last executing test programs:

19.282589237s ago: executing program 4 (id=667):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, 0x0, 0x0)
epoll_create1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r3, 0x0, 0x5}, 0x18)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r6})
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'A'}]}], {0x14}}, 0x74}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

19.189362545s ago: executing program 1 (id=669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x840)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000240), 0x0, 0x0)
renameat2(r2, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1f, 0x9, 0x80000000, 0x5, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r2, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000580)={'ip_vti0\x00', <r4=>0x0, 0x8000, 0x8000, 0xff, 0xc, {{0x25, 0x4, 0x1, 0x3, 0x94, 0x64, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp={0x44, 0xc, 0x42, 0x0, 0x7, [0xc2000000, 0x6]}, @end, @lsrr={0x83, 0xf, 0x74, [@broadcast, @remote, @multicast2]}, @cipso={0x86, 0x54, 0x3, [{0x1, 0xf, "6f1306ed3b62a4569210455df3"}, {0x5, 0x12, "c10639b12b99003a32e1fd2f763e2ad2"}, {0x5, 0xd, "e096f21914f877a15bdbbf"}, {0x6, 0x4, "c994"}, {0x0, 0x6, "3b07bd7d"}, {0x7, 0x12, "4f5e12dc0c9bbff61bb3dc1d17a55ca2"}, {0x1, 0x4, "b795"}]}, @generic={0x82, 0xe, "8a6ab717a7eaa02b9f726827"}, @end]}}}}})
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000001c0)={@private0, r4}, 0x14)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfc}}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @loopback, 0x1}, {0xa, 0x4e24, 0x8, @private1, 0x7}, 0xffffffffffffffff, 0x5}}, 0x48)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RVERSION(r2, &(0x7f0000000500)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x3c, r8, 0xa72704fd2dfb5147, 0xf0bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x3c}}, 0x0)

18.077921071s ago: executing program 1 (id=670):
bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, 0x0, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r6})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
io_getevents(r0, 0x1, 0x0, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[0x0])

17.849132268s ago: executing program 4 (id=671):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@getsa={0x28, 0x12, 0x100, 0x70bd29, 0x25dfdbfe, {@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4d4, 0xa, 0x32}}, 0x28}}, 0x4c014)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000640)="c8993007ab5b4e95ef5203c53493104d0bc28b7da204004eaa698e0d60fc6cdc449c971f184c4ec09a72585759ea2be072d525717bcbdb2ee0841851a3c4fa6ff81f2a1ff0e73615bb723aaa0dcc1f9a02f43ccf19d5fdbdb18b76cc9eb6bf6e2a645ecef5e4a71ff74e5e988d49741cc6df0c9dc5dad8670cf69334566b0c4bb661764ec110241cca3d05bf483c47292269d48d9e887f54bcc5e92c5f9088c666a4ecd95063e52ef93afdef4e66ddb31b5283bde5c944172e9d8768b5b340aa21c807d35edb72fa40357a66b0551536e2b6e18c30a21d3ba1b2852fc2a12697330d0ad56414e603c76868d1e86e4ae10e19f2b7c4aacc670b7a86121470369390e4fd44e08001a3d55c47fcca4210faa70ed42e2c9d27e38bf01bf25829998738c47730eac8002783c554c0129b9d9a660eaa0d1db44fcb2cc3cb5441ce6755d9e0be97152d512e3d9c8fd6173a0b69ae3f6f40c7738c93d0545b203669fb960dfd63b6b9d85b1cf48ee11f8d6ea22f42defff238b2fe09c49b2e780382fa319d102751c8b7589ccbaaca898cb0c60728b2997881d01f49760a0c008cdcb3fb03ae7445d2e8b29e9425fdea68dd24357ee5de50707f8b06b85dd7d34fb7e6482112dace611ba59233021ba3567c95b552de25d076f5cf7a48ca9ea67e23b03fe137f92999dd640ac874b7276f6ba17a91126f5f7b1baa1dd64f4cd3a8b17ae1979523a4cd3dfb0e5de94ff638c5e1470cc0b5e33c57928b574c803d74a5262aa11660e8f4403ebb4e19c3e0c5a989b4d793af8cc2bb060e3fb75f55b0b56744f814206c42a28928676d6379079c94c6608e3132d55693e2558a7fb5310315d402df471a9b16097ce5d41990b446b70659987a06bbba260686829b411bfa4be7ccdafe173f8672987c1cf388622f636c07c382a31da3e53821e3fc6d4d8620be2652d18a60b8e6dbbbb1b51accab76b6f03f7e8e1ad0a5632a0af19ca1274c4e99ddb4d335189e835517f5641dc4d4ac282eb0a0a93982b188c637720f62c74c16c82de6e19a129ab74d89e6e3c54dd2a9b6c497b1183221d0b2a017b7f732071f7eecbfc36049a458d33f9b3a866595341b52096e115529abe45105aa786f030f149314beaf52d3c1d1b3309389dc08e082a2908b127bdf6ed3488682eb40bcc1e16814a1a9bece77a78848c3fb97755eebcbe4160e0a95a2ed8077e93e3025aa5dd212b2d6f9683f9d8749f741fdbde2d60d74b8c2f9956c00c672b94dcef0cad0c965cebbe1a9cbdb43aeddb894b2f576e71bcb8f529f5c47713457ca843d4dc65b97d16ed223d5b0ba13a859efcffe959299feec4bb62f17d2eb84c84284b353f6376675ed9af10c2a7e0b43578f2d98cfec863322621f848ff9e717f672bd4f7f785802d54d5b5350c323d56aeffeb041afb600e488a4c44e15c396c050811dfb977f63b7c746ce9c09f5db2cb1edfdce5c3f4f6702012fa78f5320ce87a80feab32413a3882cc788a7813f2ec1e134e50a098e299a9d5f78315343c9be3fdaab3b6ef01c445326fab8f22366d2cf3141e32f4bc6951dc37b31f93edc2f0b82909821111d677ef2e4b83cca853ce560400f6a456251b5c0dbfbee1d6b9ed343bf02b4f67e48ae30e08c1b4302a583795d8b20d4ca21612b30f46444fd8dc616e22abe54b7b90dbfc079d1eb90e5cb7ef830ee645128ae5465eb16be2df2ae45af2eaf0868308a49a786323bcf9c1d2e5ab1f28c7c741d8d4e4578562a236a2caf0f73f8cc9e7f120df2284a84fd363ff39d1c3d3af73158c19e4a44949041d03ba2679cdb9f3a5ade1bc13a4db08fffab166725c6e1d1376b3d30422ac68ea1d10374ddd2bd1af794c55327cdf6b558b093eca7c52c4f6339970a498b448a0f1bc6a51c28e0e827465bf6a016727504715c54a111ecf6f43db2af242a8551bbf1054479f01e695c5eb5b75fd4114a5e8bfeaa763bc94bd0f78e31accd94517975ffbebc18232368f16e85ca264c2176d34b152fd5ec1bf7b663775cffc487ec8dfe34dfa241c9e973f4effbba5b7891fbf938c8ea5aa78d37aab701103b429d90ab07e8cd91c5359d5d2c147b0fc9bcb967f1a99dd53151bb60d4002c996ce694286cd336484f613b2bfe0d08209a52487b9ec59828e6f14664bcad88d1c491d7c40bee600fa7eb6c69f73a139226d46a398eb3530ab70c4563e304be00048537118c55c0b7eefcb6768187d2575f5e8e57379640f141aaf17cdc4a9a8a4635d10895c2f4217f9f275d6c74388af4ccbed1c689a4cda5373d09f2b7f19890719bf1c00b6857bb93fd338ddcd5188220173054ab7bf24e11ebb1d686e77c203411b0124eff6890d47879ce5f6eafc936837f8de757b6829b9944b24f896626ccb1423b3174291216afa886de2fcff5c9cfbd4afb75c004441b6d32cc2ac6dd082a1d0b5530684d8b4674753c3ef69c83acfaf069398252a1318c7b98b34e5288be6e5e6ff14c0612ddd7a3d6a5b013ca72b4fd36f5977380559f70fb9bce377d7c06d0567ea5e8a76a18504d92534fbcc2c5295d160e630dd68327242cc1d8d5031942f7e3dd545e93789fb3a0db2f5e36299e08c9de443c412eccacab3c830e6d01500335c0034e9c1ac76048d0ca3ad2ed45d0b92579403e72a101057a5b306e256ea129df278452ff433f6880973b87031787ed3a8f26d12e76b8a264ba54238c0e266895e9e3d63fd9a47d9dd5d1c8fe57d77a4ecbca6b82c25aa4f9bfe4fc299bb5c840dec8f790e5c9c2fe6b982906e34c1e6b1e50c85fcdb163808ae7ce14363b1adf1d63fad2cc06de75246907d494461e7c39441a772042d1906f11826bb7098c5cea430fb657a2e4d4c426d4d39e335c0d43bd755533a39b2c9ca1c9a794a077be81e674459b2b5713603276b4cfbab026332051211a6188d5f1e068caadf6efdc44016b0297a334f67d923df4c2e0cd142e0fbe6778cb4c0dc2c387a3fdd450193f8067403cd5cd458ecb8a0cc7e82c1bb14ab359c84f320c62a1ffdedba6df6111e5aa35acb4932b4fc569fdd9c1ace0ec6de7360402406c06cf4d1358d73edb36459c52b6480f01c248ab5b234e18aa3fdb60b389742fc4d2a6d95ec14cf8faeef327d8f7fbe498c57db6c3b23f826d771bd2ea47d661526f068aea114ca4daff1c83563ba3c9e6a0a21723bfb22d69f00815d159b383ffaa36191a2393aeaf50b1bee8d78ff29bc6f3900f530ec00ff88388c206e0080ba176690f05125c6e24f366fb33627291f66c5e14a20a607c029c53a712c6f1341c8a4f820aff23fdb27994c65e585724589edb5933e678417d758de69b4bf1877e3c009b64b42cd3260be7623e1d7c60d8347884d9f26cc3999520d83bd7a304c30ad25a63468e15c21b6203a65ba281c92566283cf2b5436ee768d25ad9766c0152dfacf5bc9e003e7fe586e9a5de70cb3df9ec1b21b68317787469ff61849310304afb5f590e1bf9dcf52714d244f9fea5931f2e7b72723b2c65c8d9fc7540c834a32564db1faaf1ca1b162aaf57f88ef60aa171ff863300d04af90fde07833ac42f25492848174dc748ef76d65058d0733570f19ee17a79bb3480427b88b17fc31c2bc51b4e9ed8f0136e8bc8de73a4cb7d4d5c247e7bbeec5233ac97e3fd78c480954fbde97de0fd6f20adf03b169e235fe3c8297b5c42ccf1b5092fe9c635da099263c04362858d2ce5888020b6ae520f9fcfc0c170919b601a05da4a1802a1db0d2451b1eea90edabb0393eb04363abfa215136cc235143d7c642f30936231ef131e2bcff945d9ea00758fcff4fe3e47a28cc2d1cd10fde75d5236b3a03453e0f6c16b3af5047fb9b03ecca7125f9b3d11e48b74c065ac36bd7746dea79afe846fc50edc8358e661127d6d27c50632327ce611bc0b17d9001f186b1c5dc8dc096279b0dabd789c2301411ee0cacbe620527461d388f2ad7ad263a59a23fea9d1f6bdea98cf6da1932b7b27144e2f3686cf6b4889c6baaadb5b44ec1b4e7a2eb58f9900fe7d9742438ed7757d839f8fe740477c26da86f6cec9d430efe64cb73d827777d8cc0d00b5c844fccaafbac6e95ca123cf3ce60d4f33c5918bc22d176215b12c2ee563f797947d786b408561b67e1785cdb38bfdb5ec81f5c7078e86bcc9a138111e3bcada9bd5bb5388313d8b23fa966d4c6fd3c0854c67174e30ffdaac56b896f8d8f760267bce978bd4add7bae92d2ed48a2457f488e2d06a1d31f5a05772a137dbc8b0dd1819c8a8cd0126c0627a524a6ac0b8bcecf4d92818e5df27398512fb8afc5feac4f7dbe89ac1c825842f34f236ed052262c6b2f1fa16e17fab827dcc64e7d58ea4a89e99c992c8ff712f5dd4fbd36a6d28f168dc83d25cebab8af27b90d5c1050a9ce5aa4484d0278e2034fe4de23c536ddef9b848ceb531698f9374a1cee6449f2589bf5981282f2158f152874281f843ccad4a73d6f1ae78efc1a72df97bdbfba4052f8daa64be3a2fa7edd2b62a432b6075e30505f6053b0103aeb1fb1e63dcbd0b662aee6a85f21d9553eb2d7fe3cabe8289623bcfeee33ef9f2da9cb849056c1ec5a1409eaa6c1728279339126600c6e7992db0bafc0b9a1bd8e365e05b8773e607a5dcd40ab3c435d74b1945150c48ad2adabd1545ec3173972455c12e4cbce8d8675f876bea0a5222f97259b22077970f3b7bb88990be253871ef9d44ee0ad9118c3827c50b2043e3799ba54cd4835039974d028d0e4db3b5ba5de6e8da50b66e0fb54f43fc6796095591f5da7026faad864ee649d769dead9b70e37e714da9c59e682129933c1785211ba149ea3a4987692a78e519b9285ff31b6dfd1f581add81faa65cf602b67c520854c0c817f27f5d433afebf38ac3f2f164401b9a9e41573ed463d8162db8aa480c4f294cca3581d6871e1fccbeaa354a0f5c3df956e3d504c987011b27adf002acf7eda912e4cdd035550d69bfc8c1e2acd8fde6b076cfae32ed282d94ea7d6995262504f7a758e61a67643c5e270a125b41ad060d1df6865e00fdc5a7ee36be4da0d96630a18d7420bde2480022b1a5998d480b7036cbd1235a1b7bf93b05dc9e42626bf75f64381d87f38ac571fab2978bd659c2b1d3abe0e640860981e76731ad2dcb379cf54eedc88c80f632005b47bb9d14c0e956f4f736a790b5c149aa1934644243ea3db80e8cdac10087c6df6aa45f288d3121a312ae915768e24335e8995ef88349dafdde551e7e97e4651140d5f5cadc137032d6ac81ef337fa226c69b1e0b2612de3291eafcd15d67c588ac463171d8bfcda4597923aed1d72e5d69839908ddfe11441fb1060d35aa8d97b05ca22dfc0bbf742c28f7f7e88cf42496ef8ef544f0c72f0e969d38587ffa2f4fc2e1f5bb5a564f8e69993d818cd9e20097fd853ea341b3853c34ed54c587f242ee07ab429ac5876ed78f54da896652cc0989b6751311c770f403cd39876163d246c990dc71ad3178c8c446d83a238f03e840613c705db4f03fa967cf8bd7337a1678ec48ce02fdc5ac6921b315c935e679c31695b4a1027d804299f44ce0438e582511d36cadc0346f3edeff4821712427fc943c26b5f1cbf3837c82b4882194663e6a6f64453ff20e2b87df2d3d746ee7e86575b4785ea774132fca0d26b06eadbff897700950452b1ece59bf898fad4af9d61a5f427522bb14c624d118d53d3b891aa6b60dbba9ef213174fadb02d3bcde1155f1eff314081c82cbeb8e5874b27a1d369c3f9b82e6accae102c7f66e691fac3b4d3", 0x1000}, {&(0x7f0000000040)="e2657e7c6d6e93e4e91547903a80b3a96576c9b44d824ea20871a80107b0aec6c413f2d9c6c132bc9f04a2d34b154b4a91198b7a6e0f689f75bc1482567c7a8dcf5127de25c8ed0b0fe5d7f32f6bbb5fdf55145f63a24e4537ca99dd64233aba7e4795474cb62b33e75335d5185c45c990c4bd4fa197e95e0c42c6147a4cb4837e9f440ea0ab8fd0a81cf461fd2a6e81c899d0e6a2bb9dec22175f754b333087e9f11b9ef7875300bfca95ecca96f955f14d8e113b73fe4c2eff3d2d53807dd1fec2f56109ef423fc7377173bf26523c4128da87816f16e9c3", 0xd9}], 0x2, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x78}}], 0x1, 0x20080004)

16.456810208s ago: executing program 1 (id=672):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01072cbd7010fcfff3eb04"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x400a0)

16.28264076s ago: executing program 4 (id=673):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x308, 0x308, 0x110, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @local, 0xff000000, 0x0, 0x5, 0x3, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x8, 0x9, 0xd, 0x6140, '\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x181}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
timerfd_create(0x7, 0x800)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200))
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002d2cfa00863110001badc010203010902240001050000000209b3050905950310000008aea8774f0fa25e6b8ddcdabccb13d83ae31a9fbb3cfdc30c3f7679cd82e332a0f148b56d77481c"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

16.172465439s ago: executing program 0 (id=674):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = getpid()
r3 = io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x8000, 0x1, 0x21b})
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1)
r4 = syz_pidfd_open(r2, 0x0)
open_by_handle_at(r4, 0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000000400)='\x00', 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0x9)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)="3b52e010cfa8277d5e51027ea522343d090a9a3f0fc54bd6556e1e41a44890d0c945a313b328707c939f4eb2912ad1c9bb976cf26da04c27e4bd3ec7d559f4437d9b0e4f1b87070ddbba58d7ce9535dd1f430714c66b72e80376cbd91c0b27800176b96289429ea7c56e280e83abbda4921f076fdf59223bfc", 0x79}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x3ab}], 0x1}}], 0x2, 0x4)
sendto$inet(r0, &(0x7f00000002c0)="22d42f7add5228b885cd12f1f588edd92d51a4f52fe0dc037d0938b53c1586de5f20ab9f6bb6ae04be9919b48a9600feac28010f721d23b0ca6fc098643867b52a17481da2febba16d0e31fae15373a6dc66ae91fea9277f5a78b2a9030e38ac200dd7", 0x63, 0x40005, 0x0, 0x0)

15.658607361s ago: executing program 3 (id=676):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x5}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x9, 0x1, 0x2, "17427415e0076770e65a0460635e6692dcbd2e342b37a3841adfa248e59281a8", 0x584e4f53})
listen(r3, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe45, 0x8, 0x28e6})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8417f, 0x0)
read(r6, 0x0, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
r7 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0})

14.937815515s ago: executing program 0 (id=677):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x309003, 0x1)
pwritev2(r0, &(0x7f00000001c0), 0x176, 0x9, 0x200, 0x3)
syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x6d7ea7d4, 0x80)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0)
r5 = syz_io_uring_setup(0x3b9, &(0x7f0000000300)={0x0, 0x0, 0x40, 0xfffffffc, 0x30a}, &(0x7f0000000400), &(0x7f0000000280))
io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000c80))
recvmmsg$unix(r6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e573"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
syz_open_dev$video4linux(&(0x7f0000000080), 0x100, 0x20000)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)

14.935805988s ago: executing program 3 (id=678):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r1}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_1\x00'}, 0x18)
r2 = syz_open_dev$media(0x0, 0x1ff, 0x52300)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000080), 0x51)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x2, 0x200, &(0x7f0000003c40)="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"})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a0102000000000000000001000000090001007379", @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="ea924879a0eeb946d39c216fe00311b8a2027eefe57bb6dc29d3043cd3f5892bb74abf702d3b6f9a90e5201f3ab4945b931c0636911cbac9e9a62fdd6c44269c695b78c5e16a8e2e452aaad7c7695e6d6345b33d2719a8edd9f7b8d451efecc2c19f9e1e7c2cac32afcf8a510ca52f2298c5b778d2b9cc3647cd66fc7fc00643ce55c8ac76e2cb1fd0c68d2b84e381fe959bd7e3b82625c9eeb0d4a6fb4fac0a4a1dbde61573788e81e879295b4439925c76b76bc4e039f39b903c"], 0xfc}}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f00000003c0)={0x0, <r7=>0x0})
prlimit64(r7, 0x7, &(0x7f0000000400)={0x100000000}, &(0x7f0000000440))
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, &(0x7f0000000100), 0x41000004, &(0x7f0000000040))
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0202000000000000140012800a00010069706f696200000004000280080005002b02"], 0x3c}, 0x1, 0xba01}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0x1, &(0x7f00000000c0)="5f129fe02db2befd1fa5e9b0ffca6f748ea8150858bdaefe317607509c029534c6dce7358442b41c73932eb6c145654c41ea699b1b3fab8aa71bb7ee809957c430e3e59cc613833376962588b6fb00acb7dd0db3ad99bcfaa0bb5ad3", &(0x7f0000000140)=""/162}, 0x20)

14.17457317s ago: executing program 2 (id=680):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r5=>0x0}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000009c0)={{r2}, r4, 0x4, @unused=[0x8, 0xf, 0xd528, 0x4], @devid=r5})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa00964, 0x0, '\x00', @p_u16=0x0}})
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f00000000c0))
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r7=>0x0, 0x7, 0x1, 0x4, 0x3, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x67, 0x0, 0x2f, 0x2f, 0x0, @multicast2, @remote, {[@end, @end, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x20, 0x1, 0x3, [{@empty, 0x5}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', r7, @fallback=0x27}, 0x94)

12.497133976s ago: executing program 4 (id=681):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

11.563888256s ago: executing program 2 (id=682):
creat(&(0x7f0000000100)='./file0\x00', 0x4d)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x180000000)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x154}}, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', <r6=>0x0})
r7 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040014)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, r11, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x104, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2cf1f4a3a12e62aebb72eef992b5f5f89358b81519653908a41b17e4e57f21ca"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "136c474ade5e5720d76f4b61b1d38469e41f0afbdd12183bd9abfce5cde6fe6e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dd14c0de6e6740d726c0bf503baef0f1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f76efb6fbedc326cd9a9c24e2a429cc5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a9870269c5b3610189c012c2307a893f3d110eb2b173995cf345aeaac48ebbec"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f1eba990b3eea4e313c9cce4ad33fabd29da2f969e92d7c4449e51a7ca2e3766"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c174a8cfcf2fb4e5a262cf58cb1b6fed"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b6896c00489c323b7eb81cc2adfc9510ef129fa02350e56a4600935fc774ffcf"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}]}, 0x124}}, 0x4000040)
ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

11.276697494s ago: executing program 0 (id=683):
r0 = semget$private(0x0, 0x4, 0x328)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000004, 0x100010, r1, 0x965b8000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0)
semop(r0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x0, 0xe65b}], 0x4)
semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000080)=0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f00000000c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1d)
r8 = syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x393}, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, 0x0, 0x1)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)

11.276151984s ago: executing program 4 (id=684):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a45c000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000000006241a0000000905810300020000000904010000820d0000090401010202090000090582020002000000090503020002000000"], 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd6a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

11.208575387s ago: executing program 3 (id=685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000300)="0f01c1b8005000000f23c80f21f8350800b0000f23f8440f20c0c4e23da8959f170000440f22c0f083960000000098b8a80000000f23d00f21f8353000000e0f23f8b974030000b85d8f4b83ba000000000f303ef081845e8a3e00000c00000067640fc73d3ef40f35", 0x1a}], 0x1, 0x7, 0x0, 0xfffffffffffffe8d)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x6})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140090fece161000", @ANYRES16=r0, @ANYBLOB="8f9f000000000000000004000000"], 0x14}}, 0x0)

10.950612029s ago: executing program 2 (id=686):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = socket(0x10, 0x2, 0x0)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f00005c0000/0x2000)=nil)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={<r3=>0x0, @private}, &(0x7f00000000c0)=0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', r3}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000d00)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}, @struct={0xc, 0x0, 0x0, 0x4, 0x0, 0x3725}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0xb01, 0x0, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xe, 0xe}, {0xc, 0x4}}}, 0x24}}, 0xc0)

10.913782481s ago: executing program 1 (id=687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x19, 0x20, 0x21, 0x70bd2a, 0x25dfdbfb, {0x2, 0x14, 0x14, 0x3, 0x40, 0x0, 0x0, 0x7, 0x11}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
chdir(0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
syz_init_net_socket$ax25(0x3, 0x3, 0xf0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000)
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r3, 0x0, 0x0, 0x1, 0x0)
msgsnd(r3, &(0x7f0000000380)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000080)=""/91)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000580)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x64, 0x9}, 0x0, 0x0, 0x40000000000001fe, 0x1, 0x401, 0x8, 0x2687, 0x4, 0x4, 0x2})

6.92948356s ago: executing program 4 (id=688):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2})
io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\\*\xf2\x9c\xba\xa7\xcf\xef\xc0\x16\xf1\xe7(\xf3IXt\x98\x9bmI\xcb\n\xe0\xa4<\x12\xd8\xb4\"\xe2w\x0e\xf7:\xa0\x80\xd2\x8a%\xb5\xb5JLT\xa7\xbd\xb2 \xc6\x1f\n;\xb6y@<\xbf\xc5\x97\x82\x99R\xb5\xadW\x91\x906\x89\xbe3\nz\xd1\x95\x7f\xb4\xe1\xc7$\xab\"\xd4e\xd2;<\xec'}]}, 0xd3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000540)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0xf1, 0x37, 0x9, 0x80000001, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0x7, 0x4, 0x200, 0x4, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x80000, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0xd0, 0x4009, 0x71, 0x0, 0x6, 0x6, 0x3, 0x3b3e, 0x162, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x1, 0x7, 0x0, 0x3, 0x2, 0x3, 0x1, 0xff, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0xffffffff, 0x6, 0x6, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0x8, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa1, 0x6, 0x9]}})
sendmsg$nl_route(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB="00000400080009"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800)
read(r8, &(0x7f0000000480)=""/154, 0x9a)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000240))

6.786879148s ago: executing program 1 (id=689):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x5}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x9, 0x1, 0x2, "17427415e0076770e65a0460635e6692dcbd2e342b37a3841adfa248e59281a8", 0x584e4f53})
listen(r3, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe45, 0x8, 0x28e6})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8417f, 0x0)
read(r6, 0x0, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
r7 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0})

6.698004386s ago: executing program 0 (id=690):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3)
pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x3ff)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1)
fcntl$setstatus(r4, 0x4, 0x7c00)
dup3(r5, r4, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)

6.696156336s ago: executing program 2 (id=691):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r1}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_1\x00'}, 0x18)
r2 = syz_open_dev$media(0x0, 0x1ff, 0x52300)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000080), 0x51)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x2, 0x200, &(0x7f0000003c40)="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"})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a0102000000000000000001000000090001007379", @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="ea924879a0eeb946d39c216fe00311b8a2027eefe57bb6dc29d3043cd3f5892bb74abf702d3b6f9a90e5201f3ab4945b931c0636911cbac9e9a62fdd6c44269c695b78c5e16a8e2e452aaad7c7695e6d6345b33d2719a8edd9f7b8d451efecc2c19f9e1e7c2cac32afcf8a510ca52f2298c5b778d2b9cc3647cd66fc7fc00643ce55c8ac76e2cb1fd0c68d2b84e381fe959bd7e3b82625c9eeb0d4a6fb4fac0a4a1dbde61573788e81e879295b4439925c76b76bc4e039f39b903c"], 0xfc}}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f00000003c0)={0x0, <r7=>0x0})
prlimit64(r7, 0x7, &(0x7f0000000400)={0x100000000}, &(0x7f0000000440))
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, &(0x7f0000000100), 0x41000004, &(0x7f0000000040))
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0202000000000000140012800a00010069706f696200000004000280080005002b02"], 0x3c}, 0x1, 0xba01}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0x1, &(0x7f00000000c0)="5f129fe02db2befd1fa5e9b0ffca6f748ea8150858bdaefe317607509c029534c6dce7358442b41c73932eb6c145654c41ea699b1b3fab8aa71bb7ee809957c430e3e59cc613833376962588b6fb00acb7dd0db3ad99bcfaa0bb5ad3", &(0x7f0000000140)=""/162}, 0x20)

6.053656541s ago: executing program 3 (id=692):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x5}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x9, 0x1, 0x2, "17427415e0076770e65a0460635e6692dcbd2e342b37a3841adfa248e59281a8", 0x584e4f53})
bind$vsock_stream(r3, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe45, 0x8, 0x28e6})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8417f, 0x0)
read(r6, 0x0, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
r7 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0})

5.047596774s ago: executing program 0 (id=693):
bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f00000001c0)=<r1=>0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, 0x0, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

3.465286477s ago: executing program 1 (id=694):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b41460860163209ea80010218780902120001000000000904"], 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x400)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r2, 0x0)
syz_clone(0x2001100, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)
bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000002c0)={&(0x7f0000000140)=[{0x800, 0x1, 0x0, 0x0}], 0x1})
ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000180)="1dc420329ded8e529868b134e59f36905cbff1d30a1b94aece07533a355b216114cbca8e4bb0135edd3dadab4e18115946102296caa1aad69c45bac783cca7215457bc1e85c2e55e22f627e1575d82c31e014b3c54f6c821997b1d54abd43a941f425da41ea8567865d4a7364b5de71c17ebb33739e45b95081934e3f9c554d13324b9360d14f061e0483efe4a6206cb2cc4d35808")
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x8, <r7=>r0})
ioctl$SNDCTL_SEQ_RESETSAMPLES(r7, 0x40045109, &(0x7f0000000100)=0x27)

3.394916324s ago: executing program 2 (id=695):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x309003, 0x1)
pwritev2(r0, &(0x7f00000001c0), 0x176, 0x9, 0x200, 0x3)
syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505331, &(0x7f0000000300)={0x2000000})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x6d7ea7d4, 0x80)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0)
r5 = syz_io_uring_setup(0x3b9, &(0x7f0000000300)={0x0, 0x0, 0x40, 0xfffffffc, 0x30a}, &(0x7f0000000400), &(0x7f0000000280))
io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000c80))
recvmmsg$unix(r6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e573"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
syz_open_dev$video4linux(&(0x7f0000000080), 0x100, 0x20000)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)

3.390419023s ago: executing program 3 (id=696):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008000"/28], 0x50)
fcntl$getflags(r0, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23)
write(r7, 0x0, 0x0)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffee4, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800)

2.010505058s ago: executing program 0 (id=697):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01072cbd7010fcfff3eb04"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x400a0)

1.393985ms ago: executing program 3 (id=698):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000006a62009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x0, 0x88, "e7e154f7f617f2789d7d865fe36762035a45d65e9e4933ae9aa8362cffdac754b650e2e955dc0ec0856c1978713e4961f846e8cac0de1a788339790c70d2afc4e2cacfa1a7942f1983bacf16c5301c825ed6995593212277cea4458495d015ba4143ac45527a1f54a9953d3ecedfa50b7996e017a3166c2151570bd78c6f2d8239bd67b0628ee818"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES8=r4], 0x54}}, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2041, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000})

0s ago: executing program 2 (id=699):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71de7213059", 0x0, 0x0, 0x7, 0xfd, 0x5, 0x1})

kernel console output (not intermixed with test programs):

z.2.201'.
[  203.787288][ T6849] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  203.834910][ T6863] netlink: 'syz.4.204': attribute type 10 has an invalid length.
[  204.050512][ T6849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.576744][ T5898] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  207.667777][ T6895] syz_tun: entered allmulticast mode
[  207.742902][ T5898] usb 2-1: Using ep0 maxpacket: 32
[  207.760970][ T5898] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  207.777138][ T5898] usb 2-1: config 0 has no interface number 0
[  207.819901][ T5898] usb 2-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.968925][ T5898] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  208.152427][ T6894] syz_tun: left allmulticast mode
[  208.245186][ T5898] usb 2-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67
[  208.350729][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.478527][ T5898] usb 2-1: Product: syz
[  208.540719][ T5898] usb 2-1: Manufacturer: syz
[  208.585816][ T5898] usb 2-1: SerialNumber: syz
[  208.772276][ T5898] usb 2-1: config 0 descriptor??
[  208.799003][ T5898] spcp8x5 2-1:0.191: SPCP8x5 converter detected
[  209.025835][ T5898] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  210.331820][ T5898] usb 2-1: USB disconnect, device number 4
[  210.762996][ T5898] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  210.974317][ T5898] spcp8x5 2-1:0.191: device disconnected
[  211.375246][ T6916] FAULT_INJECTION: forcing a failure.
[  211.375246][ T6916] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  211.435250][ T6918] FAULT_INJECTION: forcing a failure.
[  211.435250][ T6918] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  211.499944][ T6918] CPU: 0 UID: 0 PID: 6918 Comm: syz.0.219 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  211.499974][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  211.499995][ T6918] Call Trace:
[  211.500007][ T6918]  <TASK>
[  211.500017][ T6918]  dump_stack_lvl+0x189/0x250
[  211.500057][ T6918]  ? __pfx____ratelimit+0x10/0x10
[  211.500081][ T6918]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.500105][ T6918]  ? __pfx__printk+0x10/0x10
[  211.500132][ T6918]  ? __might_fault+0xb0/0x130
[  211.500165][ T6918]  should_fail_ex+0x414/0x560
[  211.500194][ T6918]  _copy_from_user+0x2d/0xb0
[  211.500225][ T6918]  ___sys_sendmsg+0x158/0x2a0
[  211.500261][ T6918]  ? __pfx____sys_sendmsg+0x10/0x10
[  211.500331][ T6918]  ? __fget_files+0x2a/0x420
[  211.500355][ T6918]  ? __fget_files+0x3a0/0x420
[  211.500388][ T6918]  __x64_sys_sendmsg+0x19b/0x260
[  211.500423][ T6918]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  211.500467][ T6918]  ? __pfx_ksys_write+0x10/0x10
[  211.500509][ T6918]  ? rcu_is_watching+0x15/0xb0
[  211.500549][ T6918]  ? do_syscall_64+0xbe/0x3b0
[  211.500578][ T6918]  do_syscall_64+0xfa/0x3b0
[  211.500600][ T6918]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.500623][ T6918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.500645][ T6918]  ? clear_bhb_loop+0x60/0xb0
[  211.500670][ T6918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.500690][ T6918] RIP: 0033:0x7efc9d78eb69
[  211.500723][ T6918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.500746][ T6918] RSP: 002b:00007efc9e549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  211.500775][ T6918] RAX: ffffffffffffffda RBX: 00007efc9d9b5fa0 RCX: 00007efc9d78eb69
[  211.500790][ T6918] RDX: 0000000020000000 RSI: 00002000000026c0 RDI: 0000000000000003
[  211.500804][ T6918] RBP: 00007efc9e549090 R08: 0000000000000000 R09: 0000000000000000
[  211.500817][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.500830][ T6918] R13: 0000000000000000 R14: 00007efc9d9b5fa0 R15: 00007ffcef1360d8
[  211.500862][ T6918]  </TASK>
[  211.721845][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.4.220 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  211.721877][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  211.721890][ T6916] Call Trace:
[  211.721899][ T6916]  <TASK>
[  211.721909][ T6916]  dump_stack_lvl+0x189/0x250
[  211.721939][ T6916]  ? __pfx____ratelimit+0x10/0x10
[  211.721962][ T6916]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.721987][ T6916]  ? __pfx__printk+0x10/0x10
[  211.722029][ T6916]  should_fail_ex+0x414/0x560
[  211.722058][ T6916]  _copy_to_user+0x31/0xb0
[  211.722091][ T6916]  simple_read_from_buffer+0xe1/0x170
[  211.722121][ T6916]  proc_fail_nth_read+0x1df/0x250
[  211.722151][ T6916]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  211.722181][ T6916]  ? rw_verify_area+0x258/0x650
[  211.722214][ T6916]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  211.722242][ T6916]  vfs_read+0x200/0x980
[  211.722282][ T6916]  ? __pfx___mutex_lock+0x10/0x10
[  211.722307][ T6916]  ? __pfx_vfs_read+0x10/0x10
[  211.722342][ T6916]  ? __fget_files+0x2a/0x420
[  211.722372][ T6916]  ? __fget_files+0x3a0/0x420
[  211.722394][ T6916]  ? __fget_files+0x2a/0x420
[  211.722429][ T6916]  ksys_read+0x145/0x250
[  211.722447][ T6916]  ? __fget_files+0x3a0/0x420
[  211.722472][ T6916]  ? __pfx_ksys_read+0x10/0x10
[  211.722506][ T6916]  ? do_syscall_64+0xbe/0x3b0
[  211.722535][ T6916]  do_syscall_64+0xfa/0x3b0
[  211.722560][ T6916]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.722581][ T6916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.722602][ T6916]  ? clear_bhb_loop+0x60/0xb0
[  211.722629][ T6916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.722649][ T6916] RIP: 0033:0x7fa8eff8d57c
[  211.722669][ T6916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  211.722687][ T6916] RSP: 002b:00007fa8f0db6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  211.722709][ T6916] RAX: ffffffffffffffda RBX: 00007fa8f01b5fa0 RCX: 00007fa8eff8d57c
[  211.722725][ T6916] RDX: 000000000000000f RSI: 00007fa8f0db60a0 RDI: 0000000000000004
[  211.722738][ T6916] RBP: 00007fa8f0db6090 R08: 0000000000000000 R09: 0000000000000000
[  211.722751][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.722763][ T6916] R13: 0000000000000000 R14: 00007fa8f01b5fa0 R15: 00007fff94a739f8
[  211.722797][ T6916]  </TASK>
[  212.492852][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  212.723245][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.835675][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.958782][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  213.055961][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.205438][   T24] usb 3-1: config 0 descriptor??
[  213.331136][ T6939] syz_tun: entered allmulticast mode
[  216.843495][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  216.849604][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  216.867460][   T24] usb 3-1: USB disconnect, device number 4
[  217.361369][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  217.367946][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  217.376873][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  217.436460][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  217.476972][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  217.582469][ T6938] syz_tun: left allmulticast mode
[  218.691904][ T6960] can0: slcan on ptm0.
[  218.765412][ T6960] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  218.783828][ T6960] macsec1: entered allmulticast mode
[  218.795439][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  218.808959][ T6960] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  218.832261][   T30] audit: type=1326 audit(1754086716.121:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  218.879600][ T6960] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  218.930375][ T6960] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  218.945534][   T30] audit: type=1326 audit(1754086716.161:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  218.970366][   T30] audit: type=1326 audit(1754086716.171:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  218.994913][   T24] usb 1-1: Using ep0 maxpacket: 32
[  219.017481][   T24] usb 1-1: no configurations
[  219.039235][   T24] usb 1-1: can't read configurations, error -22
[  219.228356][   T30] audit: type=1326 audit(1754086716.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  219.384042][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  219.407564][   T30] audit: type=1326 audit(1754086716.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  219.604423][   T24] usb 1-1: Using ep0 maxpacket: 32
[  219.623866][ T6962] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  219.637721][ T6962] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  219.641858][   T30] audit: type=1326 audit(1754086716.171:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  219.679050][   T24] usb 1-1: no configurations
[  219.714473][   T24] usb 1-1: can't read configurations, error -22
[  219.792271][   T24] usb usb1-port1: attempt power cycle
[  219.845067][   T30] audit: type=1326 audit(1754086716.171:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  219.878259][   T30] audit: type=1326 audit(1754086716.171:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  219.878326][ T6970] netlink: 96 bytes leftover after parsing attributes in process `syz.1.233'.
[  219.904906][   T30] audit: type=1326 audit(1754086716.171:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  220.056266][   T30] audit: type=1326 audit(1754086716.171:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2938eb69 code=0x7ffc0000
[  220.102656][ T6959] can0 (unregistered): slcan off ptm0.
[  220.172816][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  220.200181][   T24] usb 1-1: Using ep0 maxpacket: 32
[  220.206515][   T24] usb 1-1: no configurations
[  220.211413][   T24] usb 1-1: can't read configurations, error -22
[  220.367838][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  220.368901][ T6983] ubi31: attaching mtd0
[  220.405133][   T24] usb 1-1: Using ep0 maxpacket: 32
[  220.437306][ T6983] ubi31: scanning is finished
[  220.468513][ T6983] ubi31: empty MTD device detected
[  220.637341][   T24] usb 1-1: no configurations
[  220.637378][   T24] usb 1-1: can't read configurations, error -22
[  220.637917][   T24] usb usb1-port1: unable to enumerate USB device
[  220.795387][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'.
[  221.207509][ T5924] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  221.396191][ T5924] usb 3-1: Using ep0 maxpacket: 32
[  221.585102][ T5924] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  221.639777][ T5924] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  221.805412][ T6983] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  221.822917][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  221.850136][ T5924] usb 3-1: config 1 has no interface number 0
[  221.856857][ T6983] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  221.895545][ T6983] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  221.904430][ T5924] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.962776][ T6983] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  221.970608][ T5924] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  222.013714][ T6983] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  222.022214][ T5924] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  222.052477][ T6983] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  222.052507][ T6983] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1440853023
[  222.052529][ T6983] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  222.055052][ T7001] ubi31: background thread "ubi_bgt31d" started, PID 7001
[  222.061329][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.220757][ T5924] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  222.393814][ T7013] afs: Unknown parameter '01777777777777777777777'
[  222.522682][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  222.779308][ T5924] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  223.322730][ T5925] usb 1-1: Using ep0 maxpacket: 8
[  223.346802][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.381829][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.472139][ T5924] usb 3-1: USB disconnect, device number 5
[  223.499446][ T5925] usb 1-1: New USB device found, idVendor=2179, idProduct=0052, bcdDevice= 0.00
[  223.518672][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.622096][ T5924] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  223.834299][ T5925] usb 1-1: config 0 descriptor??
[  225.926472][ T5925] usbhid 1-1:0.0: can't add hid device: -71
[  225.942767][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  226.043797][ T5925] usb 1-1: USB disconnect, device number 11
[  226.192788][ T5931] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  226.289563][ T7042] FAULT_INJECTION: forcing a failure.
[  226.289563][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.345901][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.1.249 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  226.345932][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  226.345945][ T7042] Call Trace:
[  226.345954][ T7042]  <TASK>
[  226.345964][ T7042]  dump_stack_lvl+0x189/0x250
[  226.345996][ T7042]  ? __pfx____ratelimit+0x10/0x10
[  226.346020][ T7042]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.346043][ T7042]  ? __pfx__printk+0x10/0x10
[  226.346069][ T7042]  ? __might_fault+0xb0/0x130
[  226.346100][ T7042]  should_fail_ex+0x414/0x560
[  226.346127][ T7042]  _copy_from_user+0x2d/0xb0
[  226.346159][ T7042]  __sys_bind+0x199/0x3e0
[  226.346192][ T7042]  ? __pfx___sys_bind+0x10/0x10
[  226.346232][ T7042]  ? __pfx_ksys_write+0x10/0x10
[  226.346250][ T7042]  ? rcu_is_watching+0x15/0xb0
[  226.346282][ T7042]  __x64_sys_bind+0x7a/0x90
[  226.346319][ T7042]  do_syscall_64+0xfa/0x3b0
[  226.346342][ T7042]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.346365][ T7042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.346387][ T7042]  ? clear_bhb_loop+0x60/0xb0
[  226.346414][ T7042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.346435][ T7042] RIP: 0033:0x7fed2938eb69
[  226.346453][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.346468][ T7042] RSP: 002b:00007fed2a2d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  226.346487][ T7042] RAX: ffffffffffffffda RBX: 00007fed295b5fa0 RCX: 00007fed2938eb69
[  226.346501][ T7042] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003
[  226.346512][ T7042] RBP: 00007fed2a2d1090 R08: 0000000000000000 R09: 0000000000000000
[  226.346524][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.346535][ T7042] R13: 0000000000000000 R14: 00007fed295b5fa0 R15: 00007fffccf13218
[  226.346565][ T7042]  </TASK>
[  226.574418][ T5931] usb 5-1: Using ep0 maxpacket: 32
[  226.584502][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.596193][ T5931] usb 5-1: config 0 has no interfaces?
[  226.608385][ T5931] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[  226.618095][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  226.626297][ T5931] usb 5-1: Product: syz
[  226.636187][ T5931] usb 5-1: config 0 descriptor??
[  228.390014][ T5925] usb 5-1: USB disconnect, device number 7
[  229.764288][ T7067] tmpfs: Bad value for 'mpol'
[  230.688718][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  230.779344][ T7081] netlink: 'syz.2.256': attribute type 12 has an invalid length.
[  231.017739][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.732771][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.777193][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  231.843271][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.891451][ T5925] usb 5-1: config 0 descriptor??
[  232.122764][ T5931] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  232.253252][ T7097] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  232.313131][ T5931] usb 3-1: Using ep0 maxpacket: 32
[  232.326296][ T5931] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  232.347595][ T5925] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0
[  232.362677][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.393375][ T5931] usb 3-1: config 0 descriptor??
[  232.416893][ T5925] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0
[  232.584385][ T7067] pim6reg1: entered promiscuous mode
[  232.604001][ T7067] pim6reg1: entered allmulticast mode
[  232.613003][ T5931] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  232.662484][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  232.694537][ T5931] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  232.734386][ T5931] usb 3-1: media controller created
[  232.855277][ T7101] syz.0.261 uses obsolete (PF_INET,SOCK_PACKET)
[  233.267142][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  233.515727][ T5931] az6027: usb out operation failed. (-71)
[  233.538133][ T5931] az6027: usb out operation failed. (-71)
[  233.547505][ T5931] stb0899_attach: Driver disabled by Kconfig
[  233.562731][ T5931] az6027: no front-end attached
[  233.562731][ T5931] 
[  233.583080][ T5931] az6027: usb out operation failed. (-71)
[  233.588999][ T5931] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  233.615523][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  233.651342][ T5931] dvb-usb: schedule remote query interval to 400 msecs.
[  233.672668][ T5931] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  234.035750][ T5931] usb 3-1: USB disconnect, device number 6
[  234.045834][ T5847] usb 5-1: USB disconnect, device number 8
[  234.294379][ T5931] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  239.155005][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'.
[  242.030394][ T7163] [U] 
[  242.033259][ T7163] [U] K{�
[  242.036419][ T7163] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  242.043591][ T7163] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  242.059283][ T7163] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  242.070061][ T7163] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  242.106192][ T7163] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  242.130816][ T7163] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  242.142035][ T7163] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  242.153790][ T7163] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  242.273000][ T7163] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`ߨ�8�S��S����-�+��׼���\a
�r(�$�F:_�\��d���Y��qhz�^)�/X!��V����טs2#��XI�Q7I�y�ԯFT����6F��b���ȕ5&��5���aR�	��|b��Z#!��b+e�R}%Ô�����m�+�~�q�"�@��;��R�q��$��l�X�0A"��_���
[  242.298925][ T7163] [U] ��h�@�{���
��gJM��
[  242.303627][ T7163] [U] ���Z$���ؤ4��V�
[  242.307852][ T7163] [U] u��'��q����M�BC
X`?��4֘<T%Dtx�F��fiA���
[  242.314648][ T7163] [U] �z�(���� �Y�L�'�ud�e|��c<q(r9��\e����H�7�����}�o�d�t��s����#���8pG7�Vb�I��
�;qǯu�����e�
[  242.326074][ T7163] [U] @ʀ�����B�(��-���5AZE^U�x<��}~FUσ��n{�F*�1�Ks��{O�&��iӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  242.340198][ T7163] [U] 22��Ʃ���x?0;3u�
[  242.345196][ T7163] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  242.370493][ T7163] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  242.379817][ T7163] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  242.388861][ T7163] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  242.395047][ T7163] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  242.407645][ T7163] [U] �ec�
[  242.410893][ T7163] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  242.849900][ T7163] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  243.390934][ T7180] comedi comedi0: dt2815: I/O port conflict (0x9,2)
[  245.912656][ T5847] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  247.220207][ T5847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  247.348554][ T5847] usb 4-1: config 1 has no interface number 0
[  247.408268][ T5847] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.446467][ T5847] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  247.470809][ T5847] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1
[  247.518122][ T5847] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  247.567730][ T5847] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  247.601702][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.653012][ T5847] usb 4-1: Product: syz
[  247.657371][ T5847] usb 4-1: Manufacturer: syz
[  247.662020][ T5847] usb 4-1: SerialNumber: syz
[  247.732468][ T5847] usb 4-1: can't set config #1, error -71
[  247.755370][ T5847] usb 4-1: USB disconnect, device number 6
[  249.004661][ T7222] [U] 
[  249.007713][ T7222] [U] K{�
[  249.011569][ T7222] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  249.018846][ T7222] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  249.035401][ T7222] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  249.046232][ T7222] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  249.083992][ T7222] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  249.108192][ T7222] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  249.119806][ T7222] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  249.131482][ T7222] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  249.154889][    C0] vkms_vblank_simulate: vblank timer overrun
[  249.203008][ T7222] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  249.221913][ T7222] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  249.270642][ T7222] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  249.279271][ T7222] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  249.293112][ T7222] [U] 22��Ʃ���x?0;3u�
[  249.297384][ T7222] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  249.323042][ T7222] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  249.332455][ T7222] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  249.341167][ T7222] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  249.347516][ T7222] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  249.359942][ T7222] [U] �ec�
[  249.363073][ T7222] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  249.406807][ T7224] netlink: 'syz.1.298': attribute type 2 has an invalid length.
[  249.590469][ T7225] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  251.072770][ T5940] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  251.263007][ T5940] usb 5-1: Using ep0 maxpacket: 8
[  251.287261][ T5940] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  251.298380][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  251.330499][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  251.353917][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  251.392721][ T5940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  251.453211][ T5940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  251.474476][ T7255] caif0: entered allmulticast mode
[  251.487917][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.790461][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.850878][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.157522][ T5940] usb 5-1: usb_control_msg returned -71
[  252.180576][ T5940] usbtmc 5-1:16.0: can't read capabilities
[  252.230060][ T5940] usb 5-1: USB disconnect, device number 9
[  254.785468][ T7282] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[  254.794191][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[  255.282810][ T7294] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  256.244028][ T7305] syzkaller1: entered promiscuous mode
[  256.261872][ T7305] syzkaller1: entered allmulticast mode
[  257.433508][ T5847] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  257.916251][ T5847] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  257.940162][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.975173][ T5847] usb 5-1: config 0 descriptor??
[  258.192858][   T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  258.240980][ T7334] netlink: 'syz.1.329': attribute type 12 has an invalid length.
[  258.390120][   T44] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  258.502054][ T5847] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  258.543315][   T44] usb 3-1: config 0 interface 0 has no altsetting 0
[  258.630444][   T44] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  258.808141][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.265875][   T44] usb 3-1: config 0 descriptor??
[  260.424207][   T44] cherry 0003:046A:0023.0003: item fetching failed at offset 1/3
[  260.433927][   T44] cherry 0003:046A:0023.0003: probe with driver cherry failed with error -22
[  260.498463][ T7327] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  260.725683][ T5847] [drm:udl_init] *ERROR* Selecting channel failed
[  260.781923][ T5847] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  260.814645][ T7343] tipc: New replicast peer: 255.255.255.255
[  260.821299][ T7343] tipc: Enabled bearer <udp:syz2>, priority 10
[  260.830679][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'.
[  260.839793][ T7343] tipc: Disabling bearer <udp:syz2>
[  260.877519][ T5847] [drm] Initialized udl on minor 2
[  260.899239][ T5847] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  260.935834][ T5847] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  260.957518][  T979] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  260.977844][ T5847] usb 5-1: USB disconnect, device number 10
[  261.002351][  T979] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  261.007110][ T5924] usb 3-1: USB disconnect, device number 7
[  261.092838][   T44] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  261.226097][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  262.195606][   T44] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  262.239082][   T44] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  262.271551][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.302689][   T44] usb 1-1: Product: syz
[  262.312971][   T44] usb 1-1: Manufacturer: syz
[  262.322001][   T44] usb 1-1: SerialNumber: syz
[  262.354422][ T7348] use of bytesused == 0 is deprecated and will be removed in the future,
[  262.375293][   T44] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  262.392939][ T7348] use the actual size instead.
[  262.685438][   T44] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  262.712366][   T44] usb 1-1: USB disconnect, device number 12
[  263.297104][ T7359] input: syz0 as /devices/virtual/input/input9
[  264.651020][ T7357] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  265.810726][ T7374] input: syz0 as /devices/virtual/input/input10
[  271.516264][ T7409] netlink: 76 bytes leftover after parsing attributes in process `syz.4.348'.
[  273.140691][ T7417] tipc: Started in network mode
[  273.145776][ T7417] tipc: Node identity ac14140f, cluster identity 4711
[  273.153015][ T7417] tipc: New replicast peer: 255.255.255.255
[  273.159782][ T7417] tipc: Enabled bearer <udp:syz2>, priority 10
[  273.168293][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'.
[  273.177463][ T7417] tipc: Disabling bearer <udp:syz2>
[  273.237962][ T7419] program syz.3.351 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  273.357165][ T7421] futex_wake_op: syz.1.352 tries to shift op by 36; fix this program
[  273.432687][   T44] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  273.685733][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'.
[  274.562970][   T44] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  274.595352][   T44] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  274.605719][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.614027][   T44] usb 3-1: Product: syz
[  274.619776][   T44] usb 3-1: Manufacturer: syz
[  274.633875][   T44] usb 3-1: SerialNumber: syz
[  274.653542][   T44] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  274.869842][   T44] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  274.897767][ T5924] IPVS: starting estimator thread 0...
[  274.904900][ T7434] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  274.987578][   T44] usb 3-1: USB disconnect, device number 8
[  275.002945][ T7438] IPVS: using max 25 ests per chain, 60000 per kthread
[  275.712729][ T5925] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  276.343797][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.374690][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.442828][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  276.593789][ T5925] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  276.999730][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.049970][ T5925] usb 5-1: config 0 descriptor??
[  278.694034][ T5925] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  278.768471][ T7455] warning: `syz.0.360' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  279.211536][    C1] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz.0.363)
[  279.804318][ T7469] netlink: 76 bytes leftover after parsing attributes in process `syz.2.364'.
[  280.333403][ T5847] usb 5-1: reset high-speed USB device number 11 using dummy_hcd
[  280.523428][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'.
[  280.533748][ T7475] netlink: 39 bytes leftover after parsing attributes in process `syz.1.366'.
[  282.077904][  T979] usb 5-1: USB disconnect, device number 11
[  285.589630][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.998110][ T5847] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  286.057733][ T7530] syzkaller1: entered promiscuous mode
[  286.065485][ T7530] syzkaller1: entered allmulticast mode
[  287.045266][ T5847] usb 4-1: Using ep0 maxpacket: 8
[  287.101894][ T5847] usb 4-1: config 5 has an invalid interface number: 129 but max is 1
[  287.126360][ T5847] usb 4-1: config 5 has an invalid interface number: 237 but max is 1
[  287.137553][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[  287.152132][ T5847] usb 4-1: config 5 has an invalid interface number: 217 but max is 1
[  287.161604][ T5847] usb 4-1: config 5 has 3 interfaces, different from the descriptor's value: 2
[  287.174908][ T5847] usb 4-1: config 5 has no interface number 0
[  287.181544][ T5847] usb 4-1: config 5 has no interface number 1
[  287.197622][ T5847] usb 4-1: config 5 has no interface number 2
[  287.208540][ T5847] usb 4-1: config 5 interface 129 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64
[  287.221342][ T5847] usb 4-1: config 5 interface 129 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  287.260087][  T979] libceph: connect (1)[c::]:6789 error -101
[  287.280130][  T979] libceph: mon0 (1)[c::]:6789 connect error
[  287.291454][ T5847] usb 4-1: too many endpoints for config 5 interface 237 altsetting 182: 101, using maximum allowed: 30
[  287.324183][ T7530] ceph: No mds server is up or the cluster is laggy
[  287.340961][ T5847] usb 4-1: config 5 interface 237 altsetting 182 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  287.406981][ T5847] usb 4-1: config 5 interface 237 altsetting 182 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  287.431110][ T5847] usb 4-1: config 5 interface 237 altsetting 182 has a duplicate endpoint with address 0x5, skipping
[  287.479960][ T5847] usb 4-1: config 5 interface 237 altsetting 182 has 3 endpoint descriptors, different from the interface descriptor's value: 101
[  287.512707][ T5847] usb 4-1: config 5 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  287.984657][ T5847] usb 4-1: config 5 interface 217 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[  288.104757][ T5847] usb 4-1: config 5 interface 129 has no altsetting 0
[  288.141054][ T5847] usb 4-1: config 5 interface 237 has no altsetting 0
[  288.226705][ T5847] usb 4-1: New USB device found, idVendor=1199, idProduct=0020, bcdDevice=3c.c1
[  288.252754][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.281005][ T5847] usb 4-1: Product: %
[  288.297924][ T5847] usb 4-1: Manufacturer: Б
[  288.317185][ T5847] usb 4-1: SerialNumber: Х
[  288.581771][ T5847] sierra 4-1:5.129: Sierra USB modem converter detected
[  289.645936][ T5847] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  289.664604][ T5847] sierra 4-1:5.237: Sierra USB modem converter detected
[  289.695073][ T5847] usb 4-1: Sierra USB modem converter now attached to ttyUSB1
[  289.709893][ T5847] sierra 4-1:5.217: Sierra USB modem converter detected
[  289.733466][ T5847] usb 4-1: Sierra USB modem converter now attached to ttyUSB2
[  289.800552][ T5847] usb 4-1: USB disconnect, device number 7
[  290.523161][ T7565] 9pnet_fd: Insufficient options for proto=fd
[  290.530463][ T7565] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[  290.666952][ T7565] 8021q: adding VLAN 0 to HW filter on device bond1
[  290.678605][ T7565] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[  290.686693][ T7565] netlink: 172 bytes leftover after parsing attributes in process `syz.2.386'.
[  290.686762][ T5847] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  290.715148][ T7563] bond1: (slave gretap1): making interface the new active one
[  290.727198][ T7563] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  290.765227][ T5847] sierra 4-1:5.129: device disconnected
[  290.804273][ T5847] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  290.812622][ T7573] [U] 
[  290.816137][ T7573] [U] K{�
[  290.819211][ T7573] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  290.826258][ T7573] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  290.841827][ T5847] sierra 4-1:5.237: device disconnected
[  290.842340][ T7573] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  290.858668][ T7573] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  290.894773][ T7573] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  290.919131][ T7573] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  290.930367][ T7573] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  290.942343][ T7573] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  290.965651][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.003440][ T5847] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  291.026171][ T5847] sierra 4-1:5.217: device disconnected
[  291.038173][ T7573] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  291.057144][ T7573] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  291.104348][ T7573] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  291.112964][ T7573] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  291.126576][ T7573] [U] 22��Ʃ���x?0;3u�
[  291.130961][ T7573] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  291.156194][ T7573] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  291.165516][ T7573] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  291.174117][ T7573] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  291.180331][ T7573] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  291.192776][ T7573] [U] �ec�
[  291.195946][ T7573] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  291.264245][ T5925] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  291.385528][ T7576] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  291.400907][ T7576] [U] Ts��H�Ͽ@��ć�fϜ{x�!B�����JK����,��B
[  291.407808][ T7576] [U] K{�
[  291.410884][ T7576] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  291.417868][ T7576] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  291.433535][ T7576] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  291.444086][ T7576] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  291.479920][ T7576] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  291.503493][ T7576] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  291.514733][ T7576] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  291.526404][ T7576] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  291.550164][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.628862][ T7576] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  291.647863][ T7576] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  291.682899][ T5925] usb 2-1: Using ep0 maxpacket: 32
[  291.695139][ T7576] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  291.695168][ T7576] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  291.695182][ T7576] [U] 22��Ʃ���x?0;3u�
[  291.695205][ T7576] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  291.695231][ T7576] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  291.695248][ T7576] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  291.763333][ T5925] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[  291.770832][ T7576] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  291.770857][ T7576] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  291.770870][ T7576] [U] �ec�
[  291.770884][ T7576] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  291.819701][ T7585] virtiofs: Unknown parameter 'always'
[  291.975363][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.394'.
[  291.985934][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.394'.
[  292.018692][ T7576] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  292.192724][ T5931] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  292.295583][ T5925] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  292.331633][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.358151][ T5925] usb 2-1: Product: syz
[  292.374194][ T5925] usb 2-1: Manufacturer: syz
[  292.378896][ T5925] usb 2-1: SerialNumber: syz
[  292.412711][ T5931] usb 1-1: Using ep0 maxpacket: 8
[  292.420771][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short
[  292.471030][ T5931] usb 1-1: config 5 has an invalid descriptor of length 179, skipping remainder of the config
[  292.475227][ T5925] usb 2-1: config 0 descriptor??
[  292.507216][ T7567] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  292.514817][ T5931] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  292.539090][ T5931] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  292.541477][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  292.548936][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.602921][ T5931] usb 1-1: Product: syz
[  292.607687][ T5931] usb 1-1: Manufacturer: syz
[  292.618210][ T5931] usb 1-1: SerialNumber: syz
[  292.633077][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  293.133530][ T5847] usb 4-1: Using ep0 maxpacket: 8
[  293.141349][ T5847] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  293.167904][ T5847] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  293.213133][ T5847] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  293.254348][ T5925] usb 2-1: USB disconnect, device number 5
[  293.265819][ T5847] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.307190][ T5847] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.338614][ T5847] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  293.378494][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.406943][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  293.481614][ T5905] usb 1-1: USB disconnect, device number 13
[  294.180128][ T5847] usb 4-1: GET_CAPABILITIES returned 0
[  294.214869][ T7606] ubi: mtd0 is already attached to ubi31
[  294.222820][ T5847] usbtmc 4-1:16.0: can't read capabilities
[  295.589004][ T5847] usb 4-1: USB disconnect, device number 8
[  295.984889][ T7619] syz_tun: entered allmulticast mode
[  296.026885][ T7615] syz_tun: left allmulticast mode
[  296.120508][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  297.819038][ T7640] openvswitch: netlink: IPv4 tun info is not correct
[  297.829156][ T7640] process 'syz.2.405' launched '/dev/fd/6' with NULL argv: empty string added
[  298.803035][ T5847] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  298.884464][ T7651] fuse: Unknown parameter 'gzoup_i0|vO'
[  298.994987][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.059390][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.185009][ T5847] usb 1-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00
[  299.253154][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.475231][ T5847] usb 1-1: config 0 descriptor??
[  300.714789][ T5847] hid (null): unknown global tag 0xd
[  300.738266][ T5847] wacom 0003:056A:00F4.0005: unknown global tag 0xd
[  300.766337][ T5847] wacom 0003:056A:00F4.0005: item 0 0 1 13 parsing failed
[  300.793864][ T5847] wacom 0003:056A:00F4.0005: parse failed
[  300.800091][ T5847] wacom 0003:056A:00F4.0005: probe with driver wacom failed with error -22
[  300.940253][ T5925] usb 1-1: USB disconnect, device number 14
[  301.434685][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  301.444083][ T5848] Bluetooth: hci5: command 0x1003 tx timeout
[  302.383064][ T5982] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  302.763579][ T5982] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  302.811418][ T5982] usb 4-1: config 0 interface 0 has no altsetting 0
[  302.841332][ T5982] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  303.652915][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.960037][ T5982] usb 4-1: config 0 descriptor??
[  306.525320][ T5982] usb 4-1: can't set config #0, error -71
[  306.554711][ T5982] usb 4-1: USB disconnect, device number 9
[  310.827384][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.424'.
[  315.167301][ T7725] [U] 
[  315.170175][ T7725] [U] K{�
[  315.173234][ T7725] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  315.180214][ T7725] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  315.196138][ T7725] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  315.206689][ T7725] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  315.242714][ T7725] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  315.266270][ T7725] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  315.277499][ T7725] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  315.289265][ T7725] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  315.354489][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  315.354510][   T30] audit: type=1326 audit(1754086812.651:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  315.384015][ T7725] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`ߨ�8�S��S����-�+��׼���\a
�r(�$�F:_�\��d���Y��qhz�^)�/X!��V����טs2#��XI�Q7I�y�ԯFT����6F��b���ȕ5&��5���aR�	��|b��Z#!��b+e�R}%Ô�����m�+�~�q�"�@��;��R�q��$��l�X�0A"��_���
[  315.409386][ T7725] [U] ��h�@�{���
��gJM��
[  315.413858][ T7725] [U] ���Z$���ؤ4��V�
[  315.418180][ T7725] [U] u��'��q����M�BC
X`?��4֘<T%Dtx�F��fiA���
[  315.424904][ T7725] [U] �z�(���� �Y�L�'�ud�e|��c<q(r9��\e����H�7�����}�o�d�t��s����#���8pG7�Vb�I��
�;qǯu�����e�
[  315.436508][ T7725] [U] @ʀ�����B�(��-���5AZE^U�x<��}~FUσ��n{�F*�1�Ks��{O�&��iӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  315.451312][ T7725] [U] 22��Ʃ���x?0;3u�
[  315.455533][ T7725] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  315.480599][ T7725] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  315.490128][ T7725] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  315.498963][ T7725] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  315.505185][ T7725] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  315.517729][ T7725] [U] �ec�
[  315.520968][ T7725] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  315.610362][   T30] audit: type=1326 audit(1754086812.651:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  316.152871][   T30] audit: type=1326 audit(1754086812.831:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  316.174686][   T30] audit: type=1326 audit(1754086812.861:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7733 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64639c1425 code=0x7ffc0000
[  316.232902][   T30] audit: type=1326 audit(1754086812.861:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  316.379790][ T7725] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  316.410573][   T30] audit: type=1326 audit(1754086812.881:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  316.432451][   T30] audit: type=1326 audit(1754086813.451:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7733 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  316.457582][   T30] audit: type=1326 audit(1754086813.551:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  316.510495][ T7742] netlink: 'syz.0.432': attribute type 21 has an invalid length.
[  316.519520][   T30] audit: type=1326 audit(1754086813.551:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  316.817815][ T7745] affs: No valid root block on device nullb0
[  317.448642][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'.
[  317.453497][   T30] audit: type=1326 audit(1754086813.551:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7729 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646398eb69 code=0x7ffc0000
[  317.466377][ T7747] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  317.532995][ T7747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.547848][ T7750] FAULT_INJECTION: forcing a failure.
[  317.547848][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.655930][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.0.433 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  317.655962][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  317.655987][ T7750] Call Trace:
[  317.655996][ T7750]  <TASK>
[  317.656006][ T7750]  dump_stack_lvl+0x189/0x250
[  317.656039][ T7750]  ? __pfx____ratelimit+0x10/0x10
[  317.656064][ T7750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.656089][ T7750]  ? __pfx__printk+0x10/0x10
[  317.656132][ T7750]  should_fail_ex+0x414/0x560
[  317.656162][ T7750]  _copy_to_user+0x31/0xb0
[  317.656197][ T7750]  simple_read_from_buffer+0xe1/0x170
[  317.656226][ T7750]  proc_fail_nth_read+0x1df/0x250
[  317.656258][ T7750]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  317.656289][ T7750]  ? rw_verify_area+0x258/0x650
[  317.656340][ T7750]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  317.656369][ T7750]  vfs_read+0x200/0x980
[  317.656410][ T7750]  ? __pfx___mutex_lock+0x10/0x10
[  317.656437][ T7750]  ? __pfx_vfs_read+0x10/0x10
[  317.656473][ T7750]  ? __fget_files+0x2a/0x420
[  317.656503][ T7750]  ? __fget_files+0x3a0/0x420
[  317.656527][ T7750]  ? __fget_files+0x2a/0x420
[  317.656562][ T7750]  ksys_read+0x145/0x250
[  317.656586][ T7750]  ? __pfx_ksys_read+0x10/0x10
[  317.656613][ T7750]  ? do_syscall_64+0xbe/0x3b0
[  317.656642][ T7750]  do_syscall_64+0xfa/0x3b0
[  317.656665][ T7750]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.656688][ T7750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.656710][ T7750]  ? clear_bhb_loop+0x60/0xb0
[  317.656737][ T7750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.656759][ T7750] RIP: 0033:0x7efc9d78d57c
[  317.656778][ T7750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  317.656797][ T7750] RSP: 002b:00007efc9e549030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  317.656820][ T7750] RAX: ffffffffffffffda RBX: 00007efc9d9b5fa0 RCX: 00007efc9d78d57c
[  317.656836][ T7750] RDX: 000000000000000f RSI: 00007efc9e5490a0 RDI: 0000000000000005
[  317.656849][ T7750] RBP: 00007efc9e549090 R08: 0000000000000000 R09: 0000000000000000
[  317.656862][ T7750] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  317.656876][ T7750] R13: 0000000000000000 R14: 00007efc9d9b5fa0 R15: 00007ffcef1360d8
[  317.656910][ T7750]  </TASK>
[  318.717942][ T7762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.437'.
[  318.936320][ T7762] netlink: 3 bytes leftover after parsing attributes in process `syz.2.437'.
[  320.742014][ T7760] tipc: New replicast peer: 255.255.255.255
[  320.750235][ T7760] tipc: Enabled bearer <udp:syz2>, priority 10
[  320.761910][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'.
[  320.771039][ T7760] tipc: Disabling bearer <udp:syz2>
[  321.159413][   T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  321.482467][   T24] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  321.700132][   T24] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  321.710536][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.719699][   T24] usb 2-1: Product: syz
[  321.732667][   T24] usb 2-1: Manufacturer: syz
[  321.738293][   T24] usb 2-1: SerialNumber: syz
[  323.772927][   T24] usb 2-1: can't set config #2, error -71
[  323.820084][   T24] usb 2-1: USB disconnect, device number 6
[  325.255099][ T7814] lo speed is unknown, defaulting to 1000
[  325.261128][ T7814] lo speed is unknown, defaulting to 1000
[  325.270300][ T7814] lo speed is unknown, defaulting to 1000
[  325.281196][ T7814] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  325.295733][ T7814] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  325.326707][ T7814] lo speed is unknown, defaulting to 1000
[  325.335787][ T7814] lo speed is unknown, defaulting to 1000
[  325.343167][ T7814] lo speed is unknown, defaulting to 1000
[  325.350596][ T7814] lo speed is unknown, defaulting to 1000
[  325.357828][ T7814] lo speed is unknown, defaulting to 1000
[  329.706953][ T7891] tipc: New replicast peer: 255.255.255.255
[  329.741527][ T7891] tipc: Enabled bearer <udp:syz2>, priority 10
[  329.768910][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'.
[  329.778700][ T7892] tipc: Disabling bearer <udp:syz2>
[  330.102846][ T5925] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  330.387473][ T7902] [U] 
[  330.390401][ T7902] [U] K{�
[  330.434366][ T7903] syzkaller1: entered promiscuous mode
[  330.440012][ T7903] syzkaller1: entered allmulticast mode
[  330.488820][ T5925] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  330.618120][ T7902] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  330.713733][ T5925] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  330.748482][ T7902] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  330.748796][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.824740][ T7902] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  330.952803][ T5925] usb 3-1: Product: syz
[  330.969807][ T5925] usb 3-1: Manufacturer: syz
[  330.979931][ T5925] usb 3-1: SerialNumber: syz
[  330.998434][ T7902] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  331.065410][ T7902] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  331.110132][ T5925] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  331.227489][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[  331.252666][ T7902] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  331.286962][ T7908] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  331.298826][ T7908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.329017][ T7902] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  331.360637][ T7902] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  331.422742][ T7902] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`�
[  331.688023][ T7914] delete_channel: no stack
[  331.965105][ T7916] netlink: 'syz.0.468': attribute type 13 has an invalid length.
[  331.983953][ T7916] macvtap0: entered promiscuous mode
[  331.992217][ T7916] macvtap0: refused to change device tx_queue_len
[  332.292813][ T5847] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  332.422241][ T5925] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  332.546718][ T5925] usb 3-1: USB disconnect, device number 9
[  332.642705][ T5847] usb 1-1: Using ep0 maxpacket: 8
[  333.083971][ T5847] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  333.161826][ T5847] usb 1-1: config 0 has no interface number 0
[  333.194434][ T5847] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[  333.398051][ T5847] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33538, setting to 1024
[  333.467759][ T5847] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  333.480213][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.530712][ T5847] usb 1-1: config 0 descriptor??
[  333.792407][ T5847] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  334.901134][ T7913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.358554][ T7944] x_tables: duplicate underflow at hook 1
[  335.379718][   T24] usb 1-1: USB disconnect, device number 15
[  336.902396][ T7960] tipc: Started in network mode
[  336.909899][ T7960] tipc: Node identity ac14140f, cluster identity 4711
[  336.917867][ T7960] tipc: New replicast peer: 255.255.255.255
[  336.924394][ T7960] tipc: Enabled bearer <udp:syz2>, priority 10
[  337.113913][ T7975] block device autoloading is deprecated and will be removed.
[  337.564497][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'.
[  337.573682][ T7960] tipc: Disabling bearer <udp:syz2>
[  338.135864][ T7977] tipc: New replicast peer: 255.255.255.255
[  338.144847][ T7977] tipc: Enabled bearer <udp:syz2>, priority 10
[  338.242587][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'.
[  338.269706][ T7977] tipc: Disabling bearer <udp:syz2>
[  338.283171][ T5982] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  339.172604][   T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  339.641170][   T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  340.295942][ T7994] input: syz0 as /devices/virtual/input/input14
[  342.134637][ T5847] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  342.832195][ T5847] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  342.913900][ T5847] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  342.990006][ T5847] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  343.000323][   T24] usb 1-1: string descriptor 0 read error: -71
[  343.036449][   T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  343.068160][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.077685][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.306936][   T24] usb 1-1: can't set config #2, error -71
[  343.329419][   T24] usb 1-1: USB disconnect, device number 16
[  344.170624][ T5847] usb 4-1: usb_control_msg returned -32
[  344.192904][ T5847] usbtmc 4-1:16.0: can't read capabilities
[  344.783731][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.046887][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.461304][ T8032] input: syz0 as /devices/virtual/input/input15
[  347.248630][ T8045] virtiofs: Unknown parameter 'always'
[  347.693842][   T44] usb 4-1: USB disconnect, device number 11
[  347.935101][ T5982] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  348.123284][ T5982] usb 5-1: Using ep0 maxpacket: 8
[  348.161285][ T5982] usb 5-1: unable to get BOS descriptor or descriptor too short
[  348.208220][ T5982] usb 5-1: config 5 has an invalid descriptor of length 179, skipping remainder of the config
[  348.231388][ T8058] tipc: New replicast peer: 255.255.255.255
[  348.245815][ T5982] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  348.258037][ T8058] tipc: Enabled bearer <udp:syz2>, priority 10
[  348.278977][ T5982] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  348.302981][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.317839][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'.
[  348.332594][ T5982] usb 5-1: Product: syz
[  348.336880][ T5982] usb 5-1: Manufacturer: syz
[  348.341529][ T5982] usb 5-1: SerialNumber: syz
[  348.344254][ T8058] tipc: Disabling bearer <udp:syz2>
[  348.643876][   T44] usb 5-1: USB disconnect, device number 12
[  348.842737][ T5847] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  349.018951][ T5847] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  349.061671][ T5847] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  349.092867][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.101617][ T5847] usb 2-1: Product: syz
[  349.112297][ T5847] usb 2-1: Manufacturer: syz
[  349.122035][ T5847] usb 2-1: SerialNumber: syz
[  349.251391][ T5847] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  350.213639][ T5905] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  350.374957][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short
[  350.389160][ T5905] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  350.503797][ T5905] usb 5-1: config 1 has no interface number 1
[  350.541499][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  350.751710][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.404245][ T5847] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  351.442674][ T5905] usb 5-1: Product: syz
[  351.460283][ T5905] usb 5-1: Manufacturer: syz
[  351.482668][ T5905] usb 5-1: SerialNumber: syz
[  351.514615][ T5847] usb 2-1: USB disconnect, device number 7
[  352.013361][   T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  352.737634][   T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  352.882564][   T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  352.944995][ T5905] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  352.956500][ T5905] usb 5-1: 2:1 : unknown format tag 0x1000 is detected.  processed as MPEG.
[  352.967038][   T44] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  352.977535][ T5905] usb 5-1: found format II with max.bitrate = 26774, frame size=2
[  353.349155][ T5905] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  353.476866][ T5905] usb 5-1: 2:1 : unknown format tag 0x1000 is detected.  processed as MPEG.
[  353.598756][ T5905] usb 5-1: found format II with max.bitrate = 26774, frame size=2
[  353.771965][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  353.780093][   T44] usb 3-1: SerialNumber: syz
[  353.905932][ T8095] [U] 
[  353.908794][ T8095] [U] K{�
[  353.912268][ T8095] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  353.919275][ T8095] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  353.935158][ T8095] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  353.945735][ T8095] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  353.982030][ T8095] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  354.006095][ T8095] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  354.017281][ T8095] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  354.029239][ T8095] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  354.091061][   T44] usb 3-1: can't set config #1, error -71
[  354.106081][ T8095] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  354.125028][ T8095] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  354.173356][ T8095] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  354.182187][ T8095] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  354.195935][ T8095] [U] 22��Ʃ���x?0;3u�
[  354.200122][ T8095] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  354.225153][ T8095] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  354.234628][ T8095] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  354.243316][ T8095] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  354.249503][ T8095] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  354.261935][ T8095] [U] �ec�
[  354.265078][ T8095] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  354.286689][   T44] usb 3-1: USB disconnect, device number 10
[  354.377902][ T8095] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  354.636481][ T5905] usb 5-1: USB disconnect, device number 13
[  355.626866][ T8100] virtiofs: Unknown parameter 'always'
[  356.479320][ T6521] udevd[6521]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.532990][ T5940] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  356.733079][ T5940] usb 1-1: Using ep0 maxpacket: 8
[  356.752140][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short
[  356.786121][ T5940] usb 1-1: config 5 has an invalid descriptor of length 179, skipping remainder of the config
[  356.832569][ T5940] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  356.857599][ T5940] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  356.912731][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.208745][ T5940] usb 1-1: Product: syz
[  357.208786][ T5940] usb 1-1: Manufacturer: syz
[  357.208832][ T5940] usb 1-1: SerialNumber: syz
[  357.218035][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'.
[  357.333063][ T5925] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  357.483262][ T5905] usb 1-1: USB disconnect, device number 17
[  357.547487][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  357.754283][ T5925] usb 4-1: Using ep0 maxpacket: 32
[  358.117378][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short
[  358.345310][   T24] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  358.550722][ T5925] usb 4-1: config index 0 descriptor too short (expected 34347, got 43)
[  358.603414][ T5925] usb 4-1: config 31 has too many interfaces: 196, using maximum allowed: 32
[  358.665632][ T5925] usb 4-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config
[  358.739605][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  358.742605][ T5925] usb 4-1: config 31 has 1 interface, different from the descriptor's value: 196
[  358.746479][   T24] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  358.764866][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.812635][ T5925] usb 4-1: config 31 has no interface number 0
[  358.819042][ T5925] usb 4-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83
[  358.834807][ T5925] usb 4-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0
[  358.857493][ T5925] usb 4-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 0
[  358.872228][ T5925] usb 4-1: config 31 interface 81 has no altsetting 0
[  358.918339][   T24] usb 5-1: config 0 descriptor??
[  359.159210][ T5925] usb 4-1: string descriptor 0 read error: -22
[  359.166620][ T5925] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac
[  359.252215][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.765385][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'.
[  359.801605][ T5925] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:31.81/input/input21
[  359.950495][   T24] usb 5-1: can't set config #0, error -71
[  360.162940][   T24] usb 5-1: USB disconnect, device number 14
[  360.591478][ T8152] [U] 
[  360.594342][ T8152] [U] K{�
[  360.597407][ T8152] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  360.604572][ T8152] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  360.620506][ T8152] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  360.631238][ T8152] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  360.666926][ T8152] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  360.691210][ T8152] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  360.702350][ T8152] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  360.714189][ T8152] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  360.737576][    C0] vkms_vblank_simulate: vblank timer overrun
[  360.799684][ T8152] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`ߨ�8�S��S����-�+��׼���\a
�r(�$�F:_�\��d���Y��qhz�^)�/X!��V����טs2#��XI�Q7I�y�ԯFT����6F��b���ȕ5&��5���aR�	��|b��Z#!��b+e�R}%Ô�����m�+�~�q�"�@��;��R�q��$��l�X�0A"��_���
[  360.825498][ T8152] [U] ��h�@�{���
��gJM��
[  360.829939][ T8152] [U] ���Z$���ؤ4��V�
[  360.834117][ T8152] [U] u��'��q����M�BC
X`?��4֘<T%Dtx�F��fiA���
[  360.840742][ T8152] [U] �z�(���� �Y�L�'�ud�e|��c<q(r9��\e����H�7�����}�o�d�t��s����#���8pG7�Vb�I��
�;qǯu�����e�
[  360.851976][ T8152] [U] @ʀ�����B�(��-���5AZE^U�x<��}~FUσ��n{�F*�1�Ks��{O�&��iӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  360.865635][ T8152] [U] 22��Ʃ���x?0;3u�
[  360.869903][ T8152] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  360.895197][ T8152] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  360.904503][ T8152] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  360.913111][ T8152] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  360.919287][ T8152] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  360.931800][ T8152] [U] �ec�
[  360.934969][ T8152] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  360.947552][    C0] vkms_vblank_simulate: vblank timer overrun
[  361.771407][ T8160] futex_wake_op: syz.0.534 tries to shift op by 36; fix this program
[  361.900850][ T8121] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  361.997897][ T8157] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  362.120365][ T5847] usb 4-1: USB disconnect, device number 12
[  365.411075][ T8184] program syz.1.540 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  365.763305][ T5847] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  366.235047][ T5847] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  366.306193][ T5847] usb 1-1: config 0 interface 0 has no altsetting 0
[  366.313294][ T5847] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  366.322657][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.353913][ T5847] usb 1-1: config 0 descriptor??
[  367.292053][ T8210] netlink: 'syz.3.548': attribute type 10 has an invalid length.
[  367.300418][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.308105][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.322059][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.329288][ T8210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.336986][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.345052][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'.
[  367.345861][ T8210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.367059][ T8210] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  367.859494][ T8212] bridge_slave_1: left allmulticast mode
[  367.891219][ T8212] bridge_slave_1: left promiscuous mode
[  367.927099][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.049957][ T8212] bridge_slave_0: left allmulticast mode
[  368.057278][ T8212] bridge_slave_0: left promiscuous mode
[  368.092339][ T5847] usbhid 1-1:0.0: can't add hid device: -71
[  368.101049][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.117400][ T5847] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  368.136981][ T5847] usb 1-1: USB disconnect, device number 18
[  368.190305][ T8212] bond0: (slave bridge0): Releasing backup interface
[  368.468495][ T5924] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  368.645355][ T8226] netlink: 76 bytes leftover after parsing attributes in process `syz.3.552'.
[  368.760350][ T5924] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  368.760425][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.760449][ T5924] usb 5-1: Product: syz
[  368.760467][ T5924] usb 5-1: Manufacturer: syz
[  368.760485][ T5924] usb 5-1: SerialNumber: syz
[  368.870977][ T5924] usb 5-1: config 0 descriptor??
[  369.729188][ T5924] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  369.741411][ T5924] usb 5-1: USB disconnect, device number 15
[  370.787296][ T8242] netlink: 56 bytes leftover after parsing attributes in process `syz.4.558'.
[  370.941326][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'.
[  372.683361][ T7717] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  372.864879][ T7717] usb 4-1: config 3 has an invalid interface number: 216 but max is 0
[  372.944142][ T7717] usb 4-1: config 3 has no interface number 0
[  373.188974][ T8268] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  373.630647][ T7717] usb 4-1: config 3 interface 216 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  373.643503][ T7717] usb 4-1: config 3 interface 216 has no altsetting 0
[  373.676056][ T7717] usb 4-1: New USB device found, idVendor=2c24, idProduct=ab13, bcdDevice=ac.4a
[  373.776565][ T7717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.806810][ T7717] usb 4-1: Product: syz
[  373.807314][ T8270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'.
[  373.932751][ T7717] usb 4-1: Manufacturer: syz
[  373.939486][ T8270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'.
[  373.988528][ T7717] usb 4-1: SerialNumber: syz
[  374.043193][ T8259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  374.238891][ T8275] evm: overlay not supported
[  374.283496][ T7717] usb 4-1: bad CDC descriptors
[  374.344446][ T7717] usb 4-1: USB disconnect, device number 13
[  374.601549][ T8281] netlink: 76 bytes leftover after parsing attributes in process `syz.0.566'.
[  375.140820][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.567'.
[  375.210793][ T8284] ubi: mtd0 is already attached to ubi31
[  376.393307][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  376.416087][ T8291] fuse: Bad value for 'fd'
[  377.584967][ T8305] overlayfs: overlapping lowerdir path
[  377.782894][ T5847] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  378.027172][ T8301] gretap0: entered promiscuous mode
[  378.173544][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short
[  378.191967][ T8301] vlan2: entered promiscuous mode
[  378.194517][ T5847] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  378.254860][ T5847] usb 4-1: config 1 has no interface number 1
[  378.314300][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  378.494834][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.816893][ T5847] usb 4-1: Manufacturer: Е
[  378.830023][ T5847] usb 4-1: SerialNumber: 뀱덻쉽샸쒶㱣澭瘥굃㷌抐ᤠ풅ꠈⴢ叒얀⴯ợ쀝箸놰ⳝ괞⡑䞛봝០╠픎爛팇溘䀡쇝푢ᴍࠟﳼ㸏㮓뭓䋪姶쉔늛≍樳⠦ꦦ눲⮥丬噐ힲ䦩ꐺ珁쩑츳香㋫᧫觮ㄩ鈜ឩ돓盱㤀ဋ냉瘠寓涒䧘ၙ➗稡⪖獟颊䅻삻搇㎙糽鱝᧋砶⑈즡讣綕旗텲븬ꕒ臆
[  378.831089][ T8314] dvmrp0: entered allmulticast mode
[  378.862612][    C1] vkms_vblank_simulate: vblank timer overrun
[  379.071144][ T8313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.577'.
[  381.876485][ T5847] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  381.950168][ T5847] usb 4-1: 2:1 : unknown format tag 0x1000 is detected.  processed as MPEG.
[  381.993114][ T5847] usb 4-1: found format II with max.bitrate = 26774, frame size=2
[  382.034203][ T8335] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.581'.
[  382.257839][ T5847] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  382.415862][ T5847] usb 4-1: 2:1 : unknown format tag 0x1000 is detected.  processed as MPEG.
[  382.855480][ T5847] usb 4-1: found format II with max.bitrate = 26774, frame size=2
[  383.035747][ T8343] delete_channel: no stack
[  383.523146][ T5847] usb 4-1: USB disconnect, device number 14
[  383.652906][ T5905] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  383.842774][ T5905] usb 3-1: Using ep0 maxpacket: 8
[  383.917047][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  383.929038][ T8353] netlink: 'syz.0.587': attribute type 2 has an invalid length.
[  384.134737][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  384.456057][ T5905] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  384.532946][ T5905] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  384.557611][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.639678][ T8359] dummy0: entered promiscuous mode
[  384.652925][ T8359] vlan2: entered promiscuous mode
[  384.782598][ T5905] usb 3-1: Product: syz
[  384.787779][ T5905] usb 3-1: Manufacturer: syz
[  384.802636][ T5905] usb 3-1: SerialNumber: syz
[  385.273985][ T8366] delete_channel: no stack
[  385.948118][ T5905] usb 3-1: can't set config #1, error -71
[  386.000306][ T5905] usb 3-1: USB disconnect, device number 11
[  388.429126][ T8392] [U] 
[  388.432183][ T8392] [U] K{�
[  388.435259][ T8392] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  388.442444][ T8392] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  388.458390][ T8392] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  388.469223][ T8392] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  388.506425][ T8392] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  388.530299][ T8392] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  388.542063][ T8392] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  388.554025][ T8392] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  388.577592][ T5905] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  388.676678][ T8392] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  388.696355][ T8392] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  388.744529][ T8392] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  388.753155][ T8392] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  388.767161][ T8392] [U] 22��Ʃ���x?0;3u�
[  388.771356][ T8392] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  388.797020][ T8392] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  388.806758][ T8392] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  388.815477][ T8392] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  388.821828][ T8392] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  388.834723][ T8392] [U] �ec�
[  388.837948][ T8392] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  388.874973][ T5905] usb 5-1: Using ep0 maxpacket: 32
[  389.515176][ T5905] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  389.691954][ T5905] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  389.716700][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0
[  389.745763][ T5905] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e
[  389.777157][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.789319][ T5905] usb 5-1: Product: syz
[  389.848652][ T5905] usb 5-1: Manufacturer: syz
[  389.862609][ T5905] usb 5-1: SerialNumber: syz
[  389.875510][ T5905] usb 5-1: config 0 descriptor??
[  389.878970][ T8401] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  390.129935][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.200974][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.506902][ T5905] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  391.669326][ T5905] usb 5-1: USB disconnect, device number 16
[  391.776146][ T8430] netlink: 'syz.0.608': attribute type 20 has an invalid length.
[  391.818609][ T8430] dvmrp17: entered allmulticast mode
[  393.503423][ T8430] netlink: 'syz.0.608': attribute type 4 has an invalid length.
[  393.540033][ T8430] netlink: 'syz.0.608': attribute type 4 has an invalid length.
[  393.753123][ T8452] [U] 
[  393.755991][ T8452] [U] K{�
[  393.759064][ T8452] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  393.766248][ T8452] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  393.782033][ T8452] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  393.792514][ T8452] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  393.829096][ T8452] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  393.852860][ T8452] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  393.864097][ T8452] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  393.875876][ T8452] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  393.979273][ T8452] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  393.998423][ T8452] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  394.046068][ T8452] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  394.054710][ T8452] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  394.068988][ T8452] [U] 22��Ʃ���x?0;3u�
[  394.073431][ T8452] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  394.099107][ T8452] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  394.108821][ T8452] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  394.117631][ T8452] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  394.124154][ T8452] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  394.136613][ T8452] [U] �ec�
[  394.139885][ T8452] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  395.402968][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'.
[  395.441268][ T8462] ubi: mtd0 is already attached to ubi31
[  395.606184][ T8466] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  395.621464][ T8466] [U] Ts��H�Ͽ@��ć�fϜ{x�!B�����JK����,��B
[  395.628028][ T8466] [U] K{�
[  395.631087][ T8466] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  395.638069][ T8466] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  395.654070][ T8466] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  395.664719][ T8466] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  395.700566][ T8466] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  395.724384][ T8466] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  395.735608][ T8466] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  395.747350][ T8466] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  395.824987][ T8466] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  395.844673][ T8466] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  395.893168][ T8466] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  395.901790][ T8466] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  395.915523][ T8466] [U] 22��Ʃ���x?0;3u�
[  395.919711][ T8466] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  395.945397][ T8466] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  395.954902][ T8466] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  395.963695][ T8466] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  395.969879][ T8466] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  395.982376][ T8466] [U] �ec�
[  395.985520][ T8466] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  396.761709][ T8470] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  400.942228][ T8512] [U] 
[  400.942247][ T8512] [U] K{�
[  400.942260][ T8512] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  400.942289][ T8512] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  400.942315][ T8512] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  400.942355][ T8512] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  400.942442][ T8512] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  400.942478][ T8512] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  400.942496][ T8512] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  400.942527][ T8512] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  401.117683][ T8512] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  401.117753][ T8512] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  401.117806][ T8512] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  401.117828][ T8512] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  401.117846][ T8512] [U] 22��Ʃ���x?0;3u�
[  401.117873][ T8512] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  401.117905][ T8512] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  401.117923][ T8512] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  401.117939][ T8512] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  401.117957][ T8512] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  401.117974][ T8512] [U] �ec�
[  401.117990][ T8512] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  401.339669][    C1] vkms_vblank_simulate: vblank timer overrun
[  401.436397][    C1] vkms_vblank_simulate: vblank timer overrun
[  401.484226][    C1] vkms_vblank_simulate: vblank timer overrun
[  401.539324][    C1] vkms_vblank_simulate: vblank timer overrun
[  402.644150][ T8512] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  404.134135][ T8525] delete_channel: no stack
[  404.708705][ T8543] netlink: 'syz.3.642': attribute type 10 has an invalid length.
[  404.717442][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'.
[  405.498685][ T8534] lo speed is unknown, defaulting to 1000
[  406.222107][ T8563] [U] 
[  406.224977][ T8563] [U] K{�
[  406.228146][ T8563] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  406.235234][ T8563] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  406.250986][ T8563] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  406.261441][ T8563] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  406.297303][ T8563] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  406.321049][ T8563] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  406.332309][ T8563] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  406.344086][ T8563] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  406.533200][ T8563] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  406.552232][ T8563] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  406.599578][ T8563] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  406.608218][ T8563] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  406.621985][ T8563] [U] 22��Ʃ���x?0;3u�
[  406.626168][ T8563] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  406.651192][ T8563] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  406.660575][ T8563] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  406.669179][ T8563] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  406.675436][ T8563] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  406.687862][ T8563] [U] �ec�
[  406.691169][ T8563] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  406.703559][    C1] vkms_vblank_simulate: vblank timer overrun
[  407.709965][ T8572] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  410.181690][ T8622] virtiofs: Unknown parameter 'always'
[  410.432844][ T7603] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  410.603097][ T7603] usb 1-1: Using ep0 maxpacket: 8
[  410.822645][   T44] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  410.873724][ T7603] usb 1-1: unable to get BOS descriptor or descriptor too short
[  411.012189][   T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.024350][ T7603] usb 1-1: config 5 has an invalid descriptor of length 179, skipping remainder of the config
[  411.035396][   T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  411.048621][ T7603] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  411.061517][   T44] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  411.064951][ T8636] tipc: New replicast peer: 255.255.255.255
[  411.071671][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.088215][ T8636] tipc: Enabled bearer <udp:syz2>, priority 10
[  411.116151][ T7603] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  411.182447][ T7603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.222797][ T7603] usb 1-1: Product: syz
[  411.227081][ T7603] usb 1-1: Manufacturer: syz
[  411.238765][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'.
[  411.249718][   T44] usb 2-1: config 0 descriptor??
[  411.282544][ T8637] tipc: Disabling bearer <udp:syz2>
[  411.303146][ T7603] usb 1-1: SerialNumber: syz
[  411.491007][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  411.529324][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  411.554488][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  411.615138][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  411.632900][   T44] usb 2-1: media controller created
[  411.641360][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  411.663814][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.683071][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.705282][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  411.725682][ T8621] usb 1-1: USB disconnect, device number 19
[  411.737917][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  411.759872][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.782897][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23
[  411.803011][ T8614] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  411.817617][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  411.827901][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.863120][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  412.014641][ T8614] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  412.025569][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  412.031540][   T44] dvb-usb: error while querying for an remote control event.
[  412.059385][ T8614] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  412.082298][ T8614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.092067][ T8632] Device name cannot be null; rc = [-22]
[  412.134847][ T8614] usb 3-1: Product: syz
[  412.140552][ T8614] usb 3-1: Manufacturer: syz
[  412.154358][ T8614] usb 3-1: SerialNumber: syz
[  412.252686][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  412.262135][ T8614] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  412.281638][   T44] dvb-usb: error while querying for an remote control event.
[  412.366910][   T44] usb 2-1: USB disconnect, device number 8
[  412.441298][ T8614] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  412.515697][   T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  412.713198][ T8614] usb 3-1: USB disconnect, device number 12
[  413.631080][ T8660] [U] 
[  413.634054][ T8660] [U] K{�
[  413.637123][ T8660] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  413.644302][ T8660] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  413.659901][ T8660] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  413.670473][ T8660] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  413.706246][ T8660] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  413.729914][ T8660] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  413.741236][ T8660] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  413.752900][ T8660] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  414.194589][ T8660] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`ߨ�8�S��S����-�+��׼���\a
�r(�$�F:_�\��d���Y��qhz�^)�/X!��V����טs2#��XI�Q7I�y�ԯFT����6F��b���ȕ5&��5���aR�	��|b��Z#!��b+e�R}%Ô�����m�+�~�q�"�@��;��R�q��$��l�X�0A"��_���
[  414.219987][ T8660] [U] ��h�@�{���
��gJM��
[  414.224449][ T8660] [U] ���Z$���ؤ4��V�
[  414.228673][ T8660] [U] u��'��q����M�BC
X`?��4֘<T%Dtx�F��fiA���
[  414.235434][ T8660] [U] �z�(���� �Y�L�'�ud�e|��c<q(r9��\e����H�7�����}�o�d�t��s����#���8pG7�Vb�I��
�;qǯu�����e�
[  414.246849][ T8660] [U] @ʀ�����B�(��-���5AZE^U�x<��}~FUσ��n{�F*�1�Ks��{O�&��iӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  414.260700][ T8660] [U] 22��Ʃ���x?0;3u�
[  414.264910][ T8660] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  414.290232][ T8660] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  414.299657][ T8660] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  414.308377][ T8660] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  414.314751][ T8660] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  414.327300][ T8660] [U] �ec�
[  414.330470][ T8660] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  416.405303][ T8667] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  416.892334][ T8689] virtiofs: Unknown parameter 'always'
[  417.252744][ T7603] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  417.913567][ T7603] usb 5-1: Using ep0 maxpacket: 8
[  417.955076][ T7603] usb 5-1: unable to get BOS descriptor or descriptor too short
[  417.970079][ T7603] usb 5-1: config 5 has an invalid descriptor of length 179, skipping remainder of the config
[  418.001953][ T7603] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  418.760900][ T8713] tipc: New replicast peer: 255.255.255.255
[  418.777051][ T8713] tipc: Enabled bearer <udp:syz2>, priority 10
[  418.986281][ T7603] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  419.152982][ T8714] netlink: 76 bytes leftover after parsing attributes in process `syz.3.678'.
[  419.380997][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'.
[  419.391227][ T8713] tipc: Disabling bearer <udp:syz2>
[  420.132668][ T8617] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  420.299300][ T8617] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  420.582962][ T8617] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  420.667829][ T8617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.785784][ T8617] usb 1-1: Product: syz
[  420.843599][ T8617] usb 1-1: Manufacturer: syz
[  420.896992][ T8617] usb 1-1: SerialNumber: syz
[  421.303388][ T7603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.311619][ T7603] usb 5-1: Product: syz
[  421.428092][ T7603] usb 5-1: Manufacturer: syz
[  421.432916][ T7603] usb 5-1: SerialNumber: syz
[  421.492649][ T7603] usb 5-1: can't set config #5, error -71
[  421.503151][ T7603] usb 5-1: USB disconnect, device number 17
[  421.528559][ T8617] usb 1-1: can't set config #2, error -71
[  421.586310][ T8617] usb 1-1: USB disconnect, device number 20
[  421.705706][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'.
[  421.781381][ T8729] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  421.858186][ T7603] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  422.063060][ T7603] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  422.123001][ T7603] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  422.160169][ T7603] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  422.226730][ T7603] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.5c
[  422.266015][ T7603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.290812][ T7603] usb 5-1: Product: syz
[  422.298737][ T7603] usb 5-1: Manufacturer: syz
[  422.305604][ T7603] usb 5-1: SerialNumber: syz
[  422.391313][ T7603] cdc_ncm 5-1:1.0: skipping garbage
[  422.439518][ T7603] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  422.464405][ T7603] cdc_ncm 5-1:1.0: bind() failure
[  425.833701][ T8621] usb 5-1: USB disconnect, device number 18
[  427.724720][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.688'.
[  427.996830][ T8768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.691'.
[  430.452771][   T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  430.716894][ T8785] tipc: New replicast peer: 255.255.255.255
[  430.726202][ T8785] tipc: Enabled bearer <udp:syz2>, priority 10
[  430.839963][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'.
[  430.849635][ T8785] tipc: Disabling bearer <udp:syz2>
[  431.212934][ T8621] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  431.675238][   T44] usb 2-1: Using ep0 maxpacket: 8
[  431.684663][   T44] usb 2-1: too many configurations: 120, using maximum allowed: 8
[  431.725815][   T44] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  431.792898][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24
[  431.805588][   T44] usb 2-1: Product: syz
[  431.809842][   T44] usb 2-1: Manufacturer: syz
[  431.814815][   T44] usb 2-1: SerialNumber: syz
[  431.826795][   T44] usb 2-1: config 0 descriptor??
[  431.847196][   T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  431.869447][ T8621] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  431.870015][   T44] usb 2-1: setting power ON
[  431.891408][ T8621] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  431.922789][ T8621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.941638][ T8621] usb 3-1: Product: syz
[  431.955515][ T8621] usb 3-1: Manufacturer: syz
[  431.969877][ T8621] usb 3-1: SerialNumber: syz
[  432.038060][ T8621] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  432.742939][   T44] dvb-usb: bulk message failed: -22 (2/0)
[  432.781762][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  432.790576][ T8621] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  432.805032][ T8776] ------------[ cut here ]------------
[  432.810984][ T8776] usb 3-1: BOGUS control dir, pipe 80000d80 doesn't match bRequestType c0
[  432.834720][   T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  432.861007][ T8776] WARNING: CPU: 1 PID: 8776 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890
[  432.870874][ T8776] Modules linked in:
[  432.875637][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.1.694 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  432.885574][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  432.895782][ T8776] RIP: 0010:usb_submit_urb+0x115d/0x1890
[  432.901544][ T8776] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80
[  432.921562][ T8776] RSP: 0018:ffffc9001c1df7b0 EFLAGS: 00010246
[  432.928748][ T8776] RAX: 02ebfa056960f000 RBX: ffff888031cea000 RCX: 0000000000080000
[  432.937397][ T8776] RDX: ffffc90004512000 RSI: 0000000000003841 RDI: 0000000000003842
[  432.945554][ T8776] RBP: 1ffff110043db96c R08: 0000000000000003 R09: 0000000000000004
[  432.953874][ T8776] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff888021edcb60
[  432.961973][ T8776] R13: dffffc0000000000 R14: 0000000080000d80 R15: ffff8880580f8ee0
[  432.970137][ T8776] FS:  00007fed2a2d16c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[  432.979385][ T8776] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  432.986160][ T8776] CR2: 0000200000000500 CR3: 0000000029e5e000 CR4: 00000000003526f0
[  432.994407][ T8776] Call Trace:
[  432.997729][ T8776]  <TASK>
[  433.000787][ T8776]  usb_start_wait_urb+0x114/0x4c0
[  433.005985][ T8776]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  433.011611][ T8776]  usb_control_msg+0x232/0x3e0
[  433.016729][ T8776]  gl861_ctrl_msg+0x214/0x3e0
[  433.021467][ T8776]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  433.027982][ T8776]  ? __lock_acquire+0xab9/0xd20
[  433.033853][ T8776]  gl861_i2c_master_xfer+0x439/0x650
[  433.039254][ T8776]  __i2c_transfer+0x874/0x2170
[  433.044436][ T8776]  ? lockdep_hardirqs_on+0x9c/0x150
[  433.049961][ T8776]  ? __pfx___i2c_transfer+0x10/0x10
[  433.055351][ T8776]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  433.061236][ T8776]  ? i2c_transfer+0x11d/0x3a0
[  433.066180][ T8776]  i2c_transfer+0x25b/0x3a0
[  433.070907][ T8776]  ? __pfx_i2c_transfer+0x10/0x10
[  433.076263][ T8776]  ? _copy_from_user+0x94/0xb0
[  433.081102][ T8776]  i2cdev_ioctl_rdwr+0x460/0x740
[  433.086325][ T8776]  i2cdev_ioctl+0x64b/0x7f0
[  433.091051][ T8776]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  433.096163][ T8776]  ? __fget_files+0x3a0/0x420
[  433.100906][ T8776]  ? __fget_files+0x2a/0x420
[  433.105819][ T8776]  ? bpf_lsm_file_ioctl+0x9/0x20
[  433.110993][ T8776]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  433.116270][ T8776]  __se_sys_ioctl+0xfc/0x170
[  433.121089][ T8776]  do_syscall_64+0xfa/0x3b0
[  433.125692][ T8776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.132556][ T8776]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  433.138752][ T8776]  ? clear_bhb_loop+0x60/0xb0
[  433.144080][ T8776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.150030][ T8776] RIP: 0033:0x7fed2938eb69
[  433.154576][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.174423][ T8776] RSP: 002b:00007fed2a2d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  433.182934][ T8776] RAX: ffffffffffffffda RBX: 00007fed295b5fa0 RCX: 00007fed2938eb69
[  433.191109][ T8776] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 000000000000000a
[  433.199203][ T8776] RBP: 00007fed29411df1 R08: 0000000000000000 R09: 0000000000000000
[  433.207277][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.215392][ T8776] R13: 0000000000000000 R14: 00007fed295b5fa0 R15: 00007fffccf13218
[  433.223621][ T8776]  </TASK>
[  433.226781][ T8776] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  433.234082][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.1.694 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  433.243997][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  433.254077][ T8776] Call Trace:
[  433.257373][ T8776]  <TASK>
[  433.260343][ T8776]  dump_stack_lvl+0x99/0x250
[  433.264988][ T8776]  ? __asan_memcpy+0x40/0x70
[  433.269604][ T8776]  ? __pfx_dump_stack_lvl+0x10/0x10
[  433.274827][ T8776]  ? __pfx__printk+0x10/0x10
[  433.279661][ T8776]  panic+0x2db/0x790
[  433.283606][ T8776]  ? __pfx_panic+0x10/0x10
[  433.288159][ T8776]  __warn+0x31b/0x4b0
[  433.292500][ T8776]  ? usb_submit_urb+0x115d/0x1890
[  433.297747][ T8776]  ? usb_submit_urb+0x115d/0x1890
[  433.302917][ T8776]  report_bug+0x2be/0x4f0
[  433.307278][ T8776]  ? usb_submit_urb+0x115d/0x1890
[  433.312416][ T8776]  ? usb_submit_urb+0x115d/0x1890
[  433.317678][ T8776]  ? usb_submit_urb+0x115f/0x1890
[  433.322753][ T8776]  handle_bug+0x84/0x160
[  433.327128][ T8776]  exc_invalid_op+0x1a/0x50
[  433.331693][ T8776]  asm_exc_invalid_op+0x1a/0x20
[  433.336574][ T8776] RIP: 0010:usb_submit_urb+0x115d/0x1890
[  433.342243][ T8776] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80
[  433.362335][ T8776] RSP: 0018:ffffc9001c1df7b0 EFLAGS: 00010246
[  433.368439][ T8776] RAX: 02ebfa056960f000 RBX: ffff888031cea000 RCX: 0000000000080000
[  433.376459][ T8776] RDX: ffffc90004512000 RSI: 0000000000003841 RDI: 0000000000003842
[  433.384583][ T8776] RBP: 1ffff110043db96c R08: 0000000000000003 R09: 0000000000000004
[  433.392768][ T8776] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff888021edcb60
[  433.400765][ T8776] R13: dffffc0000000000 R14: 0000000080000d80 R15: ffff8880580f8ee0
[  433.408802][ T8776]  usb_start_wait_urb+0x114/0x4c0
[  433.414001][ T8776]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  433.419601][ T8776]  usb_control_msg+0x232/0x3e0
[  433.424753][ T8776]  gl861_ctrl_msg+0x214/0x3e0
[  433.429833][ T8776]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  433.435331][ T8776]  ? __lock_acquire+0xab9/0xd20
[  433.440344][ T8776]  gl861_i2c_master_xfer+0x439/0x650
[  433.445807][ T8776]  __i2c_transfer+0x874/0x2170
[  433.450621][ T8776]  ? lockdep_hardirqs_on+0x9c/0x150
[  433.455881][ T8776]  ? __pfx___i2c_transfer+0x10/0x10
[  433.461100][ T8776]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  433.466517][ T8776]  ? i2c_transfer+0x11d/0x3a0
[  433.471282][ T8776]  i2c_transfer+0x25b/0x3a0
[  433.475833][ T8776]  ? __pfx_i2c_transfer+0x10/0x10
[  433.480926][ T8776]  ? _copy_from_user+0x94/0xb0
[  433.485799][ T8776]  i2cdev_ioctl_rdwr+0x460/0x740
[  433.490786][ T8776]  i2cdev_ioctl+0x64b/0x7f0
[  433.495335][ T8776]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  433.500557][ T8776]  ? __fget_files+0x3a0/0x420
[  433.505263][ T8776]  ? __fget_files+0x2a/0x420
[  433.509896][ T8776]  ? bpf_lsm_file_ioctl+0x9/0x20
[  433.514866][ T8776]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  433.519994][ T8776]  __se_sys_ioctl+0xfc/0x170
[  433.524634][ T8776]  do_syscall_64+0xfa/0x3b0
[  433.529171][ T8776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.535441][ T8776]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  433.541622][ T8776]  ? clear_bhb_loop+0x60/0xb0
[  433.546332][ T8776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.552357][ T8776] RIP: 0033:0x7fed2938eb69
[  433.556803][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.576538][ T8776] RSP: 002b:00007fed2a2d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  433.584996][ T8776] RAX: ffffffffffffffda RBX: 00007fed295b5fa0 RCX: 00007fed2938eb69
[  433.593000][ T8776] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 000000000000000a
[  433.601226][ T8776] RBP: 00007fed29411df1 R08: 0000000000000000 R09: 0000000000000000
[  433.609663][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.617663][ T8776] R13: 0000000000000000 R14: 00007fed295b5fa0 R15: 00007fffccf13218
[  433.625761][ T8776]  </TASK>
[  433.629294][ T8776] Kernel Offset: disabled
[  433.633731][ T8776] Rebooting in 86400 seconds..