last executing test programs:

29.734611122s ago: executing program 1 (id=1163):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000464df27e18b6b24d0741965ac2fd18cfc37779dbf8edcb34671eae41d942539b3ce2da67fbcfe020000000000000096f71cc91f817cba7aec942eb59ac52a33d84f265e9042db1f984150939a82b4586dfff64fafc6d286e5ea168fc47b08c0e75f407ae40829d40ef6574c03"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xa23}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000800)="0c852251396c1d8e7d3095df0190ba87971f95869d6b5cab96d67ccb93e496fb64fb1aa434640639783b321acefb06ef031dc4636d1235dd6b5e549f82ffbd1daa3013f8456f130fe374c05949a99bc0f5f8250ecfd2756464f0ef0cedc9b952e14afab07f6dee93741b1a1c5e7bceb233c74dff461bcc6e7109a5a7d37ee12993081479456212ba4e6798c9fe3881a6c529cef24b67a66abc817c7a", 0x9c}, {&(0x7f0000000900)="ac668f795f25f5a3a20b573d1df2d5a245ba7f79a818d965c5a72e6a2c53f1b9aab644d9cabc9c963c9164af7e7cbd56d08b9c3391491050ec1c6f3acf22515bc47c1c5fb35b50c0a0d742af2b9a7e6dcabd31ed3dc0cebe0d7d80c7847c8149fb15d9206b286d870562a2092923fd092827f79602662ba5a867a40a383d626a8774ac42a869e888ed76654fbc0f864f198d42f9ea3d52e8438976aa7e607bf588d585885795efebf0efe0c3d53d257beae4fa33c9d15ba6eed4091cb63eef979da3cd", 0xc3}, {&(0x7f0000000540)="eeb79b3d3360dda14938fb116489b29df4af6021959300add53223b1c36348f0fe5ce1535ce8ca0132899f885c39e8768876704c29f314584770d26bc0e07f8e82f324bcd231cd68b2d49f9c2258aaee59ee74f90f90e40ee6d1600b02d1869c492e8d0e363d89ca82f07c17342229fbb78e", 0x72}, {&(0x7f00000006c0)="f7e8fff93a37e30b32656a6d42150e44e40c02a2e8cc3c31cb426ed4bf2c5eb189bc04c5f1e060268d7cd76c4fb9ba358cdf60c12936a55fa62ef48fdf937b73f32033b7dbb091bcd21cf5d944c285bbc1e0c9d026997d68ee0620d6532f1bd6b7f89fa58014cfb4d76e0da6e35b9599bd398cc2d0d12205beebe7b2d95beadf57f63011342faf4670d4c739616e028fe213e1b93f3655f3b7ace833e4b0c04c03325306ad28eb1d51526befd6fa5ad21501", 0xb2}, {&(0x7f0000000600)="4d3dcd21de16a331232e53a2039770a393442f2fb7ca9f1c7e84c56e55261396d76b35bf190135481cf3ae1d9974d26f561c174848963efe1c40f7a5f67cf5e07664c1de70b7c6a5ce", 0x49}, {&(0x7f0000000340)="0c87bbd978312c0cb7ac6b3327e95037f35a5007a4e9b1413d15f30bc175d45e6c27978b6f4788086060aa62711930", 0x2f}], 0x6, &(0x7f0000000a80)=[@dstopts_2292={{0x40, 0x29, 0x4, {0xbf, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xc6, 0x6, [0x7, 0xc1, 0x100]}}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x6c, 0x4, '\x00', [@padn, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x5, [0xffffffffffff0160, 0xffffffffffffff7f, 0xfffffffffffffff7]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x98}, 0x8004)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

29.444004343s ago: executing program 1 (id=1165):
socket(0x18, 0x4, 0xc7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x10, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0xd, 0x8001, 0x0, 0x8, 0x4f, 0x6, 0x8001, 0x5}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
kexec_load(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, r1, 0x1171000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)

25.58446246s ago: executing program 1 (id=1173):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

24.361869784s ago: executing program 1 (id=1175):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000464df27e18b6b24d0741965ac2fd18cfc37779dbf8edcb34671eae41d942539b3ce2da67fbcfe020000000000000096f71cc91f817cba7aec942eb59ac52a33d84f265e9042db1f984150939a82b4586dfff64fafc6d286e5ea168fc47b08c0e75f407ae40829d40ef6574c03"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xa23}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000800)="0c852251396c1d8e7d3095df0190ba87971f95869d6b5cab96d67ccb93e496fb64fb1aa434640639783b321acefb06ef031dc4636d1235dd6b5e549f82ffbd1daa3013f8456f130fe374c05949a99bc0f5f8250ecfd2756464f0ef0cedc9b952e14afab07f6dee93741b1a1c5e7bceb233c74dff461bcc6e7109a5a7d37ee12993081479456212ba4e6798c9fe3881a6c529cef24b67a66abc817c7a", 0x9c}, {&(0x7f0000000900)="ac668f795f25f5a3a20b573d1df2d5a245ba7f79a818d965c5a72e6a2c53f1b9aab644d9cabc9c963c9164af7e7cbd56d08b9c3391491050ec1c6f3acf22515bc47c1c5fb35b50c0a0d742af2b9a7e6dcabd31ed3dc0cebe0d7d80c7847c8149fb15d9206b286d870562a2092923fd092827f79602662ba5a867a40a383d626a8774ac42a869e888ed76654fbc0f864f198d42f9ea3d52e8438976aa7e607bf588d585885795efebf0efe0c3d53d257beae4fa33c9d15ba6eed4091cb63eef979da3cd", 0xc3}, {&(0x7f0000000540)="eeb79b3d3360dda14938fb116489b29df4af6021959300add53223b1c36348f0fe5ce1535ce8ca0132899f885c39e8768876704c29f314584770d26bc0e07f8e82f324bcd231cd68b2d49f9c2258aaee59ee74f90f90e40ee6d1600b02d1869c492e8d0e363d89ca82f07c17342229fbb78e", 0x72}, {&(0x7f00000006c0)="f7e8fff93a37e30b32656a6d42150e44e40c02a2e8cc3c31cb426ed4bf2c5eb189bc04c5f1e060268d7cd76c4fb9ba358cdf60c12936a55fa62ef48fdf937b73f32033b7dbb091bcd21cf5d944c285bbc1e0c9d026997d68ee0620d6532f1bd6b7f89fa58014cfb4d76e0da6e35b9599bd398cc2d0d12205beebe7b2d95beadf57f63011342faf4670d4c739616e028fe213e1b93f3655f3b7ace833e4b0c04c03325306ad28eb1d51526befd6fa5ad21501", 0xb2}, {&(0x7f0000000600)="4d3dcd21de16a331232e53a2039770a393442f2fb7ca9f1c7e84c56e55261396d76b35bf190135481cf3ae1d9974d26f561c174848963efe1c40f7a5f67cf5e07664c1de70b7c6a5ce", 0x49}, {&(0x7f0000000340)="0c87bbd978312c0cb7ac6b3327e95037f35a5007a4e9b1413d15f30bc175d45e6c27978b6f4788086060aa62711930", 0x2f}], 0x6, &(0x7f0000000a80)=[@dstopts_2292={{0x40, 0x29, 0x4, {0xbf, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xc6, 0x6, [0x7, 0xc1, 0x100]}}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x6c, 0x4, '\x00', [@padn, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x5, [0xffffffffffff0160, 0xffffffffffffff7f, 0xfffffffffffffff7]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x98}, 0x8004)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

23.995991363s ago: executing program 1 (id=1177):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x108, 0x320, 0x320, 0x408, 0x4, 0x0, {[{{@arp={@remote, @local, 0xffffff00, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0x0, 0xff, 0x5, 0x2, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'veth0_to_team\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x20, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @broadcast, 0x8}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
pause()

23.673211723s ago: executing program 0 (id=1178):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
close_range(r2, 0xffffffffffffffff, 0x0)

22.612930276s ago: executing program 0 (id=1182):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="2010180000001810945b"], 0x0, 0x0, 0x0, 0x0}, 0x0)

20.557385873s ago: executing program 3 (id=1184):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)

20.365940544s ago: executing program 1 (id=1186):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007})
fcntl$lock(r3, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000240)=0x400)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x98c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x0, 0x1, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0)

18.617242546s ago: executing program 0 (id=1188):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x1}}, 0x10, &(0x7f0000000480)}, 0x0)

17.487699311s ago: executing program 0 (id=1189):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
memfd_create(0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000003a00), 0x0, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
sendfile(r0, r1, 0x0, 0x20000023896)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000380)={0x26b0, 0x1, 0xffffffff, 0x3, 0x16, "28c4d95d3933aabcf900"})

17.306184981s ago: executing program 4 (id=1191):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

17.068788498s ago: executing program 3 (id=1192):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x0, 0x0, 0x1, 0x3, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

15.781641193s ago: executing program 4 (id=1193):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

15.676520453s ago: executing program 4 (id=1194):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40)

15.377118586s ago: executing program 4 (id=1195):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r0}, &(0x7f0000000340))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(0xffffffffffffffff, 0x3)
tkill(r0, 0x12)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

13.364425378s ago: executing program 2 (id=1196):
pivot_root(&(0x7f0000000280)='./cgroup\x00', &(0x7f0000000300)='./cgroup\x00')

13.210713616s ago: executing program 2 (id=1197):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
memfd_create(0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000003a00), 0x0, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000380)={0x26b0, 0x1, 0xffffffff, 0x3, 0x16, "28c4d95d3933aabcf9000000000800"})

12.856950375s ago: executing program 4 (id=1198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
write$tun(r0, &(0x7f0000000340)={@val={0x0, 0xf5}, @val={0x3, 0x1, 0x7, 0x4, 0xfffd, 0x5}, @llc={@snap={0xaa, 0x154, '6', "0e1b3c", 0x809b}}}, 0x16)

12.579997187s ago: executing program 2 (id=1199):
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0)

5.208739565s ago: executing program 32 (id=1186):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007})
fcntl$lock(r3, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000240)=0x400)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x98c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x0, 0x1, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0)

4.394779189s ago: executing program 2 (id=1201):
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES64, @ANYRES64], 0xffffffa5)
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078)

4.301125377s ago: executing program 3 (id=1202):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r6=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})

2.672444642s ago: executing program 2 (id=1203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000})
fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0)
ioctl$RTC_AIE_ON(r6, 0x7001)
ioctl$RTC_UIE_ON(r6, 0x7003)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000006400000008001b00000000000c002b8008000100", @ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)

2.499082009s ago: executing program 0 (id=1204):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
sendfile(r0, r1, 0x0, 0x20000023896)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

2.085186096s ago: executing program 3 (id=1205):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.098405284s ago: executing program 3 (id=1206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff01000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000040000000000000000000000000020ab072f1d1affab0037050000000000002be680ea2ceb8012d90d4178a09160000000090000003a2d285cc980000000c30000f3397dd86d4b928d24d3a461b60245898556c6000000"], 0x0, 0x0, 0x0})
getdents64(r3, &(0x7f0000000100)=""/134, 0x86)
getdents64(r3, 0x0, 0xc0)

1.012476033s ago: executing program 2 (id=1207):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000580)=ANY=[], 0xffdd)

893.075678ms ago: executing program 4 (id=1208):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x400)

256.552039ms ago: executing program 0 (id=1209):
r0 = socket$netlink(0x10, 0x3, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000004c0)="66b9800000c00f326635001000000f3066b8010000000f01d92e26f3650f01190f351a242eef0f009c1b57b855008ed80fb1ae00002ef30fc735", 0x3a}], 0x1, 0x43, 0x0, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
rmdir(&(0x7f00000000c0)='./cgroup\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
flistxattr(r9, 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r12, 0x4188aea7, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_clone3(0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000", 0x32}], 0x1)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}, {&(0x7f0000000280)="eb40b964e7818ef7f0f145ac7465accb3103db8450fc9f4f405535ca2f6713b347003cbdb0", 0x25}], 0x2)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1})

0s ago: executing program 3 (id=1210):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
unshare(0x62040200)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

kernel console output (not intermixed with test programs):

hci2: hardware error 0x00
[  294.672325][  T991] usb 3-1: USB disconnect, device number 37
[  294.869713][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  294.890432][ T5915] usb 5-1: USB disconnect, device number 38
[  295.045564][    T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  295.045582][    T9] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config
[  295.045592][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  295.045619][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  295.056006][    T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  295.056036][    T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  295.056054][    T9] usb 2-1: Product: syz
[  295.056067][    T9] usb 2-1: Manufacturer: syz
[  295.143339][    T9] cdc_wdm 2-1:1.0: skipping garbage
[  295.143381][    T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  295.449732][ T5915] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  295.599711][ T5915] usb 1-1: Using ep0 maxpacket: 32
[  295.602178][ T5915] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  295.602206][ T5915] usb 1-1: config 0 has no interface number 0
[  295.605230][ T5915] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  295.605255][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  295.605274][ T5915] usb 1-1: Product: syz
[  295.605287][ T5915] usb 1-1: Manufacturer: syz
[  295.665601][ T5915] usb 1-1: config 0 descriptor??
[  295.924801][ T5915] usb 1-1: USB disconnect, device number 25
[  296.559671][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  296.739803][    T9] usb 4-1: Using ep0 maxpacket: 8
[  296.749295][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  296.749316][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  296.749330][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  296.749342][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.749366][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  296.749378][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.820403][ T5854] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  297.032050][    T9] usb 4-1: GET_CAPABILITIES returned 0
[  297.032078][    T9] usbtmc 4-1:16.0: can't read capabilities
[  297.253396][    T9] usb 4-1: USB disconnect, device number 30
[  297.293285][   T37] audit: type=1800 audit(1759183607.466:31): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.659" name="file1" dev="tmpfs" ino=809 res=0 errno=0
[  298.340072][ T5915] usb 2-1: USB disconnect, device number 33
[  298.949665][ T5930] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  299.019604][ T5915] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  299.109579][ T5930] usb 4-1: Using ep0 maxpacket: 32
[  299.165268][ T5930] usb 4-1: config 0 has an invalid interface number: 247 but max is 0
[  299.165286][ T5930] usb 4-1: config 0 has no interface number 0
[  299.188112][ T5915] usb 2-1: config 0 has no interfaces?
[  299.188147][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  299.188165][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.215664][ T5915] usb 2-1: config 0 descriptor??
[  299.246055][ T5930] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  299.246073][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  299.246083][ T5930] usb 4-1: Product: syz
[  299.246090][ T5930] usb 4-1: Manufacturer: syz
[  299.249178][ T5930] usb 4-1: config 0 descriptor??
[  299.302900][ T8087] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  299.428451][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'.
[  299.499930][ T8084] binder_alloc: 8080: pid 8080 spamming oneway? 1 buffers allocated for a total size of 4096
[  299.685981][ T8085] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.693622][    T9] usb 2-1: USB disconnect, device number 34
[  302.211705][ T1239] usb 4-1: USB disconnect, device number 31
[  302.269695][   T45] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  302.434589][   T45] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  302.434608][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.434618][   T45] usb 1-1: Product: syz
[  302.434625][   T45] usb 1-1: Manufacturer: syz
[  302.434633][   T45] usb 1-1: SerialNumber: syz
[  302.438025][   T45] usb 1-1: config 0 descriptor??
[  302.650637][   T45] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  303.259650][ T1239] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  303.415503][ T1239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.415519][ T1239] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  303.415573][ T1239] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  303.415586][ T1239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.422162][ T1239] usb 4-1: config 0 descriptor??
[  303.680105][ T1239] usb 4-1: USB disconnect, device number 32
[  304.405159][   T45] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  304.420585][   T45] usb 1-1: USB disconnect, device number 26
[  305.219638][ T7667] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  305.393385][ T7667] usb 3-1: config 0 has no interfaces?
[  305.393422][ T7667] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  305.393437][ T7667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.427467][ T7667] usb 3-1: config 0 descriptor??
[  305.631898][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'.
[  305.714795][ T8132] 8021q: adding VLAN 0 to HW filter on device bond1
[  305.727287][   T45] usb 3-1: USB disconnect, device number 38
[  306.959629][ T7667] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  307.013277][ T8161] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.686'.
[  307.109573][ T7667] usb 3-1: Using ep0 maxpacket: 32
[  307.112400][ T7667] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  307.112426][ T7667] usb 3-1: config 0 has no interface number 0
[  307.115494][ T7667] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  307.115520][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  307.115539][ T7667] usb 3-1: Product: syz
[  307.115551][ T7667] usb 3-1: Manufacturer: syz
[  307.171027][ T7667] usb 3-1: config 0 descriptor??
[  307.410946][ T8155] binder_alloc: 8152: pid 8152 spamming oneway? 1 buffers allocated for a total size of 4096
[  307.911602][ T7667] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  308.078242][ T7667] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  308.078263][ T7667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.078274][ T7667] usb 5-1: Product: syz
[  308.078281][ T7667] usb 5-1: Manufacturer: syz
[  308.078289][ T7667] usb 5-1: SerialNumber: syz
[  308.126134][ T7667] usb 5-1: config 0 descriptor??
[  308.331907][ T7667] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  310.103384][ T7667] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  310.123919][ T7667] usb 5-1: USB disconnect, device number 39
[  310.530173][ T7667] usb 3-1: USB disconnect, device number 39
[  310.891785][ T8198] loop6: detected capacity change from 0 to 7
[  310.936042][ T8198] Dev loop6: unable to read RDB block 7
[  310.936104][ T8198]  loop6: unable to read partition table
[  310.936324][ T8198] loop6: partition table beyond EOD, truncated
[  310.936343][ T8198] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  311.877478][   T37] audit: type=1800 audit(1759183621.956:32): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.697" name="file1" dev="tmpfs" ino=703 res=0 errno=0
[  311.984830][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'.
[  314.562211][ T8237] tipc: Started in network mode
[  314.562229][ T8237] tipc: Node identity 4244247ffc4c, cluster identity 4711
[  314.562348][ T8237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.564339][ T8237] syzkaller0: entered promiscuous mode
[  314.564366][ T8237] syzkaller0: entered allmulticast mode
[  314.605744][ T8237] tipc: Resetting bearer <eth:syzkaller0>
[  314.694383][ T8236] tipc: Resetting bearer <eth:syzkaller0>
[  314.960946][ T8236] tipc: Disabling bearer <eth:syzkaller0>
[  315.524754][   T37] audit: type=1800 audit(1759183625.696:33): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.706" name="file1" dev="tmpfs" ino=742 res=0 errno=0
[  316.173887][ T8254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  316.219595][ T5894] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  316.383281][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  316.395966][ T5894] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  316.395982][ T5894] usb 3-1: config 0 has no interface number 0
[  316.399357][ T5894] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  316.399374][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  316.399384][ T5894] usb 3-1: Product: syz
[  316.399392][ T5894] usb 3-1: Manufacturer: syz
[  316.511426][ T5894] usb 3-1: config 0 descriptor??
[  316.625736][ T8264] binder: 8263:8264 ioctl 4018620d 0 returned -22
[  317.096969][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  317.097015][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  318.208208][ T8270] loop6: detected capacity change from 0 to 7
[  318.234648][ T5992] Dev loop6: unable to read RDB block 7
[  318.234698][ T5992]  loop6: unable to read partition table
[  318.234956][ T5992] loop6: partition table beyond EOD, truncated
[  318.277853][ T8270] Dev loop6: unable to read RDB block 7
[  318.277883][ T8270]  loop6: unable to read partition table
[  318.278010][ T8270] loop6: partition table beyond EOD, truncated
[  318.278032][ T8270] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  319.673039][ T5930] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  319.838547][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.838579][ T5930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  319.838611][ T5930] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  319.838623][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.844613][ T5930] usb 2-1: config 0 descriptor??
[  320.110144][ T5930] usb 3-1: USB disconnect, device number 40
[  320.548348][ T5854] Bluetooth: hci3: unexpected Set CIG Parameters response data
[  320.639842][ T5854] Bluetooth: hci3: unexpected event for opcode 0x2062
[  322.151338][   T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  322.361661][   T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  322.361678][   T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  322.363395][   T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  322.363411][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  322.363421][   T31] usb 4-1: SerialNumber: syz
[  322.652577][   T31] usb 4-1: 0:2 : does not exist
[  322.695644][ T5854] Bluetooth: hci3: command 0x0406 tx timeout
[  322.758975][   T31] usb 4-1: USB disconnect, device number 33
[  322.864491][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.301820][ T5894] usb 2-1: USB disconnect, device number 35
[  324.562093][  T991] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  324.697059][ T5854] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  324.698819][ T5854] Bluetooth: hci3: Injecting HCI hardware error event
[  324.702070][ T5857] Bluetooth: hci3: hardware error 0x00
[  324.712386][  T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.712402][  T991] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  324.712427][  T991] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  324.712448][  T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.719974][ T7667] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  324.741539][  T991] usb 1-1: config 0 descriptor??
[  324.879736][ T7667] usb 4-1: Using ep0 maxpacket: 32
[  324.916079][ T7667] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  324.916161][ T7667] usb 4-1: config 0 has no interface number 0
[  324.938450][ T7667] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  324.938469][ T7667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.938480][ T7667] usb 4-1: Product: syz
[  324.938487][ T7667] usb 4-1: Manufacturer: syz
[  324.938494][ T7667] usb 4-1: SerialNumber: syz
[  324.975612][ T7667] usb 4-1: config 0 descriptor??
[  325.224305][ T7667] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  327.341823][ T5857] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  328.229630][   T31] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  328.229912][    C1] raw-gadget.2 gadget.2: ignoring, device is not running
[  328.359613][   T31] usb 3-1: device descriptor read/64, error -32
[  328.599569][   T31] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  328.899538][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.899565][   T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  328.899874][   T31] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  328.900034][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.115964][   T31] usb 3-1: config 0 descriptor??
[  329.360770][  T991] usb 3-1: USB disconnect, device number 42
[  329.463331][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  329.611773][    T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  329.611791][    T9] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  329.611801][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  329.611828][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  329.613311][    T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  329.613326][    T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  329.613336][    T9] usb 2-1: Product: syz
[  329.613344][    T9] usb 2-1: Manufacturer: syz
[  329.690674][    T9] cdc_wdm 2-1:1.0: skipping garbage
[  329.690686][    T9] cdc_wdm 2-1:1.0: skipping garbage
[  329.690692][    T9] cdc_wdm 2-1:1.0: skipping garbage
[  329.690711][    T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  330.289877][ T7667] usb 4-1: qt2_attach - failed to power on unit: -110
[  330.290036][ T7667] quatech2 4-1:0.51: probe with driver quatech2 failed with error -110
[  330.678824][    T9] usb 1-1: USB disconnect, device number 27
[  331.217595][    T9] usb 4-1: USB disconnect, device number 34
[  331.482875][ T8367] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  331.535063][ T8372] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  331.551004][ T8373] 8021q: adding VLAN 0 to HW filter on device bond2
[  331.718756][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'.
[  331.879220][ T8380] bridge_slave_1: left allmulticast mode
[  331.879254][ T8380] bridge_slave_1: left promiscuous mode
[  331.880225][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.066837][ T8380] bridge_slave_0: left allmulticast mode
[  332.066869][ T8380] bridge_slave_0: left promiscuous mode
[  332.067135][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.204176][ T1239] usb 2-1: USB disconnect, device number 36
[  332.629608][  T991] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  332.786296][  T991] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  332.786316][  T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.786329][  T991] usb 1-1: Product: syz
[  332.786342][  T991] usb 1-1: Manufacturer: syz
[  332.786355][  T991] usb 1-1: SerialNumber: syz
[  332.799824][  T991] usb 1-1: config 0 descriptor??
[  333.007142][  T991] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  333.601164][ T7667] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  333.770693][ T7667] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.770710][ T7667] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  333.770773][ T7667] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  333.770791][ T7667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.774626][ T7667] usb 2-1: config 0 descriptor??
[  334.012706][ T1239] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  334.263335][ T1239] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  334.263364][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.263383][ T1239] usb 5-1: Product: syz
[  334.263397][ T1239] usb 5-1: Manufacturer: syz
[  334.263410][ T1239] usb 5-1: SerialNumber: syz
[  334.285648][ T1239] usb 5-1: config 0 descriptor??
[  334.498009][   T45] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  334.659647][   T45] usb 3-1: Using ep0 maxpacket: 32
[  334.689432][   T45] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  334.689629][   T45] usb 3-1: config 0 has no interface number 0
[  334.728145][   T45] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  334.728171][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.728191][   T45] usb 3-1: Product: syz
[  334.728205][   T45] usb 3-1: Manufacturer: syz
[  334.728218][   T45] usb 3-1: SerialNumber: syz
[  334.768861][   T45] usb 3-1: config 0 descriptor??
[  334.812041][   T45] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  334.875626][  T991] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  334.879266][  T991] usb 1-1: USB disconnect, device number 28
[  335.454694][ T1239] usb 5-1: non-Atmel transceiver xxxx0008
[  335.849797][ T8421] binder: 8417:8421 ioctl c0306201 0 returned -14
[  335.978173][ T1239] usb 5-1: Firmware version (0.0) predates our first public release.
[  335.978191][ T1239] usb 5-1: Please update to version 0.2 or newer
[  335.978603][ T1239] usb 5-1: atusb_probe: initialization failed, error = -19
[  335.990967][ T1239] usb 5-1: USB disconnect, device number 40
[  336.099880][ T5894] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  336.100354][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  336.249618][ T5894] usb 1-1: device descriptor read/64, error -32
[  336.502776][ T5894] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  336.680150][ T5894] usb 1-1: Using ep0 maxpacket: 32
[  336.718901][ T5894] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  336.718927][ T5894] usb 1-1: config 0 has no interface number 0
[  336.761138][ T5894] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  336.761156][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  336.761167][ T5894] usb 1-1: Product: syz
[  336.761174][ T5894] usb 1-1: Manufacturer: syz
[  336.766509][ T5894] usb 1-1: config 0 descriptor??
[  339.404858][ T1239] usb 2-1: USB disconnect, device number 37
[  339.611526][ T5894] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  339.691528][ T8443] tipc: Started in network mode
[  339.692471][ T8443] tipc: Node identity 0abc53805411, cluster identity 4711
[  339.693746][ T8443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.699313][ T8443] syzkaller0: entered promiscuous mode
[  339.699341][ T8443] syzkaller0: entered allmulticast mode
[  339.759619][ T5894] usb 5-1: Using ep0 maxpacket: 32
[  339.766144][ T5894] usb 5-1: config 0 has an invalid interface number: 247 but max is 0
[  339.766160][ T5894] usb 5-1: config 0 has no interface number 0
[  339.790242][ T5894] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  339.790306][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  339.790317][ T5894] usb 5-1: Product: syz
[  339.790324][ T5894] usb 5-1: Manufacturer: syz
[  339.827311][ T5894] usb 5-1: config 0 descriptor??
[  339.850278][ T5894] chaoskey 5-1:0.247: Unable to register with hwrng
[  339.891394][   T45] usb 3-1: qt2_attach - failed to power on unit: -110
[  339.891654][   T45] quatech2 3-1:0.51: probe with driver quatech2 failed with error -110
[  340.049139][ T8441] binder_alloc: 8436: pid 8436 spamming oneway? 1 buffers allocated for a total size of 4096
[  340.316960][   T45] usb 3-1: USB disconnect, device number 43
[  340.323507][ T8442] tipc: Resetting bearer <eth:syzkaller0>
[  340.773766][ T5894] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  340.776610][ T1239] tipc: Node number set to 1588417408
[  340.871924][ T8442] tipc: Disabling bearer <eth:syzkaller0>
[  340.949679][ T5894] usb 2-1: Using ep0 maxpacket: 8
[  340.952462][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  340.952491][ T5894] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00
[  340.952503][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.955836][ T5894] usb 2-1: config 0 descriptor??
[  341.014589][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[  342.063938][ T5194] bcm5974 2-1:0.0: could not read from device
[  342.076383][ T5894] usb 2-1: USB disconnect, device number 38
[  342.113109][ T5993] bcm5974 2-1:0.0: could not read from device
[  342.220145][ T8461] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  342.340001][ T1239] usb 1-1: USB disconnect, device number 30
[  342.450897][ T5993] udevd[5993]: Error opening device "/dev/input/event4": No such file or directory
[  342.451036][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  342.451147][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  342.451291][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  342.451403][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  342.988063][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'.
[  343.349615][ T5894] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  343.499597][ T5894] usb 2-1: Using ep0 maxpacket: 16
[  343.503339][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.503361][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.503373][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  343.503384][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  343.503396][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  343.503406][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  343.503418][ T5894] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  343.505926][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  343.505945][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  343.505956][ T5894] usb 2-1: SerialNumber: syz
[  343.777963][ T5894] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  343.778080][ T5894] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  344.089917][ T1239] usb 5-1: USB disconnect, device number 41
[  344.226904][ T5894] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  344.415090][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  344.507804][ T5894] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  344.507831][ T5894] usb 4-1: config 0 has no interface number 0
[  344.533920][ T5894] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  344.533938][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.533948][ T5894] usb 4-1: Product: syz
[  344.533956][ T5894] usb 4-1: Manufacturer: syz
[  344.533963][ T5894] usb 4-1: SerialNumber: syz
[  344.537013][ T5894] usb 4-1: config 0 descriptor??
[  344.579745][ T5894] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  346.873529][ T5894] usb 4-1: qt2_attach - failed to power on unit: -71
[  346.873993][ T5894] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  346.972316][ T5894] usb 4-1: USB disconnect, device number 35
[  347.382323][ T8500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.730129][ T8509] binder: 8503:8509 ioctl c0306201 0 returned -14
[  347.989665][ T5894] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  348.159606][ T5894] usb 1-1: Using ep0 maxpacket: 32
[  348.163168][ T5894] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  348.163193][ T5894] usb 1-1: config 0 has no interface number 0
[  348.166331][ T5894] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  348.166346][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  348.166357][ T5894] usb 1-1: Product: syz
[  348.166364][ T5894] usb 1-1: Manufacturer: syz
[  348.169348][ T5894] usb 1-1: config 0 descriptor??
[  348.254685][ T8498] tipc: Disabling bearer <eth:syzkaller0>
[  348.529813][  T991] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  348.689639][  T991] usb 5-1: Using ep0 maxpacket: 16
[  348.692703][  T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  348.692726][  T991] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  348.695122][  T991] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  348.695137][  T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.695148][  T991] usb 5-1: Product: syz
[  348.695158][  T991] usb 5-1: Manufacturer: syz
[  348.695171][  T991] usb 5-1: SerialNumber: syz
[  348.771465][ T8516] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10804, id = 0
[  348.873879][ T5930] usb 2-1: USB disconnect, device number 39
[  349.035582][  T991] usb 5-1: 0:2 : does not exist
[  349.092389][  T991] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  349.268901][  T991] usb 5-1: USB disconnect, device number 42
[  349.691547][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  351.690445][ T5894] usb 1-1: USB disconnect, device number 31
[  352.539623][ T1239] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  352.809424][   T37] audit: type=1800 audit(1759183662.986:34): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.785" name="file1" dev="tmpfs" ino=834 res=0 errno=0
[  352.911029][ T1239] usb 1-1: Using ep0 maxpacket: 32
[  352.950781][ T1239] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  352.950812][ T1239] usb 1-1: config 0 has no interface number 0
[  352.980533][ T1239] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  352.980553][ T1239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.980564][ T1239] usb 1-1: Product: syz
[  352.980572][ T1239] usb 1-1: Manufacturer: syz
[  352.980579][ T1239] usb 1-1: SerialNumber: syz
[  353.080312][ T1239] usb 1-1: config 0 descriptor??
[  353.107548][ T1239] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  353.939605][ T5894] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  354.092813][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.092830][ T5894] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  354.092851][ T5894] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  354.092863][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.144183][ T5894] usb 3-1: config 0 descriptor??
[  354.430413][ T5894] usb 3-1: USB disconnect, device number 44
[  355.750730][ T5894] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  355.880134][ T5894] usb 2-1: device descriptor read/64, error -71
[  356.017110][ T8563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.060893][ T8562] syzkaller0: entered promiscuous mode
[  356.060924][ T8562] syzkaller0: entered allmulticast mode
[  356.129716][ T5894] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  356.259986][ T5894] usb 2-1: device descriptor read/64, error -71
[  356.370275][ T5894] usb usb2-port1: attempt power cycle
[  356.556015][ T8561] tipc: Resetting bearer <eth:syzkaller0>
[  356.722344][ T5894] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  356.741642][ T5894] usb 2-1: device descriptor read/8, error -71
[  356.770293][ T8561] tipc: Disabling bearer <eth:syzkaller0>
[  356.979945][ T5894] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  357.000833][ T5894] usb 2-1: device descriptor read/8, error -71
[  357.110059][ T5894] usb usb2-port1: unable to enumerate USB device
[  357.264310][ T8565] loop6: detected capacity change from 0 to 7
[  357.278913][ T8565] Dev loop6: unable to read RDB block 7
[  357.279175][ T8565]  loop6: unable to read partition table
[  357.297244][ T8565] loop6: partition table beyond EOD, truncated
[  357.297278][ T8565] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  358.130377][ T1239] usb 1-1: qt2_attach - failed to power on unit: -110
[  358.130534][ T1239] quatech2 1-1:0.51: probe with driver quatech2 failed with error -110
[  358.190911][ T8569] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  358.316625][ T5915] usb 1-1: USB disconnect, device number 32
[  358.990397][ T8592] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  359.063493][ T8598] binder: 8579:8598 ioctl c0306201 0 returned -14
[  359.369664][ T5915] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  359.534304][ T5915] usb 1-1: Using ep0 maxpacket: 32
[  359.598438][ T8604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.636834][ T5915] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  359.636863][ T5915] usb 1-1: config 0 has no interface number 0
[  359.640640][ T5915] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  359.640661][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  359.640672][ T5915] usb 1-1: Product: syz
[  359.640679][ T5915] usb 1-1: Manufacturer: syz
[  359.644133][ T5915] usb 1-1: config 0 descriptor??
[  360.191621][ T8608] loop6: detected capacity change from 0 to 7
[  360.211071][ T8608] Dev loop6: unable to read RDB block 7
[  360.211129][ T8608]  loop6: unable to read partition table
[  360.211511][ T8608] loop6: partition table beyond EOD, truncated
[  360.211541][ T8608] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  360.226028][ T8603] tipc: Disabling bearer <eth:syzkaller0>
[  360.596494][ T8610] netlink: 'syz.2.801': attribute type 1 has an invalid length.
[  360.851826][ T8613] 8021q: adding VLAN 0 to HW filter on device bond3
[  361.622536][ T5915] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  361.777683][ T5915] usb 2-1: Using ep0 maxpacket: 16
[  361.829403][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.829422][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.829434][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  361.829445][ T5915] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  361.869594][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  361.869610][ T5915] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  361.869623][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  361.871563][ T5915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  361.871578][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  361.871589][ T5915] usb 2-1: SerialNumber: syz
[  361.935602][ T5915] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  361.935712][ T5915] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  362.039877][ T5930] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  362.289566][ T5930] usb 3-1: Using ep0 maxpacket: 32
[  362.320976][ T5930] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  362.321003][ T5930] usb 3-1: config 0 has no interface number 0
[  362.343860][ T5930] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  362.343889][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.343906][ T5930] usb 3-1: Product: syz
[  362.343917][ T5930] usb 3-1: Manufacturer: syz
[  362.343930][ T5930] usb 3-1: SerialNumber: syz
[  362.440073][ T5930] usb 3-1: config 0 descriptor??
[  362.484775][ T5930] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  362.729608][ T5915] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  362.859747][ T5915] usb 4-1: device descriptor read/64, error -71
[  363.099578][ T5915] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  363.229612][ T5915] usb 4-1: device descriptor read/64, error -71
[  363.345491][ T5915] usb usb4-port1: attempt power cycle
[  363.710112][ T5915] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  363.732094][ T5915] usb 4-1: device descriptor read/8, error -71
[  363.835840][ T1239] usb 1-1: USB disconnect, device number 33
[  364.219752][ T5915] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  364.243070][ T5915] usb 4-1: device descriptor read/8, error -71
[  364.350133][ T5915] usb usb4-port1: unable to enumerate USB device
[  365.580032][ T5930] usb 3-1: qt2_attach - failed to power on unit: -71
[  365.580366][ T5930] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[  365.585918][ T5930] usb 3-1: USB disconnect, device number 45
[  365.787512][ T8650] tipc: Started in network mode
[  365.787545][ T8650] tipc: Node identity 96458eb0842e, cluster identity 4711
[  365.823086][ T8650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.826902][ T8649] tipc: Resetting bearer <eth:syzkaller0>
[  366.061168][ T8648] tipc: Disabling bearer <eth:syzkaller0>
[  367.213066][ T1239] usb 2-1: USB disconnect, device number 44
[  367.496421][ T7667] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  367.706906][ T7667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  367.706932][ T7667] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  367.706977][ T7667] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  367.706999][ T7667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.782325][ T7667] usb 1-1: config 0 descriptor??
[  367.922023][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'.
[  368.056237][ T5931] usb 1-1: USB disconnect, device number 34
[  368.828560][ T1239] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  369.002478][ T1239] usb 5-1: Using ep0 maxpacket: 16
[  369.007354][ T1239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.007384][ T1239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.007406][ T1239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  369.007427][ T1239] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  369.007450][ T1239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  369.007471][ T1239] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  369.007493][ T1239] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  369.011465][ T1239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  369.011492][ T1239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  369.011511][ T1239] usb 5-1: SerialNumber: syz
[  369.090379][ T1239] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  369.090495][ T1239] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12
[  369.543950][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'.
[  370.409656][ T1239] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  370.656095][ T1239] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  370.656126][ T1239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.656146][ T1239] usb 1-1: Product: syz
[  370.656159][ T1239] usb 1-1: Manufacturer: syz
[  370.656173][ T1239] usb 1-1: SerialNumber: syz
[  370.662404][ T1239] usb 1-1: config 0 descriptor??
[  371.129939][ T1239] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  371.242979][ T1239] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  372.429652][ T7667] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  372.590501][ T7667] usb 3-1: Using ep0 maxpacket: 16
[  372.593504][ T7667] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  372.593523][ T7667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  372.595477][ T7667] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  372.595492][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.595502][ T7667] usb 3-1: Product: syz
[  372.595509][ T7667] usb 3-1: Manufacturer: syz
[  372.595517][ T7667] usb 3-1: SerialNumber: syz
[  372.604376][ T7667] usb 3-1: config 0 descriptor??
[  372.703159][ T7667] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  372.799443][ T1239] usb 5-1: USB disconnect, device number 43
[  373.240801][ T1239] usb 1-1: USB disconnect, device number 35
[  373.878700][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'.
[  373.878764][ T8734] bridge_slave_1: left allmulticast mode
[  373.878781][ T8734] bridge_slave_1: left promiscuous mode
[  373.878941][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.183548][ T8734] bridge_slave_0: left allmulticast mode
[  374.183583][ T8734] bridge_slave_0: left promiscuous mode
[  374.186345][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.580903][ T7667] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  374.733182][ T7667] usb 4-1: Using ep0 maxpacket: 8
[  374.735611][ T7667] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  374.735631][ T7667] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  374.735643][ T7667] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  374.735654][ T7667] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  374.735677][ T7667] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  374.735689][ T7667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.743574][ T7667] usbtmc 4-1:16.0: bulk endpoints not found
[  375.560462][ T1239] usb 3-1: USB disconnect, device number 46
[  376.346099][ T1239] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  376.581404][ T1239] usb 3-1: Using ep0 maxpacket: 16
[  376.679373][ T1239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.679406][ T1239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.679428][ T1239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  376.680944][ T1239] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  376.680963][ T1239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  376.680975][ T1239] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  376.680987][ T1239] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  376.786898][ T1239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  376.786916][ T1239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  376.786926][ T1239] usb 3-1: SerialNumber: syz
[  376.807304][ T1239] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  376.807417][ T1239] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  377.350935][ T1239] usb 4-1: USB disconnect, device number 40
[  378.495665][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'.
[  378.541032][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  378.541313][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  379.921717][  T991] usb 3-1: USB disconnect, device number 47
[  380.489526][   T37] audit: type=1326 audit(1759183690.666:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a09ddeec9 code=0x7ffc0000
[  380.489622][   T37] audit: type=1326 audit(1759183690.666:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3a09ddeec9 code=0x7ffc0000
[  380.489660][   T37] audit: type=1326 audit(1759183690.666:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a09ddeec9 code=0x7ffc0000
[  380.489700][   T37] audit: type=1326 audit(1759183690.666:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3a09ddeec9 code=0x7ffc0000
[  381.079892][   T37] audit: type=1326 audit(1759183691.266:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a09ddeec9 code=0x7ffc0000
[  381.080167][   T37] audit: type=1326 audit(1759183691.266:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a09ddeec9 code=0x7ffc0000
[  381.269790][ T5894] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  381.597972][ T5894] usb 5-1: Using ep0 maxpacket: 8
[  381.603693][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  381.603728][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  381.603753][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  381.603773][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  381.603872][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.603915][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  381.603936][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.664352][ T1239] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  381.909587][ T1239] usb 2-1: Using ep0 maxpacket: 32
[  381.911563][ T1239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.911594][ T1239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.911631][ T1239] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  381.911653][ T1239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.929001][ T1239] usb 2-1: config 0 descriptor??
[  381.932821][ T1239] hub 2-1:0.0: USB hub found
[  381.985670][ T5894] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  382.190170][ T1239] hub 2-1:0.0: 1 port detected
[  382.409630][ T5930] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  382.569731][ T5930] usb 4-1: Using ep0 maxpacket: 32
[  382.575351][ T5930] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  382.575378][ T5930] usb 4-1: config 0 has no interface number 0
[  382.618988][ T5930] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  382.619021][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.619040][ T5930] usb 4-1: Product: syz
[  382.619054][ T5930] usb 4-1: Manufacturer: syz
[  382.619067][ T5930] usb 4-1: SerialNumber: syz
[  382.624458][ T5930] usb 4-1: config 0 descriptor??
[  382.630660][ T5930] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  383.013369][   T37] audit: type=1800 audit(1759183693.166:41): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.851" name="file1" dev="tmpfs" ino=997 res=0 errno=0
[  383.178489][ T5894] hub 2-1:0.0: activate --> -90
[  383.743714][ T5894] usb 2-1-port1: config error
[  383.744994][ T5894] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  383.746049][ T5894] usb 2-1-port1: cannot disable (err = -71)
[  383.747162][ T5894] usb 2-1: Failed to suspend device, error -71
[  383.771615][    T9] usb 2-1: USB disconnect, device number 45
[  384.116838][ T7667] usb 5-1: USB disconnect, device number 44
[  385.319679][ T7667] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  385.563211][ T7667] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  385.563230][ T7667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.563240][ T7667] usb 2-1: Product: syz
[  385.563247][ T7667] usb 2-1: Manufacturer: syz
[  385.563255][ T7667] usb 2-1: SerialNumber: syz
[  385.584420][ T7667] usb 2-1: config 0 descriptor??
[  386.730754][ T7667] usb 2-1: non-Atmel transceiver xxxx0008
[  387.135150][ T7667] usb 2-1: Firmware version (0.0) predates our first public release.
[  387.135167][ T7667] usb 2-1: Please update to version 0.2 or newer
[  387.138023][ T7667] usb 2-1: atusb_probe: initialization failed, error = -19
[  387.182793][ T7667] usb 2-1: USB disconnect, device number 46
[  387.649840][ T5930] usb 4-1: qt2_attach - failed to power on unit: -110
[  387.650095][ T5930] quatech2 4-1:0.51: probe with driver quatech2 failed with error -110
[  388.781881][ T5989] usb 4-1: USB disconnect, device number 41
[  388.884034][ T8830] syzkaller0: entered promiscuous mode
[  388.884053][ T8830] syzkaller0: entered allmulticast mode
[  389.299760][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'.
[  389.599706][ T5989] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  389.760928][ T5989] usb 3-1: Using ep0 maxpacket: 8
[  389.783313][ T5989] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  389.783348][ T5989] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  389.783372][ T5989] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  389.783394][ T5989] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  389.783416][ T5989] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  389.783459][ T5989] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  389.783481][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.900715][ T5989] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  390.350733][ T8847] 8021q: adding VLAN 0 to HW filter on device bond3
[  391.807216][ T8847] bond3 (unregistering): Released all slaves
[  392.370528][ T7667] usb 3-1: USB disconnect, device number 48
[  392.935792][ T8880] syzkaller0: entered promiscuous mode
[  392.935809][ T8880] syzkaller0: entered allmulticast mode
[  392.939945][ T7667] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  393.109582][ T7667] usb 3-1: Using ep0 maxpacket: 32
[  393.327557][ T7667] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  393.327578][ T7667] usb 3-1: config 0 has no interface number 0
[  393.350485][ T7667] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  393.350503][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.350514][ T7667] usb 3-1: Product: syz
[  393.350521][ T7667] usb 3-1: Manufacturer: syz
[  393.350528][ T7667] usb 3-1: SerialNumber: syz
[  393.356128][ T7667] usb 3-1: config 0 descriptor??
[  393.370263][ T7667] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  394.128007][ T5930] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  394.311042][ T5930] usb 1-1: Using ep0 maxpacket: 32
[  394.319028][ T5930] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  394.319045][ T5930] usb 1-1: config 4 has no interface number 0
[  394.319075][ T5930] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.319089][ T5930] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.319111][ T5930] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  394.319160][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.435263][ T5930] hub 1-1:4.128: USB hub found
[  394.751820][ T5930] hub 1-1:4.128: 2 ports detected
[  394.751934][ T5930] hub 1-1:4.128: Using single TT (err -22)
[  394.953757][ T5930] hub 1-1:4.128: hub_hub_status failed (err = -71)
[  394.953775][ T5930] hub 1-1:4.128: config failed, can't get hub status (err -71)
[  394.991347][ T5930] usb 1-1: USB disconnect, device number 36
[  396.623474][   T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  396.819647][   T10] usb 1-1: Using ep0 maxpacket: 32
[  396.822374][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.822389][   T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  396.822410][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  396.822423][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.826422][   T10] usb 1-1: config 0 descriptor??
[  397.009839][ T5930] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  397.164873][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  397.164927][ T5930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  397.164949][ T5930] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  397.164961][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.216958][ T5930] usb 2-1: config 0 descriptor??
[  397.451558][ T5989] usb 2-1: USB disconnect, device number 47
[  398.450056][ T7667] usb 3-1: qt2_attach - failed to power on unit: -110
[  398.450333][ T7667] quatech2 3-1:0.51: probe with driver quatech2 failed with error -110
[  399.075286][ T5930] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  399.119034][ T7667] usb 3-1: USB disconnect, device number 49
[  399.129630][   T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  399.229810][ T5930] usb 5-1: Using ep0 maxpacket: 8
[  399.232719][ T5930] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  399.232775][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  399.232818][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  399.232841][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.287167][ T5930] usbtmc 5-1:16.0: bulk endpoints not found
[  399.299647][   T10] usb 4-1: Using ep0 maxpacket: 8
[  399.301355][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  399.301385][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00
[  399.301397][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.346290][   T10] usb 4-1: config 0 descriptor??
[  399.363628][   T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  399.426489][ T8924] loop6: detected capacity change from 0 to 7
[  399.589775][ T8924] Dev loop6: unable to read RDB block 7
[  399.589822][ T8924]  loop6: unable to read partition table
[  399.590024][ T8924] loop6: partition table beyond EOD, truncated
[  399.590056][ T8924] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  399.838042][ T5915] usb 1-1: USB disconnect, device number 37
[  400.055232][ T5194] bcm5974 4-1:0.0: could not read from device
[  400.164386][   T10] usb 4-1: USB disconnect, device number 42
[  400.542938][ T5992] udevd[5992]: Error opening device "/dev/input/event4": No such file or directory
[  400.543022][ T5992] udevd[5992]: Unable to EVIOCGABS device "/dev/input/event4"
[  400.543111][ T5992] udevd[5992]: Unable to EVIOCGABS device "/dev/input/event4"
[  400.543172][ T5992] udevd[5992]: Unable to EVIOCGABS device "/dev/input/event4"
[  400.543231][ T5992] udevd[5992]: Unable to EVIOCGABS device "/dev/input/event4"
[  401.709769][ T5915] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  401.872454][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.872486][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  401.872522][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping
[  401.872545][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  401.874194][ T5915] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  401.874220][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  401.874239][ T5915] usb 2-1: SerialNumber: syz
[  402.099875][ T5922] usb 5-1: USB disconnect, device number 45
[  402.337086][ T5915] usb 2-1: 0:2 : does not exist
[  402.337172][ T5915] usb 2-1: unit 5 not found!
[  402.507796][ T5915] usb 2-1: USB disconnect, device number 48
[  402.644906][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.739932][ T8946] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  403.502770][ T5989] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  403.652978][ T5989] usb 1-1: Using ep0 maxpacket: 32
[  403.655499][ T5989] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  403.655525][ T5989] usb 1-1: config 0 has no interface number 0
[  403.655571][ T5989] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  403.655596][ T5989] usb 1-1: config 0 interface 196 has no altsetting 0
[  403.699061][ T5989] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  403.699080][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.699090][ T5989] usb 1-1: Product: syz
[  403.699097][ T5989] usb 1-1: Manufacturer: syz
[  403.699104][ T5989] usb 1-1: SerialNumber: syz
[  403.755842][ T5989] usb 1-1: config 0 descriptor??
[  403.758584][ T8949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  403.879641][ T5915] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  404.033118][ T5915] usb 2-1: config 0 has no interfaces?
[  404.033163][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  404.033186][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.059643][ T6000] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  404.061223][   T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  404.089081][ T5915] usb 2-1: config 0 descriptor??
[  404.199534][ T5989] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  404.199819][ T5989] ipheth 1-1:0.196: probe with driver ipheth failed with error -71
[  404.209656][   T10] usb 3-1: Using ep0 maxpacket: 32
[  404.219678][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  404.219701][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  404.219737][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  404.219759][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.247251][   T10] usb 3-1: config 0 descriptor??
[  404.279830][ T6000] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  404.279857][ T6000] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  404.279875][ T6000] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  404.279927][ T6000] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  404.279952][ T6000] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  404.282292][ T6000] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  404.282317][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  404.282337][ T6000] usb 5-1: Product: syz
[  404.282350][ T6000] usb 5-1: Manufacturer: syz
[  404.322033][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'.
[  404.380882][ T5989] usb 1-1: USB disconnect, device number 38
[  404.391432][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[  404.467069][ T6000] cdc_wdm 5-1:1.0: skipping garbage
[  404.467088][ T6000] cdc_wdm 5-1:1.0: skipping garbage
[  404.528390][ T6000] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  404.528411][ T6000] cdc_wdm 5-1:1.0: Unknown control protocol
[  404.620183][ T8955] 8021q: adding VLAN 0 to HW filter on device bond2
[  404.693001][ T8964] vlan2: entered allmulticast mode
[  404.710048][   T10] usb 2-1: USB disconnect, device number 49
[  405.014830][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  405.349640][ T7667] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  405.505719][ T7667] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.505737][ T7667] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  405.505759][ T7667] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  405.505771][ T7667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.514010][ T7667] usb 4-1: config 0 descriptor??
[  405.862232][ T5930] usb 4-1: USB disconnect, device number 43
[  406.367484][ T5989] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  406.513766][ T5989] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  406.513784][ T5989] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  406.513794][ T5989] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  406.513823][ T5989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  406.513836][ T5989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  406.515304][ T5989] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  406.515320][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  406.515330][ T5989] usb 1-1: Product: syz
[  406.515338][ T5989] usb 1-1: Manufacturer: syz
[  406.607417][ T5989] cdc_wdm 1-1:1.0: skipping garbage
[  406.607436][ T5989] cdc_wdm 1-1:1.0: skipping garbage
[  406.628159][ T5989] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[  406.628178][ T5989] cdc_wdm 1-1:1.0: Unknown control protocol
[  406.804704][ T5922] usb 3-1: USB disconnect, device number 50
[  406.806039][ T5930] usb 5-1: USB disconnect, device number 46
[  409.773522][ T5989] usb 1-1: USB disconnect, device number 39
[  410.258258][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'.
[  410.610335][ T5930] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  410.884713][ T7667] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  411.079743][ T5930] usb 2-1: Using ep0 maxpacket: 16
[  411.085525][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  411.085557][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  411.086546][ T7667] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  411.086570][ T7667] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  411.086589][ T7667] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  411.086707][ T7667] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  411.086733][ T7667] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  411.093192][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  411.093219][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.093289][ T5930] usb 2-1: Product: syz
[  411.093304][ T5930] usb 2-1: Manufacturer: syz
[  411.093318][ T5930] usb 2-1: SerialNumber: syz
[  411.102115][ T7667] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  411.102140][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  411.102159][ T7667] usb 3-1: Product: syz
[  411.102173][ T7667] usb 3-1: Manufacturer: syz
[  411.111596][ T5930] usb 2-1: config 0 descriptor??
[  411.146979][ T7667] cdc_wdm 3-1:1.0: skipping garbage
[  411.146997][ T7667] cdc_wdm 3-1:1.0: skipping garbage
[  411.154061][ T5930] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  411.159058][ T7667] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  411.159076][ T7667] cdc_wdm 3-1:1.0: Unknown control protocol
[  411.718064][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  412.379646][ T5930] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  412.546781][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.546798][ T5930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  412.546820][ T5930] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  412.546831][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.589626][ T5922] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  412.619767][ T5930] usb 4-1: config 0 descriptor??
[  412.743396][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.743424][ T5922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  412.743461][ T5922] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  412.743485][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.844991][ T5922] usb 1-1: config 0 descriptor??
[  412.881120][ T7667] usb 4-1: USB disconnect, device number 44
[  413.177126][ T5989] usb 1-1: USB disconnect, device number 40
[  413.363782][ T5922] usb 3-1: USB disconnect, device number 51
[  413.539677][ T5894] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  413.709624][ T5894] usb 5-1: Using ep0 maxpacket: 16
[  413.739728][ T5922] usb 2-1: USB disconnect, device number 50
[  413.799685][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.799717][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.799740][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  413.799760][ T5894] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  413.799783][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  413.799803][ T5894] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  413.799825][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  413.804141][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  413.804168][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  413.804187][ T5894] usb 5-1: SerialNumber: syz
[  413.961405][ T5894] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  413.961700][ T5894] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12
[  414.370936][ T9064] syzkaller0: entered promiscuous mode
[  414.370955][ T9064] syzkaller0: entered allmulticast mode
[  415.769764][ T5922] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  415.959971][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'.
[  416.039672][ T5922] usb 1-1: Using ep0 maxpacket: 32
[  416.070239][ T5922] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  416.070270][ T5922] usb 1-1: config 0 has no interface number 0
[  416.101576][ T5922] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  416.101606][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  416.101625][ T5922] usb 1-1: Product: syz
[  416.101638][ T5922] usb 1-1: Manufacturer: syz
[  416.353395][ T5922] usb 1-1: config 0 descriptor??
[  417.624543][ T5989] usb 5-1: USB disconnect, device number 47
[  417.886412][ T5930] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  418.065551][ T5930] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  418.065580][ T5930] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  418.065600][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  418.065651][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  418.065677][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  418.068255][ T5930] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  418.068282][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  418.068301][ T5930] usb 3-1: Product: syz
[  418.068314][ T5930] usb 3-1: Manufacturer: syz
[  418.176898][ T5930] cdc_wdm 3-1:1.0: skipping garbage
[  418.176918][ T5930] cdc_wdm 3-1:1.0: skipping garbage
[  418.246922][ T5930] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[  418.246935][ T5930] cdc_wdm 3-1:1.0: Unknown control protocol
[  418.279884][ T9093] netlink: 60 bytes leftover after parsing attributes in process `syz.4.935'.
[  418.279950][ T9093] netlink: 60 bytes leftover after parsing attributes in process `syz.4.935'.
[  418.678577][ T5989] usb 1-1: USB disconnect, device number 41
[  419.427795][ T9107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.246680][   T37] audit: type=1326 audit(1759183730.426:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  420.246732][   T37] audit: type=1326 audit(1759183730.426:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  420.246774][   T37] audit: type=1326 audit(1759183730.426:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  420.246814][   T37] audit: type=1326 audit(1759183730.426:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  420.246855][   T37] audit: type=1326 audit(1759183730.426:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  420.246895][   T37] audit: type=1326 audit(1759183730.426:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  420.247696][ T5922] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  420.399611][ T6000] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  420.552595][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.552612][ T5922] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  420.552633][ T5922] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  420.552645][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.562064][ T5922] usb 5-1: config 0 descriptor??
[  420.576995][ T6000] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  420.577025][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.577044][ T6000] usb 2-1: Product: syz
[  420.577169][ T6000] usb 2-1: Manufacturer: syz
[  420.577183][ T6000] usb 2-1: SerialNumber: syz
[  420.641935][ T6000] usb 2-1: config 0 descriptor??
[  420.848277][ T6000] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  421.085704][ T5989] usb 5-1: USB disconnect, device number 48
[  421.121559][ T5930] usb 3-1: USB disconnect, device number 52
[  421.472125][ T6000] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  421.554766][   T37] audit: type=1326 audit(1759183731.736:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  421.555058][   T37] audit: type=1326 audit(1759183731.736:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  421.709628][ T5930] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  421.859570][ T5930] usb 3-1: Using ep0 maxpacket: 32
[  421.862032][ T5930] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  421.862047][ T5930] usb 3-1: config 0 has no interface number 0
[  421.862075][ T5930] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  421.862088][ T5930] usb 3-1: config 0 interface 196 has no altsetting 0
[  421.864134][ T5930] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  421.864148][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.864159][ T5930] usb 3-1: Product: syz
[  421.864239][ T5930] usb 3-1: Manufacturer: syz
[  421.864253][ T5930] usb 3-1: SerialNumber: syz
[  421.878994][ T5930] usb 3-1: config 0 descriptor??
[  421.900858][ T9123] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  422.344784][ T5930] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  422.344950][ T5930] ipheth 3-1:0.196: probe with driver ipheth failed with error -71
[  422.382113][ T5930] usb 3-1: USB disconnect, device number 53
[  423.230300][ T6000] usb 2-1: USB disconnect, device number 51
[  424.189621][ T5930] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  424.369800][ T5930] usb 5-1: Using ep0 maxpacket: 32
[  424.417599][ T5930] usb 5-1: config 0 has an invalid interface number: 247 but max is 0
[  424.423464][ T5930] usb 5-1: config 0 has no interface number 0
[  424.429009][ T5930] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  424.429036][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  424.429055][ T5930] usb 5-1: Product: syz
[  424.429067][ T5930] usb 5-1: Manufacturer: syz
[  424.456651][ T5930] usb 5-1: config 0 descriptor??
[  427.524316][ T9173] 8021q: adding VLAN 0 to HW filter on device bond3
[  427.960045][ T5989] usb 5-1: USB disconnect, device number 49
[  428.513483][   T37] audit: type=1800 audit(1759183738.686:50): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.960" name="file1" dev="tmpfs" ino=930 res=0 errno=0
[  429.209622][ T5894] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  429.372436][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  429.372455][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.372465][ T5894] usb 2-1: Product: syz
[  429.372472][ T5894] usb 2-1: Manufacturer: syz
[  429.372479][ T5894] usb 2-1: SerialNumber: syz
[  429.376125][ T5894] usb 2-1: config 0 descriptor??
[  429.599271][ T5894] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  430.211288][ T5894] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  431.449684][    T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  431.676066][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  431.676083][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  431.676104][    T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  431.676116][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.679019][    T9] usb 1-1: config 0 descriptor??
[  431.960328][ T5989] usb 2-1: USB disconnect, device number 52
[  432.110468][    T9] usb 1-1: USB disconnect, device number 42
[  433.213479][ T5989] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  433.649862][ T5989] usb 4-1: Using ep0 maxpacket: 32
[  433.749676][ T5989] usb 4-1: config 0 has an invalid interface number: 247 but max is 0
[  433.749887][ T5989] usb 4-1: config 0 has no interface number 0
[  433.793867][ T5989] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  433.793897][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  433.793916][ T5989] usb 4-1: Product: syz
[  433.793928][ T5989] usb 4-1: Manufacturer: syz
[  433.937065][ T5989] usb 4-1: config 0 descriptor??
[  435.029600][ T5989] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  435.224785][ T5989] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  435.224804][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.224814][ T5989] usb 5-1: Product: syz
[  435.224822][ T5989] usb 5-1: Manufacturer: syz
[  435.224829][ T5989] usb 5-1: SerialNumber: syz
[  435.228549][ T5989] usb 5-1: config 0 descriptor??
[  435.439190][ T5989] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  436.529632][ T5915] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  436.686032][ T5915] usb 2-1: config 0 has no interfaces?
[  436.686059][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  436.686071][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.737002][ T5915] usb 2-1: config 0 descriptor??
[  436.973298][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'.
[  437.106412][ T5989] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  437.159586][ T5989] usb 5-1: USB disconnect, device number 50
[  437.373416][ T9253] 8021q: adding VLAN 0 to HW filter on device bond4
[  437.425894][ T5989] usb 2-1: USB disconnect, device number 53
[  437.499989][    T9] usb 4-1: USB disconnect, device number 45
[  437.822911][ T9259] syzkaller0: entered promiscuous mode
[  437.822939][ T9259] syzkaller0: entered allmulticast mode
[  438.685795][   T37] audit: type=1800 audit(1759183748.866:51): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.984" name="file1" dev="tmpfs" ino=1006 res=0 errno=0
[  439.112853][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'.
[  439.248317][ T5989] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  439.434809][ T5989] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.434825][ T5989] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  439.434846][ T5989] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  439.434857][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.861910][ T5989] usb 5-1: config 0 descriptor??
[  439.983573][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  439.983648][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  440.087860][ T6000] usb 5-1: USB disconnect, device number 51
[  440.659690][ T6000] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  440.729771][ T5915] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  440.859823][ T6000] usb 3-1: Using ep0 maxpacket: 8
[  440.861435][ T6000] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  440.861453][ T6000] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  440.861466][ T6000] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  440.861478][ T6000] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  440.861501][ T6000] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  440.861512][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.919680][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  440.923608][ T5915] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  440.923688][ T5915] usb 4-1: config 4 has no interface number 0
[  440.923734][ T5915] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.923761][ T5915] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.923853][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  440.923875][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.073883][ T6000] usb 3-1: usb_control_msg returned -32
[  441.073914][ T6000] usbtmc 3-1:16.0: can't read capabilities
[  441.131775][ T5915] hub 4-1:4.128: USB hub found
[  441.209510][ T5915] hub 4-1:4.128: 2 ports detected
[  441.209566][ T5915] hub 4-1:4.128: Using single TT (err -22)
[  441.348666][ T6000] usb 3-1: USB disconnect, device number 54
[  441.437671][ T5915] hub 4-1:4.128: hub_hub_status failed (err = -71)
[  441.437699][ T5915] hub 4-1:4.128: config failed, can't get hub status (err -71)
[  441.581075][ T5915] usb 4-1: USB disconnect, device number 46
[  442.539709][ T5894] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  442.749684][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  442.752403][ T5894] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  442.752426][ T5894] usb 3-1: config 0 has no interface number 0
[  442.755317][ T5894] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  442.755335][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  442.755345][ T5894] usb 3-1: Product: syz
[  442.755353][ T5894] usb 3-1: Manufacturer: syz
[  442.844634][ T5894] usb 3-1: config 0 descriptor??
[  446.189712][ T5915] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  446.420808][    T9] usb 3-1: USB disconnect, device number 55
[  446.499254][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  446.499282][ T5915] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  446.499319][ T5915] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  446.499342][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.541820][ T5915] usb 5-1: config 0 descriptor??
[  446.999705][ T5915] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  447.119623][ T6000] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  447.149633][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  447.158398][ T5915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  447.158466][ T5915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  447.158492][ T5915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  447.158516][ T5915] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  447.158560][ T5915] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  447.158583][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.289596][ T6000] usb 3-1: Using ep0 maxpacket: 16
[  447.296983][ T6000] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.297008][ T6000] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  447.301371][ T6000] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  447.301398][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.301416][ T6000] usb 3-1: Product: syz
[  447.301429][ T6000] usb 3-1: Manufacturer: syz
[  447.301443][ T6000] usb 3-1: SerialNumber: syz
[  447.494019][ T5915] usb 4-1: usb_control_msg returned -32
[  447.494066][ T5915] usbtmc 4-1:16.0: can't read capabilities
[  447.616347][ T6000] usb 3-1: 0:2 : does not exist
[  447.630608][ T6000] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  447.661781][ T5915] usb 4-1: USB disconnect, device number 47
[  447.670091][ T5930] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  447.847613][ T5930] usb 1-1: Using ep0 maxpacket: 32
[  447.887391][ T5930] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  447.887419][ T5930] usb 1-1: config 0 has no interface number 0
[  447.909997][ T5930] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  447.910026][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.910045][ T5930] usb 1-1: Product: syz
[  447.910058][ T5930] usb 1-1: Manufacturer: syz
[  447.910071][ T5930] usb 1-1: SerialNumber: syz
[  447.981170][ T5930] usb 1-1: config 0 descriptor??
[  448.136206][ T5930] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  448.148915][ T6000] usb 3-1: USB disconnect, device number 56
[  448.687902][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  448.935798][ T9360] 8021q: adding VLAN 0 to HW filter on device bond3
[  450.233540][ T7667] usb 5-1: USB disconnect, device number 52
[  450.912593][   T37] audit: type=1326 audit(1759183761.086:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  450.912648][   T37] audit: type=1326 audit(1759183761.086:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  450.912688][   T37] audit: type=1326 audit(1759183761.086:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  450.912728][   T37] audit: type=1326 audit(1759183761.086:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  450.912767][   T37] audit: type=1326 audit(1759183761.086:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  450.912808][   T37] audit: type=1326 audit(1759183761.086:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  451.497596][   T37] audit: type=1326 audit(1759183761.676:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  451.499611][   T37] audit: type=1326 audit(1759183761.676:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  451.569743][   T10] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  451.746197][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.746224][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  451.746266][   T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  451.746289][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.950769][   T10] usb 3-1: config 0 descriptor??
[  452.257792][ T5915] usb 3-1: USB disconnect, device number 57
[  452.396441][ T9390] binder: BINDER_SET_CONTEXT_MGR already set
[  452.396463][ T9390] binder: 9379:9390 ioctl 4018620d 200000000040 returned -16
[  453.235330][ T5930] usb 1-1: qt2_attach - failed to power on unit: -110
[  453.235492][ T5930] quatech2 1-1:0.51: probe with driver quatech2 failed with error -110
[  454.569689][   T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  454.749637][   T10] usb 2-1: Using ep0 maxpacket: 8
[  454.758041][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  454.758085][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  454.758106][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  454.758119][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  454.758146][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  454.758158][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.876271][ T5894] usb 1-1: USB disconnect, device number 43
[  455.127213][   T10] usb 2-1: GET_CAPABILITIES returned 0
[  455.127249][   T10] usbtmc 2-1:16.0: can't read capabilities
[  455.353181][   T10] usb 2-1: USB disconnect, device number 54
[  456.939822][ T5894] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  457.148368][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.148386][ T5894] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  457.148408][ T5894] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  457.148420][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.331325][ T5894] usb 1-1: config 0 descriptor??
[  457.711330][ T5894] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  457.949599][ T5894] usb 2-1: Using ep0 maxpacket: 16
[  457.952179][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  457.952194][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  457.954431][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  457.954447][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.954457][ T5894] usb 2-1: Product: syz
[  457.954465][ T5894] usb 2-1: Manufacturer: syz
[  457.954473][ T5894] usb 2-1: SerialNumber: syz
[  458.178361][ T5894] usb 2-1: 0:2 : does not exist
[  458.197874][ T5894] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  458.250271][ T5894] usb 2-1: USB disconnect, device number 55
[  458.363877][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  459.326857][   T37] audit: type=1326 audit(1759183769.496:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  459.326915][   T37] audit: type=1326 audit(1759183769.496:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f09edeec9 code=0x7ffc0000
[  459.456972][   T37] audit: type=1800 audit(1759183769.636:62): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1036" name="file1" dev="tmpfs" ino=1009 res=0 errno=0
[  460.514448][ T7667] usb 1-1: USB disconnect, device number 44
[  461.899603][ T7667] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  462.115962][ T7667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.115988][ T7667] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  462.116025][ T7667] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  462.116048][ T7667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.135580][ T7667] usb 1-1: config 0 descriptor??
[  462.501359][ T5894] usb 1-1: USB disconnect, device number 45
[  462.939638][ T7667] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  463.089662][ T7667] usb 2-1: Using ep0 maxpacket: 32
[  463.095643][ T7667] usb 2-1: config 0 has an invalid interface number: 247 but max is 0
[  463.095668][ T7667] usb 2-1: config 0 has no interface number 0
[  463.098567][ T7667] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  463.098595][ T7667] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  463.098615][ T7667] usb 2-1: Product: syz
[  463.098629][ T7667] usb 2-1: Manufacturer: syz
[  463.172884][ T7667] usb 2-1: config 0 descriptor??
[  463.411636][ T9498] binder_alloc: 9497: pid 9497 spamming oneway? 1 buffers allocated for a total size of 4096
[  463.413602][ T5915] usb 2-1: USB disconnect, device number 56
[  464.039698][ T5915] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  464.189687][ T5915] usb 3-1: Using ep0 maxpacket: 32
[  464.192703][ T5915] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  464.192729][ T5915] usb 3-1: config 0 has no interface number 0
[  464.192776][ T5915] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  464.192800][ T5915] usb 3-1: config 0 interface 196 has no altsetting 0
[  464.196444][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  464.196461][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.196471][ T5915] usb 3-1: Product: syz
[  464.196478][ T5915] usb 3-1: Manufacturer: syz
[  464.196486][ T5915] usb 3-1: SerialNumber: syz
[  464.239686][ T5915] usb 3-1: config 0 descriptor??
[  464.240861][ T9508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  464.619008][ T5915] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  464.619182][ T5915] ipheth 3-1:0.196: probe with driver ipheth failed with error -71
[  464.657083][ T5915] usb 3-1: USB disconnect, device number 58
[  465.762123][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'.
[  469.414218][ T5930] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  469.592988][ T5930] usb 4-1: Using ep0 maxpacket: 16
[  469.595589][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  469.595619][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  469.742122][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  469.742152][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.742171][ T5930] usb 4-1: Product: syz
[  469.742186][ T5930] usb 4-1: Manufacturer: syz
[  469.742200][ T5930] usb 4-1: SerialNumber: syz
[  469.785191][ T5930] usb 4-1: config 0 descriptor??
[  469.837015][ T5930] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  469.909738][ T5922] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  470.097571][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.097589][ T5922] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  470.097610][ T5922] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  470.097622][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.114796][ T5922] usb 5-1: config 0 descriptor??
[  470.582107][ T5915] usb 5-1: USB disconnect, device number 53
[  471.349677][   T10] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  471.508410][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.508437][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  471.508467][   T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  471.508479][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.524118][   T10] usb 3-1: config 0 descriptor??
[  471.829738][   T10] usb 3-1: USB disconnect, device number 59
[  472.275538][   T10] usb 4-1: USB disconnect, device number 48
[  472.719587][   T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  472.872347][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  472.872375][   T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  472.872395][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  472.872447][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  472.872473][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  472.973589][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  472.973620][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  472.973639][   T10] usb 4-1: Product: syz
[  472.973653][   T10] usb 4-1: Manufacturer: syz
[  473.034981][ T5930] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  473.053623][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  473.053635][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  473.071352][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  473.071364][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[  473.183264][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.183281][ T5930] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  473.183301][ T5930] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  473.183313][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.203676][ T5930] usb 5-1: config 0 descriptor??
[  473.471834][ T5915] usb 5-1: USB disconnect, device number 54
[  473.509655][ T5922] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  473.613596][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 7 bytes
[  473.669576][ T5922] usb 2-1: Using ep0 maxpacket: 32
[  473.671411][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  473.671439][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  473.671451][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.676015][ T5922] usb 2-1: config 0 descriptor??
[  473.748195][ T5922] hub 2-1:0.0: bad descriptor, ignoring hub
[  473.748949][ T5922] hub 2-1:0.0: probe with driver hub failed with error -5
[  473.785205][ T5922] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  474.094701][ T5915] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  474.250494][ T5915] usb 1-1: Using ep0 maxpacket: 32
[  474.306576][ T5915] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  474.306606][ T5915] usb 1-1: config 0 has no interface number 0
[  474.335328][ T5915] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  474.335498][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.335639][ T5915] usb 1-1: Product: syz
[  474.335654][ T5915] usb 1-1: Manufacturer: syz
[  474.335667][ T5915] usb 1-1: SerialNumber: syz
[  474.342704][ T5915] usb 1-1: config 0 descriptor??
[  474.349571][ T5915] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  475.419793][ T5922] usb 4-1: USB disconnect, device number 49
[  476.190831][ T5930] usb 2-1: USB disconnect, device number 57
[  476.572839][ T9628] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1082'.
[  477.459949][ T5989] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  477.632006][ T5989] usb 4-1: Using ep0 maxpacket: 16
[  477.636310][ T5989] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  477.636342][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  477.638974][ T5989] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  477.638996][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.639007][ T5989] usb 4-1: Product: syz
[  477.639014][ T5989] usb 4-1: Manufacturer: syz
[  477.639021][ T5989] usb 4-1: SerialNumber: syz
[  477.788567][ T5989] usb 4-1: config 0 descriptor??
[  477.801010][ T5989] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  479.409963][ T5915] usb 1-1: qt2_attach - failed to power on unit: -110
[  479.410224][ T5915] quatech2 1-1:0.51: probe with driver quatech2 failed with error -110
[  479.999718][ T5922] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  480.172122][ T5930] usb 1-1: USB disconnect, device number 46
[  480.188361][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  480.188377][ T5922] usb 3-1: config 0 has no interfaces?
[  480.188394][ T5922] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  480.188406][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.234049][ T5922] usb 3-1: config 0 descriptor??
[  480.261600][ T5922] usb 4-1: USB disconnect, device number 50
[  480.825006][ T9663] netlink: 'syz.2.1087': attribute type 1 has an invalid length.
[  480.945993][ T9665] loop6: detected capacity change from 0 to 7
[  480.947603][ T9665] Dev loop6: unable to read RDB block 7
[  480.947652][ T9665]  loop6: unable to read partition table
[  480.947992][ T9665] loop6: partition table beyond EOD, truncated
[  480.948010][ T9665] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  480.991638][ T5922] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  481.041861][ T9663] 8021q: adding VLAN 0 to HW filter on device bond4
[  481.139625][ T5922] usb 4-1: Using ep0 maxpacket: 8
[  481.145415][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  481.145440][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  481.145454][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  481.145465][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  481.145476][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  481.145500][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  481.145512][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.154804][ T5922] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[  481.476488][ T9674] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1094'.
[  482.698727][   T10] usb 3-1: USB disconnect, device number 60
[  482.801986][ T5930] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  483.089321][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.089339][ T5930] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  483.089363][ T5930] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  483.089375][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.144517][ T5930] usb 5-1: config 0 descriptor??
[  483.686123][   T10] usb 5-1: USB disconnect, device number 55
[  483.822010][ T5930] usb 4-1: USB disconnect, device number 51
[  486.809585][ T5922] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  486.959862][ T5922] usb 1-1: Using ep0 maxpacket: 16
[  486.961661][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  486.961676][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  486.963847][ T5922] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  486.963863][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.963873][ T5922] usb 1-1: Product: syz
[  486.963880][ T5922] usb 1-1: Manufacturer: syz
[  486.963888][ T5922] usb 1-1: SerialNumber: syz
[  487.195604][ T5922] usb 1-1: 0:2 : does not exist
[  487.215971][ T5922] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  487.265818][ T5922] usb 1-1: USB disconnect, device number 47
[  487.341943][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  487.881956][   T37] audit: type=1800 audit(1759183798.066:63): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1114" name="memory.events" dev="tmpfs" ino=1155 res=0 errno=0
[  488.119670][ T5922] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  488.292958][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  488.294995][ T5922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  488.295015][ T5922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  488.295030][ T5922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  488.295042][ T5922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  488.295116][ T5922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  488.295142][ T5922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  488.295153][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.309809][ T5930] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  488.418393][ T5922] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  488.479805][ T5930] usb 5-1: Using ep0 maxpacket: 32
[  488.482145][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.482192][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  488.482215][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.535556][ T5930] usb 5-1: config 0 descriptor??
[  488.583473][ T5930] hub 5-1:0.0: bad descriptor, ignoring hub
[  488.583498][ T5930] hub 5-1:0.0: probe with driver hub failed with error -5
[  488.587394][ T5930] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  489.011366][ T9752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1120'.
[  490.943179][ T5922] usb 3-1: USB disconnect, device number 61
[  491.393638][ T5922] usb 5-1: USB disconnect, device number 56
[  492.359611][ T5930] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  492.549576][ T5930] usb 5-1: Using ep0 maxpacket: 32
[  492.551789][ T5930] usb 5-1: config 0 has an invalid interface number: 247 but max is 0
[  492.551805][ T5930] usb 5-1: config 0 has no interface number 0
[  492.555197][ T5930] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  492.555224][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  492.555242][ T5930] usb 5-1: Product: syz
[  492.555255][ T5930] usb 5-1: Manufacturer: syz
[  492.621010][ T5930] usb 5-1: config 0 descriptor??
[  492.711849][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'.
[  496.254360][ T5915] usb 5-1: USB disconnect, device number 57
[  496.879679][ T5930] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  497.061976][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  497.065652][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  497.065668][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.065678][ T5930] usb 5-1: Product: syz
[  497.065686][ T5930] usb 5-1: Manufacturer: syz
[  497.065693][ T5930] usb 5-1: SerialNumber: syz
[  497.068650][ T5930] usb 5-1: config 0 descriptor??
[  497.376563][ T9818] loop6: detected capacity change from 0 to 7
[  497.403678][ T9818] Dev loop6: unable to read RDB block 7
[  497.403723][ T9818]  loop6: unable to read partition table
[  497.403952][ T9818] loop6: partition table beyond EOD, truncated
[  497.403969][ T9818] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  499.049986][ T5989] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  499.199659][ T5989] usb 1-1: Using ep0 maxpacket: 8
[  499.202777][ T5989] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  499.202832][ T5989] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  499.202855][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.429681][ T5894] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  499.619641][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  499.625811][ T5894] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  499.625834][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.625844][ T5894] usb 4-1: Product: syz
[  499.625851][ T5894] usb 4-1: Manufacturer: syz
[  499.625859][ T5894] usb 4-1: SerialNumber: syz
[  499.919419][ T5894] usb 4-1: palm_os_4_probe - error -32 getting connection info
[  499.919665][ T5894] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  499.928458][ T5922] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  500.112362][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.112390][ T5922] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  500.112426][ T5922] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  500.112450][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.122281][ T5894] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  500.166749][ T5922] usb 3-1: config 0 descriptor??
[  500.223398][ T5894] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  500.300722][ T5894] usb 4-1: USB disconnect, device number 52
[  500.507708][ T6000] usb 3-1: USB disconnect, device number 62
[  500.728562][ T5894] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  500.941089][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'.
[  501.058013][ T5894] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  501.058959][ T5894] visor 4-1:1.0: device disconnected
[  501.415845][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  501.415890][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  501.581398][ T5922] usb 5-1: USB disconnect, device number 58
[  501.790172][ T5930] usb 1-1: USB disconnect, device number 48
[  502.411107][ T5857] Bluetooth: hci1: unexpected Set CIG Parameters response data
[  502.412781][ T5857] Bluetooth: hci1: unexpected event for opcode 0x2062
[  503.468874][ T5989] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  503.732145][ T5989] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  503.739577][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.739602][ T5989] usb 3-1: Product: syz
[  503.739615][ T5989] usb 3-1: Manufacturer: syz
[  503.739627][ T5989] usb 3-1: SerialNumber: syz
[  503.752749][ T5989] usb 3-1: config 0 descriptor??
[  505.484104][ T5989] usb 3-1: non-Atmel transceiver xxxx0008
[  505.825306][ T5989] usb 3-1: Firmware version (0.0) predates our first public release.
[  505.825323][ T5989] usb 3-1: Please update to version 0.2 or newer
[  505.856939][ T5989] usb 3-1: atusb_probe: initialization failed, error = -19
[  505.917794][ T5989] usb 3-1: USB disconnect, device number 63
[  506.454623][ T5857] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  506.454864][ T5857] Bluetooth: hci1: Injecting HCI hardware error event
[  506.457238][   T59] Bluetooth: hci1: hardware error 0x00
[  506.920813][   T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  507.079766][   T10] usb 1-1: Using ep0 maxpacket: 16
[  507.082357][   T10] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  507.082382][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  507.085141][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  507.085175][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.085194][   T10] usb 1-1: Product: syz
[  507.085208][   T10] usb 1-1: Manufacturer: syz
[  507.085221][   T10] usb 1-1: SerialNumber: syz
[  507.426826][   T10] usb 1-1: 0:2 : does not exist
[  507.479604][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  507.541697][   T10] usb 1-1: USB disconnect, device number 49
[  507.933018][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  508.069889][   T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  508.219752][   T10] usb 3-1: Using ep0 maxpacket: 32
[  508.226350][   T10] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  508.226375][   T10] usb 3-1: config 0 has no interface number 0
[  508.239711][ T5922] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  508.249661][ T5915] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  508.272104][   T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  508.272133][   T10] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  508.272152][   T10] usb 3-1: Product: syz
[  508.272166][   T10] usb 3-1: Manufacturer: syz
[  508.314814][   T10] usb 3-1: config 0 descriptor??
[  508.399688][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  508.405160][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  508.405206][ T5922] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  508.405229][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.405739][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.405760][ T5915] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  508.405794][ T5915] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  508.405816][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.486315][ T5922] usb 2-1: config 0 descriptor??
[  508.504247][ T5915] usb 5-1: config 0 descriptor??
[  508.689643][   T59] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  508.732301][ T5922] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  508.750495][ T5922] usb 2-1: USB disconnect, device number 58
[  508.837461][ T5915] usb 5-1: USB disconnect, device number 59
[  509.804020][ T5922] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  509.964542][ T5922] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  509.964622][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.964634][ T5922] usb 1-1: Product: syz
[  509.964641][ T5922] usb 1-1: Manufacturer: syz
[  509.964649][ T5922] usb 1-1: SerialNumber: syz
[  509.968989][ T5922] usb 1-1: config 0 descriptor??
[  510.777456][   T10] usb 3-1: USB disconnect, device number 64
[  511.602311][ T5922] usb 1-1: non-Atmel transceiver xxxx0008
[  512.339621][   T37] audit: type=1326 audit(1759183822.516:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  512.339672][   T37] audit: type=1326 audit(1759183822.516:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  512.339710][   T37] audit: type=1326 audit(1759183822.516:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  512.339965][   T37] audit: type=1326 audit(1759183822.516:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  512.340005][   T37] audit: type=1326 audit(1759183822.516:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  512.340048][   T37] audit: type=1326 audit(1759183822.516:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  512.345338][ T5922] usb 1-1: Firmware version (0.0) predates our first public release.
[  512.345362][ T5922] usb 1-1: Please update to version 0.2 or newer
[  512.345854][ T5922] usb 1-1: atusb_probe: initialization failed, error = -19
[  512.361242][ T5922] usb 1-1: USB disconnect, device number 50
[  512.970993][   T37] audit: type=1326 audit(1759183823.146:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  512.979163][   T37] audit: type=1326 audit(1759183823.156:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbb5eec9 code=0x7ffc0000
[  513.620477][   T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  513.676069][ T9954] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  513.789561][ T5915] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  513.809795][   T10] usb 5-1: Using ep0 maxpacket: 32
[  513.827027][   T10] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  513.827056][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.827075][   T10] usb 5-1: Product: syz
[  513.827089][   T10] usb 5-1: Manufacturer: syz
[  513.827102][   T10] usb 5-1: SerialNumber: syz
[  513.943063][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  513.943089][ T5915] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  513.943125][ T5915] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  513.943147][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.010321][ T5915] usb 4-1: config 0 descriptor??
[  514.112505][   T10] usb 5-1: palm_os_4_probe - error -32 getting connection info
[  514.112590][   T10] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  514.171559][   T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  514.262415][   T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  514.353036][   T10] usb 5-1: USB disconnect, device number 60
[  514.404412][ T6000] usb 4-1: USB disconnect, device number 53
[  514.548213][   T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  514.597739][   T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  514.601880][   T10] visor 5-1:1.0: device disconnected
[  517.225059][ T9989] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  517.225115][ T9989] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  517.225135][ T9989] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  517.239756][   T37] audit: type=1800 audit(1759183827.406:72): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1181" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  517.625963][   T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  518.519590][   T10] usb 1-1: Using ep0 maxpacket: 8
[  518.522172][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  518.522218][   T10] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  518.522246][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  518.522278][   T10] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  518.522301][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.673890][   T10] usb 1-1: config 0 descriptor??
[  519.622068][T10004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.137909][T10004] syzkaller0: entered promiscuous mode
[  520.138047][T10004] syzkaller0: entered allmulticast mode
[  520.156264][T10004] tipc: Resetting bearer <eth:syzkaller0>
[  520.309839][T10000] tipc: Resetting bearer <eth:syzkaller0>
[  520.337361][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  520.337487][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  520.362157][   T10] usb 1-1: USB disconnect, device number 51
[  521.524300][   T10] tipc: Node number set to 2133742756
[  521.815128][   T37] audit: type=1326 audit(1759183831.996:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  521.819567][   T37] audit: type=1326 audit(1759183831.996:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  521.820110][   T37] audit: type=1326 audit(1759183831.996:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  521.826650][   T37] audit: type=1326 audit(1759183832.006:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  522.299863][    T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  522.457210][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.457264][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  522.457307][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  522.457330][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.511430][    T9] usb 5-1: config 0 descriptor??
[  522.529996][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  522.733944][    T9] usb 5-1: USB disconnect, device number 61
[  534.318605][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  534.343159][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  534.346068][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  534.360915][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  534.365502][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  534.432219][T10000] tipc: Disabling bearer <eth:syzkaller0>
[  535.992212][T10053] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  536.449675][ T5857] Bluetooth: hci5: command tx timeout
[  536.620679][   T37] audit: type=1326 audit(1759183846.806:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  536.621130][   T37] audit: type=1326 audit(1759183846.806:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  536.621590][   T37] audit: type=1326 audit(1759183846.806:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  536.621945][   T37] audit: type=1326 audit(1759183846.806:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  536.622193][   T37] audit: type=1326 audit(1759183846.806:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  537.953135][T10068] net_ratelimit: 10 callbacks suppressed
[  537.953156][T10068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  538.186273][   T37] audit: type=1326 audit(1759183848.366:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  538.186534][   T37] audit: type=1326 audit(1759183848.366:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94185feec9 code=0x7ffc0000
[  538.399640][ T5989] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  538.529616][ T5857] Bluetooth: hci5: command tx timeout
[  538.554464][ T5989] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  538.554495][ T5989] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  538.557082][ T5989] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  538.557105][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.557115][ T5989] usb 5-1: Product: syz
[  538.557122][ T5989] usb 5-1: Manufacturer: syz
[  538.557130][ T5989] usb 5-1: SerialNumber: syz
[  538.614666][ T5989] usb 5-1: config 0 descriptor??
[  538.615597][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  538.615717][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  538.840384][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  538.840726][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  538.991887][T10088] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48
[  538.991908][T10088] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10088, name: syz.0.1209
[  538.991925][T10088] preempt_count: 1, expected: 0
[  538.991942][T10088] RCU nest depth: 1, expected: 1
[  538.991957][T10088] 3 locks held by syz.0.1209/10088:
[  538.991967][T10088]  #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  538.992025][T10088]  #1: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  538.992072][T10088]  #2: ffff8880379b4a98 (&stab->lock){+...}-{3:3}, at: sock_map_delete_elem+0xb7/0x170
[  538.992126][T10088] Preemption disabled at:
[  538.992132][T10088] [<ffffffff89208e68>] bpf_test_timer_enter+0xf8/0x140
[  538.992181][T10088] CPU: 0 UID: 0 PID: 10088 Comm: syz.0.1209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  538.992205][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  538.992225][T10088] Call Trace:
[  538.992233][T10088]  <TASK>
[  538.992241][T10088]  dump_stack_lvl+0x189/0x250
[  538.992277][T10088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  538.992305][T10088]  ? __pfx__printk+0x10/0x10
[  538.992328][T10088]  ? print_lock_name+0xde/0x100
[  538.992345][T10088]  ? bpf_test_timer_enter+0xf8/0x140
[  538.992374][T10088]  __might_resched+0x44b/0x5d0
[  538.992399][T10088]  ? bpf_test_timer_enter+0xf8/0x140
[  538.992426][T10088]  ? __pfx___might_resched+0x10/0x10
[  538.992449][T10088]  ? sock_map_delete_elem+0xb7/0x170
[  538.992492][T10088]  rt_spin_lock+0xc7/0x2c0
[  538.992521][T10088]  ? __pfx_rt_spin_lock+0x10/0x10
[  538.992547][T10088]  ? ktime_get+0x3e/0x1f0
[  538.992567][T10088]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  538.992589][T10088]  ? __pfx___cant_migrate+0x10/0x10
[  538.992614][T10088]  ? sock_map_delete_elem+0xa2/0x170
[  538.992641][T10088]  sock_map_delete_elem+0xb7/0x170
[  538.992671][T10088]  bpf_prog_8a405b5ced52e191+0x4b/0x53
[  538.992697][T10088]  bpf_flow_dissect+0x34c/0x400
[  538.992726][T10088]  bpf_prog_test_run_flow_dissector+0x37c/0x5c0
[  538.992768][T10088]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  538.992797][T10088]  ? __fget_files+0x2a/0x420
[  538.992828][T10088]  ? __fget_files+0x2a/0x420
[  538.992856][T10088]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  538.992883][T10088]  bpf_prog_test_run+0x2cd/0x340
[  538.992912][T10088]  __sys_bpf+0x581/0x870
[  538.992945][T10088]  ? __pfx___sys_bpf+0x10/0x10
[  538.992988][T10088]  ? rcu_is_watching+0x15/0xb0
[  538.993024][T10088]  __x64_sys_bpf+0x7c/0x90
[  538.993044][T10088]  do_syscall_64+0xfa/0x3b0
[  538.993062][T10088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.993079][T10088]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  538.993098][T10088]  ? clear_bhb_loop+0x60/0xb0
[  538.993121][T10088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.993144][T10088] RIP: 0033:0x7f94185feec9
[  538.993161][T10088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.993179][T10088] RSP: 002b:00007f941685e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  538.993200][T10088] RAX: ffffffffffffffda RBX: 00007f9418855fa0 RCX: 00007f94185feec9
[  538.993216][T10088] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  538.993229][T10088] RBP: 00007f9418681f91 R08: 0000000000000000 R09: 0000000000000000
[  538.993242][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.993255][T10088] R13: 00007f9418856038 R14: 00007f9418855fa0 R15: 00007ffd3ac03a18
[  538.993287][T10088]  </TASK>
[  539.081717][   T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.117254][T10089] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1209'.
[  539.190216][ T5989] Error reading MAC address
[  539.472191][ T5989] usb 5-1: USB disconnect, device number 62
[  539.741832][T10089] 0ªX¹¦D: renamed from gretap0 (while UP)
[  539.797231][T10089] 0ªX¹¦D: entered allmulticast mode
[  539.797758][T10089] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  540.265076][   T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.610815][ T5857] Bluetooth: hci5: command tx timeout
[  541.526584][   T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.744846][   T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.431788][   T44] dvmrp1 (unregistering): left allmulticast mode
[  544.206141][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  544.260451][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  544.287357][   T44] bond0 (unregistering): Released all slaves
[  544.978045][   T44] bond1 (unregistering): Released all slaves
[  545.667261][   T44] bond2 (unregistering): Released all slaves
[  546.374143][   T44] bond3 (unregistering): Released all slaves
[  547.047672][   T44] bond4 (unregistering): Released all slaves
[  547.230418][   T44] tipc: Left network mode
[  548.584077][   T44] hsr_slave_0: left promiscuous mode
[  548.619759][   T44] hsr_slave_1: left promiscuous mode
[  548.620990][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.621011][   T44] batadv0: mtu less than device minimum
[  548.628842][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.638781][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.649420][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.659683][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.668427][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.678516][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.687496][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.696308][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.705139][   T44] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  548.785149][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.821809][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.957065][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.960881][   T44] batman_adv: batadv0: Interface deactivated: dummy0
[  548.960908][   T44] batman_adv: batadv0: Removing interface: dummy0