637486][ T5631] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  550.650395][ T5631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.661932][ T5631] usb 5-1: Product: syz
[  550.671301][ T5631] usb 5-1: Manufacturer: syz
[  550.685010][ T5694] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  550.715411][ T5631] usb 5-1: SerialNumber: syz
[  550.816227][T13914] syzkaller0: entered promiscuous mode
[  550.821886][T13914] syzkaller0: entered allmulticast mode
[  550.836949][T13912] syzkaller0: entered promiscuous mode
[  550.843864][T13912] syzkaller0: entered allmulticast mode
[  550.849644][ T5694] usb 1-1: Using ep0 maxpacket: 8
[  550.858861][ T5694] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  550.886763][ T5694] usb 1-1: config 0 has no interface number 0
[  550.894203][ T5694] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  550.914516][ T5694] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  550.926794][ T5694] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  550.938316][ T5694] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  550.957080][ T5694] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  550.982512][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.005083][ T5694] usb 1-1: config 0 descriptor??
[  551.029723][ T5694] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  551.172758][ T5631] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  551.188188][ T5631] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  551.306052][    T9] usb 1-1: USB disconnect, device number 55
[  551.315768][ T9665] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  551.342424][    T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  551.400814][T13926] syzkaller0: entered promiscuous mode
[  551.411503][T13926] syzkaller0: entered allmulticast mode
[  551.486663][ T9665] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.498580][ T9665] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  551.509966][ T9665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.527829][ T9665] usb 4-1: config 0 descriptor??
[  551.543527][ T9665] pwc: Askey VC010 type 2 USB webcam detected.
[  551.599756][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'.
[  551.637454][T13930] binder: 13929:13930 ioctl c0145608 200000000140 returned -22
[  551.936491][T13937] syzkaller0: entered promiscuous mode
[  551.951371][ T9665] pwc: recv_control_msg error -32 req 02 val 2b00
[  551.964718][T13937] syzkaller0: entered allmulticast mode
[  551.979060][ T9665] pwc: recv_control_msg error -32 req 02 val 2700
[  552.000689][ T9665] pwc: recv_control_msg error -32 req 02 val 2c00
[  552.013834][ T9665] pwc: recv_control_msg error -32 req 04 val 1000
[  552.023903][ T9665] pwc: recv_control_msg error -32 req 04 val 1300
[  552.031800][ T9665] pwc: recv_control_msg error -32 req 04 val 1400
[  552.060224][ T9665] pwc: recv_control_msg error -32 req 02 val 2000
[  552.077480][ T9665] pwc: recv_control_msg error -32 req 02 val 2100
[  552.097339][ T9665] pwc: recv_control_msg error -32 req 04 val 1500
[  552.113016][ T9665] pwc: recv_control_msg error -32 req 02 val 2500
[  552.329971][ T9665] pwc: recv_control_msg error -71 req 02 val 2600
[  552.347629][ T9665] pwc: recv_control_msg error -71 req 02 val 2900
[  552.364936][ T9665] pwc: recv_control_msg error -71 req 02 val 2800
[  552.384091][ T9665] pwc: recv_control_msg error -71 req 04 val 1100
[  552.394544][ T9665] pwc: recv_control_msg error -71 req 04 val 1200
[  552.432507][ T9665] pwc: Registered as video103.
[  552.468460][ T9665] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51
[  552.532748][ T9665] usb 4-1: USB disconnect, device number 67
[  552.833505][T13948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  552.842499][T13948] syzkaller0: entered promiscuous mode
[  552.849171][T13948] syzkaller0: entered allmulticast mode
[  552.857994][ T5694] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  552.902340][T13948] tipc: Resetting bearer <eth:syzkaller0>
[  552.911451][T13947] tipc: Resetting bearer <eth:syzkaller0>
[  552.932969][T13947] tipc: Disabling bearer <eth:syzkaller0>
[  553.036818][ T5694] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  553.051661][ T5694] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  553.058706][ T5631] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  553.072174][ T5694] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  553.091114][ T5694] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  553.097823][ T5631] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  553.102051][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.131655][T13946] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  553.137113][ T5631] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  553.153501][ T5631] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  553.189826][ T5631] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  553.202247][ T5631] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  553.223203][T13958] loop6: detected capacity change from 0 to 2640
[  553.229967][ T5631] usb 5-1: USB disconnect, device number 51
[  553.235715][T13958] buffer_io_error: 34 callbacks suppressed
[  553.235730][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.257216][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.266569][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.278929][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.308286][T13959] loop6: detected capacity change from 2640 to 524288000
[  553.312669][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.324445][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.332617][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.341257][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.349340][T13958] ldm_validate_partition_table(): Disk read failed.
[  553.357033][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.365273][T13958] Buffer I/O error on dev loop6, logical block 0, async page read
[  553.373303][T13958] Dev loop6: unable to read RDB block 0
[  553.379460][T13958]  loop6: unable to read partition table
[  553.389729][T13958] loop_reread_partitions: partition scan of loop6 (irˇc‡’úŇVUźXŻĂG¨˝›�ńZtM<IĆi8NL� í	á·ůWű@©ŕQ6ŇÝ%ž…űĄˇÚč) failed (rc=-5)
[  553.403368][ T9663] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  553.556602][ T9663] usb 3-1: Using ep0 maxpacket: 32
[  553.565936][ T9663] usb 3-1: unable to get BOS descriptor or descriptor too short
[  553.579173][ T9663] usb 3-1: too many configurations: 48, using maximum allowed: 8
[  553.594870][ T9663] usb 3-1: unable to read config index 0 descriptor/start: -71
[  553.614793][ T9663] usb 3-1: can't read configurations, error -71
[  554.189135][T13979] syz.2.2613: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  554.210398][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.2.2613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.210429][T13979] Tainted: [L]=SOFTLOCKUP
[  554.210436][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  554.210448][T13979] Call Trace:
[  554.210456][T13979]  <TASK>
[  554.210464][T13979]  dump_stack_lvl+0xe8/0x150
[  554.210490][T13979]  warn_alloc+0x249/0x340
[  554.210509][T13979]  ? __pfx_warn_alloc+0x10/0x10
[  554.210533][T13979]  __vmalloc_node_range_noprof+0x132/0x1750
[  554.210548][T13979]  ? __mutex_trylock_common+0x158/0x260
[  554.210562][T13979]  ? __pfx___mutex_trylock_common+0x10/0x10
[  554.210578][T13979]  ? trace_contention_end+0x3d/0x140
[  554.210591][T13979]  ? __mutex_lock+0x319/0x1550
[  554.210610][T13979]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  554.210622][T13979]  ? tomoyo_path_number_perm+0x219/0x630
[  554.210637][T13979]  ? dvb_demux_do_ioctl+0x320/0x540
[  554.210654][T13979]  ? __pfx___mutex_lock+0x10/0x10
[  554.210665][T13979]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  554.210679][T13979]  vmalloc_noprof+0xb2/0xe0
[  554.210692][T13979]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  554.210707][T13979]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  554.210724][T13979]  dvb_demux_do_ioctl+0x45d/0x540
[  554.210740][T13979]  dvb_usercopy+0x199/0x2e0
[  554.210753][T13979]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  554.210767][T13979]  ? __pfx_dvb_usercopy+0x10/0x10
[  554.210792][T13979]  ? __fget_files+0x3a0/0x420
[  554.210804][T13979]  ? __fget_files+0x2a/0x420
[  554.210818][T13979]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  554.210832][T13979]  dvb_demux_ioctl+0x29/0x40
[  554.210846][T13979]  __se_sys_ioctl+0xfc/0x170
[  554.210861][T13979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.210872][T13979]  do_syscall_64+0x174/0x580
[  554.210883][T13979]  ? trace_irq_disable+0x3b/0x140
[  554.210897][T13979]  ? clear_bhb_loop+0x40/0x90
[  554.210909][T13979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.210918][T13979] RIP: 0033:0x7f836d19ce59
[  554.210928][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.210937][T13979] RSP: 002b:00007f836e057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  554.210947][T13979] RAX: ffffffffffffffda RBX: 00007f836d415fa0 RCX: 00007f836d19ce59
[  554.210954][T13979] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003
[  554.210961][T13979] RBP: 00007f836d232d6f R08: 0000000000000000 R09: 0000000000000000
[  554.210967][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.210973][T13979] R13: 00007f836d416038 R14: 00007f836d415fa0 R15: 00007f836d53fa48
[  554.210989][T13979]  </TASK>
[  554.211002][T13979] Mem-Info:
[  554.484717][ T9674] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  554.544728][T13979] active_anon:7670 inactive_anon:0 isolated_anon:0
[  554.544728][T13979]  active_file:14698 inactive_file:4047 isolated_file:0
[  554.544728][T13979]  unevictable:768 dirty:391 writeback:0
[  554.544728][T13979]  slab_reclaimable:10580 slab_unreclaimable:133608
[  554.544728][T13979]  mapped:31690 shmem:1291 pagetables:1460
[  554.544728][T13979]  sec_pagetables:3 bounce:0
[  554.544728][T13979]  kernel_misc_reclaimable:0
[  554.544728][T13979]  free:1300369 free_pcp:14914 free_cma:0
[  554.594511][T13979] Node 0 active_anon:30780kB inactive_anon:0kB active_file:58752kB inactive_file:16048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126728kB dirty:1564kB writeback:0kB shmem:3628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14020kB pagetables:5676kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  554.596118][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2613'.
[  554.662996][T13979] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  554.701931][ T9674] usb 5-1: Using ep0 maxpacket: 32
[  554.712251][T13979] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  554.744202][ T9674] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  554.754690][ T9674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.767360][ T9674] usb 5-1: config 0 descriptor??
[  554.777328][ T9674] gspca_main: sunplus-2.14.0 probing 041e:400b
[  554.794564][T13979] lowmem_reserve[]: 0 2492 2493 2493 2493
[  554.821030][T13979] Node 0 DMA32 free:1267108kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31652kB inactive_anon:0kB active_file:58752kB inactive_file:16048kB unevictable:1536kB writepending:1592kB zspages:0kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:36992kB local_pcp:19464kB free_cma:0kB
[  554.856030][T13979] lowmem_reserve[]: 0 0 0 0 0
[  554.860901][T13979] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  554.894922][T13979] lowmem_reserve[]: 0 0 0 0 0
[  554.899727][T13979] Node 1 Normal free:3919060kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20936kB local_pcp:12504kB free_cma:0kB
[  554.933121][T13979] lowmem_reserve[]: 0 0 0 0 0
[  554.938044][T13979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  554.951161][T13979] Node 0 DMA32: 2467*4kB (UME) 4653*8kB (UME) 2589*16kB (UM) 687*32kB (UM) 542*64kB (UME) 487*128kB (UM) 387*256kB (UME) 54*512kB (ME) 19*1024kB (UM) 10*2048kB (UM) 218*4096kB (UM) = 1267108kB
[  554.970500][T13979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  554.984879][T13979] Node 1 Normal: 7*4kB (UM) 11*8kB (UM) 8*16kB (U) 9*32kB (U) 9*64kB (U) 5*128kB (U) 4*256kB (UM) 1*512kB (U) 2*1024kB (M) 1*2048kB (U) 955*4096kB (M) = 3919060kB
[  555.002689][T13979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  555.012340][T13979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  555.027336][T13979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  555.037136][T13979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  555.046552][T13979] 20034 total pagecache pages
[  555.051329][T13979] 0 pages in swap cache
[  555.062266][T13979] Free swap  = 124996kB
[  555.067003][T13979] Total swap = 124996kB
[  555.072411][T13979] 2097051 pages RAM
[  555.076348][T13979] 0 pages HighMem/MovableOnly
[  555.082563][T13979] 427071 pages reserved
[  555.086827][T13979] 0 pages cma reserved
[  555.514726][ T9663] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  555.591956][ T9674] gspca_sunplus: reg_r err -71
[  555.597740][ T9674] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  555.608943][ T9674] usb 5-1: USB disconnect, device number 52
[  555.697224][ T9663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  555.708167][ T9663] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  555.717657][ T9663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.727591][ T9663] usb 2-1: config 0 descriptor??
[  555.739489][ T9663] pwc: Askey VC010 type 2 USB webcam detected.
[  555.945747][ T9663] pwc: send_video_command error -71
[  555.951047][ T9663] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  555.959490][ T9663] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  555.970729][ T9663] usb 2-1: USB disconnect, device number 51
[  556.444666][ T9663] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  556.631102][ T9663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  556.671343][ T9663] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  556.694736][ T9663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.710884][ T9663] usb 2-1: config 0 descriptor??
[  556.751413][ T9663] pwc: Askey VC010 type 2 USB webcam detected.
[  557.009337][ T5694] aiptek 1-1:17.0: Aiptek tried all speeds, no sane response
[  557.020963][ T5694] aiptek 1-1:17.0: probe with driver aiptek failed with error -22
[  557.034366][ T5694] usb 1-1: USB disconnect, device number 56
[  557.086038][ T5631] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  557.106197][T14013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'.
[  557.149359][ T9663] pwc: recv_control_msg error -32 req 02 val 2b00
[  557.166513][ T9663] pwc: recv_control_msg error -32 req 02 val 2700
[  557.184500][ T9663] pwc: recv_control_msg error -32 req 02 val 2c00
[  557.194440][ T9663] pwc: recv_control_msg error -32 req 04 val 1000
[  557.218690][ T9663] pwc: recv_control_msg error -32 req 04 val 1300
[  557.228235][ T9663] pwc: recv_control_msg error -32 req 04 val 1400
[  557.240640][ T9663] pwc: recv_control_msg error -32 req 02 val 2000
[  557.250220][ T5631] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  557.260743][ T9663] pwc: recv_control_msg error -32 req 02 val 2100
[  557.263209][ T5631] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  557.279347][ T9663] pwc: recv_control_msg error -32 req 04 val 1500
[  557.290986][ T5631] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  557.313017][ T5631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.325332][ T5631] usb 5-1: Product: syz
[  557.330507][ T5631] usb 5-1: Manufacturer: syz
[  557.336262][ T5631] usb 5-1: SerialNumber: syz
[  557.336675][T14015] syzkaller0: entered promiscuous mode
[  557.347845][T14015] syzkaller0: entered allmulticast mode
[  557.374342][ T5631] usb 5-1: config 0 descriptor??
[  557.412635][T14015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.426173][T14014] tipc: Resetting bearer <eth:syzkaller0>
[  557.463295][T14014] tipc: Disabling bearer <eth:syzkaller0>
[  557.506242][ T9663] pwc: recv_control_msg error -71 req 02 val 2400
[  557.514372][ T9663] pwc: recv_control_msg error -71 req 02 val 2600
[  557.546083][ T9663] pwc: recv_control_msg error -71 req 02 val 2900
[  557.554546][ T9663] pwc: recv_control_msg error -71 req 02 val 2800
[  557.562082][ T9663] pwc: recv_control_msg error -71 req 04 val 1100
[  557.569184][ T9663] pwc: recv_control_msg error -71 req 04 val 1200
[  557.581487][ T9663] pwc: Registered as video103.
[  557.589094][ T9663] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53
[  557.661519][ T9663] usb 2-1: USB disconnect, device number 52
[  557.999856][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'.
[  558.614785][ T9663] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  558.789692][ T9663] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  558.808642][ T9663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.824830][ T5631] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  558.842998][ T9663] usb 2-1: Product: syz
[  558.851299][ T9663] usb 2-1: Manufacturer: syz
[  558.857706][ T9663] usb 2-1: SerialNumber: syz
[  558.960321][T14047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  559.003907][ T5631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.015208][T14047] syzkaller0: entered promiscuous mode
[  559.024730][ T5631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.036532][T14047] syzkaller0: entered allmulticast mode
[  559.051201][ T5631] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  559.083378][ T5631] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  559.115294][ T5631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.148446][T14047] tipc: Resetting bearer <eth:syzkaller0>
[  559.154288][ T5631] usb 3-1: config 0 descriptor??
[  559.181571][T14046] tipc: Resetting bearer <eth:syzkaller0>
[  559.226526][T14046] tipc: Disabling bearer <eth:syzkaller0>
[  559.285519][ T9663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  559.310251][ T9663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  559.495794][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'.
[  559.591715][ T5631] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  559.609160][ T9674] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  559.741415][ T5694] usb 5-1: USB disconnect, device number 53
[  559.767550][ T9674] usb 1-1: Using ep0 maxpacket: 16
[  559.802061][ T9674] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  559.832162][ T9674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.849082][ T9674] usb 1-1: Product: syz
[  559.853941][ T9674] usb 1-1: Manufacturer: syz
[  559.859413][ T9674] usb 1-1: SerialNumber: syz
[  559.870079][ T9674] usb 1-1: config 0 descriptor??
[  559.890839][ T9674] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  560.306718][T14067] [U] 
[  560.309958][T14067] [U] 
[  560.312659][T14067] [U] 
[  560.315358][T14067] [U] 
[  560.341152][T14065] netdevsim netdevsim4: Direct firmware load for .
[  560.341152][T14065]  failed with error -2
[  560.363170][T14067] [U] 
[  560.365890][T14067] [U] 
[  560.368588][T14067] [U] 
[  560.371276][T14067] [U] 
[  560.380928][T14065] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  560.380928][T14065] 
[  560.395417][T14067] [U] 
[  560.398150][T14067] [U] 
[  560.400840][T14067] [U] 
[  560.403526][T14067] [U] 
[  560.426578][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.473532][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.520431][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.567327][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.615161][ T9674] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  560.633639][ T5694] usb 3-1: USB disconnect, device number 55
[  560.642680][ T9663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  560.645884][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.701303][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.748199][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.795075][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0
[  560.841025][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.887976][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.935236][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  560.982347][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  561.036419][ T9663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  561.062861][ T9674] usb 1-1: USB disconnect, device number 57
[  561.153787][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  561.200721][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  561.247616][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  561.294510][T14067] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0
[  561.389953][T14067] [U] 
[  561.549509][ T9663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  561.572444][ T9663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  561.606107][ T9663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  561.627225][ T9663] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  561.643405][ T9663] usb 2-1: USB disconnect, device number 53
[  561.842892][T14084] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  561.897873][T14084] kvm: pic: non byte read
[  561.910515][T14084] pic_ioport_write: 184 callbacks suppressed
[  561.910552][T14084] kvm: pic: level sensitive irq not supported
[  561.924313][T14084] kvm: pic: non byte read
[  561.948070][T14084] kvm: pic: level sensitive irq not supported
[  561.948135][T14084] kvm: pic: non byte read
[  561.954057][T14090] syzkaller0: entered promiscuous mode
[  561.961308][T14084] kvm: pic: level sensitive irq not supported
[  561.966733][T14084] kvm: pic: non byte read
[  561.980474][T14090] syzkaller0: entered allmulticast mode
[  562.341503][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'.
[  562.403898][T14105] kvm: pic: non byte write
[  562.434714][ T9674] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  562.464814][ T5694] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  562.493579][T14108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  562.598492][ T9674] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  562.614765][ T5694] usb 5-1: Using ep0 maxpacket: 16
[  562.623392][ T9674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.641506][ T5694] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  562.657279][ T9674] usb 2-1: Product: syz
[  562.666464][ T9674] usb 2-1: Manufacturer: syz
[  562.671627][ T5694] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  562.684947][ T9674] usb 2-1: SerialNumber: syz
[  562.695799][ T5694] usb 5-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  562.705567][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.713821][ T5694] usb 5-1: Product: syz
[  562.719473][ T9674] usb 2-1: config 0 descriptor??
[  562.739488][ T5694] usb 5-1: Manufacturer: syz
[  562.742896][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  562.747477][ T5694] usb 5-1: SerialNumber: syz
[  562.750680][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  562.924724][ T9663] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  562.937571][ T9674] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  563.003056][ T5694] usb 5-1: USB disconnect, device number 54
[  563.074681][    T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  563.098846][ T9663] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  563.110957][ T9663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.126009][ T9663] usb 3-1: Product: syz
[  563.134449][ T9663] usb 3-1: Manufacturer: syz
[  563.148714][ T9663] usb 3-1: SerialNumber: syz
[  563.237736][    T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  563.247090][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.267689][    T9] usb 1-1: config 0 descriptor??
[  563.493758][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.514037][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.579773][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  563.596353][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  563.814724][ T5631] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  563.964655][ T5631] usb 5-1: Using ep0 maxpacket: 32
[  563.971560][ T5631] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  563.980172][ T5631] usb 5-1: config 0 has no interface number 0
[  563.986609][ T5631] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  564.001183][ T5631] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  564.010650][ T5631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.019716][ T5631] usb 5-1: Product: syz
[  564.023923][ T5631] usb 5-1: Manufacturer: syz
[  564.029766][ T5631] usb 5-1: SerialNumber: syz
[  564.036121][    T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  564.057445][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  564.064086][ T5631] usb 5-1: config 0 descriptor??
[  564.070032][T14124] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  564.092298][    T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  564.103804][    T9] [drm] Initialized udl on minor 2
[  564.111687][    T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  564.134476][    T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  564.147363][ T9665] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  564.164203][    T9] usb 1-1: USB disconnect, device number 58
[  564.171553][ T9665] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  564.292955][T14124] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  564.364865][ T9674] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  564.377734][ T9674] usb 2-1: USB disconnect, device number 54
[  564.505454][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'.
[  564.741020][ T5631] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  564.773197][ T5631] asix 5-1:0.188: probe with driver asix failed with error -61
[  565.054755][ T5631] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  565.204688][ T5631] usb 4-1: Using ep0 maxpacket: 8
[  565.212652][ T5631] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  565.223031][ T5631] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  565.239337][ T5631] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  565.249621][ T5631] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  565.262016][ T5631] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  565.276155][ T5631] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  565.285427][ T5631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.503828][ T5631] usb 4-1: GET_CAPABILITIES returned 0
[  565.509665][ T5631] usbtmc 4-1:16.0: can't read capabilities
[  565.844653][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  565.876680][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  565.902693][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO
[  565.928770][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  565.949104][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  565.970350][ T9663] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  565.978041][T14148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer.
[  566.000617][ T9663] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  566.015626][ T9663] usb 3-1: USB disconnect, device number 56
[  566.077235][T14152] usbtmc 4-1:16.0: usb_control_msg returned -32
[  566.087698][ T9665] usb 4-1: USB disconnect, device number 68
[  566.254869][ T9664] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  566.286101][T14154] netlink: 'syz.0.2670': attribute type 1 has an invalid length.
[  566.312113][T14154] 8021q: adding VLAN 0 to HW filter on device bond3
[  566.321511][T14154] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  566.333672][T14154] bond3: entered allmulticast mode
[  566.352573][T14154] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[  566.415487][ T9664] usb 2-1: Using ep0 maxpacket: 32
[  566.422608][ T9664] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  566.433696][ T9664] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  566.445881][ T9664] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  566.458821][ T9664] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  566.477441][ T9664] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  566.486927][ T9664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.495238][ T9664] usb 2-1: Product: syz
[  566.499510][ T9664] usb 2-1: Manufacturer: syz
[  566.504183][ T9664] usb 2-1: SerialNumber: syz
[  566.516484][    C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  566.530307][ T9664] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input54
[  566.596680][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'.
[  566.634876][ T5631] usb 5-1: USB disconnect, device number 55
[  566.757439][ T9664] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  566.783015][ T9664]  (id 0x00)
[  566.826799][T14173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2674'.
[  566.926076][ T9664] rc_core: IR keymap rc-imon-pad not found
[  566.944259][ T9664] Registered IR keymap rc-empty
[  566.957519][ T9664] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  566.972097][ T9664] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  567.036004][ T9664] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0
[  567.071002][T14173] pimreg3: entered allmulticast mode
[  567.088575][ T9664] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input55
[  567.184701][ T9664] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:55> initialized
[  567.212984][T14180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  567.279428][T14181] syzkaller0: entered promiscuous mode
[  567.334464][T14181] syzkaller0: entered allmulticast mode
[  567.473388][T14180] tipc: Resetting bearer <eth:syzkaller0>
[  567.516223][T14179] tipc: Resetting bearer <eth:syzkaller0>
[  567.615177][T14179] tipc: Disabling bearer <eth:syzkaller0>
[  568.204692][ T9674] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  568.283668][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'.
[  568.358176][T14195] syzkaller0: entered promiscuous mode
[  568.375051][T14195] syzkaller0: entered allmulticast mode
[  568.384742][ T9674] usb 4-1: Using ep0 maxpacket: 8
[  568.418561][ T9674] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  568.439491][ T9674] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  568.460131][ T9674] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  568.486464][ T9674] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  568.510678][ T9674] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  568.546131][ T9674] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  568.571706][ T9674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.673698][T14196] imon:send_packet: packet tx failed (-71)
[  568.675102][ T9663] usb 2-1: USB disconnect, device number 55
[  568.724708][T14196] imon:vfd_write: send packet #4 failed
[  568.960999][T14202] pimreg: entered allmulticast mode
[  569.012836][T14184] netlink: 'syz.3.2677': attribute type 21 has an invalid length.
[  569.037194][T14184] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2677'.
[  569.065693][ T9674] usb 4-1: GET_CAPABILITIES returned 0
[  569.081495][ T9674] usbtmc 4-1:16.0: can't read capabilities
[  569.121675][T14184] netlink: 'syz.3.2677': attribute type 4 has an invalid length.
[  569.181479][T14184] netlink: 'syz.3.2677': attribute type 5 has an invalid length.
[  569.199373][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2681'.
[  569.228545][T14184] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2677'.
[  569.501630][T14207] : entered promiscuous mode
[  569.638023][ T9663] usb 4-1: USB disconnect, device number 69
[  569.858986][T14214] syzkaller0: entered promiscuous mode
[  569.875236][T14214] syzkaller0: entered allmulticast mode
[  570.056241][   T30] audit: type=1326 audit(1780815792.738:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.0.2683" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13f539ce59 code=0x0
[  572.977496][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  573.718441][T14244] syzkaller0: entered promiscuous mode
[  573.737253][T14244] syzkaller0: entered allmulticast mode
[  573.895149][ T9665] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  573.983846][T14261] syzkaller0: entered promiscuous mode
[  573.993162][T14261] syzkaller0: entered allmulticast mode
[  574.032547][T14261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.061374][T14259] tipc: Resetting bearer <eth:syzkaller0>
[  574.074500][ T9665] usb 3-1: Using ep0 maxpacket: 32
[  574.098292][ T9665] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  574.129195][ T9665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.145561][T14259] tipc: Disabling bearer <eth:syzkaller0>
[  574.151433][ T9665] usb 3-1: Product: syz
[  574.161537][ T9665] usb 3-1: Manufacturer: syz
[  574.168984][ T9665] usb 3-1: SerialNumber: syz
[  574.189517][ T9665] usb 3-1: config 0 descriptor??
[  574.205791][ T9665] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  574.233273][ T9665] dvb-usb: bulk message failed: -22 (2/0)
[  574.286954][ T9665] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  574.318445][ T9665] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  574.344746][ T9665] usb 3-1: media controller created
[  574.371205][T14272] syzkaller0: entered promiscuous mode
[  574.384836][ T9665] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  574.393368][T14272] syzkaller0: entered allmulticast mode
[  574.451274][ T9665] usb 3-1: selecting invalid altsetting 7
[  574.467891][ T9665] cxusb: set interface failed
[  574.477264][ T9665] dvb-usb: bulk message failed: -22 (1/0)
[  574.549992][ T9665] DVB: Unable to find symbol lgdt330x_attach()
[  574.558058][ T9665] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  574.752425][ T9665] rc_core: IR keymap rc-dvico-portable not found
[  574.761530][ T9665] Registered IR keymap rc-empty
[  574.785269][ T9665] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  574.804497][ T9665] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input56
[  574.821598][ T9665] dvb-usb: schedule remote query interval to 100 msecs.
[  574.830548][ T9665] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  574.849437][ T9665] usb 3-1: USB disconnect, device number 57
[  574.965315][    T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  575.010475][ T9665] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  575.134787][    T9] usb 4-1: Using ep0 maxpacket: 16
[  575.146853][    T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  575.172668][    T9] usb 4-1: config 0 has no interface number 0
[  575.184777][    T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  575.204362][    T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  575.218090][    T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  575.227444][ T9669] usb 2-1: new low-speed USB device number 56 using dummy_hcd
[  575.235270][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.243528][    T9] usb 4-1: Product: syz
[  575.248608][    T9] usb 4-1: Manufacturer: syz
[  575.272397][    T9] usb 4-1: SerialNumber: syz
[  575.293900][    T9] usb 4-1: config 0 descriptor??
[  575.306769][T14279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  575.315246][T14279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  575.396486][ T9669] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  575.412426][ T9669] usb 2-1: config 0 has no interface number 0
[  575.429743][ T9669] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  575.456936][ T9669] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  575.483513][ T9669] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  575.505426][ T9669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.541121][T14279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  575.553431][ T9669] usb 2-1: config 0 descriptor??
[  575.564273][T14279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  575.575085][T14281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  575.628224][ T9669] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  575.785218][    T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  575.911814][ T9669] usb 2-1: USB disconnect, device number 56
[  575.979898][T14294] syzkaller0: entered promiscuous mode
[  575.986551][T14294] syzkaller0: entered allmulticast mode
[  576.128754][T14297] syzkaller0: entered promiscuous mode
[  576.134290][T14297] syzkaller0: entered allmulticast mode
[  576.185529][ T9674] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  576.336856][ T9674] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  576.347193][ T9674] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  576.356152][ T9674] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  576.367159][ T9674] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  576.376256][ T9674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.389094][T14295] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  576.403119][ T9674] hub 3-1:1.0: bad descriptor, ignoring hub
[  576.409822][ T9674] hub 3-1:1.0: probe with driver hub failed with error -5
[  576.421594][ T9674] cdc_wdm 3-1:1.0: skipping garbage
[  576.427538][ T9674] cdc_wdm 3-1:1.0: skipping garbage
[  576.435265][ T9674] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  576.448949][ T9674] cdc_wdm 3-1:1.0: Unknown control protocol
[  576.705894][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  576.712549][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  576.718920][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  576.725705][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  576.731840][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  577.026285][T14316] openvswitch: : Dropping previously announced user features
[  577.284260][T14323] netlink: 'syz.1.2718': attribute type 10 has an invalid length.
[  578.170771][T11003] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  578.177944][T14328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  578.420080][    T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  578.438718][T14330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  578.448065][T14330] syzkaller0: entered promiscuous mode
[  578.454776][    T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  578.474883][T14330] syzkaller0: entered allmulticast mode
[  578.484145][    T9] asix 4-1:0.34: probe with driver asix failed with error -71
[  578.523080][T14330] tipc: Resetting bearer <eth:syzkaller0>
[  578.533605][T14330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.543754][T14330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.562240][    T9] usb 4-1: USB disconnect, device number 70
[  578.570059][T14329] tipc: Resetting bearer <eth:syzkaller0>
[  578.629056][T14329] tipc: Disabling bearer <eth:syzkaller0>
[  578.833757][T11003] Bluetooth: hci3: unexpected event for opcode 0x1009
[  578.874729][ T9674] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  578.889857][T14340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  578.921519][T14340] kvm: pic: level sensitive irq not supported
[  578.921640][T14340] kvm: pic: non byte read
[  578.934000][T14340] kvm: pic: level sensitive irq not supported
[  578.934062][T14340] kvm: pic: non byte read
[  578.946587][T14340] kvm: pic: level sensitive irq not supported
[  578.946648][T14340] kvm: pic: non byte read
[  579.038032][T14345] syzkaller0: entered promiscuous mode
[  579.043642][T14345] syzkaller0: entered allmulticast mode
[  579.058168][ T9674] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  579.070044][ T9674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  579.081924][ T9674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  579.092803][ T9674] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  579.106706][ T9674] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  579.133330][ T9674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.172273][ T9674] usb 2-1: config 0 descriptor??
[  579.197665][T14349] syzkaller0: entered promiscuous mode
[  579.206810][T14349] syzkaller0: entered allmulticast mode
[  579.607804][T14359] netlink: 'syz.0.2732': attribute type 10 has an invalid length.
[  579.637592][ T9674] plantronics 0003:047F:FFFF.0028: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  579.954661][ T9669] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  580.105534][ T9663] usb 3-1: USB disconnect, device number 58
[  580.117271][ T9669] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  580.145014][ T9669] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  580.181314][ T9669] usb 5-1: config 0 interface 0 has no altsetting 0
[  580.210458][ T9669] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  580.242847][ T9669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.277624][ T9669] usb 5-1: config 0 descriptor??
[  580.292740][ T9664] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  580.335665][ T9664] hid-generic 0000:0000:0000.0029: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  580.738587][ T9669] lenovo 0003:17EF:60EE.002A: ignoring exceeding usage max
[  580.761670][ T9669] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x6
[  580.778369][ T9669] lenovo 0003:17EF:60EE.002A: ignoring exceeding usage max
[  580.928013][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2735'.
[  580.934311][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.951579][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  580.965510][    T9] usb 2-1: USB disconnect, device number 57
[  580.985144][ T9669] lenovo 0003:17EF:60EE.002A: hidraw2: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0
[  581.020920][ T9669] lenovo 0003:17EF:60EE.002A: Failed to switch middle button: -71
[  581.036421][ T9669] lenovo 0003:17EF:60EE.002A: Fn-lock setting failed: -71
[  581.054443][ T9669] lenovo 0003:17EF:60EE.002A: Sensitivity setting failed: -71
[  581.098377][ T9669] usb 5-1: USB disconnect, device number 56
[  581.234506][T14377] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  581.504080][T14387] syzkaller0: entered promiscuous mode
[  581.510551][T14387] syzkaller0: entered allmulticast mode
[  581.665026][ T9663] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  581.858956][ T9663] usb 4-1: config 0 has no interfaces?
[  581.868520][ T9663] usb 4-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40
[  581.879270][ T9663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.886574][ T9669] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  581.887749][ T9663] usb 4-1: Product: syz
[  581.899486][ T9663] usb 4-1: Manufacturer: syz
[  581.904171][ T9663] usb 4-1: SerialNumber: syz
[  581.930077][ T9663] usb 4-1: config 0 descriptor??
[  581.989498][T14404] netlink: 'syz.4.2745': attribute type 10 has an invalid length.
[  582.033014][T14404] team0 (unregistering): Port device team_slave_0 removed
[  582.058440][ T9669] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.069418][ T9669] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  582.096988][T14404] team0 (unregistering): Port device team_slave_1 removed
[  582.104225][ T9669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.126970][ T9669] usb 2-1: config 0 descriptor??
[  582.150688][ T9669] pwc: Askey VC010 type 2 USB webcam detected.
[  582.548153][ T9669] pwc: recv_control_msg error -32 req 02 val 2b00
[  582.562571][ T9669] pwc: recv_control_msg error -32 req 02 val 2700
[  582.575567][ T9669] pwc: recv_control_msg error -32 req 02 val 2c00
[  582.593543][ T9669] pwc: recv_control_msg error -32 req 04 val 1000
[  582.625845][ T9669] pwc: recv_control_msg error -32 req 04 val 1300
[  582.638850][ T9669] pwc: recv_control_msg error -32 req 04 val 1400
[  582.647475][ T9669] pwc: recv_control_msg error -32 req 02 val 2000
[  582.662228][ T9669] pwc: recv_control_msg error -32 req 02 val 2100
[  582.671389][ T9669] pwc: recv_control_msg error -32 req 04 val 1500
[  582.681714][ T9669] pwc: recv_control_msg error -32 req 02 val 2500
[  582.705621][ T9669] pwc: recv_control_msg error -32 req 02 val 2400
[  582.724159][ T9669] pwc: recv_control_msg error -32 req 02 val 2600
[  582.751109][ T9669] pwc: recv_control_msg error -32 req 02 val 2900
[  582.968389][ T9669] pwc: recv_control_msg error -71 req 04 val 1100
[  582.986302][ T9669] pwc: recv_control_msg error -71 req 04 val 1200
[  583.002220][ T9669] pwc: Registered as video103.
[  583.031526][ T9669] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58
[  583.065935][ T9669] usb 2-1: USB disconnect, device number 58
[  583.221065][T11932] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  583.289627][ T5881] pimreg3: left allmulticast mode
[  583.843750][T14419] kvm: kvm [14418]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc1
[  583.965897][ T5881] bond0 (unregistering): Released all slaves
[  584.002075][ T5881] bond1 (unregistering): Released all slaves
[  584.142961][ T5881] tipc: Left network mode
[  584.169644][ T5881] IPVS: stopping master sync thread 10964 ...
[  584.185739][ T5881] IPVS: stopping backup sync thread 8728 ...
[  584.381805][ T5881] hsr_slave_0: left promiscuous mode
[  584.389023][ T5881] hsr_slave_1: left promiscuous mode
[  584.400281][    T9] usb 4-1: USB disconnect, device number 71
[  584.758093][T14442] syzkaller0: entered promiscuous mode
[  584.763937][T14442] syzkaller0: entered allmulticast mode
[  584.887250][ T9674] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  584.916685][T14449] syzkaller0: entered promiscuous mode
[  584.922368][T14449] syzkaller0: entered allmulticast mode
[  584.938047][T14449] TC_ACT_REPEAT abuse ?
[  585.076324][ T9674] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.089632][ T9674] usb 5-1: config 0 interface 0 has no altsetting 0
[  585.099364][ T9674] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  585.108677][ T9674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.126026][ T9674] usb 5-1: Product: syz
[  585.137709][ T9674] usb 5-1: Manufacturer: syz
[  585.143344][ T9674] usb 5-1: SerialNumber: syz
[  585.160294][ T9674] usb 5-1: config 0 descriptor??
[  585.178004][ T9674] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  585.192519][ T9674] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  585.211998][ T9674] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  585.220875][ T9674] usb 5-1: media controller created
[  585.241242][ T9674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  585.303986][ T9674] DVB: Unable to find symbol tda10046_attach()
[  585.317106][ T9674] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  585.325815][ T9674] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  585.418668][ T9674] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  585.421341][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  585.458912][ T9674] usb 5-1: USB disconnect, device number 57
[  585.574671][    T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  585.724757][    T9] usb 4-1: Using ep0 maxpacket: 16
[  585.733050][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.744239][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  585.788713][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  585.801540][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  585.813711][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  585.833979][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  585.843661][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  585.855407][    T9] usb 4-1: Manufacturer: syz
[  585.882166][    T9] usb 4-1: config 0 descriptor??
[  586.174712][    T9] rc_core: IR keymap rc-hauppauge not found
[  586.184682][    T9] Registered IR keymap rc-empty
[  586.200520][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.234771][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.265480][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  586.304873][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59
[  586.331820][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.357100][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.374941][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.394857][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.415264][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.434753][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.454776][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.475365][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.495483][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.515289][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  586.554794][    T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  586.563958][    T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  586.676292][ T9674] usb 4-1: USB disconnect, device number 72
[  586.782224][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'.
[  587.004686][ T5631] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  587.019282][T14491] syzkaller0: entered promiscuous mode
[  587.025529][T14491] syzkaller0: entered allmulticast mode
[  587.169818][ T5631] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  587.180965][ T5631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.196117][ T5631] usb 3-1: config 0 descriptor??
[  587.212128][ T5631] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  587.442033][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'.
[  587.614791][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  587.654779][ T9674] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  587.769952][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  587.782590][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  587.798782][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  587.808410][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  587.816943][    T9] usb 1-1: SerialNumber: syz
[  587.824954][ T9674] usb 4-1: Using ep0 maxpacket: 16
[  587.844993][ T9674] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.872109][ T9674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  587.898734][ T9674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  587.919909][ T9674] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  587.940627][ T9674] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  587.975379][ T9674] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  587.990744][ T9674] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  588.003827][ T9674] usb 4-1: Manufacturer: syz
[  588.038900][ T9674] usb 4-1: config 0 descriptor??
[  588.073899][    T9] usb 1-1: 0:2 : does not exist
[  588.167340][    T9] usb 1-1: USB disconnect, device number 59
[  588.232866][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  588.364912][ T9674] rc_core: IR keymap rc-hauppauge not found
[  588.376743][ T9674] Registered IR keymap rc-empty
[  588.387597][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.424852][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.458972][ T9674] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  588.505936][ T9674] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60
[  588.544880][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.585451][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.616543][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.644939][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.663419][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2771'.
[  588.684718][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.711258][ T5631] usb 3-1: USB disconnect, device number 59
[  588.734994][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.777098][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.815380][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.874838][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.907594][ T9674] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  588.949527][ T9674] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  588.966712][ T9674] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  588.999383][ T9674] usb 4-1: USB disconnect, device number 73
[  589.490510][T14532] netlink: 'syz.2.2784': attribute type 10 has an invalid length.
[  590.364779][ T9674] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  590.549533][ T9674] usb 1-1: Using ep0 maxpacket: 16
[  590.585837][ T9674] usb 1-1: config index 0 descriptor too short (expected 1024, got 27)
[  590.620913][ T9674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  590.655926][ T9674] usb 1-1: config 0 has no interfaces?
[  590.699551][ T9674] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  590.737363][ T9674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.773089][ T9674] usb 1-1: Product: syz
[  590.789071][ T9674] usb 1-1: Manufacturer: syz
[  590.805454][ T9674] usb 1-1: SerialNumber: syz
[  590.840853][ T9674] usb 1-1: config 0 descriptor??
[  591.219599][ T9674] usb 1-1: USB disconnect, device number 60
[  591.384722][ T9669] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  591.466106][T14564] syzkaller0: entered promiscuous mode
[  591.471726][T14564] syzkaller0: entered allmulticast mode
[  591.477706][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'.
[  591.547858][ T9669] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.561751][ T9669] usb 4-1: config 0 has no interfaces?
[  591.569415][ T9669] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  591.580706][ T9669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.592693][ T9669] usb 4-1: config 0 descriptor??
[  591.810927][T14553] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  591.826782][T14553] kvm: pic: non byte read
[  591.835018][T14553] kvm: pic: level sensitive irq not supported
[  591.835174][T14553] kvm: pic: non byte read
[  591.847799][T14553] kvm: pic: level sensitive irq not supported
[  591.847864][T14553] kvm: pic: non byte read
[  591.861961][T14553] kvm: pic: level sensitive irq not supported
[  591.862026][T14553] kvm: pic: non byte read
[  591.880368][ T5694] usb 4-1: USB disconnect, device number 74
[  591.887167][ T9674] usb 3-1: new low-speed USB device number 60 using dummy_hcd
[  591.916436][T14574] netlink: 'syz.0.2798': attribute type 12 has an invalid length.
[  591.930275][T14574] lo: Caught tx_queue_len zero misconfig
[  591.936046][T14574] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  592.086884][ T9674] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  592.101733][ T9674] usb 3-1: config 0 has no interface number 0
[  592.108168][ T9674] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  592.120047][ T9674] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  592.131217][ T9674] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  592.145381][ T9674] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  592.156490][ T9674] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  592.167875][ T9674] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  592.181252][ T9674] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  592.190890][ T9674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.203538][ T9674] usb 3-1: config 0 descriptor??
[  592.217144][T14570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  592.239215][T14570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  592.277091][ T9674] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  592.659222][ T5631] usb 3-1: USB disconnect, device number 60
[  592.665247][    C0] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  592.766119][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff
[  592.799276][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff
[  592.814444][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff
[  592.828378][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff
[  592.857818][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff
[  592.888718][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff
[  592.913215][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff
[  592.933707][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff
[  592.967554][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff
[  592.988799][T14582] kvm: kvm [14581]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff
[  593.190784][ T5631] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  593.349466][T14604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.364501][T14604] syzkaller0: entered promiscuous mode
[  593.378074][T14604] syzkaller0: entered allmulticast mode
[  593.472912][T14601] tipc: Resetting bearer <eth:syzkaller0>
[  593.530938][T14601] tipc: Disabling bearer <eth:syzkaller0>
[  593.965502][ T5631] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  594.140438][ T5631] usb 3-1: Using ep0 maxpacket: 16
[  594.158195][ T5631] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.212670][ T5631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  594.232474][ T5631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  594.264669][ T5631] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  594.298413][ T5631] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  594.333117][T14625] syzkaller0: entered promiscuous mode
[  594.361821][T14625] syzkaller0: entered allmulticast mode
[  594.373320][ T5631] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  594.395045][ T5631] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  594.415960][ T5631] usb 3-1: Manufacturer: syz
[  594.432936][ T5631] usb 3-1: config 0 descriptor??
[  594.445197][ T9674] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  594.465730][ T9663] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  594.644721][ T9663] usb 2-1: Using ep0 maxpacket: 8
[  594.651691][ T9674] usb 1-1: config 118 interface 0 has no altsetting 0
[  594.669048][ T9663] usb 2-1: unable to get BOS descriptor or descriptor too short
[  594.689207][ T9674] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[  594.711985][ T9663] usb 2-1: config 2 has an invalid interface number: 76 but max is 0
[  594.724824][ T9674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.739294][ T9663] usb 2-1: config 2 has no interface number 0
[  594.752530][ T9674] usb 1-1: Product: syz
[  594.757410][ T9663] usb 2-1: config 2 interface 76 has no altsetting 0
[  594.764143][ T9674] usb 1-1: Manufacturer: syz
[  594.769306][ T9674] usb 1-1: SerialNumber: syz
[  594.774706][ T5631] rc_core: IR keymap rc-hauppauge not found
[  594.776372][ T9663] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  594.786838][ T5631] Registered IR keymap rc-empty
[  594.798937][ T9663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.809978][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  594.810052][ T9663] usb 2-1: Product: syz
[  594.822967][ T9663] usb 2-1: Manufacturer: syz
[  594.828000][ T9663] usb 2-1: SerialNumber: syz
[  594.864860][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  594.907232][ T5631] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  594.928659][ T5631] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input62
[  594.957961][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  594.982104][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'.
[  595.000798][T14621] netlink: 'syz.0.2813': attribute type 13 has an invalid length.
[  595.004800][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.010177][T14621] netlink: 'syz.0.2813': attribute type 17 has an invalid length.
[  595.026182][T14635] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2818'.
[  595.056880][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.064783][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.094020][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.095056][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.144865][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.172978][T14621] syz_tun: left promiscuous mode
[  595.184764][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.227017][   T30] audit: type=1326 audit(1780815817.908:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.257688][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.281933][T14621] 8021q: adding VLAN 0 to HW filter on device bond0
[  595.281952][T14638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.298180][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.306369][   T30] audit: type=1326 audit(1780815817.908:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.331030][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.341800][T14638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.354724][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.366593][   T30] audit: type=1326 audit(1780815817.908:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.392583][ T5631] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.427732][ T5631] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  595.443969][ T5631] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  595.458847][   T30] audit: type=1326 audit(1780815817.908:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.496062][ T5631] usb 3-1: USB disconnect, device number 61
[  595.508317][   T30] audit: type=1326 audit(1780815817.968:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.533112][   T30] audit: type=1326 audit(1780815817.968:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.632205][   T30] audit: type=1326 audit(1780815817.968:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.677543][T14621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  595.694241][T14621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  595.729486][   T30] audit: type=1326 audit(1780815817.968:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.811398][T14621] veth1_macvtap: left promiscuous mode
[  595.819353][   T30] audit: type=1326 audit(1780815817.968:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.866941][T14621] veth0_macvtap: left promiscuous mode
[  595.875933][T14621] veth0_macvtap: entered promiscuous mode
[  595.894732][   T30] audit: type=1326 audit(1780815817.968:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  595.924318][T14621] veth1_macvtap: entered promiscuous mode
[  595.942349][T14621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  595.971542][T14621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  596.000884][T14621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  596.029506][T14621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  596.045205][ T9663] go7007 2-1:2.76: Sensoray 2250 found
[  596.054394][ T9663] go7007 2-1:2.76: probe with driver go7007 failed with error -12
[  596.066493][T14621] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  596.071033][ T9663] usb 2-1: USB disconnect, device number 59
[  596.182458][ T9674] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state.
[  596.216317][ T9674] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  596.227629][ T9674] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e)
[  596.238428][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.245642][   T13] bridge0: port 2(bridge_slave_1) entered listening state
[  596.258755][ T9674] usb 1-1: media controller created
[  596.296163][ T9674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  596.335602][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.421799][ T9674] DVB: Unable to find symbol mt352_attach()
[  596.435270][ T9674] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e'
[  596.455361][ T9674] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63
[  596.470048][T14649] syzkaller0: entered promiscuous mode
[  596.475716][T14649] syzkaller0: entered allmulticast mode
[  596.483566][ T9674] dvb-usb: schedule remote query interval to 100 msecs.
[  596.502943][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.504484][ T9674] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected.
[  596.531837][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.537185][ T9674] dvb_usb_m920x 1-1:118.0: probe with driver dvb_usb_m920x failed with error -71
[  596.567127][ T9674] usb 1-1: USB disconnect, device number 61
[  596.619348][ T9663] m920x_read = error: -19
[  596.653015][ T9663] dvb-usb: error while querying for an remote control event.
[  596.786206][ T9663] m920x_read = error: -19
[  596.790860][ T9663] dvb-usb: error while querying for an remote control event.
[  596.914861][ T9674] m920x_read = error: -19
[  596.931616][ T9674] dvb-usb: error while querying for an remote control event.
[  596.967637][T14659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2823'.
[  597.069356][ T9663] m920x_read = error: -19
[  597.088330][ T9663] dvb-usb: error while querying for an remote control event.
[  597.205647][ T9664] m920x_read = error: -19
[  597.210158][ T9664] dvb-usb: error while querying for an remote control event.
[  597.328348][ T9674] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  597.336336][ T9664] m920x_read = error: -19
[  597.341023][ T9664] dvb-usb: error while querying for an remote control event.
[  597.454894][ T9663] m920x_read = error: -19
[  597.468611][ T9663] dvb-usb: error while querying for an remote control event.
[  597.497657][ T9674] usb 1-1: config index 0 descriptor too short (expected 65183, got 72)
[  597.509114][ T9674] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  597.518751][ T9674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.527193][ T9674] usb 1-1: Product: syz
[  597.531490][ T9674] usb 1-1: Manufacturer: syz
[  597.536683][ T9674] usb 1-1: SerialNumber: syz
[  597.547168][ T9669] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  597.547494][ T9674] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  597.584908][ T9673] m920x_read = error: -19
[  597.593189][ T9673] dvb-usb: error while querying for an remote control event.
[  597.620854][ T9663] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  597.712403][ T9673] m920x_read = error: -19
[  597.716917][ T9673] dvb-usb: error while querying for an remote control event.
[  597.717142][ T9669] usb 5-1: Using ep0 maxpacket: 16
[  597.813668][T14669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.823949][T14669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.831905][ T9673] m920x_read = error: -19
[  597.844733][ T9673] dvb-usb: error while querying for an remote control event.
[  597.869304][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.895044][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.907399][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.922202][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.938697][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.953997][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.967822][ T5631] usb 1-1: USB disconnect, device number 62
[  597.985480][ T9674] m920x_read = error: -19
[  597.989886][ T9674] dvb-usb: error while querying for an remote control event.
[  598.130829][ T9673] m920x_read = error: -19
[  598.135554][ T9673] dvb-usb: error while querying for an remote control event.
[  598.198901][ T9669] usb 5-1: unable to get BOS descriptor or descriptor too short
[  598.215654][ T9669] usb 5-1: unable to read config index 0 descriptor/start: -71
[  598.227702][ T9669] usb 5-1: can't read configurations, error -71
[  598.250304][ T9673] m920x_read = error: -19
[  598.254782][ T9673] dvb-usb: error while querying for an remote control event.
[  598.368805][ T9673] m920x_read = error: -19
[  598.374196][ T9673] dvb-usb: error while querying for an remote control event.
[  598.492652][ T9673] m920x_read = error: -19
[  598.498410][ T9673] dvb-usb: error while querying for an remote control event.
[  598.638649][ T9673] m920x_read = error: -19
[  598.643258][ T9673] dvb-usb: error while querying for an remote control event.
[  598.655107][ T9663] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  598.662519][ T9663] ath9k_htc: Failed to initialize the device
[  598.677303][ T5631] usb 1-1: ath9k_htc: USB layer deinitialized
[  598.764768][ T9673] m920x_read = error: -19
[  598.770860][ T9673] dvb-usb: error while querying for an remote control event.
[  598.896359][ T9664] m920x_read = error: -19
[  598.901072][ T9664] dvb-usb: error while querying for an remote control event.
[  599.001626][ T5631] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  599.019729][ T9664] m920x_read = error: -19
[  599.024381][ T9664] dvb-usb: error while querying for an remote control event.
[  599.145463][ T9664] m920x_read = error: -19
[  599.150469][ T9664] dvb-usb: error while querying for an remote control event.
[  599.169772][ T5631] usb 1-1: Using ep0 maxpacket: 32
[  599.193292][ T5631] usb 1-1: config index 0 descriptor too short (expected 241, got 72)
[  599.211657][ T5631] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  599.224254][ T5631] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  599.234276][ T5631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.254481][ T5631] usb 1-1: config 0 descriptor??
[  599.273549][ T9664] m920x_read = error: -19
[  599.279370][ T9664] dvb-usb: error while querying for an remote control event.
[  599.283454][ T5631] mos7840 1-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected
[  599.402666][ T9664] m920x_read = error: -19
[  599.408885][ T9664] dvb-usb: error while querying for an remote control event.
[  599.532909][ T9664] m920x_read = error: -19
[  599.537598][ T9664] dvb-usb: error while querying for an remote control event.
[  599.661771][ T9664] m920x_read = error: -19
[  599.667485][ T9664] dvb-usb: error while querying for an remote control event.
[  599.711686][ T5631] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5
[  599.791153][ T9664] m920x_read = error: -19
[  599.795775][ T9664] dvb-usb: error while querying for an remote control event.
[  599.906173][ T9673] m920x_read = error: -19
[  599.910642][ T9673] dvb-usb: error while querying for an remote control event.
[  599.929047][ T5631] mos7840 ttyUSB1: probe with driver mos7840 failed with error -32
[  600.025541][ T9663] m920x_read = error: -19
[  600.030059][ T9663] dvb-usb: error while querying for an remote control event.
[  600.092349][ T5631] usb 1-1: USB disconnect, device number 63
[  600.144795][ T9673] m920x_read = error: -19
[  600.145923][ T5631] mos7840 1-1:0.0: device disconnected
[  600.150789][ T9673] dvb-usb: error while querying for an remote control event.
[  600.213776][T14675] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  600.274899][ T9663] m920x_read = error: -19
[  600.280847][ T9663] dvb-usb: error while querying for an remote control event.
[  600.396779][ T9673] m920x_read = error: -19
[  600.407140][ T9673] dvb-usb: error while querying for an remote control event.
[  600.492655][T14692] syzkaller0: entered promiscuous mode
[  600.511329][T14692] syzkaller0: entered allmulticast mode
[  600.569498][ T9663] m920x_read = error: -19
[  600.584889][ T9663] dvb-usb: error while querying for an remote control event.
[  600.697299][ T9663] m920x_read = error: -19
[  600.701858][ T9663] dvb-usb: error while querying for an remote control event.
[  600.825392][ T9663] m920x_read = error: -19
[  600.837968][ T9663] dvb-usb: error while querying for an remote control event.
[  600.965014][ T9663] m920x_read = error: -19
[  600.989363][ T9663] dvb-usb: error while querying for an remote control event.
[  601.057559][T14710] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  601.115646][ T9663] m920x_read = error: -19
[  601.143313][ T9663] dvb-usb: error while querying for an remote control event.
[  601.144179][T14718] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  601.296700][ T9663] m920x_read = error: -19
[  601.315536][ T9663] dvb-usb: error while querying for an remote control event.
[  601.444796][ T9663] m920x_read = error: -19
[  601.452353][ T9663] dvb-usb: error while querying for an remote control event.
[  601.584763][ T9663] m920x_read = error: -19
[  601.602082][ T9663] dvb-usb: error while querying for an remote control event.
[  601.626501][T14726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.650594][T14726] syzkaller0: entered promiscuous mode
[  601.668942][T14726] syzkaller0: entered allmulticast mode
[  601.698326][T14726] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  601.746418][ T9663] m920x_read = error: -19
[  601.761097][ T9663] dvb-usb: error while querying for an remote control event.
[  601.807642][T14726] tipc: Resetting bearer <eth:syzkaller0>
[  601.852148][T14725] tipc: Resetting bearer <eth:syzkaller0>
[  601.912108][ T9663] m920x_read = error: -19
[  601.919588][ T9663] dvb-usb: error while querying for an remote control event.
[  601.934072][T14725] tipc: Disabling bearer <eth:syzkaller0>
[  602.047331][ T9663] m920x_read = error: -19
[  602.064702][ T9663] dvb-usb: error while querying for an remote control event.
[  602.123684][T14740] input: syz0 as /devices/virtual/input/input64
[  602.206578][ T9663] m920x_read = error: -19
[  602.206890][ T5631] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  602.221444][ T9663] dvb-usb: error while querying for an remote control event.
[  602.354777][ T9664] m920x_read = error: -19
[  602.364629][ T9664] dvb-usb: error while querying for an remote control event.
[  602.396949][ T5631] usb 5-1: Using ep0 maxpacket: 8
[  602.410005][ T5631] usb 5-1: unable to get BOS descriptor or descriptor too short
[  602.435710][ T5631] usb 5-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config
[  602.446229][ T5631] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  602.457204][ T5631] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  602.473502][ T5631] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  602.483043][ T5631] usb 5-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3
[  602.492607][ T5631] usb 5-1: Product: syz
[  602.497727][ T5631] usb 5-1: Manufacturer: syz
[  602.503711][ T5631] usb 5-1: SerialNumber: syz
[  602.505719][ T9673] m920x_read = error: -19
[  602.518824][ T9673] dvb-usb: error while querying for an remote control event.
[  602.526639][ T9664] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  602.666191][ T9673] m920x_read = error: -19
[  602.671922][ T9673] dvb-usb: error while querying for an remote control event.
[  602.704661][ T9664] usb 4-1: Using ep0 maxpacket: 16
[  602.712383][ T9664] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  602.722915][ T9664] usb 4-1: config 0 has no interfaces?
[  602.728683][ T9664] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  602.739446][ T9664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.751440][ T9664] usb 4-1: config 0 descriptor??
[  602.795228][ T9664] m920x_read = error: -19
[  602.799826][ T9664] dvb-usb: error while querying for an remote control event.
[  602.806399][T14754] batman_adv: batadv0: Adding interface: macvlan2
[  602.816083][T14754] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.843053][T14754] batman_adv: batadv0: Interface activated: macvlan2
[  602.851364][T14754] batadv0: mtu less than device minimum
[  602.862531][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.863516][ T5631] cdc_ncm 5-1:1.0: invalid descriptor buffer length
[  602.875073][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.892985][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.895721][    T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  602.904646][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.919167][ T5631] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  602.922484][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.936359][ T5631] cdc_ncm 5-1:1.0: bind() failure
[  602.939593][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.955068][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.965495][ T5631] usb 5-1: USB disconnect, device number 60
[  602.966727][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.983088][T14754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  603.023319][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.033565][ T9664] m920x_read = error: -19
[  603.038141][ T9664] dvb-usb: error while querying for an remote control event.
[  603.046017][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.067399][    T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  603.083399][ T9673] usb 4-1: USB disconnect, device number 75
[  603.090995][    T9] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3
[  603.118755][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[  603.130149][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.139173][    T9] usb 2-1: Product: syz
[  603.143463][    T9] usb 2-1: Manufacturer: syz
[  603.148773][    T9] usb 2-1: SerialNumber: syz
[  603.158326][ T9664] m920x_read = error: -19
[  603.163646][ T9664] dvb-usb: error while querying for an remote control event.
[  603.294776][ T9673] m920x_read = error: -19
[  603.300761][ T9673] dvb-usb: error while querying for an remote control event.
[  603.389233][    T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  603.405645][    T9] dvb_usb_af9015 2-1:2.0: probe with driver dvb_usb_af9015 failed with error -22
[  603.417897][T14764] kvm: pic: non byte write
[  603.424375][    T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  603.431721][    T9] dvb_usb_af9035 2-1:2.0: probe with driver dvb_usb_af9035 failed with error -22
[  603.434754][ T9673] m920x_read = error: -19
[  603.446913][ T9673] dvb-usb: error while querying for an remote control event.
[  603.470898][    T9] usb 2-1: USB disconnect, device number 60
[  603.555839][ T9673] m920x_read = error: -19
[  603.569570][ T9673] dvb-usb: error while querying for an remote control event.
[  603.697645][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  603.706568][ T9673] m920x_read = error: -19
[  603.710937][ T9673] dvb-usb: error while querying for an remote control event.
[  603.824731][ T9673] m920x_read = error: -19
[  603.836452][ T9673] dvb-usb: error while querying for an remote control event.
[  603.974797][ T9664] m920x_read = error: -19
[  603.979532][ T9664] dvb-usb: error while querying for an remote control event.
[  604.013471][T14776] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  604.105502][ T9664] m920x_read = error: -19
[  604.118856][ T9664] dvb-usb: error while querying for an remote control event.
[  604.135690][ T9673] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  604.250336][T14776] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  604.267361][ T9664] m920x_read = error: -19
[  604.276499][ T9664] dvb-usb: error while querying for an remote control event.
[  604.294896][ T9673] usb 1-1: Using ep0 maxpacket: 8
[  604.303492][ T9673] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  604.312825][ T9673] usb 1-1: config 0 has no interface number 0
[  604.333757][ T9673] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  604.348541][ T9673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.369595][T14776] bond2: left promiscuous mode
[  604.393719][T14776] dummy0: left promiscuous mode
[  604.404748][ T9664] m920x_read = error: -19
[  604.413515][ T9673] usb 1-1: Product: syz
[  604.418926][ T9664] dvb-usb: error while querying for an remote control event.
[  604.427554][ T9673] usb 1-1: Manufacturer: syz
[  604.432411][ T9673] usb 1-1: SerialNumber: syz
[  604.446269][ T9673] usb 1-1: config 0 descriptor??
[  604.457603][T14776] 8021q: adding VLAN 0 to HW filter on device bond2
[  604.534902][ T9664] m920x_read = error: -19
[  604.544245][ T9664] dvb-usb: error while querying for an remote control event.
[  604.663531][T14784] syzkaller0: entered promiscuous mode
[  604.669749][ T9673] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  604.678206][ T9664] m920x_read = error: -19
[  604.690191][ T9664] dvb-usb: error while querying for an remote control event.
[  604.701761][T14784] syzkaller0: entered allmulticast mode
[  604.710165][ T9673] uvcvideo 1-1:0.31: Failed to initialize entity for entity 32774
[  604.728176][ T9673] uvcvideo 1-1:0.31: Failed to register entities (-22).
[  604.825256][ T9673] m920x_read = error: -19
[  604.829914][ T9673] dvb-usb: error while querying for an remote control event.
[  604.900576][    T9] usb 1-1: USB disconnect, device number 64
[  604.925122][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'.
[  604.958086][ T9673] m920x_read = error: -19
[  604.972730][ T9673] dvb-usb: error while querying for an remote control event.
[  605.104964][ T9673] m920x_read = error: -19
[  605.109990][ T9673] dvb-usb: error while querying for an remote control event.
[  605.224838][ T9673] m920x_read = error: -19
[  605.229343][ T9673] dvb-usb: error while querying for an remote control event.
[  605.349595][ T9674] m920x_read = error: -19
[  605.354274][ T9674] dvb-usb: error while querying for an remote control event.
[  605.467664][ T9674] m920x_read = error: -19
[  605.490977][ T9674] dvb-usb: error while querying for an remote control event.
[  605.575029][ T9673] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  605.597715][T14799] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  605.634719][ T9664] m920x_read = error: -19
[  605.641341][ T9664] dvb-usb: error while querying for an remote control event.
[  605.755922][ T9673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  605.777316][ T9664] m920x_read = error: -19
[  605.790959][ T9664] dvb-usb: error while querying for an remote control event.
[  605.800262][ T9673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.822002][ T9673] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  605.841427][ T9673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.862570][ T9673] usb 2-1: config 0 descriptor??
[  605.924785][ T9664] m920x_read = error: -19
[  605.929328][ T9664] dvb-usb: error while querying for an remote control event.
[  606.055076][ T9664] m920x_read = error: -19
[  606.063967][ T9664] dvb-usb: error while querying for an remote control event.
[  606.194977][ T9674] m920x_read = error: -19
[  606.200948][ T9674] dvb-usb: error while querying for an remote control event.
[  606.315740][ T9674] m920x_read = error: -19
[  606.327008][ T9674] dvb-usb: error while querying for an remote control event.
[  606.439378][ T9673] cp2112 0003:10C4:EA90.002B: unknown global tag 0xd
[  606.452445][ T9674] m920x_read = error: -19
[  606.478545][ T9674] dvb-usb: error while querying for an remote control event.
[  606.488203][ T9673] cp2112 0003:10C4:EA90.002B: item 0 0 1 13 parsing failed
[  606.509045][ T9673] cp2112 0003:10C4:EA90.002B: parse failed
[  606.522069][ T9673] cp2112 0003:10C4:EA90.002B: probe with driver cp2112 failed with error -22
[  606.608461][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'.
[  606.617513][ T9673] m920x_read = error: -19
[  606.617538][ T9673] dvb-usb: error while querying for an remote control event.
[  606.685529][    T9] usb 2-1: USB disconnect, device number 61
[  606.702658][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2872'.
[  606.724828][ T9673] m920x_read = error: -19
[  606.743381][ T9673] dvb-usb: error while querying for an remote control event.
[  606.751113][T14817] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2872'.
[  606.793485][T14817] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2872'.
[  606.865119][ T9673] m920x_read = error: -19
[  606.878225][ T9673] dvb-usb: error while querying for an remote control event.
[  607.036037][ T9664] m920x_read = error: -19
[  607.050312][ T9664] dvb-usb: error while querying for an remote control event.
[  607.069247][T14822] netlink: 'syz.4.2875': attribute type 1 has an invalid length.
[  607.153227][T14822] bond1: entered promiscuous mode
[  607.182744][T14822] bond1: entered allmulticast mode
[  607.186739][ T9664] m920x_read = error: -19
[  607.192391][ T9664] dvb-usb: error while querying for an remote control event.
[  607.213201][T14822] 8021q: adding VLAN 0 to HW filter on device bond1
[  607.295613][T14830] erspan1: entered allmulticast mode
[  607.304782][ T9664] m920x_read = error: -19
[  607.309229][ T9664] dvb-usb: error while querying for an remote control event.
[  607.344329][T14830] bond1: (slave erspan1): making interface the new active one
[  607.355576][T14830] erspan1: entered promiscuous mode
[  607.355778][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'.
[  607.399875][T14830] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  607.429047][ T9664] m920x_read = error: -19
[  607.441739][ T9664] dvb-usb: error while querying for an remote control event.
[  607.491106][T14836] syzkaller0: entered promiscuous mode
[  607.505664][T14836] syzkaller0: entered allmulticast mode
[  607.543782][T14822] bond1 (unregistering): (slave erspan1): Releasing active interface
[  607.553785][T14822] erspan1: left promiscuous mode
[  607.590935][T14822] bond1 (unregistering): Released all slaves
[  607.604823][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'.
[  607.624284][ T9664] m920x_read = error: -19
[  607.640924][T14832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  607.646394][ T9664] dvb-usb: error while querying for an remote control event.
[  607.768585][ T9673] m920x_read = error: -19
[  607.773792][ T9673] dvb-usb: error while querying for an remote control event.
[  607.804255][   T30] kauditd_printk_skb: 72 callbacks suppressed
[  607.804339][   T30] audit: type=1326 audit(1780815830.488:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  607.838171][T14824] tipc: Resetting bearer <eth:syzkaller0>
[  607.868139][   T30] audit: type=1326 audit(1780815830.548:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  607.897598][   T30] audit: type=1326 audit(1780815830.548:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  607.911411][ T9673] m920x_read = error: -19
[  607.926659][   T30] audit: type=1326 audit(1780815830.548:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  607.951322][ T9673] dvb-usb: error while querying for an remote control event.
[  607.960411][T14824] tipc: Disabling bearer <eth:syzkaller0>
[  607.965714][   T30] audit: type=1326 audit(1780815830.548:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  607.993210][   T30] audit: type=1326 audit(1780815830.548:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d39ce59 code=0x7ffc0000
[  608.018281][   T30] audit: type=1326 audit(1780815830.548:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e2d39e6c7 code=0x7ffc0000
[  608.043558][   T30] audit: type=1326 audit(1780815830.548:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5e2d35d68e code=0x7ffc0000
[  608.054716][ T9673] m920x_read = error: -19
[  608.069449][   T30] audit: type=1326 audit(1780815830.548:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5e2d35d68e code=0x7ffc0000
[  608.110829][   T30] audit: type=1326 audit(1780815830.548:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.1.2880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5e2d35d68e code=0x7ffc0000
[  608.135254][ T9673] dvb-usb: error while querying for an remote control event.
[  608.156328][    T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  608.218528][T14847] bond1: (slave dummy0): Releasing active interface
[  608.227722][T14847] dummy0: left promiscuous mode
[  608.245261][ T9664] m920x_read = error: -19
[  608.251250][ T9664] dvb-usb: error while querying for an remote control event.
[  608.262130][T14847] bridge_slave_1: left allmulticast mode
[  608.269596][T14847] bridge_slave_1: left promiscuous mode
[  608.275692][T14847] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.291648][T14847] bond0: (slave bond_slave_0): Releasing backup interface
[  608.313330][T14847] bond0: (slave bond_slave_1): Releasing backup interface
[  608.335118][    T9] usb 2-1: Using ep0 maxpacket: 16
[  608.337440][T14847] net_ratelimit: 11 callbacks suppressed
[  608.337455][T14847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  608.344159][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  608.365047][ T9674] m920x_read = error: -19
[  608.381324][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  608.389909][ T9674] dvb-usb: error while querying for an remote control event.
[  608.407299][    T9] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  608.409303][T14856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  608.417514][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.433702][    T9] usb 2-1: Product: syz
[  608.438219][    T9] usb 2-1: Manufacturer: syz
[  608.443734][    T9] usb 2-1: SerialNumber: syz
[  608.454781][ T9673] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  608.474457][T14852] syzkaller0: entered promiscuous mode
[  608.480216][T14852] syzkaller0: entered allmulticast mode
[  608.492541][T14854] tipc: Resetting bearer <eth:syzkaller0>
[  608.502938][T14853] tipc: Disabling bearer <eth:syzkaller0>
[  608.524742][ T9674] m920x_read = error: -19
[  608.529115][ T9674] dvb-usb: error while querying for an remote control event.
[  608.621422][ T9673] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  608.638959][ T9673] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  608.652990][ T9674] m920x_read = error: -19
[  608.656667][T14845] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2880'.
[  608.657777][ T9674] dvb-usb: error while querying for an remote control event.
[  608.678329][ T9673] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  608.689049][ T9673] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  608.701845][ T9673] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  608.721718][ T9673] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  608.734112][ T9673] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  608.743313][ T9673] usb 3-1: Product: syz
[  608.747822][ T9673] usb 3-1: Manufacturer: syz
[  608.747859][ T5631] IPVS: starting estimator thread 0...
[  608.760713][T14860] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  608.765208][ T9673] cdc_wdm 3-1:1.0: skipping garbage
[  608.778593][ T9673] cdc_wdm 3-1:1.0: skipping garbage
[  608.780571][    C0] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  608.792259][ T9673] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  608.798418][ T9674] m920x_read = error: -19
[  608.802835][ T9674] dvb-usb: error while querying for an remote control event.
[  608.811418][ T9673] cdc_wdm 3-1:1.0: Unknown control protocol
[  608.871914][T14861] IPVS: using max 46 ests per chain, 110400 per kthread
[  608.918390][ T9673] m920x_read = error: -19
[  608.922798][ T9673] dvb-usb: error while querying for an remote control event.
[  609.035893][ T9673] m920x_read = error: -19
[  609.042998][ T9673] dvb-usb: error while querying for an remote control event.
[  609.086298][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'.
[  609.174759][ T9673] m920x_read = error: -19
[  609.179243][ T9673] dvb-usb: error while querying for an remote control event.
[  609.314000][ T9664] m920x_read = error: -19
[  609.318568][ T9664] dvb-usb: error while querying for an remote control event.
[  609.440098][ T9664] m920x_read = error: -19
[  609.443001][T14876] trusted_key: encrypted_key: keyword 'ne˙˙default' not recognized
[  609.444815][ T9664] dvb-usb: error while querying for an remote control event.
[  609.529128][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE
[  609.565223][ T9664] m920x_read = error: -19
[  609.570547][ T9664] dvb-usb: error while querying for an remote control event.
[  609.694160][ T9664] m920x_read = error: -19
[  609.700805][ T9664] dvb-usb: error while querying for an remote control event.
[  609.820714][ T9664] m920x_read = error: -19
[  609.825516][ T9664] dvb-usb: error while querying for an remote control event.
[  609.934948][T14878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.943953][T14878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.945229][ T9664] m920x_read = error: -19
[  609.960113][ T9664] dvb-usb: error while querying for an remote control event.
[  610.074735][ T9664] m920x_read = error: -19
[  610.079769][ T9664] dvb-usb: error while querying for an remote control event.
[  610.098346][ T9668] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  610.204762][ T9664] m920x_read = error: -19
[  610.210158][ T9664] dvb-usb: error while querying for an remote control event.
[  610.281302][ T9668] usb 5-1: too many configurations: 36, using maximum allowed: 8
[  610.307260][ T9668] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  610.318718][ T9668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.327175][ T9668] usb 5-1: Product: syz
[  610.329741][ T9664] m920x_read = error: -19
[  610.333504][ T9668] usb 5-1: Manufacturer: syz
[  610.336028][ T9664] dvb-usb: error while querying for an remote control event.
[  610.343361][ T9668] usb 5-1: SerialNumber: syz
[  610.379745][ T9668] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  610.402203][ T5631] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  610.462017][ T9664] m920x_read = error: -19
[  610.466722][ T9664] dvb-usb: error while querying for an remote control event.
[  610.580394][ T9664] m920x_read = error: -19
[  610.584935][ T9664] dvb-usb: error while querying for an remote control event.
[  610.686091][T14881] random: crng reseeded on system resumption
[  610.703963][ T9664] m920x_read = error: -19
[  610.710675][ T9664] dvb-usb: error while querying for an remote control event.
[  610.815006][ T9664] m920x_read = error: -19
[  610.824504][ T9664] dvb-usb: error while querying for an remote control event.
[  610.884169][    T9] usb 2-1: USB disconnect, device number 62
[  610.955793][ T9664] m920x_read = error: -19
[  610.960530][ T9664] dvb-usb: error while querying for an remote control event.
[  611.084791][ T9664] m920x_read = error: -19
[  611.089458][ T9664] dvb-usb: error while querying for an remote control event.
[  611.214337][ T9664] m920x_read = error: -19
[  611.228190][ T9664] dvb-usb: error while querying for an remote control event.
[  611.291745][ T9664] usb 3-1: USB disconnect, device number 62
[  611.355287][ T9663] m920x_read = error: -19
[  611.359870][ T9663] dvb-usb: error while querying for an remote control event.
[  611.459188][ T5631] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  611.468606][ T5631] ath9k_htc: Failed to initialize the device
[  611.474975][ T9663] m920x_read = error: -19
[  611.474998][ T9663] dvb-usb: error while querying for an remote control event.
[  611.586061][ T9664] m920x_read = error: -19
[  611.592170][ T9664] dvb-usb: error while querying for an remote control event.
[  611.629770][ T5631] usb 5-1: ath9k_htc: USB layer deinitialized
[  611.725183][ T9664] m920x_read = error: -19
[  611.732935][ T9664] dvb-usb: error while querying for an remote control event.
[  611.788469][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  611.845516][ T9664] m920x_read = error: -19
[  611.851183][ T9664] dvb-usb: error while querying for an remote control event.
[  611.945688][    T9] usb 2-1: Using ep0 maxpacket: 8
[  611.962004][    T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  611.970954][    T9] usb 2-1: config 179 has no interface number 0
[  611.988048][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  611.994731][ T9664] m920x_read = error: -19
[  611.999981][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  612.032835][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  612.053593][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  612.057668][ T9664] dvb-usb: error while querying for an remote control event.
[  612.065559][    T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  612.113090][    T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  612.132480][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.165857][T14885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  612.205581][ T9664] m920x_read = error: -19
[  612.220063][ T9664] dvb-usb: error while querying for an remote control event.
[  612.364827][ T9663] m920x_read = error: -19
[  612.369351][ T9663] dvb-usb: error while querying for an remote control event.
[  612.509963][ T9663] m920x_read = error: -19
[  612.515749][ T9663] dvb-usb: error while querying for an remote control event.
[  612.525577][T14885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.556168][T14885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.630615][ T9663] usb 2-1: USB disconnect, device number 63
[  612.639125][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  612.647447][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  612.656579][    C0] ==================================================================
[  612.664651][    C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0
[  612.672534][    C0] Read of size 4 at addr ffff88803599c05c by task syz.3.2883/14851
[  612.680429][    C0] 
[  612.682763][    C0] CPU: 0 UID: 0 PID: 14851 Comm: syz.3.2883 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.682792][    C0] Tainted: [L]=SOFTLOCKUP
[  612.682800][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  612.682813][    C0] Call Trace:
[  612.682821][    C0]  <IRQ>
[  612.682829][    C0]  dump_stack_lvl+0xe8/0x150
[  612.682856][    C0]  print_address_description+0x55/0x1e0
[  612.682901][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  612.682928][    C0]  print_report+0x58/0x70
[  612.682944][    C0]  kasan_report+0x117/0x150
[  612.682975][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  612.683003][    C0]  do_raw_spin_lock+0x28b/0x2f0
[  612.683028][    C0]  ? __wake_up_common_lock+0x2f/0x1f0
[  612.683054][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  612.683084][    C0]  _raw_spin_lock_irqsave+0x4c/0x60
[  612.683112][    C0]  __wake_up_common_lock+0x2f/0x1f0
[  612.683143][    C0]  __usb_hcd_giveback_urb+0x3b0/0x540
[  612.683238][    C0]  dummy_timer+0xbc0/0x4650
[  612.683330][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  612.683348][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  612.683368][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  612.683402][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  612.683428][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  612.683451][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  612.683475][    C0]  __hrtimer_run_queues+0x3c0/0xa20
[  612.683508][    C0]  hrtimer_run_softirq+0x17a/0x240
[  612.683534][    C0]  handle_softirqs+0x22a/0x840
[  612.683565][    C0]  ? __irq_exit_rcu+0xca/0x220
[  612.683586][    C0]  __irq_exit_rcu+0xca/0x220
[  612.683603][    C0]  irq_exit_rcu+0x9/0x30
[  612.683620][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  612.683672][    C0]  </IRQ>
[  612.683679][    C0]  <TASK>
[  612.683687][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  612.683708][    C0] RIP: 0010:lockdep_unregister_key+0x2d5/0x350
[  612.683730][    C0] Code: 91 0a 09 00 89 c6 48 c7 c7 30 58 40 96 e8 23 4e 08 0a 90 e9 65 fe ff ff e8 48 8b 05 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff
[  612.683746][    C0] RSP: 0018:ffffc90006cd7980 EFLAGS: 00000246
[  612.683763][    C0] RAX: 0000000000000046 RBX: ffff88804252b268 RCX: 0000000000000046
[  612.683776][    C0] RDX: ffffffff93fbd398 RSI: ffffffff8dfbebba RDI: ffffffff8c28b9e0
[  612.683791][    C0] RBP: ffff88807e0f0000 R08: ffffffff81af2178 R09: ffffffff8e95cc20
[  612.683804][    C0] R10: dffffc0000000000 R11: fffffbfff20606df R12: 0000000000000000
[  612.683817][    C0] R13: ffff88804252b269 R14: 0000000000001000 R15: 0000000000000a87
[  612.683833][    C0]  ? __is_module_percpu_address+0x28/0x3f0
[  612.683863][    C0]  ? __pfx_pfifo_fast_destroy+0x10/0x10
[  612.683952][    C0]  __qdisc_destroy+0x1ab/0x470
[  612.683979][    C0]  dev_shutdown+0x93/0x440
[  612.683997][    C0]  unregister_netdevice_many_notify+0x11b2/0x22c0
[  612.684060][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  612.684080][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  612.684107][    C0]  ? ref_tracker_alloc+0x2f1/0x4c0
[  612.684177][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  612.684197][    C0]  ? tun_chr_close+0x10a/0x1c0
[  612.684303][    C0]  ? __fput+0x44f/0xa60
[  612.684324][    C0]  ? exit_to_user_mode_loop+0x193/0x680
[  612.684343][    C0]  unregister_netdevice_queue+0x31f/0x360
[  612.684365][    C0]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  612.684383][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  612.684407][    C0]  ? queue_delayed_work_on+0x171/0x1e0
[  612.684436][    C0]  __tun_detach+0x6d9/0x15d0
[  612.684460][    C0]  ? __pfx_tun_chr_close+0x10/0x10
[  612.684477][    C0]  tun_chr_close+0x10a/0x1c0
[  612.684493][    C0]  __fput+0x44f/0xa60
[  612.684517][    C0]  task_work_run+0x1d9/0x270
[  612.684543][    C0]  ? __pfx_task_work_run+0x10/0x10
[  612.684570][    C0]  exit_to_user_mode_loop+0x193/0x680
[  612.684586][    C0]  ? rcu_is_watching+0x15/0xb0
[  612.684607][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.684625][    C0]  do_syscall_64+0x353/0x580
[  612.684643][    C0]  ? trace_irq_disable+0x3b/0x140
[  612.684671][    C0]  ? clear_bhb_loop+0x40/0x90
[  612.684690][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.684707][    C0] RIP: 0033:0x7f8bba19ce59
[  612.684724][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.684738][    C0] RSP: 002b:00007f8bba53fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  612.684756][    C0] RAX: 0000000000000000 RBX: 00007f8bba53fc90 RCX: 00007f8bba19ce59
[  612.684769][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  612.684780][    C0] RBP: 0000000000094811 R08: 0000000000000001 R09: 0000000000000000
[  612.684791][    C0] R10: 0000001b33a20000 R11: 0000000000000246 R12: 00007f8bba53fcd0
[  612.684804][    C0] R13: 00007f8bba415fac R14: 0000000000094906 R15: 00007f8bba415fa0
[  612.684823][    C0]  </TASK>
[  612.684830][    C0] 
[  612.708469][ T9664] m920x_read = error: -19
[  612.708763][    C0] Allocated by task 9:
[  612.715216][ T9664] dvb-usb: error while querying for an remote control event.
[  612.719444][    C0]  kasan_save_track+0x3e/0x80
[  613.175690][    C0]  __kasan_kmalloc+0x93/0xb0
[  613.180280][    C0]  __kmalloc_cache_noprof+0x31c/0x660
[  613.185640][    C0]  xpad_probe+0x428/0x1fc0
[  613.190156][    C0]  usb_probe_interface+0x659/0xc70
[  613.195275][    C0]  really_probe+0x267/0xaf0
[  613.199805][    C0]  __driver_probe_device+0x1ef/0x380
[  613.205072][    C0]  driver_probe_device+0x4f/0x240
[  613.210084][    C0]  __device_attach_driver+0x279/0x430
[  613.215436][    C0]  bus_for_each_drv+0x258/0x2f0
[  613.220326][    C0]  __device_attach+0x2c5/0x450
[  613.225072][    C0]  device_initial_probe+0xa1/0xd0
[  613.230077][    C0]  bus_probe_device+0x12a/0x220
[  613.234920][    C0]  device_add+0x7e9/0xbb0
[  613.239230][    C0]  usb_set_configuration+0x1a87/0x2110
[  613.244685][    C0]  usb_generic_driver_probe+0x8d/0x150
[  613.250236][    C0]  usb_probe_device+0x1c4/0x3b0
[  613.255078][    C0]  really_probe+0x267/0xaf0
[  613.259570][    C0]  __driver_probe_device+0x1ef/0x380
[  613.264842][    C0]  driver_probe_device+0x4f/0x240
[  613.269849][    C0]  __device_attach_driver+0x279/0x430
[  613.275201][    C0]  bus_for_each_drv+0x258/0x2f0
[  613.280038][    C0]  __device_attach+0x2c5/0x450
[  613.284781][    C0]  device_initial_probe+0xa1/0xd0
[  613.289787][    C0]  bus_probe_device+0x12a/0x220
[  613.294622][    C0]  device_add+0x7e9/0xbb0
[  613.298933][    C0]  usb_new_device+0xa08/0x16f0
[  613.303754][    C0]  hub_event+0x2a1c/0x4f30
[  613.308180][    C0]  process_scheduled_works+0xb5d/0x1860
[  613.313737][    C0]  worker_thread+0xa53/0xfc0
[  613.318324][    C0]  kthread+0x389/0x470
[  613.322387][    C0]  ret_from_fork+0x514/0xb70
[  613.327035][    C0]  ret_from_fork_asm+0x1a/0x30
[  613.331795][    C0] 
[  613.334104][    C0] Freed by task 9663:
[  613.338069][    C0]  kasan_save_track+0x3e/0x80
[  613.342740][    C0]  kasan_save_free_info+0x46/0x50
[  613.347750][    C0]  __kasan_slab_free+0x5c/0x80
[  613.352503][    C0]  kfree+0x1c5/0x640
[  613.356387][    C0]  xpad_disconnect+0x350/0x480
[  613.361141][    C0]  usb_unbind_interface+0x26e/0x910
[  613.366322][    C0]  device_release_driver_internal+0x4d9/0x870
[  613.372375][    C0]  bus_remove_device+0x455/0x570
[  613.377332][    C0]  device_del+0x527/0x8f0
[  613.381643][    C0]  usb_disable_device+0x3d4/0x8d0
[  613.386656][    C0]  usb_disconnect+0x32f/0x990
[  613.391318][    C0]  hub_event+0x1cc9/0x4f30
[  613.395724][    C0]  process_scheduled_works+0xb5d/0x1860
[  613.401268][    C0]  worker_thread+0xa53/0xfc0
[  613.405842][    C0]  kthread+0x389/0x470
[  613.409898][    C0]  ret_from_fork+0x514/0xb70
[  613.414470][    C0]  ret_from_fork_asm+0x1a/0x30
[  613.419228][    C0] 
[  613.421541][    C0] The buggy address belongs to the object at ffff88803599c000
[  613.421541][    C0]  which belongs to the cache kmalloc-1k of size 1024
[  613.435578][    C0] The buggy address is located 92 bytes inside of
[  613.435578][    C0]  freed 1024-byte region [ffff88803599c000, ffff88803599c400)
[  613.449357][    C0] 
[  613.451664][    C0] The buggy address belongs to the physical page:
[  613.458068][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35998
[  613.466808][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  613.475291][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  613.482818][    C0] page_type: f5(slab)
[  613.486791][    C0] raw: 00fff00000000040 ffff88813fe17dc0 dead000000000100 dead000000000122
[  613.495366][    C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  613.503952][    C0] head: 00fff00000000040 ffff88813fe17dc0 dead000000000100 dead000000000122
[  613.512610][    C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  613.521270][    C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  613.529929][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  613.538579][    C0] page dumped because: kasan: bad access detected
[  613.544988][    C0] page_owner tracks the page as allocated
[  613.550691][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 139, tgid 139 (kworker/u8:5), ts 74061692622, free_ts 73967322804
[  613.571256][    C0]  post_alloc_hook+0x22d/0x280
[  613.576021][    C0]  get_page_from_freelist+0x2593/0x2610
[  613.581563][    C0]  __alloc_frozen_pages_noprof+0x18d/0x380
[  613.587359][    C0]  allocate_slab+0x77/0x660
[  613.591845][    C0]  refill_objects+0x339/0x3d0
[  613.596512][    C0]  __pcs_replace_empty_main+0x321/0x720
[  613.602046][    C0]  __kmalloc_noprof+0x474/0x760
[  613.606883][    C0]  ___neigh_create+0x6d5/0x2250
[  613.611790][    C0]  ip6_finish_output2+0x729/0x13e0
[  613.616917][    C0]  ip6_output+0x340/0x550
[  613.621235][    C0]  ndisc_send_skb+0xd0b/0x1670
[  613.626017][    C0]  ndisc_send_ns+0xd7/0x160
[  613.630502][    C0]  addrconf_dad_work+0xac4/0x14c0
[  613.635546][    C0]  process_scheduled_works+0xb5d/0x1860
[  613.641079][    C0]  worker_thread+0xa53/0xfc0
[  613.645653][    C0]  kthread+0x389/0x470
[  613.649708][    C0] page last free pid 5648 tgid 5648 stack trace:
[  613.656015][    C0]  __free_frozen_pages+0xc1c/0xd30
[  613.661115][    C0]  __slab_free+0x274/0x2c0
[  613.665519][    C0]  qlist_free_all+0x99/0x100
[  613.670098][    C0]  kasan_quarantine_reduce+0x148/0x160
[  613.675541][    C0]  __kasan_slab_alloc+0x22/0x80
[  613.680380][    C0]  kmem_cache_alloc_lru_noprof+0x2b8/0x640
[  613.686172][    C0]  alloc_inode+0x6a/0x1b0
[  613.690493][    C0]  new_inode+0x22/0x170
[  613.694635][    C0]  __debugfs_create_file+0xb8/0x400
[  613.699935][    C0]  debugfs_create_file_short+0x3f/0x60
[  613.705379][    C0]  debugfs_hw_add+0x33a/0x380
[  613.710117][    C0]  ieee80211_register_hw+0x3d9d/0x4a70
[  613.715690][    C0]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  613.721469][    C0]  hwsim_new_radio_nl+0xf6a/0x1c00
[  613.726574][    C0]  genl_family_rcv_msg_doit+0x22a/0x330
[  613.732163][    C0]  genl_rcv_msg+0x61c/0x7a0
[  613.736657][    C0] 
[  613.738964][    C0] Memory state around the buggy address:
[  613.744581][    C0]  ffff88803599bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  613.752630][    C0]  ffff88803599bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  613.760673][    C0] >ffff88803599c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  613.768711][    C0]                                                     ^
[  613.775626][    C0]  ffff88803599c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  613.783675][    C0]  ffff88803599c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  613.791719][    C0] ==================================================================
[  613.799783][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  613.806969][    C0] CPU: 0 UID: 0 PID: 14851 Comm: syz.3.2883 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.818062][    C0] Tainted: [L]=SOFTLOCKUP
[  613.822371][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  613.832410][    C0] Call Trace:
[  613.835673][    C0]  <IRQ>
[  613.838504][    C0]  vpanic+0x56c/0xa60
[  613.842478][    C0]  ? __pfx_vpanic+0x10/0x10
[  613.846970][    C0]  panic+0xc5/0xd0
[  613.850679][    C0]  ? __pfx_panic+0x10/0x10
[  613.855079][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  613.860094][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  613.865114][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  613.870126][    C0]  check_panic_on_warn+0x89/0xb0
[  613.875056][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  613.880071][    C0]  end_report+0x73/0x170
[  613.884305][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  613.889315][    C0]  kasan_report+0x128/0x150
[  613.893805][    C0]  ? do_raw_spin_lock+0x28b/0x2f0
[  613.898822][    C0]  do_raw_spin_lock+0x28b/0x2f0
[  613.903661][    C0]  ? __wake_up_common_lock+0x2f/0x1f0
[  613.909023][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  613.914385][    C0]  _raw_spin_lock_irqsave+0x4c/0x60
[  613.919579][    C0]  __wake_up_common_lock+0x2f/0x1f0
[  613.924768][    C0]  __usb_hcd_giveback_urb+0x3b0/0x540
[  613.930134][    C0]  dummy_timer+0xbc0/0x4650
[  613.934635][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  613.939559][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  613.944487][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  613.949870][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  613.954825][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  613.960646][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  613.965579][    C0]  __hrtimer_run_queues+0x3c0/0xa20
[  613.970776][    C0]  hrtimer_run_softirq+0x17a/0x240
[  613.975878][    C0]  handle_softirqs+0x22a/0x840
[  613.980629][    C0]  ? __irq_exit_rcu+0xca/0x220
[  613.985376][    C0]  __irq_exit_rcu+0xca/0x220
[  613.989951][    C0]  irq_exit_rcu+0x9/0x30
[  613.994175][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  613.999794][    C0]  </IRQ>
[  614.002710][    C0]  <TASK>
[  614.005624][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  614.011592][    C0] RIP: 0010:lockdep_unregister_key+0x2d5/0x350
[  614.017733][    C0] Code: 91 0a 09 00 89 c6 48 c7 c7 30 58 40 96 e8 23 4e 08 0a 90 e9 65 fe ff ff e8 48 8b 05 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff
[  614.037325][    C0] RSP: 0018:ffffc90006cd7980 EFLAGS: 00000246
[  614.043378][    C0] RAX: 0000000000000046 RBX: ffff88804252b268 RCX: 0000000000000046
[  614.051335][    C0] RDX: ffffffff93fbd398 RSI: ffffffff8dfbebba RDI: ffffffff8c28b9e0
[  614.059290][    C0] RBP: ffff88807e0f0000 R08: ffffffff81af2178 R09: ffffffff8e95cc20
[  614.067243][    C0] R10: dffffc0000000000 R11: fffffbfff20606df R12: 0000000000000000
[  614.075207][    C0] R13: ffff88804252b269 R14: 0000000000001000 R15: 0000000000000a87
[  614.083182][    C0]  ? __is_module_percpu_address+0x28/0x3f0
[  614.089004][    C0]  ? __pfx_pfifo_fast_destroy+0x10/0x10
[  614.094555][    C0]  __qdisc_destroy+0x1ab/0x470
[  614.099331][    C0]  dev_shutdown+0x93/0x440
[  614.103741][    C0]  unregister_netdevice_many_notify+0x11b2/0x22c0
[  614.110160][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  614.116934][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  614.122743][    C0]  ? ref_tracker_alloc+0x2f1/0x4c0
[  614.127848][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  614.133304][    C0]  ? tun_chr_close+0x10a/0x1c0
[  614.138229][    C0]  ? __fput+0x44f/0xa60
[  614.142378][    C0]  ? exit_to_user_mode_loop+0x193/0x680
[  614.147910][    C0]  unregister_netdevice_queue+0x31f/0x360
[  614.153620][    C0]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  614.159849][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  614.165034][    C0]  ? queue_delayed_work_on+0x171/0x1e0
[  614.170490][    C0]  __tun_detach+0x6d9/0x15d0
[  614.175073][    C0]  ? __pfx_tun_chr_close+0x10/0x10
[  614.180167][    C0]  tun_chr_close+0x10a/0x1c0
[  614.184744][    C0]  __fput+0x44f/0xa60
[  614.188725][    C0]  task_work_run+0x1d9/0x270
[  614.193335][    C0]  ? __pfx_task_work_run+0x10/0x10
[  614.198451][    C0]  exit_to_user_mode_loop+0x193/0x680
[  614.203828][    C0]  ? rcu_is_watching+0x15/0xb0
[  614.208586][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.214647][    C0]  do_syscall_64+0x353/0x580
[  614.219233][    C0]  ? trace_irq_disable+0x3b/0x140
[  614.224260][    C0]  ? clear_bhb_loop+0x40/0x90
[  614.228926][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.234815][    C0] RIP: 0033:0x7f8bba19ce59
[  614.239221][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.258818][    C0] RSP: 002b:00007f8bba53fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  614.267225][    C0] RAX: 0000000000000000 RBX: 00007f8bba53fc90 RCX: 00007f8bba19ce59
[  614.275185][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  614.283141][    C0] RBP: 0000000000094811 R08: 0000000000000001 R09: 0000000000000000
[  614.291101][    C0] R10: 0000001b33a20000 R11: 0000000000000246 R12: 00007f8bba53fcd0
[  614.299062][    C0] R13: 00007f8bba415fac R14: 0000000000094906 R15: 00007f8bba415fa0
[  614.307046][    C0]  </TASK>
[  614.310314][    C0] Kernel Offset: disabled
[  614.314619][    C0] Rebooting in 86400 seconds..