last executing test programs:

12.448028959s ago: executing program 2 (id=396):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x48000)

12.071146573s ago: executing program 2 (id=398):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESOCT=r1])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x564f143a, 0x85, 0x6, 0xf, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
ftruncate(r4, 0x6)
dup3(r2, r4, 0x6700000000000000)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000140)={'wg0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4804)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x270bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0x6}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008071}, 0x4008000)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x5c, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x3c1, 0x3, 0x1298, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11c8, 0x2e0, 0x2e0, 0x11c8, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x21, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x29f}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x12f8)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

9.697223353s ago: executing program 0 (id=405):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_create(0x2, &(0x7f0000000140)={0x0, 0x20044, 0x0, @tid=r0}, &(0x7f00000001c0)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) (async)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
syz_open_procfs(r0, &(0x7f0000000000)='timerslack_ns\x00') (async)
r2 = syz_open_procfs(r0, &(0x7f0000000000)='timerslack_ns\x00')
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x3}, 0x4) (async)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x3}, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000) (async)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000005c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0xf28, 0xe7, {"6dcab0e3d68f00000000459dba1dbe10"}, 0x7, 0xb, 0x4}, @ib={0x1b, 0x7ac, 0x0, {"b2000000000000d24d93cfe66ee5a001"}, 0x9, 0x0, 0x400000000}}}, 0x118) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000005c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0xf28, 0xe7, {"6dcab0e3d68f00000000459dba1dbe10"}, 0x7, 0xb, 0x4}, @ib={0x1b, 0x7ac, 0x0, {"b2000000000000d24d93cfe66ee5a001"}, 0x9, 0x0, 0x400000000}}}, 0x118)
clock_gettime(0x0, &(0x7f0000000180))
open_tree(r4, &(0x7f0000000340)='./file0\x00', 0x800) (async)
open_tree(r4, &(0x7f0000000340)='./file0\x00', 0x800)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)=@userptr={0xea, 0x0, 0x4, 0x100000, 0x7f, {}, {0x2, 0x8, 0x0, 0xfc, 0x1, 0x6, "7d80d6f9"}, 0x800, 0x2, {&(0x7f0000000040)}, 0x7, 0x0, r4}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)=@userptr={0xea, 0x0, 0x4, 0x100000, 0x7f, {}, {0x2, 0x8, 0x0, 0xfc, 0x1, 0x6, "7d80d6f9"}, 0x800, 0x2, {&(0x7f0000000040)}, 0x7, 0x0, r4})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r6 = gettid()
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
read(r7, &(0x7f0000000200)=""/209, 0x128)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000740)={0x8, 0x2, 0x1, 'queue0\x00'})
getitimer(0x2, &(0x7f0000000300))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000})
tkill(r6, 0x7) (async)
tkill(r6, 0x7)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f00000001c0)={0xe6, 0x4, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000040", @ANYRES32, @ANYBLOB="0000000003000000000000000000050000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$alg(0x26, 0x5, 0x0) (async)
socket$alg(0x26, 0x5, 0x0)

9.303860859s ago: executing program 2 (id=406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x1, 0x4)
write(r1, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c000180060001002af300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a3100000000090002007379030000000000140000001100010000000000000000000100000a"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000140))
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)
r3 = socket$inet6(0xa, 0x800, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd7000fddbdf25040000000800180001ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x20000084)

9.147945664s ago: executing program 0 (id=407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="dc0000002a00010026bd7000fedbdf250200"], 0xdc}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0xfe2, &(0x7f0000001840)=""/4066, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000806}, 0x94)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x1, 0x2, 0x606, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20004004)

9.105849377s ago: executing program 0 (id=408):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x4, 0x4)
sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c)
recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/181, 0xb5}, 0x8001}], 0x4000000000001c7, 0x10140, 0x0)

7.988095609s ago: executing program 0 (id=413):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r3 = fcntl$dupfd(r2, 0x406, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r4 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="440f20c035cb007000440f22c00f20e035000001000f22e0f3400f090f001f66b85b008ee8400f30c744240000800000c7442402cb70498cc7442406000000000f011424b9800000c00f3235000400000f300f20d835200000000f22d80fc7b1da000000", 0x64}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="000600020000"], 0x0, 0x0})
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)

7.033504657s ago: executing program 2 (id=418):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=ANY=[@ANYBLOB="e00000001000bb2429bd7000fddbdf25647262675f70725f6374725f61657332353600000000000000000f95000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000002400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2001030000"], 0x0})
ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
fcntl$setpipe(r7, 0x407, 0x2)
ppoll(&(0x7f0000000740)=[{r0, 0x104}], 0x1, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000480), 0x1, 0x2)
poll(&(0x7f0000000a00)=[{r0}], 0x2e, 0x5)

6.621488242s ago: executing program 3 (id=419):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = dup(r0)
read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3902000000000000127647130000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f00000000c0)={0xa}, 0x1c)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14)
setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f00000001c0)=0xe6, 0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="5e23c70f21ed66b809000f00d0b94a090000b8faffffffbaff7f00000f30c4e109f99f2b0000000f01cbf3ac66ba430066ed67800e416704660f38817e30", 0x3e}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="02011400b8dc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010117000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000003020224"], 0x0)

5.231790889s ago: executing program 3 (id=420):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00')
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xbf0e, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000340))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xb0, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fddf0326f8a7c99bd1279084d2f555027149f20d679b1f63"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4085}, 0x24044884)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c})
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
close_range(r8, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

4.988178754s ago: executing program 4 (id=421):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, <r0=>0xffffffffffffffff, 0x1})
readv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/11, 0xb}], 0x6)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000004c0)) (async)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', <r3=>0x0}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xb, 0x4, 0x8, 0x10001}]}}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x804}, 0x1c4) (async)
close(r0) (async)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000840)={@hyper})
splice(r6, &(0x7f0000000880)=0x2, r0, &(0x7f00000008c0)=0x400, 0x2, 0x6) (async)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000900)=0x1, 0x4) (async)
io_setup(0xa, &(0x7f0000000940)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000a40)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x6, 0xd, r0, &(0x7f0000000980)="a1cacfd46cc57423005b504cf1dd7f1cc33ed64d756eb54dcc7e7498a95005168fbc70d0a0decd943f08dd85aaaabb60128e03882d84c86f59bd241828ee0a15f72a015876a52c6e3d0c2a9220f5d43b2a1ac7af952131ba98ecbf6cff643d", 0x5f, 0x7fff, 0x0, 0x2, r1}])
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0xe, 0x0, @random="c83f009b625bc0e42fae"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x801)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r10, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, 0x0, 0x500, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x117}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaf3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async)
socket(0x1, 0x1, 0x400) (async)
socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32)
io_uring_enter(r0, 0x2644, 0x13d5, 0x8, &(0x7f0000000d40)={[0xa]}, 0x8) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000dc0)={<r11=>r8})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r11) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001040)={0x2c, &(0x7f0000000e00)={0x0, 0x8, 0x4d, {0x4d, 0x31, "bada7f5c9d9331bd5f20c377d04c81e5301c4b8dc4da70424a5e0e9a0824069e184880f8e15c566209af8eeca0df9ba02078051f9a7241a563b6817fbc64f79731479290912679cc1e9d4e"}}, &(0x7f0000000e80)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "b7da910547ed4ff4f72d9b61aed549a09e7140c01df139a65d127a1d4f77c48af72b86746d98f32696140745a64222cc9558ad6eae87699980bcf55be249c6cfb3afb2100a4806dfcf19d73b35f6c9490d0a10248137dccee3d4f353b00367a95cf6623f7fbef9ce9195b99ab75d28a4682060d628cc07caec422a6f0c4963f52fa05e8a96d88fbf72336145c8a542c6738d0331c08848625cdcea384e54d22bd5b48ebeacaf"}}, &(0x7f0000000f40)={0x0, 0xf, 0x63, {0x5, 0xf, 0x63, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x9, 0xe100, 0x4, [0xf, 0x30, 0xc000, 0xff0017, 0x7f7e70, 0x1fe0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x0, 0xf00, 0x3, [0x3f0f, 0xffc03f, 0x30, 0xff0000, 0xc00f]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1b, "ae67734f33f180fa1a01e6202ce2c4d3"}]}}, &(0x7f0000000fc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x3, 0x7, 0x3, "e34d22e9", "23062070"}}, &(0x7f0000001000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x87, 0x4, 0x5, 0x82, 0x1, 0xfffe, 0x84}}}, &(0x7f00000014c0)={0x84, &(0x7f0000001080)={0x0, 0x1, 0x79, "70269c8e1f2757c744f3cdd744ba8236ae0d4208b91745d156dff596a9ab770f76fd23cd45cb39fbebe22c23561918639a59ba291cdb8c0cdece9da4a63f0449a32e162d337dc222e29cd6f0db6d4f427ceda13a03cf8337a2d87f93faf14b6147be80a0a44f01e435dedfebe52462f4501e53827325e6bbec"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x53}, &(0x7f0000001180)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000011c0)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000001200)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000001240)={0x40, 0x9, 0x1}, &(0x7f0000001280)={0x40, 0xb, 0x2, 'mR'}, &(0x7f00000012c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001300)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000001340)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001380)={0x40, 0x19, 0x2, "e2a0"}, &(0x7f00000013c0)={0x40, 0x1a, 0x2, 0xc000}, &(0x7f0000001400)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001440)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x21, 0x1, 0x1}})
r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001580), 0x40000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r12, {0x2}}, './file0\x00'})

4.731770055s ago: executing program 4 (id=422):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000e00)={0x0, 0xc, 0x5, {0x5, 0x4, "6d4c90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000300)="ff90", 0x2, 0x24814, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080), 0xc)
write(r3, &(0x7f00000004c0)="b1", 0x1)
writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)

4.495552024s ago: executing program 1 (id=423):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0a02, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x3}}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0)
accept(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000600)={r8, 0xffffffff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87530400000000000000a1a9505240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x2, 0x2000000000001]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x10000, 0x0, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})

4.370304171s ago: executing program 0 (id=424):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x400, 0x1, 0x2, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa) (async)
modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0})

3.888062947s ago: executing program 2 (id=425):
syz_usb_connect(0x2, 0xea, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0xb0, 0xaf, 0x20, 0xe8d, 0x763f, 0x220e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0x51, 0x21, 0x3, 0xed, 0xd, 0xdb, 0xb5, [], [{{0x9, 0x5, 0xe81eb71784d4b393, 0x0, 0x8, 0x9, 0x5, 0x2e}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x7, 0x9, 0x5, [@generic={0xa4, 0xc, "7c93b4910284604cfcc35ef03d361321aa94472de5a898a2398286757a796e5d42919c46bb7d57fd23dcdf97c751fb6f24f78200bf86c7c664ecc3e762f2fde4a1e99112bc55e6c6bb1eb2654b7796a91d835b9ca5ab068b32514000b32687ba9a1abaa0522abeeeb52f9e66d32670828afd01b48bd9df4bfd2c19c473d8bbafc45a1b7c66be0e56f50c9c0f7270387e04ac6ed138d79bd774d8da856dcb03128e94"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x70, 0x597}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x5, 0x9, 0x7f}}]}}]}}]}}, 0x0)

3.657969866s ago: executing program 3 (id=426):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x90)
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r5=>0x0)
timer_settime(r5, 0x0, 0x0, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
io_setup(0x6, &(0x7f0000000540)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}])
r8 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r9=>0x0, &(0x7f0000000480)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, 0x0)
io_uring_enter(r8, 0x3498, 0x969, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))

3.465709703s ago: executing program 1 (id=427):
socket$inet6(0xa, 0x80002, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
fallocate(r7, 0x1, 0x100000000, 0x10000)

2.655794231s ago: executing program 1 (id=428):
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x57, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x20000004)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200), 0x10)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000280)={'binder0\x00'})
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000003c0)={'nicvf0\x00', {0x2, 0x0, @empty}})
r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x39, 0xa0200)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000440)=0x5)
ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000480)=0x4)
setsockopt(r0, 0x0, 0xc, &(0x7f00000004c0)="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", 0x1000)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f00000014c0)=0x8)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000001500)={0x5})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001540)={0x3, 'veth0_to_bond\x00', {0x9}, 0xb})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, r0, 0x20efd000)
r4 = memfd_secret(0x80000)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x18}, @GTPA_FAMILY={0x5}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x5)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl1\x00', <r5=>0x0, 0x2f, 0x2, 0xfe, 0x8, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x6, 0x1, 0x7, 0x6}})
sendmsg$nl_route_sched(r4, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@getqdisc={0x30, 0x26, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff2, 0x1}, {0x3, 0x9}, {0x4, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001880)='blkio.bfq.io_queued\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'rose0\x00'})
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001900), 0x2002, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001940)={<r8=>0x0, @in={{0x2, 0x4e22, @local}}, 0x40, 0x7}, &(0x7f0000001a00)=0x90)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000001a40)={r8, 0x8001, 0x6, [0x5, 0x5, 0x2, 0x4, 0x8, 0xa85c]}, &(0x7f0000001a80)=0x14)

2.267402518s ago: executing program 1 (id=429):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) (async)
open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000000080)) (async)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000000080))
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) (async)
recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)

1.472260715s ago: executing program 3 (id=430):
r0 = syz_io_uring_setup(0x4f9, &(0x7f00000000c0)={0x0, 0x8d2dd, 0x8, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000200), 0x3, r2})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000180)={0x6}, 0x1)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r2], &(0x7f0000000600)=[0x800], &(0x7f0000000580)=[r3], &(0x7f00000001c0), 0x0, 0x200})

1.187752318s ago: executing program 3 (id=431):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = dup(r0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011146d77"], 0x18}}, 0x8000) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x1, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) (async)
write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1020) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38002000110037041000f50f45b89b8b01750000", @ANYRES32=0x0, @ANYBLOB="8345050001000000180012800b00010067656e65766500000800028004000600"], 0x38}}, 0x4880) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendto$inet6(r10, &(0x7f0000000000)="dd23f9e9597f43c9a9239656d50ae528", 0x10, 0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r10, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB="000827bd700001dcdf250a000000080002000000000008000400080000004d87ac8e84a2cf111892eb44bc978640a335a56e57e107f7b435"], 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x8004014)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xe3881f8)
fsmount(0xffffffffffffffff, 0x0, 0x72) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000001000010429bd700000000000006f0000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600400012800b00010067656e657665000030000280080001000100"], 0x74}}, 0x2000014)

1.185550856s ago: executing program 4 (id=432):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) (async)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x280}], 0x1, 0x0, 0x0, 0x0) (async)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = accept(r0, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80)
ftruncate(r2, 0x0) (async)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async)
ftruncate(r4, 0x5) (async)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file1\x00', r4) (async)
r5 = fsmount(r3, 0x0, 0x0)
fchdir(r5) (async)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1000, 0x400, 0x100, 0x8, 0x8000000000000000, <r6=>0xffffffffffffffff})
fcntl$lock(r5, 0x24, &(0x7f0000000140)={0x1, 0x1, 0x8, 0x8, r6}) (async, rerun: 64)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (rerun: 64)
fcntl$setlease(r7, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee})
r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4240)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1800007, 0x10, r8, 0x81c8b000) (async)
writev(r1, &(0x7f0000000080)=[{0x0}], 0x1)

967.822665ms ago: executing program 2 (id=433):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000008004500002c000000000011907800000000e000000100004e20001890780400000000000000000000000000000040677e3fee1ea17b57105cd6c3a1e3f143bf4ae0d249fe539972fa843d0895195542f7daa15e016f67548b697feaad2b3d2a"], 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x1c)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0xd, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_emit_ethernet(0xd2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaeaaaaaaaaa86dd6a9ea504009c110000000000000000000000ffffe0000002ff0200000000000000000000000000014e234e20009c90780138713b1200000075477d9a6d0a5770e90bdd60ae3ebeab39f676409364a963dd2c1c77fd2f70173a3fc7fad3d5282c51fb56c4202473e7e0a63474eee8b075cd64174e83a1315a729012d7a8db3a2bac9f6cffd8d709274bfae8ea07d427b5264632e4cfc7382bb54b931f4f4d532f26a9c603624156eb1d0800000000000000000000626dc18ead41fce3878b510bdcf91b1c"], 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

946.693357ms ago: executing program 4 (id=434):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

752.590096ms ago: executing program 4 (id=435):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x2a020400) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x40000)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) (async)
r4 = syz_io_uring_setup(0x66e, &(0x7f0000000600)={0x0, 0x0, 0x10000, 0x3, 0x8d, 0x0, r1}, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x2, 0x1000, {"390c8eef381cd35e5a9243ae1548ae86"}, 0x6, 0x101, 0x8}, @ib={0x1b, 0x7ff, 0x0, {"7d0300000000001000"}, 0x0, 0x5}}}, 0x118)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/6, 0x6}], 0x1, 0x0, 0x1})
io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) (async)
io_setup(0x7, &(0x7f0000000300))
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsmount(r1, 0x0, 0x5) (async)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f00000a2000)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x4}, {0xf0c, 0x0, 0x6, 0x8}]}, 0x10) (async)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB="5b684ecfb4a9e798d9b908bb19c4380968f55aedae4fd8d2a687bde915d9b5bbef21ab3d2bfdcdc514d3689fbb5fc736b51ba427696e7a46688bc3a6b34b5458139942829566537828", @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x904b274e8cba2aee}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4)
sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
unshare(0x2000400) (async)
close(r1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000800200025a729bd7000fddbdf250a0000cdff00000102000100080006005d313b1dd85a6f000000000500160032000000"], 0x2c}, 0x1, 0x0, 0x0, 0x640d1}, 0x0)

572.072014ms ago: executing program 1 (id=436):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00'}, 0x94)

557.002913ms ago: executing program 3 (id=437):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0a02, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x3}}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0)
accept(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000600)={r8, 0xffffffff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87530400000000000000a1a9505240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x2, 0x2000000000001]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x10000, 0x0, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})

449.676848ms ago: executing program 1 (id=438):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket(0x25, 0x5, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x24004000, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtclass={0x34, 0x28, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0xa, 0x5}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)

315.883936ms ago: executing program 4 (id=439):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x10010, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x7ff, 0x20, 0x0, {0x3, 0x9416}, {0x350, 0xffffff7d}, {0xf4ef}, {0x0, 0xffffffff}, 0x1, 0x2, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffb, 0x80000004, 0x0, 0x8, 0x0, 0x2, 0x4})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
close(0x3)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe58)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)

0s ago: executing program 0 (id=440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000380))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r1=>0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b78971d347fa1373fcffffff00000000e37b0000080001001c26848c2164b1f238d72cbd50c78aeedfa4e03c0949dc3459bf9616537d985165429d47df1bd68e93b321b2ee6d62", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e6fc437be44afaa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

69833][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.795928][ T5938] usb 1-1: Product: syz
[   95.827832][ T5938] usb 1-1: Manufacturer: syz
[   95.836104][ T5938] usb 1-1: SerialNumber: syz
[   95.866104][ T5938] usb 1-1: config 0 descriptor??
[   95.881158][ T6070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   96.010753][ T5934] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   96.202253][ T5934] usb 2-1: Using ep0 maxpacket: 16
[   96.218706][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.240575][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   96.266839][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   96.277910][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   96.299247][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.337167][ T5934] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   96.355073][ T5934] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   96.360218][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   96.383275][ T5934] usb 2-1: Manufacturer: syz
[   96.438749][ T5934] usb 2-1: config 0 descriptor??
[   96.529885][   T24] usb 4-1: Using ep0 maxpacket: 32
[   96.537708][   T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   96.549483][   T24] usb 4-1: config 0 has no interface number 0
[   96.575114][   T24] usb 4-1: config 0 interface 184 has no altsetting 0
[   96.602526][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   96.619827][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.645478][   T24] usb 4-1: Product: syz
[   96.665477][   T24] usb 4-1: Manufacturer: syz
[   96.688977][   T24] usb 4-1: SerialNumber: syz
[   96.703565][   T24] usb 4-1: config 0 descriptor??
[   96.728305][   T24] smsc75xx v1.0.0
[   96.780084][ T5934] rc_core: IR keymap rc-hauppauge not found
[   96.788044][ T5934] Registered IR keymap rc-empty
[   96.801582][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.822734][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.853939][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   96.888701][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[   96.910953][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   96.920300][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.942383][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.990295][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.010013][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.030010][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.050160][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.081092][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.100182][   T10] usb 3-1: Using ep0 maxpacket: 32
[   97.106162][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.116870][   T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[   97.126652][   T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   97.137784][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.147788][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.162473][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[   97.172967][   T10] usb 3-1: config 1 has no interface number 0
[   97.177587][   T43] usb_8dev 5-1:0.0 can0: sending command message failed
[   97.181144][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   97.194771][   T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   97.205344][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.210211][   T43] usb_8dev 5-1:0.0 can0: can't get firmware version
[   97.223386][ T5934] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   97.247597][ T5934] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   97.262648][ T6103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.327937][   T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[   97.353809][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.393720][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.430500][   T43] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22
[   97.458000][   T43] usb 5-1: USB disconnect, device number 4
[   97.521971][   T10] snd_usb_pod 3-1:1.1: set_interface failed
[   97.534450][   T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[   97.551835][   T10] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71
[   97.569795][ T6106] dvmrp0: entered allmulticast mode
[   97.601766][   T10] usb 3-1: USB disconnect, device number 10
[   97.754217][ T6109] tipc: Started in network mode
[   97.759448][ T6109] tipc: Node identity 4, cluster identity 4711
[   97.765749][ T6109] tipc: Node number set to 4
[   97.978010][ T5938] usb 1-1: probing VID:PID(2201:012C)   
[   98.009612][ T5938] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02
[   98.017113][ T5938] usb 1-1: vub300 testing BULK IN EndPoint(1) 82
[   98.026872][ T5938] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[   98.035809][ T5938] vub300 1-1:0.239: probe with driver vub300 failed with error -22
[   98.074187][ T5938] usb 1-1: USB disconnect, device number 8
[   98.161710][   T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   98.239222][ T6117] netlink: 'syz.2.58': attribute type 5 has an invalid length.
[   98.330340][   T43] usb 5-1: Using ep0 maxpacket: 8
[   98.337628][   T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   98.350464][   T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   98.362398][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   98.373037][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   98.384173][   T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.402658][   T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   98.411969][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.490226][ T5938] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   98.661446][ T5938] usb 1-1: Using ep0 maxpacket: 16
[   98.689072][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   98.719933][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   98.764692][   T43] usb 2-1: USB disconnect, device number 10
[   98.798207][ T5938] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   98.814383][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.827777][ T5938] usb 1-1: Product: syz
[   98.838013][ T5938] usb 1-1: Manufacturer: syz
[   98.844063][ T5938] usb 1-1: SerialNumber: syz
[   98.844284][ T6126] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.852790][ T5938] usb 1-1: config 0 descriptor??
[   98.866331][ T5938] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   98.876615][ T5938] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[   98.905583][ T6127] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.992617][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   99.037768][   T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[   99.122845][   T24] usb 4-1: USB disconnect, device number 5
[   99.224975][ T6135] usbtmc 5-1:16.0: simple usb_control_msg failed -32
[   99.244420][ T6113] loop2: detected capacity change from 0 to 7
[   99.252270][ T6136] fuse: Bad value for 'fd'
[   99.289929][ T6113] Dev loop2: unable to read RDB block 7
[   99.322088][ T6113]  loop2: unable to read partition table
[   99.366394][ T6113] loop2: partition table beyond EOD, truncated
[   99.396780][ T6113] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   99.472877][ T5938] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   99.517461][ T5938] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[   99.618728][ T5200] Dev loop2: unable to read RDB block 7
[   99.631966][ T5200]  loop2: unable to read partition table
[   99.633289][ T5917] usb 5-1: USB disconnect, device number 5
[   99.654727][ T5200] loop2: partition table beyond EOD, truncated
[  100.283816][ T5938] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  100.310596][ T5938] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  100.349919][ T5938] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  100.357301][ T5938] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  100.370307][ T5938] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  100.389997][ T5938] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  100.412278][ T5938] usb 1-1: USB disconnect, device number 9
[  100.830282][   T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  101.022079][   T24] usb 5-1: config 0 has an invalid interface number: 45 but max is 0
[  101.098642][   T24] usb 5-1: config 0 has no interface number 0
[  101.305829][   T24] usb 5-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  101.329091][   T24] usb 5-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.352651][   T24] usb 5-1: config 0 interface 45 has no altsetting 0
[  101.359494][   T24] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  101.435718][ T6160] netlink: 'syz.0.70': attribute type 1 has an invalid length.
[  101.482486][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.489347][ T6170] xt_l2tp: missing protocol rule (udp|l2tpip)
[  101.497640][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'.
[  101.531891][   T24] usb 5-1: config 0 descriptor??
[  101.965623][   T24] uclogic 0003:5543:3031.0002: interface is invalid, ignoring
[  102.128478][ T6174] input: syz0 as /devices/virtual/input/input9
[  102.299397][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'.
[  102.910060][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  103.070080][   T24] usb 1-1: Using ep0 maxpacket: 8
[  103.077827][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  103.111664][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  103.126135][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  103.135940][   T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  103.147615][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.160848][   T24] usb 1-1: Product: syz
[  103.167470][   T24] usb 1-1: Manufacturer: syz
[  103.174959][   T24] usb 1-1: SerialNumber: syz
[  103.195860][   T24] usb 1-1: config 0 descriptor??
[  103.212479][   T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  103.524876][   T24] snd_usb_toneport 1-1:0.0: cannot get proper max packet size
[  103.532726][   T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  103.543084][   T24] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  103.582029][   T24] usb 5-1: USB disconnect, device number 6
[  103.610195][   T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  103.651067][ T6210] loop6: detected capacity change from 0 to 7
[  103.667775][ T6210] Dev loop6: unable to read RDB block 7
[  103.681073][ T6210]  loop6: unable to read partition table
[  103.686971][ T6210] loop6: partition table beyond EOD, truncated
[  103.689870][ T5938] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  103.698234][ T6210] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  103.789883][   T43] usb 4-1: Using ep0 maxpacket: 16
[  103.796814][   T43] usb 4-1: config 0 has an invalid interface number: 230 but max is 0
[  103.812964][   T43] usb 4-1: config 0 has no interface number 0
[  103.835172][   T43] usb 4-1: config 0 interface 230 has no altsetting 0
[  103.849237][   T43] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=8f.f2
[  103.864728][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  103.868849][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.881736][ T5938] usb 2-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9
[  103.887451][   T43] usb 4-1: Product: syz
[  103.896358][   T43] usb 4-1: Manufacturer: syz
[  103.896745][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.901731][   T43] usb 4-1: SerialNumber: syz
[  103.917181][ T5938] usb 2-1: Product: syz
[  103.923137][   T43] usb 4-1: config 0 descriptor??
[  103.923503][ T5938] usb 2-1: Manufacturer: syz
[  103.936630][ T5938] usb 2-1: SerialNumber: syz
[  103.949675][ T5938] r8152-cfgselector 2-1: Unknown version 0x0000
[  103.957961][ T5938] r8152-cfgselector 2-1: config 0 descriptor??
[  103.967358][ T5938] r8152 2-1:0.0: Expected endpoints are not found
[  103.988251][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'.
[  104.002819][ T6219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.85'.
[  104.026043][ T6219] netlink: 'syz.4.85': attribute type 1 has an invalid length.
[  104.037976][ T6219] netlink: 'syz.4.85': attribute type 1 has an invalid length.
[  104.048136][ T6219] netlink: 'syz.4.85': attribute type 1 has an invalid length.
[  104.094309][ T6219] input: syz1 as /devices/virtual/input/input10
[  104.169114][ T5938] r8152-cfgselector 2-1: USB disconnect, device number 11
[  104.231406][   T43] kl5kusb105 4-1:0.230: KL5KUSB105D / PalmConnect converter detected
[  104.274015][   T43] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  104.333657][   T43] usb 4-1: USB disconnect, device number 6
[  104.368808][   T43] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  104.405235][   T43] kl5kusb105 4-1:0.230: device disconnected
[  104.837748][ T6236] FAULT_INJECTION: forcing a failure.
[  104.837748][ T6236] name failslab, interval 1, probability 0, space 0, times 0
[  104.854637][ T6236] CPU: 1 UID: 0 PID: 6236 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT(full) 
[  104.854654][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  104.854666][ T6236] Call Trace:
[  104.854671][ T6236]  <TASK>
[  104.854676][ T6236]  dump_stack_lvl+0x189/0x250
[  104.854700][ T6236]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.854715][ T6236]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.854736][ T6236]  should_fail_ex+0x414/0x560
[  104.854753][ T6236]  should_failslab+0xa8/0x100
[  104.854765][ T6236]  kmem_cache_alloc_noprof+0x74/0x6e0
[  104.854779][ T6236]  ? skb_clone+0x212/0x3a0
[  104.854793][ T6236]  skb_clone+0x212/0x3a0
[  104.854805][ T6236]  __netlink_deliver_tap+0x404/0x850
[  104.854828][ T6236]  ? netlink_deliver_tap+0x2e/0x1b0
[  104.854839][ T6236]  netlink_deliver_tap+0x19c/0x1b0
[  104.854849][ T6236]  netlink_sendskb+0x68/0x140
[  104.854864][ T6236]  netlink_unicast+0x397/0x9e0
[  104.854877][ T6236]  ? __asan_memcpy+0x40/0x70
[  104.854893][ T6236]  ? __pfx_netlink_unicast+0x10/0x10
[  104.854916][ T6236]  netlink_rcv_skb+0x28c/0x470
[  104.854925][ T6236]  ? __lock_acquire+0xab9/0xd20
[  104.854935][ T6236]  ? __pfx_genl_rcv_msg+0x10/0x10
[  104.854948][ T6236]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.854968][ T6236]  ? down_read+0x1ad/0x2e0
[  104.854979][ T6236]  genl_rcv+0x28/0x40
[  104.854989][ T6236]  netlink_unicast+0x82f/0x9e0
[  104.855014][ T6236]  ? __pfx_netlink_unicast+0x10/0x10
[  104.855029][ T6236]  ? netlink_sendmsg+0x642/0xb30
[  104.855037][ T6236]  ? skb_put+0x11b/0x210
[  104.855049][ T6236]  netlink_sendmsg+0x805/0xb30
[  104.855064][ T6236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.855075][ T6236]  ? aa_sock_msg_perm+0xf1/0x1d0
[  104.855090][ T6236]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  104.855100][ T6236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.855110][ T6236]  __sock_sendmsg+0x21c/0x270
[  104.855125][ T6236]  ____sys_sendmsg+0x505/0x830
[  104.855139][ T6236]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.855154][ T6236]  ? import_iovec+0x74/0xa0
[  104.855168][ T6236]  ___sys_sendmsg+0x21f/0x2a0
[  104.855180][ T6236]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.855210][ T6236]  ? __fget_files+0x2a/0x420
[  104.855219][ T6236]  ? __fget_files+0x3a0/0x420
[  104.855233][ T6236]  __x64_sys_sendmsg+0x19b/0x260
[  104.855245][ T6236]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  104.855264][ T6236]  ? __pfx_ksys_write+0x10/0x10
[  104.855282][ T6236]  ? do_syscall_64+0xbe/0xfa0
[  104.855298][ T6236]  do_syscall_64+0xfa/0xfa0
[  104.855311][ T6236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.855320][ T6236]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  104.855329][ T6236]  ? clear_bhb_loop+0x60/0xb0
[  104.855341][ T6236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.855351][ T6236] RIP: 0033:0x7f944018f749
[  104.855365][ T6236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.855373][ T6236] RSP: 002b:00007f94410d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.855385][ T6236] RAX: ffffffffffffffda RBX: 00007f94403e5fa0 RCX: 00007f944018f749
[  104.855392][ T6236] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[  104.855397][ T6236] RBP: 00007f94410d5090 R08: 0000000000000000 R09: 0000000000000000
[  104.855403][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  104.855408][ T6236] R13: 00007f94403e6038 R14: 00007f94403e5fa0 R15: 00007f944050fa28
[  104.855425][ T6236]  </TASK>
[  105.683882][ T6246] syz.3.91 uses obsolete (PF_INET,SOCK_PACKET)
[  105.796528][   T10] usb 1-1: USB disconnect, device number 10
[  105.870957][ T6248] pim6reg: entered allmulticast mode
[  106.189692][ T6248] pim6reg: left allmulticast mode
[  106.390399][   T30] kauditd_printk_skb: 2392 callbacks suppressed
[  106.390419][   T30] audit: type=1326 audit(1764095743.465:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.530610][   T30] audit: type=1326 audit(1764095743.465:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.636139][   T30] audit: type=1326 audit(1764095743.465:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.662879][   T30] audit: type=1326 audit(1764095743.465:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.686424][   T30] audit: type=1326 audit(1764095743.465:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.728705][   T30] audit: type=1326 audit(1764095743.465:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.751736][   T30] audit: type=1326 audit(1764095743.465:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.775334][   T30] audit: type=1326 audit(1764095743.465:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.860892][   T30] audit: type=1326 audit(1764095743.525:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  106.887106][   T30] audit: type=1326 audit(1764095743.525:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468c98f749 code=0x7ffc0000
[  107.330090][   T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  107.529887][   T43] usb 1-1: Using ep0 maxpacket: 16
[  107.539714][   T43] usb 1-1: config 0 has an invalid interface number: 84 but max is 0
[  107.554758][   T43] usb 1-1: config 0 has no interface number 0
[  107.562900][   T43] usb 1-1: config 0 interface 84 has no altsetting 0
[  107.575429][   T43] usb 1-1: New USB device found, idVendor=4f40, idProduct=2974, bcdDevice=33.ff
[  107.594491][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.613282][   T43] usb 1-1: Product: syz
[  107.626228][   T43] usb 1-1: Manufacturer: syz
[  107.631452][   T43] usb 1-1: SerialNumber: syz
[  107.644186][   T43] usb 1-1: config 0 descriptor??
[  107.699961][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  107.864373][   T43] usb-storage 1-1:0.84: USB Mass Storage device detected
[  107.881465][   T10] usb 5-1: Using ep0 maxpacket: 8
[  107.917204][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  107.933691][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  107.957033][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  107.967559][   T43] usb 1-1: USB disconnect, device number 11
[  107.973145][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  108.007532][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.022947][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  108.037278][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.159902][ T5919] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  108.196890][ T6301] binder: 6299:6301 ioctl c0306201 200000000080 returned -14
[  108.205870][ T6301] binder: 6299:6301 ioctl c008561b 2000000000c0 returned -22
[  108.222944][ T6301] binder: 6299:6301 ioctl c018aa3f 200000000240 returned -22
[  108.257406][   T10] usb 5-1: usb_control_msg returned -32
[  108.270632][   T10] usbtmc 5-1:16.0: can't read capabilities
[  108.325947][ T5919] usb 2-1: no configurations
[  108.333609][ T5919] usb 2-1: can't read configurations, error -22
[  108.474756][ T5919] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  108.650719][ T5919] usb 2-1: no configurations
[  108.655508][ T5919] usb 2-1: can't read configurations, error -22
[  108.662459][ T5919] usb usb2-port1: attempt power cycle
[  108.729885][   T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  108.879957][   T43] usb 1-1: Using ep0 maxpacket: 16
[  108.887909][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.899252][   T43] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  108.909424][   T43] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  108.921772][   T43] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61
[  108.931699][   T43] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  108.951636][   T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.960818][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  108.968892][   T43] usb 1-1: SerialNumber: syz
[  108.977165][ T6315] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  108.984980][ T6315] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  109.009998][ T5919] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  109.034360][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.043293][ T5919] usb 2-1: no configurations
[  109.050284][ T5919] usb 2-1: can't read configurations, error -22
[  109.058105][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.180136][ T5919] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  109.196661][   T43] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  109.210679][   T43] usb 1-1: USB disconnect, device number 12
[  109.217593][ T5919] usb 2-1: no configurations
[  109.226546][ T5919] usb 2-1: can't read configurations, error -22
[  109.243496][ T5919] usb usb2-port1: unable to enumerate USB device
[  109.513311][ T6332] syzkaller1: entered promiscuous mode
[  109.535223][ T6332] syzkaller1: entered allmulticast mode
[  110.190861][   T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  110.353528][   T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  110.368718][   T43] usb 1-1: config 0 has no interface number 0
[  110.392089][   T43] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  110.405150][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.413626][   T43] usb 1-1: Product: syz
[  110.417941][   T43] usb 1-1: Manufacturer: syz
[  110.423201][   T43] usb 1-1: SerialNumber: syz
[  110.438727][   T43] usb 1-1: config 0 descriptor??
[  110.713741][   T43] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  110.728189][   T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  110.740402][   T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  110.748578][   T43] usb 1-1: media controller created
[  110.770909][ T6348] usb usb8: usbfs: process 6348 (syz.2.119) did not claim interface 0 before use
[  110.781730][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.979455][   T43] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  111.079886][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  111.362080][   T10] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  111.380815][ T5938] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  111.392534][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.408540][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.420537][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.429107][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.439845][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.451322][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.462035][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.472285][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.485681][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.494205][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.504058][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.516324][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.526882][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.538124][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.555465][ T5938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  111.568040][ T5938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.578669][ T5938] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.593830][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.603591][ T5938] usb 2-1: config 0 interface 0 has no altsetting 0
[  111.612828][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.627479][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.639101][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.647641][ T5938] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  111.657789][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.670010][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.679063][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.698015][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.723161][ T5938] usb 2-1: config 0 descriptor??
[  111.735199][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.779663][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.860272][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  111.910593][   T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  111.921180][   T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  111.930331][   T10] usb 4-1: Product: syz
[  111.934676][   T10] usb 4-1: Manufacturer: syz
[  111.939414][   T10] usb 4-1: SerialNumber: syz
[  111.951843][   T10] usb 4-1: config 0 descriptor??
[  111.992899][   T10] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1
[  112.005649][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  112.005661][   T30] audit: type=1326 audit(1764095749.095:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.2.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31ad78f749 code=0x0
[  112.034426][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.092180][   T43] usb 1-1: USB disconnect, device number 13
[  112.392854][ T5938] usbhid 2-1:0.0: can't add hid device: -71
[  112.408396][ T5938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  112.431935][ T5938] usb 2-1: USB disconnect, device number 16
[  112.669267][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.679715][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.260251][ T5917] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  113.369872][   T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  113.419841][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  113.427828][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.439631][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.453282][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  113.467601][ T5917] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  113.477845][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.489638][ T5917] usb 3-1: config 0 descriptor??
[  113.520011][   T43] usb 1-1: device descriptor read/64, error -71
[  113.760452][   T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  113.889912][   T43] usb 1-1: device descriptor read/64, error -71
[  113.924332][ T5917] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0003/input/input11
[  114.005252][   T43] usb usb1-port1: attempt power cycle
[  114.111368][ T6327] usbtmc 5-1:16.0: usb_control_msg returned -110
[  114.142060][   T10] usb 5-1: USB disconnect, device number 7
[  114.211335][ T5917] appleir 0003:05AC:8241.0003: input,hiddev2,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  114.263382][   T24] usb 4-1: USB disconnect, device number 7
[  114.296149][ T5938] usb 3-1: USB disconnect, device number 11
[  114.304802][   T24] yurex 4-1:0.0: USB YUREX #1 now disconnected
[  114.355123][ T6386] netlink: 48 bytes leftover after parsing attributes in process `syz.4.127'.
[  114.359921][   T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  114.412383][   T43] usb 1-1: device descriptor read/8, error -71
[  114.421647][ T6385] fido_id[6385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  114.750145][   T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  114.780586][   T43] usb 1-1: device descriptor read/8, error -71
[  114.830157][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  114.905145][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.914626][   T43] usb usb1-port1: unable to enumerate USB device
[  114.926761][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.999909][   T10] usb 5-1: Using ep0 maxpacket: 32
[  115.007323][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  115.018533][   T10] usb 5-1: config 255 has an invalid interface number: 81 but max is 0
[  115.027035][   T10] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  115.037587][   T10] usb 5-1: config 255 has no interface number 0
[  115.043938][   T10] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83
[  115.057287][   T10] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  115.069499][   T10] usb 5-1: config 255 interface 81 has no altsetting 0
[  115.083748][   T10] usb 5-1: string descriptor 0 read error: -22
[  115.091180][   T10] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac
[  115.100516][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.121889][   T10] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.81/input/input12
[  115.133173][ T5938] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  115.293458][ T5938] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  115.304734][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.313332][ T5938] usb 4-1: Product: syz
[  115.324298][ T5938] usb 4-1: Manufacturer: syz
[  115.329398][ T5938] usb 4-1: SerialNumber: syz
[  115.331796][   T10] usb 5-1: USB disconnect, device number 8
[  115.344652][ T5938] usb 4-1: config 0 descriptor??
[  115.353769][ T5938] ch341 4-1:0.0: ch341-uart converter detected
[  115.567495][ T5938] usb 4-1: failed to receive control message: -71
[  115.578003][ T5938] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  115.589640][ T5938] usb 4-1: USB disconnect, device number 8
[  115.598922][ T5938] ch341 4-1:0.0: device disconnected
[  116.221927][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.135'.
[  116.304613][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.135'.
[  116.347275][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.408965][ T6416] vlan2: entered allmulticast mode
[  116.414847][ T6416] veth0_to_bond: entered allmulticast mode
[  116.447029][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.675195][   T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  116.891129][   T43] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  116.899505][   T43] usb 2-1: config 0 has no interface number 0
[  116.928771][   T43] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  116.969012][   T43] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  117.020515][   T43] usb 2-1: config 0 interface 255 has no altsetting 0
[  117.036283][   T43] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  117.061813][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.109175][   T43] usb 2-1: config 0 descriptor??
[  117.132845][   T43] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  117.356133][   T43] usb 2-1: USB disconnect, device number 17
[  117.463930][ T6444] could not allocate digest TFM handle poly1305-neon
[  117.846521][ T6453] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20001
[  118.209627][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'.
[  118.620121][   T30] audit: type=1800 audit(1764095755.705:2420): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.151" name="bus" dev="ramfs" ino=11410 res=0 errno=0
[  118.716043][   T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  118.757764][ T6483] netlink: 'syz.0.153': attribute type 1 has an invalid length.
[  118.902533][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  118.912788][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  118.922764][   T43] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  118.936372][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.992705][   T43] usb 5-1: config 0 descriptor??
[  119.039234][ T6483] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.067479][ T6486] bond1: (slave gretap1): making interface the new active one
[  119.086347][ T6486] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  119.230708][ T5919] usb 5-1: USB disconnect, device number 9
[  119.819876][  T116] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  120.097323][  T116] usb 2-1: Using ep0 maxpacket: 16
[  120.133197][  T116] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  120.155223][  T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  120.193311][  T116] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  120.253521][  T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.270858][  T116] usb 2-1: Product: syz
[  120.279965][  T116] usb 2-1: Manufacturer: syz
[  120.294921][  T116] usb 2-1: SerialNumber: syz
[  120.316856][  T116] usb 2-1: config 0 descriptor??
[  120.332636][  T116] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  120.352997][  T116] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  121.173555][  T116] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  121.200816][  T116] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  121.213269][ T5919] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  121.390686][ T5919] usb 4-1: Using ep0 maxpacket: 32
[  121.409133][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  121.423089][ T5919] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  121.433969][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.514791][ T5919] usb 4-1: Product: syz
[  121.561830][ T5938] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  121.616567][ T6516] netlink: 'syz.0.164': attribute type 1 has an invalid length.
[  121.636684][ T6516] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.164'.
[  121.697559][ T5919] usb 4-1: Manufacturer: syz
[  121.727176][ T5919] usb 4-1: SerialNumber: syz
[  121.734743][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.749467][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.764998][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  121.788490][ T5919] usb 4-1: config 0 descriptor??
[  121.797798][ T6508] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  121.807579][ T5938] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  121.813674][ T5919] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  121.826336][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.854124][ T5938] usb 5-1: config 0 descriptor??
[  121.950472][ T5934] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  122.046884][ T5919] usb 4-1: USB disconnect, device number 10
[  122.053023][    C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  122.142193][ T5934] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  122.205986][ T5934] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  122.286870][  T116] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe
[  122.322430][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  122.380230][ T5934] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  122.393101][ T5938] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  122.408869][ T5934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  122.425097][ T5934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  122.466651][ T5934] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  122.482965][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  122.493473][ T5934] usb 1-1: Product: syz
[  122.497882][ T5934] usb 1-1: Manufacturer: syz
[  122.595608][ T6518] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  122.642676][ T5934] cdc_wdm 1-1:1.0: skipping garbage
[  122.652133][ T5934] cdc_wdm 1-1:1.0: skipping garbage
[  122.665048][ T5934] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[  122.677920][ T5934] cdc_wdm 1-1:1.0: Unknown control protocol
[  122.890599][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.899622][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.586743][   T10] usb 1-1: USB disconnect, device number 18
[  123.630104][  T116] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  123.637873][  T116] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  123.649803][  T116] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  123.657997][  T116] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  123.667810][  T116] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  123.675238][  T116] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  123.730396][ T5934] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  123.854220][   T43] usb 2-1: USB disconnect, device number 18
[  123.870076][ T5934] usb 5-1: device descriptor read/64, error -32
[  124.150009][ T5934] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  124.300079][ T5934] usb 5-1: device descriptor read/64, error -32
[  124.539871][ T5934] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  124.570135][ T5934] usb 5-1: device descriptor read/8, error -32
[  124.712326][ T6551] netlink: 'syz.4.172': attribute type 1 has an invalid length.
[  125.312803][ T6534] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  125.325572][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout
[  125.334708][ T6534] Bluetooth: hci0: Opcode 0x0406 failed: -110
[  125.473047][ T5938] usb 5-1: USB disconnect, device number 10
[  125.861298][ T6534] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  125.874766][ T6534] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  125.881942][ T6534] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  125.892028][ T6534] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  125.902099][ T6534] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  125.909154][ T6534] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  125.918219][ T6534] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  125.926609][ T6534] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  125.934219][ T6534] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  125.943372][ T6534] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  125.953948][ T6534] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  125.961995][ T6534] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  125.972397][ T6534] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  126.086109][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[  126.229938][ T5919] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  126.242950][   T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  126.379891][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  126.387941][   T43] usb 1-1: device descriptor read/64, error -71
[  126.704130][ T5919] usb 5-1: Using ep0 maxpacket: 32
[  126.764605][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.776112][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.786118][ T5919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  126.795683][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.839109][ T5919] usb 5-1: config 0 descriptor??
[  126.901696][   T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  126.910314][   T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  126.923377][   T24] usb 2-1: config 220 has no interface number 2
[  126.935153][   T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  126.959589][   T24] usb 2-1: config 220 interface 0 has no altsetting 0
[  126.966597][   T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  126.982696][   T24] usb 2-1: config 220 interface 76 has no altsetting 0
[  126.994374][   T24] usb 2-1: config 220 interface 1 has no altsetting 0
[  127.008939][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  127.018380][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.027632][   T24] usb 2-1: Product: syz
[  127.032122][   T24] usb 2-1: Manufacturer: syz
[  127.037076][   T24] usb 2-1: SerialNumber: syz
[  127.175182][   T43] usb 1-1: device descriptor read/64, error -71
[  127.270951][ T5919] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  127.306569][   T43] usb usb1-port1: attempt power cycle
[  127.394103][   T24] usb 2-1: selecting invalid altsetting 0
[  127.420359][   T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  127.428161][   T24] uvcvideo 2-1:220.0: No valid video chain found.
[  127.469931][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.475201][   T24] usb 2-1: selecting invalid altsetting 0
[  127.506056][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'.
[  127.507065][   T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  127.531549][ T6550] fuse: Unknown parameter 'idñ50x0000000000000003'
[  127.606090][   T24] usb 2-1: USB disconnect, device number 19
[  127.628804][ T5900] usb 5-1: USB disconnect, device number 11
[  127.709453][ T6568] ip6gre1: entered promiscuous mode
[  127.727328][ T6568] ip6gre1: entered allmulticast mode
[  127.950579][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout
[  127.956675][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout
[  127.959285][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[  128.039922][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout
[  128.235437][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'.
[  128.244515][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'.
[  128.267091][ T6585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.181'.
[  128.339963][ T5938] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  128.489884][ T5938] usb 2-1: Using ep0 maxpacket: 16
[  128.501398][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.520511][ T5938] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  128.530546][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.555335][ T5938] usb 2-1: config 0 descriptor??
[  128.777757][ T5938] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  128.789922][ T5900] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  128.959834][ T5900] usb 5-1: Using ep0 maxpacket: 32
[  128.967480][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  128.981873][ T5900] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  128.991376][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.999847][ T5900] usb 5-1: Product: syz
[  129.018005][ T5900] usb 5-1: Manufacturer: syz
[  129.028984][ T5900] usb 5-1: SerialNumber: syz
[  129.076514][ T5900] usb 5-1: config 0 descriptor??
[  129.087708][ T6589] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  129.099469][ T5900] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  129.382350][ T5934] usb 5-1: USB disconnect, device number 12
[  129.546438][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout
[  129.587104][ T6589] input: syz0 as /devices/virtual/input/input15
[  130.021693][ T5150] Bluetooth: hci2: command 0x0c1a tx timeout
[  130.027833][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[  130.027916][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout
[  130.099963][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout
[  130.189944][ T5934] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  130.354957][ T5934] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  130.364246][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.376953][ T5934] usb 1-1: config 0 descriptor??
[  130.395841][ T5934] gspca_main: cpia1-2.14.0 probing 0813:0001
[  130.437474][ T6605] loop4: detected capacity change from 0 to 7
[  130.448972][ T6605] Dev loop4: unable to read RDB block 7
[  130.460761][ T6605]  loop4: unable to read partition table
[  130.466903][ T6605] loop4: partition table beyond EOD, truncated
[  130.473486][ T6605] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  130.488470][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'.
[  130.931465][ T5934] gspca_cpia1: usb_control_msg 03, error -71
[  130.942945][ T5934] gspca_cpia1: usb_control_msg 01, error -71
[  130.951300][ T5934] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  130.963504][ T5934] usb 1-1: USB disconnect, device number 22
[  131.100920][ T5917] usb 2-1: USB disconnect, device number 20
[  131.316850][ T6621] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  131.333866][ T6621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.170004][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout
[  132.176300][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout
[  132.183171][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout
[  132.190907][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout
[  132.449896][   T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  132.710568][   T10] usb 1-1: Using ep0 maxpacket: 32
[  132.721455][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  132.739884][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  132.777329][   T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  132.785457][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'.
[  132.798280][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.800856][ T6641] netlink: 'syz.3.199': attribute type 4 has an invalid length.
[  132.825207][ T6641] netlink: 152 bytes leftover after parsing attributes in process `syz.3.199'.
[  132.835176][   T10] usb 1-1: Product: syz
[  132.852876][   T10] usb 1-1: Manufacturer: syz
[  132.857525][   T10] usb 1-1: SerialNumber: syz
[  132.871432][ T6641] .`: renamed from bond0 (while UP)
[  132.880922][   T10] usb 1-1: config 0 descriptor??
[  132.905212][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.919381][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.931703][   T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  133.029941][ T5900] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  133.173238][ T5900] usb 5-1: device descriptor read/64, error -71
[  133.186661][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.195691][ T6637] sctp: [Deprecated]: syz.1.197 (pid 6637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.195691][ T6637] Use struct sctp_sack_info instead
[  133.201893][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.234273][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.244767][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.255411][   T10] usb 1-1: USB disconnect, device number 23
[  133.262299][ T3511] usb 1-1: Failed to submit usb control message: -71
[  133.269309][ T3511] usb 1-1: unable to send the bmi data to the device: -71
[  133.276844][ T3511] usb 1-1: unable to get target info from device
[  133.292809][ T3511] usb 1-1: could not get target info (-71)
[  133.298926][ T3511] usb 1-1: could not probe fw (-71)
[  133.470080][ T5900] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  133.610043][ T5900] usb 5-1: device descriptor read/64, error -71
[  133.731583][ T5900] usb usb5-port1: attempt power cycle
[  134.079854][  T116] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  134.100002][ T5900] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  134.120478][ T5900] usb 5-1: device descriptor read/8, error -71
[  134.242234][  T116] usb 2-1: config 0 has no interfaces?
[  134.385942][  T116] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  134.385975][ T5900] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  134.399016][  T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.420508][  T116] usb 2-1: Product: syz
[  134.430614][ T5900] usb 5-1: device descriptor read/8, error -71
[  134.435194][  T116] usb 2-1: Manufacturer: syz
[  134.447215][  T116] usb 2-1: SerialNumber: syz
[  134.508232][  T116] usb 2-1: config 0 descriptor??
[  134.540267][ T5900] usb usb5-port1: unable to enumerate USB device
[  134.725830][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.766386][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.441904][  T116] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  135.599907][  T116] usb 4-1: Using ep0 maxpacket: 32
[  135.606958][  T116] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  135.616518][  T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.637684][  T116] usb 4-1: config 0 descriptor??
[  135.658886][ T5917] usb 2-1: USB disconnect, device number 21
[  136.073352][  T116] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  136.093036][  T116] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  136.107941][  T116] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  136.125479][  T116] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  136.133113][  T116] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  136.158170][  T116] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  136.206234][  T116] logitech 0003:046D:C29C.0007: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[  136.260403][ T5917] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  136.460184][ T5917] usb 2-1: device descriptor read/64, error -71
[  136.470250][  T116] logitech 0003:046D:C29C.0007: no inputs found
[  136.523964][ T6691] loop7: detected capacity change from 0 to 7
[  136.567853][ T6691] Dev loop7: unable to read RDB block 7
[  136.588505][  T116] usb 4-1: USB disconnect, device number 11
[  136.595845][ T6691]  loop7: unable to read partition table
[  136.597962][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'.
[  136.603444][ T6691] loop7: partition table beyond EOD, truncated
[  136.617477][ T6691] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[  136.746432][ T5917] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  136.890344][ T5917] usb 2-1: device descriptor read/64, error -71
[  137.049114][ T5917] usb usb2-port1: attempt power cycle
[  137.360007][  T116] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  137.429892][ T5917] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  137.450771][ T5917] usb 2-1: device descriptor read/8, error -71
[  137.520407][  T116] usb 1-1: Using ep0 maxpacket: 32
[  137.527284][  T116] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  137.536135][  T116] usb 1-1: config 0 has no interface number 0
[  137.543154][  T116] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  137.600571][  T116] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  137.609834][  T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.618425][   T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  137.639346][  T116] usb 1-1: Product: syz
[  137.723188][ T5917] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  137.747606][  T116] usb 1-1: Manufacturer: syz
[  137.756866][  T116] usb 1-1: SerialNumber: syz
[  137.757191][ T5917] usb 2-1: device descriptor read/8, error -71
[  137.775284][  T116] usb 1-1: config 0 descriptor??
[  137.786702][ T6695] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  137.802134][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  137.810571][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  137.819568][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.830579][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.844699][   T10] usb 4-1: string descriptor 0 read error: -22
[  137.852189][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.862143][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.870155][ T5917] usb usb2-port1: unable to enumerate USB device
[  137.889909][   T10] usb 4-1: 0:2 : does not exist
[  138.000747][ T6695] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  138.401511][ T5917] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  138.559841][ T5917] usb 3-1: Using ep0 maxpacket: 32
[  138.568091][ T5917] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.581689][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0
[  138.588369][ T5917] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  138.597540][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.608123][ T5917] usb 3-1: config 0 descriptor??
[  138.918082][   T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  138.935132][   T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  138.947374][   T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  138.980809][   T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  138.998549][   T10] usb 4-1: USB disconnect, device number 12
[  139.030725][ T5917] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0
[  139.041390][ T5917] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0
[  139.048708][ T5917] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0
[  139.072324][ T5917] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0
[  139.114107][ T5917] lenovo 0003:17EF:6009.0008: hidraw0: USB HID v4.06 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0
[  139.234531][ T5917] usb 3-1: USB disconnect, device number 12
[  139.505106][ T5900] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  139.634657][ T6720] syzkaller0: entered promiscuous mode
[  139.640355][ T6720] syzkaller0: entered allmulticast mode
[  139.675823][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  139.687160][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.697124][ T5900] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  139.706519][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.722975][ T5900] usb 2-1: config 0 descriptor??
[  140.472642][ T6726] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  140.666716][  T116] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  140.686711][  T116] asix 1-1:0.188: probe with driver asix failed with error -71
[  140.716557][  T116] usb 1-1: USB disconnect, device number 24
[  141.661210][ T5938] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  141.740385][ T6744] loop7: detected capacity change from 0 to 7
[  141.764500][ T6744] Dev loop7: unable to read RDB block 7
[  141.772720][ T6744]  loop7: unable to read partition table
[  141.819393][ T6744] loop7: partition table beyond EOD, truncated
[  141.832773][ T5938] usb 3-1: Using ep0 maxpacket: 32
[  141.837985][ T6744] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[  141.852441][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'.
[  141.902807][ T5938] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  141.954881][ T5938] usb 3-1: config 0 has no interface number 0
[  141.966206][ T5938] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  142.216663][ T5938] usb 3-1: config 0 interface 196 has no altsetting 0
[  142.237787][ T5938] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  142.247578][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.258737][ T5938] usb 3-1: Product: syz
[  142.275932][ T5900] usbhid 2-1:0.0: can't add hid device: -71
[  142.277446][ T5938] usb 3-1: Manufacturer: syz
[  142.287177][ T5900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  142.302017][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  142.356943][ T5900] usb 2-1: USB disconnect, device number 26
[  142.589892][   T24] usb 1-1: Using ep0 maxpacket: 32
[  142.630276][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.837511][ T5938] usb 3-1: SerialNumber: syz
[  142.842566][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.842746][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.137444][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.188238][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.211583][   T24] usb 1-1: Product: syz
[  143.456506][   T24] usb 1-1: Manufacturer: syz
[  143.460765][ T5938] usb 3-1: config 0 descriptor??
[  143.474929][   T24] usb 1-1: SerialNumber: syz
[  143.512598][   T24] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  143.609642][   T24] cdc_ncm 1-1:1.0: bind() failure
[  143.760791][ T6731] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  144.479836][ T5900] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  144.761622][ T5900] usb 2-1: config 0 has an invalid interface number: 114 but max is 0
[  144.820174][ T5900] usb 2-1: config 0 has no interface number 0
[  144.826528][ T5900] usb 2-1: config 0 interface 114 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8
[  144.839956][ T5917] usb 1-1: USB disconnect, device number 25
[  144.852794][ T5900] usb 2-1: config 0 interface 114 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  144.882596][ T5900] usb 2-1: config 0 interface 114 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  144.934320][ T5900] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=28.fd
[  145.011928][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.041610][ T5900] usb 2-1: Product: syz
[  145.045912][ T5900] usb 2-1: Manufacturer: syz
[  145.054183][ T5900] usb 2-1: SerialNumber: syz
[  145.070999][ T5900] usb 2-1: config 0 descriptor??
[  145.079158][ T6762] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  145.431295][ T6770] program syz.3.234 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  146.149259][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'.
[  146.299935][  T116] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  146.334100][ T6786] syzkaller0: entered promiscuous mode
[  146.342867][ T6786] syzkaller0: entered allmulticast mode
[  146.451855][  T116] usb 1-1: Using ep0 maxpacket: 16
[  146.538284][  T116] usb 1-1: config 0 has no interfaces?
[  146.548353][  T116] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  146.558118][  T116] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  146.561024][ T6792] fuse: Bad value for 'fd'
[  146.566711][  T116] usb 1-1: Manufacturer: syz
[  146.592335][  T116] usb 1-1: config 0 descriptor??
[  147.209951][   T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  147.372868][   T43] usb 5-1: Using ep0 maxpacket: 32
[  147.380201][   T43] usb 5-1: config 252 has an invalid interface number: 34 but max is 0
[  147.389166][   T43] usb 5-1: config 252 has no interface number 0
[  147.397278][   T43] usb 5-1: config 252 interface 34 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  147.443305][ T5900] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  147.512760][   T43] usb 5-1: New USB device found, idVendor=055f, idProduct=c440, bcdDevice=4f.ea
[  147.525576][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.554189][   T43] usb 5-1: Product: syz
[  147.565378][ T5900] snd-usb-audio 2-1:0.114: probe with driver snd-usb-audio failed with error -2
[  147.586038][   T43] usb 5-1: Manufacturer: syz
[  147.597786][   T43] usb 5-1: SerialNumber: syz
[  147.627265][ T5900] usb 2-1: USB disconnect, device number 27
[  147.661510][   T43] gspca_main: sunplus-2.14.0 probing 055f:c440
[  147.705665][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.114/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.869524][   T43] gspca_sunplus: reg_r err -71
[  147.998538][   T43] sunplus 5-1:252.34: probe with driver sunplus failed with error -71
[  148.155491][ T6802] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  148.164676][ T5916] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  148.204326][  T116] IPVS: starting estimator thread 0...
[  148.212863][   T43] usb 5-1: USB disconnect, device number 17
[  148.300260][ T6803] IPVS: using max 49 ests per chain, 117600 per kthread
[  148.334640][ T5938] usb 3-1: USB disconnect, device number 13
[  149.269322][ T5938] usb 1-1: USB disconnect, device number 26
[  149.384188][   T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  149.688076][   T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  149.731947][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.780249][   T43] usb 3-1: Product: syz
[  149.809880][   T43] usb 3-1: Manufacturer: syz
[  149.814673][   T43] usb 3-1: SerialNumber: syz
[  150.393595][ T6781] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  150.506993][   T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  150.556178][   T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  150.815945][ T6824] loop7: detected capacity change from 0 to 7
[  150.851333][ T6824] Dev loop7: unable to read RDB block 7
[  150.860420][ T6824]  loop7: unable to read partition table
[  150.867405][ T6824] loop7: partition table beyond EOD, truncated
[  150.874059][ T6824] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[  150.969563][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'.
[  151.410147][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.469708][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.000996][ T5916] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  152.157191][ T6841] mmap: syz.0.249 (6841) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  152.220014][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  152.226508][ T6843] fuse: Bad value for 'fd'
[  152.236809][ T5916] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  152.263093][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.316914][ T5916] pvrusb2: Hardware description: Terratec Grabster AV400
[  152.355863][ T5916] pvrusb2: **********
[  152.383855][ T5916] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  152.428346][ T5916] pvrusb2: Important functionality might not be entirely working.
[  152.493465][   T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE
[  152.676127][ T5916] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  152.689537][ T6851] syz.4.250 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  152.697763][ T5916] pvrusb2: **********
[  152.735102][   T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  152.736174][ T2345] pvrusb2: Invalid write control endpoint
[  152.817070][   T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  152.863976][   T43] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  152.885378][   T43] usb 3-1: USB disconnect, device number 14
[  152.962720][ T2345] pvrusb2: Invalid write control endpoint
[  152.968732][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  152.984043][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  153.043618][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  153.093484][ T2345] pvrusb2: Device being rendered inoperable
[  153.126949][   T24] usb 2-1: USB disconnect, device number 29
[  153.137160][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  153.165511][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  153.202556][ T2345] pvrusb2: Attached sub-driver cx25840
[  153.245970][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  153.309873][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  153.464286][ T6859] netlink: 92 bytes leftover after parsing attributes in process `syz.4.252'.
[  153.825611][ T6861] syzkaller0: entered promiscuous mode
[  153.832414][ T6861] syzkaller0: entered allmulticast mode
[  154.270799][ T5150] Bluetooth: unknown link type 236
[  154.277170][ T5150] Bluetooth: hci1: connection err: -111
[  154.290683][  T116] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  154.299884][   T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  154.452911][  T116] usb 3-1: config 0 has an invalid interface number: 172 but max is 0
[  154.462511][  T116] usb 3-1: config 0 has no interface number 0
[  154.475400][   T43] usb 1-1: Using ep0 maxpacket: 32
[  154.480287][  T116] usb 3-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de
[  154.482959][   T43] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  154.490649][  T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.506202][   T43] usb 1-1: config 0 has no interface number 0
[  154.508956][   T43] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  154.512628][  T116] usb 3-1: Product: syz
[  154.531011][  T116] usb 3-1: Manufacturer: syz
[  154.531196][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.535680][  T116] usb 3-1: SerialNumber: syz
[  154.549694][  T116] usb 3-1: config 0 descriptor??
[  154.568733][  T116] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state.
[  154.573161][   T43] usb 1-1: Product: syz
[  154.600030][   T43] usb 1-1: Manufacturer: syz
[  154.604675][   T43] usb 1-1: SerialNumber: syz
[  154.604917][  T116] dvb-usb: bulk message failed: -22 (4/0)
[  154.618719][  T116] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  154.629347][  T116] dvb-usb: bulk message failed: -22 (5/0)
[  154.636200][  T116] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  154.667507][   T43] usb 1-1: config 0 descriptor??
[  154.701911][  T116] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  154.702237][   T43] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  154.732832][  T116] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19)
[  154.799191][ T5900] usb 3-1: USB disconnect, device number 15
[  154.848812][ T6873] netlink: 'syz.3.257': attribute type 27 has an invalid length.
[  154.916992][   T43] usb 1-1: qt2_attach - failed to power on unit: -71
[  154.967434][   T30] audit: type=1400 audit(1764095792.055:2421): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  154.990495][   T43] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[  155.082229][    C1] vkms_vblank_simulate: vblank timer overrun
[  155.120757][   T43] usb 1-1: USB disconnect, device number 27
[  155.499864][ T5900] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  155.659859][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  155.677881][ T5900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  155.686347][ T5900] usb 4-1: config 0 has no interface number 0
[  155.706933][ T5900] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  155.716261][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.724842][ T5900] usb 4-1: Product: syz
[  155.729083][ T5900] usb 4-1: Manufacturer: syz
[  155.733924][ T5900] usb 4-1: SerialNumber: syz
[  155.750265][ T6884] capability: warning: `syz.0.260' uses deprecated v2 capabilities in a way that may be insecure
[  155.754006][ T5900] usb 4-1: config 0 descriptor??
[  155.782120][ T5900] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  155.801007][ T6883] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[  156.111614][ T5916] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  156.251171][ T6886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.261'.
[  156.296437][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short
[  156.300018][ T5900] gspca_spca1528: reg_w err -110
[  156.305487][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  156.329903][ T5900] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  156.388164][ T5916] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  156.417219][ T5916] usb 3-1: config 1 interface 0 has no altsetting 0
[  156.430535][ T5916] usb 3-1: config 1 interface 0 has no altsetting 1
[  156.447537][ T5916] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  156.460597][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.489014][ T5916] usb 3-1: Product: syz
[  156.495024][ T5916] usb 3-1: Manufacturer: syz
[  156.506110][ T5916] usb 3-1: SerialNumber: syz
[  156.809897][ T5900] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  156.875416][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.883569][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.980394][ T5900] usb 1-1: Using ep0 maxpacket: 8
[  156.987794][ T5900] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  157.005257][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.036208][ T5900] pvrusb2: Hardware description: Terratec Grabster AV400
[  157.057017][ T5900] pvrusb2: **********
[  157.072327][ T5900] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  157.085811][ T5900] pvrusb2: Important functionality might not be entirely working.
[  157.094594][ T5900] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  157.107056][ T5900] pvrusb2: **********
[  157.185869][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.225026][ T2345] pvrusb2: Invalid write control endpoint
[  157.235251][ T6897] syz.1.264 (6897): drop_caches: 0
[  157.258304][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.341864][ T2345] pvrusb2: Invalid write control endpoint
[  157.355291][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  157.372354][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  157.383137][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  157.395139][ T2345] pvrusb2: Device being rendered inoperable
[  157.401319][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  157.437684][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  157.438575][ T5900] usb 1-1: USB disconnect, device number 28
[  157.454490][ T2345] pvrusb2: Attached sub-driver cx25840
[  157.462093][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  157.487022][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  157.757401][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[  157.775872][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[  158.031627][ T6878] bridge0: port 3(syz_tun) entered blocking state
[  158.038764][ T6878] bridge0: port 3(syz_tun) entered disabled state
[  158.051023][ T6878] syz_tun: entered allmulticast mode
[  158.064505][ T6878] syz_tun: entered promiscuous mode
[  158.166421][ T5900] usb 4-1: USB disconnect, device number 13
[  158.179260][   T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.210318][   T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.219326][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.449996][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.679876][ T5938] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  158.778514][ T6920] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.796654][ T5916] smsusb:smsusb_probe: board id=8, interface number 0
[  158.803690][ T5916] usb 3-1: selecting invalid altsetting 0
[  158.815557][ T5916] smsusb:smsusb_probe: usb_set_interface failed, rc -22
[  158.832969][ T5916] smsusb 3-1:1.0: probe with driver smsusb failed with error -22
[  158.870185][ T5938] usb 1-1: Using ep0 maxpacket: 8
[  158.882478][ T5916] usb 3-1: USB disconnect, device number 16
[  158.914701][ T5938] usb 1-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config
[  158.927129][ T5938] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  159.040307][ T5938] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.02
[  159.040338][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.046309][ T5938] usb 1-1: config 0 descriptor??
[  159.495782][ T6935] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  159.605845][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.615446][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.845553][ T5900] usb 1-1: USB disconnect, device number 29
[  160.449993][ T5938] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  160.511769][ T6950] bridge1: entered promiscuous mode
[  160.622366][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[  160.889830][ T5938] usb 5-1: Using ep0 maxpacket: 8
[  160.899092][ T5938] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  160.964988][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.008282][ T5938] usb 5-1: Product: syz
[  161.021603][ T5938] usb 5-1: Manufacturer: syz
[  161.032808][ T5938] usb 5-1: SerialNumber: syz
[  161.049238][ T5938] usb 5-1: config 0 descriptor??
[  161.337264][ T5938] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  162.000433][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.024544][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.142421][ T5938] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  162.155467][ T5938] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  162.167181][ T5938] usb 5-1: USB disconnect, device number 18
[  163.200606][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.283'.
[  163.475638][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.286'.
[  163.779837][ T5938] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  163.919861][ T5938] usb 4-1: device descriptor read/64, error -71
[  164.084992][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'.
[  164.169832][ T5938] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  164.312423][ T5938] usb 4-1: device descriptor read/64, error -71
[  164.440344][ T5938] usb usb4-port1: attempt power cycle
[  164.566877][ T6990] TCP: TCP_TX_DELAY enabled
[  164.587770][ T5916] IPVS: starting estimator thread 0...
[  164.699878][ T6995] IPVS: using max 50 ests per chain, 120000 per kthread
[  164.802587][ T5938] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  164.830520][ T5938] usb 4-1: device descriptor read/8, error -71
[  164.980206][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  165.069862][ T5938] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  165.090682][ T5938] usb 4-1: device descriptor read/8, error -71
[  165.121822][   T10] usb 1-1: device descriptor read/64, error -71
[  165.169853][ T5916] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  165.200115][ T5938] usb usb4-port1: unable to enumerate USB device
[  165.321878][ T5916] usb 5-1: config 1 interface 0 has no altsetting 0
[  165.330921][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  165.340436][ T5934] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  165.348598][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.358323][ T5916] usb 5-1: Product: syz
[  165.362588][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  165.371008][ T5916] usb 5-1: Manufacturer: syz
[  165.375680][ T5916] usb 5-1: SerialNumber: syz
[  165.519968][   T10] usb 1-1: device descriptor read/64, error -71
[  165.529322][ T5934] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  165.538542][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.546739][ T5934] usb 2-1: Product: syz
[  165.551102][ T5934] usb 2-1: Manufacturer: syz
[  165.555803][ T5934] usb 2-1: SerialNumber: syz
[  165.569013][ T5934] usb 2-1: config 0 descriptor??
[  165.577168][ T5934] ch341 2-1:0.0: ch341-uart converter detected
[  165.630205][   T10] usb usb1-port1: attempt power cycle
[  165.800098][ T5916] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  165.814127][ T5934] usb 2-1: failed to receive control message: -121
[  165.820902][ T5934] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  165.989912][   T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  166.027242][   T10] usb 1-1: device descriptor read/8, error -71
[  166.212058][ T5917] usb 5-1: USB disconnect, device number 19
[  166.236406][ T5917] usblp0: removed
[  166.251254][ T5900] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  166.279900][   T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  166.306025][   T10] usb 1-1: device descriptor read/8, error -71
[  166.411491][ T5900] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  166.420359][ T5900] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  166.428437][ T5900] usb 3-1: config 0 has no interface number 0
[  166.430618][   T10] usb usb1-port1: unable to enumerate USB device
[  166.435130][ T5900] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  166.451200][ T5900] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  166.461348][ T5900] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  166.470780][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.482433][ T5900] usb 3-1: config 0 descriptor??
[  166.554915][ T7024] netlink: 'syz.3.298': attribute type 7 has an invalid length.
[  166.709943][ T5917] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  166.861685][ T5917] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  166.871146][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.881342][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  166.890616][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.906890][ T5900] usb 3-1: USB disconnect, device number 17
[  166.918606][ T5917] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  166.931737][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  166.939949][ T5917] usb 5-1: Product: syz
[  166.944164][ T5917] usb 5-1: Manufacturer: syz
[  166.953588][ T5917] cdc_wdm 5-1:1.0: skipping garbage
[  166.958915][ T5917] cdc_wdm 5-1:1.0: skipping garbage
[  166.965502][ T5917] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  167.039873][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  167.155911][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.165961][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.189889][   T10] usb 4-1: Using ep0 maxpacket: 32
[  167.197136][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  167.205893][   T10] usb 4-1: config 0 has no interface number 0
[  167.212707][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[  167.222331][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  167.232091][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.240288][   T10] usb 4-1: Product: syz
[  167.244464][   T10] usb 4-1: Manufacturer: syz
[  167.249155][   T10] usb 4-1: SerialNumber: syz
[  167.255995][   T10] usb 4-1: config 0 descriptor??
[  167.263211][   T10] smsc75xx v1.0.0
[  167.561691][ T7039] usb usb8: usbfs: process 7039 (syz.2.301) did not claim interface 6 before use
[  167.868469][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  167.879546][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  168.146211][ T5900] usb 2-1: USB disconnect, device number 30
[  168.154007][ T5900] ch341 2-1:0.0: device disconnected
[  169.471759][ T7058] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  169.479697][ T7055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  169.550629][ T5934] usb 5-1: USB disconnect, device number 20
[  170.026788][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  170.077099][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  170.117742][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  170.511701][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  170.548950][   T10] usb 4-1: USB disconnect, device number 18
[  170.567236][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'.
[  170.569491][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'.
[  170.622026][ T7071] binder: 7064:7071 ioctl c0306201 0 returned -14
[  170.751578][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'.
[  171.039876][ T5934] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  171.189982][ T5934] usb 2-1: device descriptor read/64, error -71
[  171.327113][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'.
[  171.429956][ T5934] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  171.539858][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  171.560012][ T5934] usb 2-1: device descriptor read/64, error -71
[  171.699928][   T10] usb 5-1: Using ep0 maxpacket: 8
[  171.715937][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  171.726289][ T5934] usb usb2-port1: attempt power cycle
[  171.740719][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.751620][   T10] usb 5-1: Product: syz
[  171.755794][   T10] usb 5-1: Manufacturer: syz
[  171.771729][   T10] usb 5-1: SerialNumber: syz
[  171.781681][   T10] usb 5-1: config 0 descriptor??
[  171.792480][ T7102] fuse: Unknown parameter ' '
[  171.989462][   T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  172.040105][   T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  172.068232][   T10] usb 5-1: USB disconnect, device number 21
[  172.110940][ T5934] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  172.153442][ T5934] usb 2-1: device descriptor read/8, error -71
[  172.461847][ T5934] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  172.510606][ T5934] usb 2-1: device descriptor read/8, error -71
[  172.529899][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  172.620101][ T5934] usb usb2-port1: unable to enumerate USB device
[  172.629143][ T7109] syzkaller1: entered promiscuous mode
[  172.635184][ T7109] syzkaller1: entered allmulticast mode
[  172.726910][   T10] usb 5-1: Using ep0 maxpacket: 16
[  172.760045][   T10] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  172.769126][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.790063][   T10] usb 5-1: Product: syz
[  172.794295][   T10] usb 5-1: Manufacturer: syz
[  172.798891][   T10] usb 5-1: SerialNumber: syz
[  172.846836][   T10] usb 5-1: config 0 descriptor??
[  173.056808][   T10] usb 5-1: ignoring: not an USB2CAN converter
[  173.266471][ T5917] usb 5-1: USB disconnect, device number 22
[  173.362957][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'.
[  173.466838][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.475754][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.749966][ T5900] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  173.902168][ T5900] usb 1-1: unable to get BOS descriptor or descriptor too short
[  173.912766][ T5900] usb 1-1: not running at top speed; connect to a high speed hub
[  173.923990][ T5900] usb 1-1: config 9 has an invalid interface number: 207 but max is 0
[  173.941180][ T5900] usb 1-1: config 9 has no interface number 0
[  173.947434][ T5900] usb 1-1: config 9 interface 207 has no altsetting 0
[  173.971183][ T5900] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  173.980366][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.988583][ T5900] usb 1-1: Product: syz
[  173.993027][ T5900] usb 1-1: Manufacturer: syz
[  173.997746][ T5900] usb 1-1: SerialNumber: syz
[  174.094496][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  174.130149][   T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  174.221706][   T30] audit: type=1326 audit(1764095811.315:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  174.243668][ T5900] usb 1-1: USB disconnect, device number 34
[  174.252510][   T30] audit: type=1326 audit(1764095811.315:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  174.280132][   T24] usb 3-1: Using ep0 maxpacket: 16
[  174.290189][   T24] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  174.300041][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.313551][   T24] usb 3-1: config 0 has no interface number 0
[  174.321009][   T43] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  174.336920][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.347728][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  174.353842][   T30] audit: type=1326 audit(1764095811.315:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  174.359580][   T43] usb 5-1: config 0 descriptor??
[  174.399505][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.418336][   T24] usb 3-1: Product: syz
[  174.419556][   T30] audit: type=1326 audit(1764095811.315:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fa758f34b code=0x7ffc0000
[  174.426536][   T24] usb 3-1: Manufacturer: syz
[  174.474660][   T30] audit: type=1326 audit(1764095811.315:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  174.475541][   T24] usb 3-1: SerialNumber: syz
[  174.508043][   T43] cp210x 5-1:0.0: cp210x converter detected
[  174.518740][   T30] audit: type=1326 audit(1764095811.315:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  174.545051][   T24] usb 3-1: config 0 descriptor??
[  174.554056][   T24] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  174.561773][   T24] uvcvideo 3-1:0.105: No valid video chain found.
[  174.636902][ T7139] program syz.3.331 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  174.730884][   T43] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  174.739365][   T43] cp210x 5-1:0.0: querying part number failed
[  174.749341][   T43] usb 5-1: cp210x converter now attached to ttyUSB0
[  174.949901][ T5934] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  175.008925][ T7149] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.133228][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short
[  175.144276][ T5934] usb 4-1: not running at top speed; connect to a high speed hub
[  175.156544][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.167339][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.189377][ T5934] usb 4-1: string descriptor 0 read error: -22
[  175.210154][ T5934] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.219330][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.415544][ T5934] usb 4-1: 0:2 : does not exist
[  175.558730][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'.
[  175.605996][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.621252][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.355613][ T5934] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  176.393874][ T5934] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  176.429176][ T5934] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  176.477651][ T5934] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  176.491723][ T5934] usb 4-1: USB disconnect, device number 19
[  176.589998][   T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  176.739884][   T24] usb 1-1: Using ep0 maxpacket: 32
[  176.746867][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.758009][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.767911][   T24] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  176.777326][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.787448][   T24] usb 1-1: config 0 descriptor??
[  176.835577][   T43] usb 3-1: USB disconnect, device number 18
[  177.064963][ T5934] usb 5-1: USB disconnect, device number 23
[  177.095476][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  177.129635][ T7181] fuse: Bad value for 'fd'
[  177.156617][ T5934] cp210x 5-1:0.0: device disconnected
[  177.214556][   T30] audit: type=1326 audit(1764095814.305:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  177.237038][    C1] vkms_vblank_simulate: vblank timer overrun
[  177.248629][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.301921][   T30] audit: type=1326 audit(1764095814.305:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  177.366875][   T30] audit: type=1326 audit(1764095814.305:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  177.413208][   T30] audit: type=1326 audit(1764095814.305:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa758f749 code=0x7ffc0000
[  177.435536][    C1] vkms_vblank_simulate: vblank timer overrun
[  177.450332][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.625735][   T24] smartjoyplus 0003:0925:8866.0009: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0
[  177.666487][   T24] smartjoyplus 0003:0925:8866.0009: Force feedback for SmartJoy PLUS PS2/USB adapter
[  177.780769][   T10] usb 1-1: USB disconnect, device number 35
[  177.823044][ T7194] fido_id[7194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  177.888942][ T7190] bond0: entered allmulticast mode
[  177.920456][ T7190] bond_slave_0: entered allmulticast mode
[  177.926208][ T7190] bond_slave_1: entered allmulticast mode
[  177.950882][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[  178.053985][ T7192] bond0: (slave bond_slave_1): Releasing backup interface
[  178.061990][ T7192] bond_slave_1 (unregistering): left allmulticast mode
[  178.280821][ T7201] netlink: 'syz.3.348': attribute type 11 has an invalid length.
[  178.309792][ T7188] bond0: left allmulticast mode
[  178.317908][ T7188] bond_slave_0: left allmulticast mode
[  178.344855][ T7201] xt_CT: You must specify a L4 protocol and not use inversions on it
[  178.554028][ T5900] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  178.639071][ T7218] netlink: 68 bytes leftover after parsing attributes in process `syz.3.353'.
[  178.699864][ T5900] usb 5-1: device descriptor read/64, error -71
[  178.799867][ T5934] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[  178.940724][ T5900] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  178.961647][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  178.972814][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.983048][ T5934] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  178.992850][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.003088][ T5934] usb 2-1: config 0 descriptor??
[  179.069891][ T5900] usb 5-1: device descriptor read/64, error -71
[  179.181085][ T5900] usb usb5-port1: attempt power cycle
[  179.225110][ T7212] tipc: Started in network mode
[  179.230281][ T7212] tipc: Node identity ac14142f, cluster identity 4711
[  179.237910][ T7212] tipc: New replicast peer: 0.0.0.0
[  179.244484][ T7212] tipc: Enabled bearer <udp:syz2>, priority 10
[  179.253144][ T7212] tipc: New replicast peer: 255.255.255.255
[  179.491554][ T5934] glorious 0003:258A:0036.000A: item fetching failed at offset 1/2
[  179.519342][ T5934] glorious 0003:258A:0036.000A: probe with driver glorious failed with error -22
[  179.521529][ T5900] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  179.536529][   T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  179.580413][ T5900] usb 5-1: device descriptor read/8, error -71
[  179.677579][ T5934] usb 2-1: USB disconnect, device number 36
[  179.679912][   T43] usb 3-1: device descriptor read/64, error -71
[  179.763721][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'.
[  179.820009][ T5900] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  179.848487][ T5900] usb 5-1: device descriptor read/8, error -71
[  179.940179][   T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  179.960089][ T5900] usb usb5-port1: unable to enumerate USB device
[  180.070106][   T43] usb 3-1: device descriptor read/64, error -71
[  180.181196][   T43] usb usb3-port1: attempt power cycle
[  180.361997][   T24] tipc: Node number set to 2886997039
[  180.394266][ T7252] syzkaller0: entered promiscuous mode
[  180.402718][ T7252] syzkaller0: entered allmulticast mode
[  180.410847][ T7247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.437960][ T7255] ipt_REJECT: TCP_RESET invalid for non-tcp
[  180.550033][   T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  180.570312][   T43] usb 3-1: device descriptor read/8, error -71
[  180.689871][ T5900] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  180.809862][   T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  180.833540][   T43] usb 3-1: device descriptor read/8, error -71
[  180.849943][ T5900] usb 1-1: Using ep0 maxpacket: 32
[  180.864556][ T7255] 8021q: VLANs not supported on nlmon0
[  180.874637][ T5900] usb 1-1: unable to get BOS descriptor or descriptor too short
[  180.883485][ T5900] usb 1-1: no configurations
[  180.888101][ T5900] usb 1-1: can't read configurations, error -22
[  180.950172][   T43] usb usb3-port1: unable to enumerate USB device
[  180.974908][ T7245] tipc: Resetting bearer <eth:syzkaller0>
[  180.995567][ T7245] tipc: Disabling bearer <eth:syzkaller0>
[  181.490133][ T5934] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  181.533238][ T7277] netlink: 'syz.0.371': attribute type 13 has an invalid length.
[  181.542053][ T7277] veth0_macvtap: left promiscuous mode
[  181.549058][ T7277] macvtap0: entered promiscuous mode
[  181.554464][ T7277] macvtap0: entered allmulticast mode
[  181.639313][ T7282] syzkaller0: entered promiscuous mode
[  181.647232][ T7282] syzkaller0: entered allmulticast mode
[  181.656908][ T7281] tipc: Started in network mode
[  181.661898][ T5934] usb 2-1: Using ep0 maxpacket: 8
[  181.667625][ T7281] tipc: Node identity , cluster identity 4711
[  181.674922][ T7281] tipc: Failed to obtain node identity
[  181.680689][ T7281] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  181.681258][ T5934] usb 2-1: config 14 has an invalid interface number: 24 but max is 3
[  181.698006][ T5934] usb 2-1: config 14 has an invalid interface number: 170 but max is 3
[  181.708680][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'.
[  181.710340][ T5934] usb 2-1: config 14 has an invalid interface number: 6 but max is 3
[  181.736094][ T5934] usb 2-1: config 14 has an invalid interface number: 248 but max is 3
[  181.747853][ T5934] usb 2-1: config 14 has no interface number 0
[  181.757004][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'.
[  181.766556][ T5934] usb 2-1: config 14 has no interface number 1
[  181.775690][ T5934] usb 2-1: config 14 has no interface number 2
[  181.791753][ T5934] usb 2-1: config 14 has no interface number 3
[  181.798170][ T5934] usb 2-1: config 14 interface 24 altsetting 9 endpoint 0xD has invalid maxpacket 104, setting to 64
[  181.809612][ T5934] usb 2-1: config 14 interface 24 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  181.821061][ T5934] usb 2-1: config 14 interface 24 altsetting 9 endpoint 0x4 has an invalid bInterval 217, changing to 7
[  181.832703][ T5934] usb 2-1: config 14 interface 24 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  181.849678][ T5934] usb 2-1: config 14 interface 170 altsetting 41 has a duplicate endpoint with address 0x4, skipping
[  181.873802][ T5934] usb 2-1: config 14 interface 170 altsetting 41 has a duplicate endpoint with address 0x2, skipping
[  181.891708][ T5934] usb 2-1: config 14 interface 170 altsetting 41 has a duplicate endpoint with address 0xC, skipping
[  181.914594][ T5934] usb 2-1: config 14 interface 248 altsetting 57 endpoint 0x8 has an invalid bInterval 127, changing to 7
[  181.926649][ T5934] usb 2-1: config 14 interface 248 altsetting 57 endpoint 0xF has invalid maxpacket 512, setting to 64
[  181.941148][ T5934] usb 2-1: config 14 interface 248 altsetting 57 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[  181.954981][ T5934] usb 2-1: config 14 interface 248 altsetting 57 has a duplicate endpoint with address 0x4, skipping
[  181.982317][ T5934] usb 2-1: config 14 interface 248 altsetting 57 endpoint 0xA has invalid maxpacket 39831, setting to 64
[  182.001813][ T5934] usb 2-1: config 14 interface 24 has no altsetting 0
[  182.011171][ T5934] usb 2-1: config 14 interface 170 has no altsetting 0
[  182.021002][ T5934] usb 2-1: config 14 interface 6 has no altsetting 0
[  182.029485][ T5934] usb 2-1: config 14 interface 248 has no altsetting 0
[  182.041416][ T5934] usb 2-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=e4.b2
[  182.063266][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.074846][ T5934] usb 2-1: Product: Л
[  182.129826][ T5934] usb 2-1: Manufacturer:  
[  182.134564][ T5934] usb 2-1: SerialNumber: и
[  182.381357][ T5934] iowarrior 2-1:14.24: no interrupt-in endpoint found
[  182.396437][ T5934] iowarrior 2-1:14.170: no interrupt-in endpoint found
[  182.408940][ T5934] iowarrior 2-1:14.6: no interrupt-in endpoint found
[  182.419976][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  182.436517][ T5934] iowarrior 2-1:14.248: no interrupt-in endpoint found
[  182.453315][ T5934] usb 2-1: USB disconnect, device number 37
[  182.591775][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  182.601763][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.614325][   T10] usb 4-1: config 0 descriptor??
[  182.625125][   T10] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  184.706216][ T5934] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  184.829872][   T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  184.838692][    C1] raw-gadget.2 gadget.2: ignoring, device is not running
[  184.970826][   T24] usb 3-1: device descriptor read/64, error -32
[  185.296241][   T10] usb 4-1: USB disconnect, device number 20
[  185.320240][   T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  185.320796][ T5934] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  185.362924][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.389715][ T5934] usb 5-1: config 0 descriptor??
[  185.414258][ T5934] cp210x 5-1:0.0: cp210x converter detected
[  185.473349][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  185.473361][   T30] audit: type=1800 audit(1764095822.565:2451): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.390" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  185.650355][   T24] usb 3-1: Using ep0 maxpacket: 16
[  185.751891][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  185.809892][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  185.824170][ T5934] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  185.866638][ T5934] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121
[  185.908858][ T5934] cp210x 5-1:0.0: GPIO initialisation failed: -121
[  185.929677][ T5934] usb 5-1: cp210x converter now attached to ttyUSB0
[  186.191712][   T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  186.202259][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  186.291398][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.325992][   T24] usb 3-1: Product: syz
[  186.350044][   T24] usb 3-1: Manufacturer: syz
[  186.354711][   T24] usb 3-1: SerialNumber: syz
[  186.387443][   T24] usb 3-1: config 0 descriptor??
[  186.429002][   T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  186.453576][   T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  186.481092][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.494276][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.520108][   T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  186.549491][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.672008][   T43] usb 4-1: config 0 descriptor??
[  187.109363][   T43] hid_parser_main: 1 callbacks suppressed
[  187.109385][   T43] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  187.154781][   T43] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  187.180403][ T5900] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  187.239424][ T5934] usb 5-1: USB disconnect, device number 28
[  187.247604][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  187.266275][ T5934] cp210x 5-1:0.0: device disconnected
[  187.300563][   T24] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  187.362011][   T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  187.371546][   T43] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE
[  187.392446][   T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  187.399440][   T24] em28xx 3-1:0.0: No AC97 audio processor
[  187.494968][ T7362] loop2: detected capacity change from 0 to 7
[  187.507555][ T7362] Dev loop2: unable to read RDB block 7
[  187.515521][ T7362]  loop2: AHDI p1 p2 p3
[  187.521391][ T7362] loop2: partition table partially beyond EOD, truncated
[  187.536209][ T7362] loop2: p1 start 1601398130 is beyond EOD, truncated
[  187.587449][ T7362] loop2: p2 start 1702059890 is beyond EOD, truncated
[  187.587539][   T43] cp2112 0003:10C4:EA90.000B: error requesting SMBus config
[  187.614631][ T5900] usb 2-1: device descriptor read/64, error -71
[  187.638113][   T43] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -5
[  187.679972][   T24] usb 3-1: USB disconnect, device number 24
[  187.740106][   T24] em28xx 3-1:0.0: Disconnecting em28xx
[  187.816355][   T24] em28xx 3-1:0.0: Freeing device
[  187.857358][ T5200] Dev loop2: unable to read RDB block 7
[  187.863079][ T5200]  loop2: AHDI p1 p2 p3
[  187.869602][ T5200] loop2: partition table partially beyond EOD, truncated
[  187.881539][ T7363] bond1: option ad_select: invalid value (253)
[  187.906898][ T5200] loop2: p1 start 1601398130 is beyond EOD, truncated
[  187.919657][ T7363] bond1 (unregistering): Released all slaves
[  187.919863][ T5900] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  187.933989][ T5200] loop2: p2 start 1702059890 is beyond EOD, truncated
[  188.199885][ T5900] usb 2-1: device descriptor read/64, error -71
[  188.310156][ T5900] usb usb2-port1: attempt power cycle
[  188.679841][ T5900] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  188.701876][ T5900] usb 2-1: device descriptor read/8, error -71
[  188.941031][ T7385] loop7: detected capacity change from 0 to 7
[  188.949896][ T5900] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  188.972991][ T7385] Dev loop7: unable to read RDB block 7
[  188.978676][ T7385]  loop7: unable to read partition table
[  188.985352][ T7385] loop7: partition table beyond EOD, truncated
[  188.991687][ T7385] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[  189.016493][ T5900] usb 2-1: device descriptor read/8, error -71
[  189.032628][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'.
[  189.140103][ T5900] usb usb2-port1: unable to enumerate USB device
[  189.387817][ T7384] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.396731][ T7384] bond0: (slave bond1): Enslaving as an active interface with an up link
[  189.890339][ T5934] usb 4-1: USB disconnect, device number 21
[  190.326583][ T7407] QAT: failed to copy from user.
[  190.336196][ T7407] netlink: 56 bytes leftover after parsing attributes in process `syz.1.403'.
[  190.779340][ T7419] netlink: 200 bytes leftover after parsing attributes in process `syz.0.407'.
[  192.509877][   T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  192.659929][   T10] usb 1-1: Using ep0 maxpacket: 16
[  192.667714][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  192.781479][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  192.829486][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  192.849076][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.924827][   T10] usb 1-1: Product: syz
[  192.929047][   T10] usb 1-1: Manufacturer: syz
[  192.974334][   T10] usb 1-1: SerialNumber: syz
[  192.985599][   T10] usb 1-1: config 0 descriptor??
[  193.003249][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  193.015084][   T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  193.079881][   T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  193.149926][ T5900] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  193.240035][   T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  193.259916][   T43] usb 5-1: Using ep0 maxpacket: 16
[  193.273423][   T43] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  193.273908][ T7465] RDS: rds_bind could not find a transport for ::1276:4713:0:0:0, load rds_tcp or rds_rdma?
[  193.287759][   T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.311299][   T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  193.328870][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.337778][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.350867][   T43] usb 5-1: Product: syz
[  193.355105][   T43] usb 5-1: Manufacturer: syz
[  193.359717][   T43] usb 5-1: SerialNumber: syz
[  193.366988][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  193.376786][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.386801][ T5900] usb 2-1: Product: syz
[  193.402403][ T5900] usb 2-1: Manufacturer: syz
[  193.407186][ T5900] usb 2-1: SerialNumber: syz
[  193.442486][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  193.454466][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.465606][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  193.476365][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.489402][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.498606][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.509482][   T24] usb 3-1: config 0 descriptor??
[  193.628552][   T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  193.636084][   T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  193.679895][ T5938] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  193.797484][   T43] usb 5-1: 0:2 : does not exist
[  193.831955][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.842745][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.852990][ T5938] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  193.862413][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  193.870763][ T5938] usb 4-1: SerialNumber: syz
[  193.928123][   T24] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max
[  193.959985][   T24] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  194.206733][   T43] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  194.240617][ T5938] usb 4-1: unknown interface protocol 0x17, assuming v1
[  194.241890][   T43] usb 5-1: USB disconnect, device number 29
[  194.248976][ T5938] usb 4-1: 0:2 : does not exist
[  194.265150][   T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  194.276787][ T5938] usb 4-1: unit 3 not found!
[  194.285102][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  194.296100][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  194.313451][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  194.329380][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  194.336720][ T5938] usb 4-1: USB disconnect, device number 22
[  194.350379][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.356807][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.397225][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.409449][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  194.463367][ T5900] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  194.470088][ T5900] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  194.477603][ T5900] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  194.664273][ T5900] cdc_ncm 2-1:1.0: setting tx_max = 88
[  194.694381][ T5900] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  194.818562][ T5900] usb 3-1: USB disconnect, device number 25
[  194.888856][   T43] usb 2-1: USB disconnect, device number 42
[  194.907201][   T43] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  194.993747][   T10] usb 1-1: USB disconnect, device number 38
[  195.510134][   T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  195.707851][   T10] usb 5-1: Using ep0 maxpacket: 16
[  195.720475][   T10] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.795035][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  195.815110][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  195.853353][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.873605][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.940973][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.022532][   T10] usb 5-1: config 0 descriptor??
[  196.081771][ T5900] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  196.260176][ T5900] usb 1-1: Using ep0 maxpacket: 32
[  196.273982][ T5900] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  196.299814][ T5900] usb 1-1: config 0 has no interface number 0
[  196.319838][ T5900] usb 1-1: config 0 interface 89 has no altsetting 0
[  196.337743][ T5900] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  196.347835][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.377925][ T5900] usb 1-1: Product: syz
[  196.396471][ T5900] usb 1-1: Manufacturer: syz
[  196.440530][ T5900] usb 1-1: SerialNumber: syz
[  196.456955][   T10] microsoft 0003:045E:009D.000D: hidraw0: USB HID v0.07 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0
[  196.477059][ T5900] usb 1-1: config 0 descriptor??
[  196.520158][ T5900] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  196.538781][   T10] microsoft 0003:045E:009D.000D: no inputs found
[  196.579788][   T10] microsoft 0003:045E:009D.000D: could not initialize ff, continuing anyway
[  196.694251][ T5900] em28xx 1-1:0.89: Video interface 89 found: bulk
[  196.954124][ T5900] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  197.389967][   T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  197.580084][ T5900] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  197.629847][ T5900] em28xx 1-1:0.89: board has no eeprom
[  197.675439][   T10] usb 3-1: unable to read config index 0 descriptor/start: -71
[  197.702828][   T43] usb 5-1: USB disconnect, device number 30
[  197.727228][   T10] usb 3-1: can't read configurations, error -71
[  198.009864][ T5900] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  198.260388][ T5900] em28xx 1-1:0.89: analog set to bulk mode.
[  198.266387][ T5901] em28xx 1-1:0.89: Registering V4L2 extension
[  199.387364][ T5901] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  199.424576][ T5901] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  199.464283][ T5901] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  199.485316][ T5901] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  199.507287][ T5901] em28xx 1-1:0.89: Config register raw data: 0xfffffffb
[  199.621566][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  199.648187][ T5901] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  199.905579][ T5938] usb 1-1: USB disconnect, device number 39
[  199.907806][ T5901] em28xx 1-1:0.89: No AC97 audio processor
[  199.932037][ T5938] em28xx 1-1:0.89: Disconnecting em28xx
[  199.945832][ T5901] usb 1-1: Decoder not found
[  199.965744][ T5901] em28xx 1-1:0.89: failed to create media graph
[  199.977651][ T5901] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  200.041747][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  200.228657][ T7579] ==================================================================
[  200.236755][ T7579] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  200.244225][ T7579] Read of size 8 at addr ffff888033248740 by task v4l_id/7579
[  200.251675][ T7579] 
[  200.253776][ T5901] em28xx 1-1:0.89: Registering snapshot button...
[  200.254012][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  200.254032][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.254043][ T7579] Call Trace:
[  200.254050][ T7579]  <TASK>
[  200.254059][ T7579]  dump_stack_lvl+0x189/0x250
[  200.254091][ T7579]  ? __virt_addr_valid+0x1c8/0x5c0
[  200.254114][ T7579]  ? rcu_is_watching+0x15/0xb0
[  200.254133][ T7579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.254154][ T7579]  ? rcu_is_watching+0x15/0xb0
[  200.254172][ T7579]  ? lock_release+0x4b/0x3e0
[  200.254188][ T7579]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  200.254212][ T7579]  ? __virt_addr_valid+0x1c8/0x5c0
[  200.254233][ T7579]  ? __virt_addr_valid+0x4a5/0x5c0
[  200.254254][ T7579]  print_report+0xca/0x240
[  200.254274][ T7579]  ? v4l2_fh_open+0xac/0x420
[  200.254291][ T7579]  kasan_report+0x118/0x150
[  200.254310][ T7579]  ? v4l2_fh_open+0xac/0x420
[  200.254329][ T7579]  v4l2_fh_open+0xac/0x420
[  200.254347][ T7579]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  200.254373][ T7579]  em28xx_v4l2_open+0x157/0x9a0
[  200.254402][ T7579]  v4l2_open+0x1bf/0x3a0
[  200.254422][ T7579]  chrdev_open+0x4cc/0x5e0
[  200.254441][ T7579]  ? __pfx_chrdev_open+0x10/0x10
[  200.254458][ T7579]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  200.254478][ T7579]  ? __pfx_chrdev_open+0x10/0x10
[  200.254494][ T7579]  do_dentry_open+0x953/0x13f0
[  200.254517][ T7579]  vfs_open+0x3b/0x340
[  200.254534][ T7579]  ? path_openat+0x2ecd/0x3830
[  200.254556][ T7579]  path_openat+0x2ee5/0x3830
[  200.254589][ T7579]  ? __pfx_path_openat+0x10/0x10
[  200.254617][ T7579]  do_filp_open+0x1fa/0x410
[  200.254636][ T7579]  ? __lock_acquire+0xab9/0xd20
[  200.254653][ T7579]  ? __pfx_do_filp_open+0x10/0x10
[  200.254682][ T7579]  ? _raw_spin_unlock+0x28/0x50
[  200.254702][ T7579]  ? alloc_fd+0x64c/0x6c0
[  200.254729][ T7579]  do_sys_openat2+0x121/0x1c0
[  200.254749][ T7579]  ? __pfx_do_sys_openat2+0x10/0x10
[  200.254768][ T7579]  ? exc_page_fault+0x82/0x100
[  200.254791][ T7579]  ? do_user_addr_fault+0xc85/0x1380
[  200.254809][ T7579]  __x64_sys_openat+0x138/0x170
[  200.254837][ T7579]  do_syscall_64+0xfa/0xfa0
[  200.254859][ T7579]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.254881][ T7579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.254897][ T7579]  ? clear_bhb_loop+0x60/0xb0
[  200.254916][ T7579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.254933][ T7579] RIP: 0033:0x7f70900a7407
[  200.254956][ T7579] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  200.254972][ T7579] RSP: 002b:00007ffd0550f0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  200.254994][ T7579] RAX: ffffffffffffffda RBX: 00007f7090759880 RCX: 00007f70900a7407
[  200.255007][ T7579] RDX: 0000000000000000 RSI: 00007ffd0550ff1c RDI: ffffffffffffff9c
[  200.255018][ T7579] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  200.255029][ T7579] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  200.255039][ T7579] R13: 00007ffd0550f320 R14: 00007f709085e000 R15: 00005636ab0954d8
[  200.255059][ T7579]  </TASK>
[  200.255065][ T7579] 
[  200.564212][ T7579] Allocated by task 5901:
[  200.568566][ T7579]  kasan_save_track+0x3e/0x80
[  200.573257][ T7579]  __kasan_kmalloc+0x93/0xb0
[  200.577855][ T7579]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  200.583319][ T7579]  em28xx_v4l2_init+0x10b/0x2e70
[  200.588266][ T7579]  em28xx_init_extension+0x120/0x1c0
[  200.593562][ T7579]  process_scheduled_works+0xae1/0x17b0
[  200.599213][ T7579]  worker_thread+0x8a0/0xda0
[  200.603822][ T7579]  kthread+0x711/0x8a0
[  200.607906][ T7579]  ret_from_fork+0x4bc/0x870
[  200.612498][ T7579]  ret_from_fork_asm+0x1a/0x30
[  200.617275][ T7579] 
[  200.619607][ T7579] Freed by task 5901:
[  200.623595][ T7579]  kasan_save_track+0x3e/0x80
[  200.628291][ T7579]  __kasan_save_free_info+0x46/0x50
[  200.633498][ T7579]  __kasan_slab_free+0x5c/0x80
[  200.638274][ T7579]  kfree+0x19a/0x6d0
[  200.642175][ T7579]  em28xx_v4l2_init+0x1683/0x2e70
[  200.647298][ T7579]  em28xx_init_extension+0x120/0x1c0
[  200.652591][ T7579]  process_scheduled_works+0xae1/0x17b0
[  200.658120][ T7579]  worker_thread+0x8a0/0xda0
[  200.662686][ T7579]  kthread+0x711/0x8a0
[  200.666737][ T7579]  ret_from_fork+0x4bc/0x870
[  200.671301][ T7579]  ret_from_fork_asm+0x1a/0x30
[  200.676039][ T7579] 
[  200.678340][ T7579] The buggy address belongs to the object at ffff888033248000
[  200.678340][ T7579]  which belongs to the cache kmalloc-8k of size 8192
[  200.692371][ T7579] The buggy address is located 1856 bytes inside of
[  200.692371][ T7579]  freed 8192-byte region [ffff888033248000, ffff88803324a000)
[  200.706322][ T7579] 
[  200.708633][ T7579] The buggy address belongs to the physical page:
[  200.715045][ T7579] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33248
[  200.723908][ T7579] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  200.732395][ T7579] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  200.739929][ T7579] page_type: f5(slab)
[  200.743892][ T7579] raw: 00fff00000000040 ffff88801a027280 ffffea0001627600 0000000000000002
[  200.752451][ T7579] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  200.761190][ T7579] head: 00fff00000000040 ffff88801a027280 ffffea0001627600 0000000000000002
[  200.769841][ T7579] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  200.778586][ T7579] head: 00fff00000000003 ffffea0000cc9201 00000000ffffffff 00000000ffffffff
[  200.787495][ T7579] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  200.796310][ T7579] page dumped because: kasan: bad access detected
[  200.802709][ T7579] page_owner tracks the page as allocated
[  200.808406][ T7579] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10, tgid 10 (kworker/0:1), ts 111389454659, free_ts 111183059729
[  200.829667][ T7579]  post_alloc_hook+0x234/0x290
[  200.834428][ T7579]  get_page_from_freelist+0x2365/0x2440
[  200.839957][ T7579]  __alloc_frozen_pages_noprof+0x181/0x370
[  200.845739][ T7579]  alloc_pages_mpol+0x232/0x4a0
[  200.850656][ T7579]  allocate_slab+0x96/0x350
[  200.855154][ T7579]  ___slab_alloc+0xf56/0x1990
[  200.859862][ T7579]  __slab_alloc+0x65/0x100
[  200.864274][ T7579]  __kmalloc_noprof+0x471/0x7f0
[  200.869116][ T7579]  usb_get_configuration+0x11a/0x5360
[  200.874472][ T7579]  usb_new_device+0x146/0x16f0
[  200.879216][ T7579]  hub_event+0x2958/0x4a20
[  200.883604][ T7579]  process_scheduled_works+0xae1/0x17b0
[  200.889134][ T7579]  worker_thread+0x8a0/0xda0
[  200.893710][ T7579]  kthread+0x711/0x8a0
[  200.897858][ T7579]  ret_from_fork+0x4bc/0x870
[  200.902443][ T7579]  ret_from_fork_asm+0x1a/0x30
[  200.907288][ T7579] page last free pid 10 tgid 10 stack trace:
[  200.913417][ T7579]  __free_frozen_pages+0xbc4/0xd30
[  200.918514][ T7579]  __put_partials+0x146/0x170
[  200.923164][ T7579]  put_cpu_partial+0x1f2/0x2e0
[  200.927924][ T7579]  __slab_free+0x2b9/0x390
[  200.932317][ T7579]  qlist_free_all+0x97/0x140
[  200.936886][ T7579]  kasan_quarantine_reduce+0x148/0x160
[  200.942329][ T7579]  __kasan_slab_alloc+0x22/0x80
[  200.947172][ T7579]  __kmalloc_cache_noprof+0x36f/0x6f0
[  200.952619][ T7579]  usb_control_msg+0x73/0x3e0
[  200.957278][ T7579]  hub_port_reset+0x390/0x1750
[  200.962046][ T7579]  hub_port_init+0xfb9/0x2800
[  200.966703][ T7579]  hub_event+0x2532/0x4a20
[  200.971091][ T7579]  process_scheduled_works+0xae1/0x17b0
[  200.976613][ T7579]  worker_thread+0x8a0/0xda0
[  200.981266][ T7579]  kthread+0x711/0x8a0
[  200.985313][ T7579]  ret_from_fork+0x4bc/0x870
[  200.989891][ T7579] 
[  200.992207][ T7579] Memory state around the buggy address:
[  200.997857][ T7579]  ffff888033248600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.005915][ T7579]  ffff888033248680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.013976][ T7579] >ffff888033248700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.022228][ T7579]                                            ^
[  201.028389][ T7579]  ffff888033248780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.036741][ T7579]  ffff888033248800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.045062][ T7579] ==================================================================
[  201.053265][    C0] vkms_vblank_simulate: vblank timer overrun
[  201.126106][ T5901] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input17
[  201.203751][ T5901] em28xx 1-1:0.89: Remote control support is not available for this card.
[  201.239998][ T5938] em28xx 1-1:0.89: Closing input extension
[  201.247247][ T5938] em28xx 1-1:0.89: Deregistering snapshot button
[  201.271936][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.286817][ T7579] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  201.294038][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  201.303080][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  201.313147][ T7579] Call Trace:
[  201.316443][ T7579]  <TASK>
[  201.319367][ T7579]  dump_stack_lvl+0x99/0x250
[  201.324052][ T7579]  ? __asan_memcpy+0x40/0x70
[  201.328650][ T7579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.333865][ T7579]  ? __pfx__printk+0x10/0x10
[  201.338477][ T7579]  vpanic+0x237/0x6d0
[  201.342512][ T7579]  ? __pfx_vpanic+0x10/0x10
[  201.347028][ T7579]  ? preempt_schedule+0xae/0xc0
[  201.351893][ T7579]  ? __pfx_preempt_schedule+0x10/0x10
[  201.357279][ T7579]  panic+0xb9/0xc0
[  201.361019][ T7579]  ? __pfx_panic+0x10/0x10
[  201.365458][ T7579]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  201.371364][ T7579]  ? is_module_address+0x17/0xf0
[  201.376305][ T7579]  ? v4l2_fh_open+0xac/0x420
[  201.380898][ T7579]  check_panic_on_warn+0x89/0xb0
[  201.385855][ T7579]  ? v4l2_fh_open+0xac/0x420
[  201.390479][ T7579]  end_report+0x78/0x160
[  201.394720][ T7579]  kasan_report+0x129/0x150
[  201.399215][ T7579]  ? v4l2_fh_open+0xac/0x420
[  201.403820][ T7579]  v4l2_fh_open+0xac/0x420
[  201.408228][ T7579]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  201.414220][ T7579]  em28xx_v4l2_open+0x157/0x9a0
[  201.419090][ T7579]  v4l2_open+0x1bf/0x3a0
[  201.423343][ T7579]  chrdev_open+0x4cc/0x5e0
[  201.427785][ T7579]  ? __pfx_chrdev_open+0x10/0x10
[  201.432733][ T7579]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  201.439059][ T7579]  ? __pfx_chrdev_open+0x10/0x10
[  201.444073][ T7579]  do_dentry_open+0x953/0x13f0
[  201.448832][ T7579]  vfs_open+0x3b/0x340
[  201.452904][ T7579]  ? path_openat+0x2ecd/0x3830
[  201.457681][ T7579]  path_openat+0x2ee5/0x3830
[  201.462386][ T7579]  ? __pfx_path_openat+0x10/0x10
[  201.467341][ T7579]  do_filp_open+0x1fa/0x410
[  201.471945][ T7579]  ? __lock_acquire+0xab9/0xd20
[  201.476857][ T7579]  ? __pfx_do_filp_open+0x10/0x10
[  201.481914][ T7579]  ? _raw_spin_unlock+0x28/0x50
[  201.486776][ T7579]  ? alloc_fd+0x64c/0x6c0
[  201.491197][ T7579]  do_sys_openat2+0x121/0x1c0
[  201.495890][ T7579]  ? __pfx_do_sys_openat2+0x10/0x10
[  201.501126][ T7579]  ? exc_page_fault+0x82/0x100
[  201.505917][ T7579]  ? do_user_addr_fault+0xc85/0x1380
[  201.511219][ T7579]  __x64_sys_openat+0x138/0x170
[  201.516084][ T7579]  do_syscall_64+0xfa/0xfa0
[  201.520603][ T7579]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.525827][ T7579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.532008][ T7579]  ? clear_bhb_loop+0x60/0xb0
[  201.536699][ T7579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.542604][ T7579] RIP: 0033:0x7f70900a7407
[  201.547110][ T7579] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  201.566988][ T7579] RSP: 002b:00007ffd0550f0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  201.575613][ T7579] RAX: ffffffffffffffda RBX: 00007f7090759880 RCX: 00007f70900a7407
[  201.583874][ T7579] RDX: 0000000000000000 RSI: 00007ffd0550ff1c RDI: ffffffffffffff9c
[  201.591848][ T7579] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  201.599876][ T7579] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  201.607840][ T7579] R13: 00007ffd0550f320 R14: 00007f709085e000 R15: 00005636ab0954d8
[  201.616010][ T7579]  </TASK>
[  201.619653][ T7579] Kernel Offset: disabled
[  201.624005][ T7579] Rebooting in 86400 seconds..