last executing test programs:

20.22212368s ago: executing program 2 (id=543):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
gettid()
r3 = inotify_init()
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@empty}, &(0x7f0000000200)=0x14)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0xa)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x1, r5, 0x0}])
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0xf}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000a1}, 0x80)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
mq_getsetattr(r7, 0x0, 0x0)
read(r0, &(0x7f00000019c0)=""/4104, 0x1008)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0005000000000904c50003ff01070009050502080000030109050c"], 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1})
r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0)

17.101161993s ago: executing program 2 (id=560):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x8d, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff669789e8c61bb891d4d37309c212a8b629bc8c51cde9500b8ccafca4ea1c530a015e042a2e4e"}, {0x6, 0x1a01, 0x41, &(0x7f0000000040)="9dc9d967aef82987b99baab7c9aa1ca2dd19ea3e7335a5db8c9b2a55c85c2ef42097d97b8450c58276354541c1f7d6cb688b6cc257e647243787436cd578448889"}, {0x5, 0x1010, 0xe, &(0x7f0000000100)="17c44b1275dcb1c3c2156c7ae109"}, {0x7fff, 0x10, 0x28, &(0x7f0000000140)="cb7fa7b57c4a657d2e86b7c7342cbbe6a1ca5ef62e5b2dbe38f49cfced5da514d56726fd5255c154"}], 0x4})
syz_emit_ethernet(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x80000001, 0x443, 0x8, 0xcb, 0x5, 0x9, 0x6, 0x4, 0x7, 0x0, 0x8000, 0x6, 0x1, 0x8000, 0x7fff, 0x1, 0xfffffff7, 0x9, 0x3, 0x3, 0x28000, 0x3ff, 0x40000000, 0x44f, 0x0, 0x1, 0x1000, 0x6, 0x3, 0x7211, 0xd, 0x2, 0x60dc, 0xd5ff, 0x7, 0x3, 0x5, 0x1, 0x80, 0x7, 0x0, 0xffff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x7d80, 0x1, 0xfffff001, 0x1, 0x8, 0x9, 0x7f, 0x7ff, 0x4, 0x80, 0x7e, 0x425, 0x4a, 0xffff0000, 0x2, 0x1ff, 0x29, 0xedad, 0x0, 0x7, 0x200, 0xfffffffb, 0x0, 0x9, 0x0, 0x100, 0x7, 0x10001, 0x0, 0x0, 0xfbb2, 0x62000000, 0x8, 0x0, 0x8, 0x7f, 0xa, 0x8, 0x3, 0x57d6, 0x7, 0x0, 0x3, 0x6cd, 0x5, 0xfff, 0x8000, 0x9, 0x0, 0x7f, 0xe, 0xa1b4, 0xb, 0x5, 0x3cb2, 0xffffff81, 0x8, 0xbc, 0x58, 0x7, 0x9, 0x8, 0x800, 0xff800000, 0xd3a, 0x7, 0x3ff, 0xffffffff, 0x10000, 0xba22, 0x3, 0x7, 0x6, 0x3, 0xfff, 0x200, 0x0, 0x10, 0x0, 0x76, 0x8, 0x5, 0x3ff, 0x3cc, 0x100, 0x6, 0x833, 0xb, 0x8, 0xb, 0x4, 0x2, 0x86, 0x5, 0x45, 0x7, 0x4, 0x6, 0x1, 0xc, 0x80, 0x1b, 0x3000000, 0x0, 0xfffffffe, 0x2, 0x0, 0x8001, 0xa4, 0x3de0e7f6, 0x80000001, 0xf5e, 0x4, 0x7, 0xc50, 0x3, 0x80000001, 0x1000, 0x6, 0xf7a, 0x9, 0x3, 0x7, 0x80000001, 0x80000001, 0x40, 0xba3, 0x5, 0x9, 0x7, 0xffffffff, 0x0, 0x7, 0x9, 0x2, 0x8be0, 0x3, 0xffff7fff, 0x3, 0x5, 0xe, 0x2f813bed, 0x6, 0x3, 0x8, 0x6c, 0x10000, 0x101, 0x9, 0x7, 0xf, 0x100, 0x6, 0xa, 0x7, 0x0, 0x4, 0x1dee5aac, 0x4, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x2, 0x3, 0x4, 0x3033, 0x8, 0x8, 0x2f000, 0xfffffffc, 0x3, 0x8, 0x0, 0x6, 0x8, 0xa, 0x5, 0x2, 0x1, 0x100, 0x65a, 0x6, 0xfffffffe, 0x27, 0x8, 0x8be2, 0xcbe, 0x226ece10, 0xfffffffd, 0xdf, 0x67, 0x8, 0x4, 0x7d4, 0x2615c584, 0x7, 0x55, 0xf74a, 0x2, 0x0, 0x2, 0x0, 0x7, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x3, 0x8, 0x2, 0x80000001}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x40}, 0x8, 0x13, 0x16d5}}]}}]}, 0x45c}}, 0x40010)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, 0x0})

14.041200295s ago: executing program 4 (id=568):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0xacf7, 0x10100, 0x2}, &(0x7f0000000180), &(0x7f00000001c0))
socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0xa2, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x327681, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550c, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r7, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000240))
dup(r6)
sendfile(r7, 0xffffffffffffffff, &(0x7f0000000300)=0x5, 0x7fffffff)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})

12.507157945s ago: executing program 4 (id=575):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x1c}}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
socketpair$unix(0x1, 0xf83b88a5ef47d49d, 0x0, &(0x7f0000000000))
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2001030000"], 0x0})
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)

10.326050454s ago: executing program 2 (id=579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @random="bdd1221610b5"}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getnetconf={0x64, 0x52, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x48f7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5b2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xb6}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$sock_TIOCINQ(r7, 0x541b, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1406, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x1d, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd})
dup(r7)

10.145126071s ago: executing program 2 (id=580):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl(r3, 0x4, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r9, &(0x7f0000002880)={0x2020}, 0x2020)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x10, 0x20000000, 0x1, {{0x12, 0x4, 0x0, 0x24, 0x48, 0x68, 0x0, 0xbf, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x76, 0x0, 0x4}, @cipso={0x86, 0x11, 0x1, [{0x2, 0xb, "5c656f8f1cbb0b72f0"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x39, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup(r11)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)

9.997076773s ago: executing program 4 (id=582):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x15, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xffffffffffffffe2, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x2, @pix={0x0, 0xffff, 0x52424752, 0x0, 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, 0x1}})
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x124, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_SRC={0xac, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x124}}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
open_by_handle_at(r6, &(0x7f0000000240)=ANY=[], 0x10000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r8, 0x1})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002000010000000000000100000200000000000000000000000c001440000000000000000058071fe7db51a3345c2db64242c7450d83acb10920f7e823bf3616fff3850c268175d0fd6a8845dab59da6ac27b674d37cf3e02f03d0321c53967042fcee05", @ANYRES8=r6, @ANYRESOCT=r3], 0x28}}, 0x20000000)
socket(0x10, 0x3, 0x0)

8.778742318s ago: executing program 0 (id=584):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf258330058208000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8801)
ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000080)={0x1, r8})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4040000)
syz_usb_control_io(r6, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="900000b3a0c892f6c2bc4a3f649113b9299d8622d1c3b06bbb270c1c44b4be8d6b05665dbaf438ba8c871d07a9878909f5975494e28e0bfb5a9f9ef5b77a9bb5d688a8a416230f043900100000e4dc66d71767d6bf57e82d011b066983566021ed1a82da8ba47038e0f7", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="14001780040001000400020004000600040006000a00e80008021100000000001c00e700448cefa35015d3ba34b54922dd2f98d170efa68aba115df61c00e70013393d02a94d10f8e483224f033eb910a223acfe7cc542ab1c00e700262fc7723c197c48b1bdb7a9753b473e19c2072158d1569b"], 0x90}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000)
syz_usb_disconnect(r0)
r9 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000205a1a401feb0060904000001020d00008f9ccaa32b1e3201ff03000000feffff8106241a0100180905810000108603070904010000020d00000904010102020d000009058202ff0706016c03090503020002902fb560c37aaceb1bf2b18358100d0f"], 0x0)
r10 = fanotify_init(0x4, 0x0)
fremovexattr(r10, &(0x7f0000000300)=@known='com.apple.FinderInfo\x00')
syz_usb_control_io(r9, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000001380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)

6.975484608s ago: executing program 2 (id=587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)

6.369682877s ago: executing program 2 (id=589):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x8d, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff669789e8c61bb891d4d37309c212a8b629bc8c51cde9500b8ccafca4ea1c530a015e042a2e4e"}, {0x6, 0x1a01, 0x41, &(0x7f0000000040)="9dc9d967aef82987b99baab7c9aa1ca2dd19ea3e7335a5db8c9b2a55c85c2ef42097d97b8450c58276354541c1f7d6cb688b6cc257e647243787436cd578448889"}, {0x5, 0x1010, 0xe, &(0x7f0000000100)="17c44b1275dcb1c3c2156c7ae109"}, {0x7fff, 0x10, 0x2a, &(0x7f0000000140)="cb7fa7b57c4a657d2e86b7c7342cbbe6a1ca5ef62e5b2dbe38f49cfced5da514d56726fd5255c15436e3"}], 0x4})
syz_emit_ethernet(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x80000001, 0x443, 0x8, 0xcb, 0x5, 0x9, 0x6, 0x4, 0x7, 0x0, 0x8000, 0x6, 0x1, 0x8000, 0x7fff, 0x1, 0xfffffff7, 0x9, 0x3, 0x3, 0x28000, 0x3ff, 0x40000000, 0x44f, 0x0, 0x1, 0x1000, 0x6, 0x3, 0x7211, 0xd, 0x2, 0x60dc, 0xd5ff, 0x7, 0x3, 0x5, 0x1, 0x80, 0x7, 0x0, 0xffff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x7d80, 0x1, 0xfffff001, 0x1, 0x8, 0x9, 0x7f, 0x7ff, 0x4, 0x80, 0x7e, 0x425, 0x4a, 0xffff0000, 0x2, 0x1ff, 0x29, 0xedad, 0x0, 0x7, 0x200, 0xfffffffb, 0x0, 0x9, 0x0, 0x100, 0x7, 0x10001, 0x0, 0x0, 0xfbb2, 0x62000000, 0x8, 0x0, 0x8, 0x7f, 0xa, 0x8, 0x3, 0x57d6, 0x7, 0x0, 0x3, 0x6cd, 0x5, 0xfff, 0x8000, 0x9, 0x0, 0x7f, 0xe, 0xa1b4, 0xb, 0x5, 0x3cb2, 0xffffff81, 0x8, 0xbc, 0x58, 0x7, 0x9, 0x8, 0x800, 0xff800000, 0xd3a, 0x7, 0x3ff, 0xffffffff, 0x10000, 0xba22, 0x3, 0x7, 0x6, 0x3, 0xfff, 0x200, 0x0, 0x10, 0x0, 0x76, 0x8, 0x5, 0x3ff, 0x3cc, 0x100, 0x6, 0x833, 0xb, 0x8, 0xb, 0x4, 0x2, 0x86, 0x5, 0x45, 0x7, 0x4, 0x6, 0x1, 0xc, 0x80, 0x1b, 0x3000000, 0x0, 0xfffffffe, 0x2, 0x0, 0x8001, 0xa4, 0x3de0e7f6, 0x80000001, 0xf5e, 0x4, 0x7, 0xc50, 0x3, 0x80000001, 0x1000, 0x6, 0xf7a, 0x9, 0x3, 0x7, 0x80000001, 0x80000001, 0x40, 0xba3, 0x5, 0x9, 0x7, 0xffffffff, 0x0, 0x7, 0x9, 0x2, 0x8be0, 0x3, 0xffff7fff, 0x3, 0x5, 0xe, 0x2f813bed, 0x6, 0x3, 0x8, 0x6c, 0x10000, 0x101, 0x9, 0x7, 0xf, 0x100, 0x6, 0xa, 0x7, 0x0, 0x4, 0x1dee5aac, 0x4, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x2, 0x3, 0x4, 0x3033, 0x8, 0x8, 0x2f000, 0xfffffffc, 0x3, 0x8, 0x0, 0x6, 0x8, 0xa, 0x5, 0x2, 0x1, 0x100, 0x65a, 0x6, 0xfffffffe, 0x27, 0x8, 0x8be2, 0xcbe, 0x226ece10, 0xfffffffd, 0xdf, 0x67, 0x8, 0x4, 0x7d4, 0x2615c584, 0x7, 0x55, 0xf74a, 0x2, 0x0, 0x2, 0x0, 0x7, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x3, 0x8, 0x2, 0x80000001}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x40}, 0x8, 0x13, 0x16d5}}]}}]}, 0x45c}}, 0x40010)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, 0x0})

6.129678511s ago: executing program 0 (id=591):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r4 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2) (async)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
gettid()
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x880a1a08dbf8689d}, 0x4000) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x880a1a08dbf8689d}, 0x4000)
recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000001a00)=""/4095, 0xfff}, {&(0x7f0000006080)=""/4082, 0xff2}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/90, 0x64}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f0000000140), 0x1}, {&(0x7f0000000380)=""/13, 0xd}, {&(0x7f00000005c0)=""/52, 0x34}], 0xd}, 0x4db}, {{0x0, 0x0, 0x0}, 0x26658f7d}], 0x8, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x21c)
syz_usb_control_io(r0, 0x0, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0x1) (async)
fspick(0xffffffffffffff9c, 0x0, 0x1)

6.118191807s ago: executing program 4 (id=592):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)
r1 = socket(0x16, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, r3) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7d, &(0x7f0000000400)={0x0, 0x4}, 0x8) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x158, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x10001, 0x2, 0x50000, 0x3, 0x6a0, 0x6, 0xc]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x3}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2c0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x41}, 0x40000)

6.021587362s ago: executing program 1 (id=594):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1800002066699907000e8000"/24], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x166)
r2 = syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x4000001c, 0x10, 0x2, 0x8, 0x0, r1}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r6, &(0x7f0000000100)='V', 0x1)
syz_usb_control_io$printer(r5, 0x0, 0x0)

5.943502028s ago: executing program 4 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x4000}) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)

5.760582278s ago: executing program 4 (id=596):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0801000001210000140035006970766c616e30000000000000000000300016802c0001802800010063538ad2"], 0x64}, 0x1, 0x0, 0x0, 0x24048800}, 0x8880) (async)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x40f5, 0x0, 0x0}], 0x2})

3.948279806s ago: executing program 0 (id=599):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)

3.785429985s ago: executing program 0 (id=600):
r0 = socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0xfdef)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x39e4, 0x0, &(0x7f0000000340), &(0x7f0000000300))
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x90e7, 0x4200, 0x3, 0x185, 0x0, r5}, &(0x7f0000000380)=<r7=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0xffffffff})
syz_io_uring_submit(r7, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/202, 0xca}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r9 = accept$alg(r0, 0x0, 0x0)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10)
sendmmsg$alg(r9, &(0x7f0000000e00), 0x0, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7c0a, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3c3})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)

2.612108911s ago: executing program 1 (id=602):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
set_mempolicy(0x1, 0x0, 0xff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f000096f000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r1, 0xd09f8000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x8ec)
syz_usb_disconnect(r2)
readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42c202, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x18)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f0000000b80)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/254, 0xfe}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/190, 0xbe}, {&(0x7f0000000980)=""/71, 0x47}], 0x6, &(0x7f0000000a80)=""/27, 0x1b}, 0x1e0}, {{&(0x7f0000000ac0)=@un=@abs, 0x80, &(0x7f0000000b40)}}], 0x2, 0x12000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
shutdown(r5, 0x1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000068000100030010000000008000000000000000000c000200010000001500000006000700030013c17c2781afcf4062f290ca999940d437a160778e323e"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

2.409574613s ago: executing program 3 (id=603):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000000c0)={0x3}, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
setpriority(0x3, 0x0, 0xfffffffd) (async)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
syz_open_dev$I2C(&(0x7f0000000040), 0x40, 0x8800) (async)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@hyper}, 0x1}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff6f, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x32}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

2.399881342s ago: executing program 0 (id=604):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)=ANY=[])
read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50)
rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0x7, 0x1, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x0, 0x0, r4, 0x5, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x7fff, {0x81, 0xf6, 0x0, {0x6, 0x564, 0x991d, 0xffffffffffffff81, 0x200000010001, 0x3, 0x837d, 0x7, 0x6, 0x1000, 0x8, r3, r4, 0x800, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execve(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x484, 0x0, 0x6}]})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r5, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0xb2e1}})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x400})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x408281, 0x0)
ioctl$FITHAW(r11, 0xc0045878)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@delqdisc={0x3b4, 0x25, 0x0, 0x70bd27, 0x2, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xe, 0x6}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x63, 0x593, 0x0, 0x2, 0x5, 0xd468, 0x1}}, {0x6, 0x2, [0x57bf]}}, {{0x1c, 0x1, {0x28, 0x4, 0x5, 0xce, 0x2, 0x7, 0x9, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x37, 0x7fff, 0xb, 0x8, 0x5, 0x9, 0x2, 0x43cd]}}, {{0x1c, 0x1, {0x1, 0x47, 0x7, 0x7fff, 0x2, 0x9, 0x0, 0x9}}, {0x16, 0x2, [0x4, 0x2, 0x8, 0x8, 0x3, 0x543, 0x4, 0x8, 0x2]}}, {{0x1c, 0x1, {0x0, 0x10, 0x67c, 0x5, 0x2, 0xf7, 0x1, 0x2}}, {0x8, 0x2, [0x1d1, 0x8]}}]}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x9c4}]}}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4e, 0x1, 0x2, 0x4, 0x0, 0x9, 0xd9, 0x3}}, {0xa, 0x2, [0x7, 0x2, 0x81]}}, {{0x1c, 0x1, {0x81, 0x81, 0xb9, 0x6, 0x1, 0x800, 0x6, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0x10, 0xe, 0xffff, 0x45b, 0x2]}}, {{0x1c, 0x1, {0x7, 0x3, 0x7, 0xfffffffd, 0x1, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0xfffd]}}, {{0x1c, 0x1, {0xf7, 0xe2, 0x5, 0x7fffffff, 0x1, 0x891, 0x8d, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x9, 0xd, 0x3, 0x1, 0x2, 0xa, 0x7, 0x3}}, {0xa, 0x2, [0x1000, 0x3, 0x6]}}, {{0x1c, 0x1, {0x40, 0x8, 0x8, 0x401, 0x0, 0x7, 0x9040, 0xa}}, {0x18, 0x2, [0x4, 0x3, 0x2a95, 0x9, 0x9, 0x8, 0x5, 0x5, 0x7, 0x0]}}, {{0x1c, 0x1, {0x4, 0x5, 0x7ff, 0x3245, 0x1, 0x0, 0x7fffffff, 0x5}}, {0xe, 0x2, [0x64ae, 0xdea, 0x8, 0xffff, 0x3]}}, {{0x1c, 0x1, {0xcb, 0x9, 0x0, 0xd0e, 0x2, 0xfffffffe, 0x3, 0x5}}, {0xe, 0x2, [0x90b3, 0x0, 0x6, 0xf, 0xec]}}, {{0x1c, 0x1, {0x1, 0xdd, 0x6, 0x8, 0x0, 0xffff, 0x63b1757, 0x4}}, {0xc, 0x2, [0x7, 0x2, 0x7, 0x7ff]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xf, 0x9, 0x400, 0x2, 0xdea, 0x0, 0x2}}, {0x8, 0x2, [0x81, 0x3e9]}}, {{0x1c, 0x1, {0x8, 0xb5, 0x4, 0x8, 0x2, 0x10, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x9, 0x10, 0xe, 0x9, 0x2, 0x12, 0xfffffffc}}, {0x4}}, {{0x1c, 0x1, {0xfd, 0x3, 0x7, 0x1, 0x7682cfcad2ed521f, 0xfff, 0x0, 0x9}}, {0x16, 0x2, [0x3, 0x80, 0xffff, 0x6, 0x180, 0xfff8, 0x8, 0xb8a7, 0x5]}}, {{0x1c, 0x1, {0x4, 0x7, 0xfff, 0x9, 0x0, 0x753b, 0xb, 0x2}}, {0x8, 0x2, [0x1000, 0x1]}}, {{0x1c, 0x1, {0x7, 0x1e, 0x6, 0x2, 0x2, 0x7, 0x6}}, {0x4}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x1, 0xa, 0xf16, 0x0, 0x9}, {0x6, 0x1, 0x6, 0xa, 0x1, 0x5}, 0x7f, 0xff, 0x10a9}}, @TCA_TBF_PBURST={0x8, 0x7, 0x55b}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cd6}, @TCA_TBF_BURST={0x8, 0x6, 0x4}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r13, 0xffffffffffffffff, 0x0)

2.290951062s ago: executing program 3 (id=605):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x48, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)

1.859798833s ago: executing program 0 (id=606):
r0 = io_uring_setup(0x30d5, &(0x7f0000000000)={0x0, 0x0, 0x10})
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r2, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r7 = socket$inet6(0xa, 0x3, 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r8}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r8}, 0x38)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/200, 0x1d)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

1.857476392s ago: executing program 3 (id=607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0)
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000, 0x14}])

1.617449948s ago: executing program 3 (id=608):
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64040, 0xc3)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000})
epoll_create(0x101)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
listen(r4, 0x0)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x3, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x2, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000)
socket$inet(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2}]}}}]}, 0x4c}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810)
r9 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f00000002c0)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00'], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

861.316212ms ago: executing program 1 (id=609):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
read$watch_queue(r2, &(0x7f0000000080)=""/25, 0x19)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x4010, r1, 0xf648a000)
read(r2, &(0x7f0000000200)=""/253, 0xfd)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000700)={0x2, 0x0, @ioapic={0xeeef0000, 0x9, 0x900000, 0x9, 0x0, [{0x5, 0x9, 0x30, '\x00', 0x78}, {0x2, 0x67, 0x5, '\x00', 0x81}, {0x7f, 0xfd, 0x17, '\x00', 0x80}, {0x5, 0x4, 0xa, '\x00', 0x7}, {0x5, 0x51, 0xa, '\x00', 0x1}, {0x81, 0x7, 0x9b, '\x00', 0x18}, {0x9, 0x5, 0x10, '\x00', 0x6d}, {0xf9, 0x9, 0x1b, '\x00', 0x2}, {0xff, 0x0, 0x9, '\x00', 0x8}, {0x7, 0xe0, 0x6, '\x00', 0x4}, {0x3, 0x2, 0x0, '\x00', 0x5}, {0x40, 0x3e, 0x5, '\x00', 0x3}, {0x7f, 0x0, 0xe1, '\x00', 0x6}, {0xff, 0xde, 0x3, '\x00', 0x4}, {0x7f, 0xfc, 0xa, '\x00', 0xff}, {0x3, 0x5, 0xf3, '\x00', 0x4}, {0x5, 0x1, 0x80, '\x00', 0xfb}, {0x8, 0x3, 0x8, '\x00', 0x5}, {0xff, 0x89, 0x8, '\x00', 0x4}, {0x70, 0x2, 0x7, '\x00', 0x9}, {0xaf, 0x7, 0xf1, '\x00', 0x9}, {0xb, 0x5, 0x0, '\x00', 0xf}, {0x1c, 0x8, 0x8, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x4}]}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x11c, &(0x7f0000000180), 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
unshare(0x22020400)
r7 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000000)=0x1, 0x4)
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"])
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000007000000184800000800000000ffe70000000000950000000000000094d69491ae2543e95c0bcd8d2e2c649fb7d4f33a697510d6086e315bb0f777c2687fa856392258ea06856c95e4d065558be57bd97bf0c2888e6373350d69df"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0xfffffeff, 0x7f}, 0x10, 0x0, r2, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0xb}, {0x4, 0x3, 0xa, 0x7}, {0x4, 0x4}, {0x4, 0x3, 0xb, 0x6}, {0x4, 0x1, 0xa, 0x1}], 0x10, 0xb}, 0x94)
ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x96762a57826036f1)

388.274756ms ago: executing program 1 (id=610):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x3, 0x1}}]}}]}}]}}, 0x0) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4, @loopback, 0x7fffffff}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000005}}}, 0x118) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x3, 0x1, 0x3, 0x80, {0x9, 0x21, 0xebb, 0x3, 0x1, {0x22, 0xd52}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x6c}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x6, 0x7d, 0xff, 0x4}, 0x4c, &(0x7f00000001c0)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "20a8fa06f67b597572f8fc88ae15ee48"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xb9, 0x2, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "26dd1a0eac930daea1842d18b8376ae4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x81, 0x0, 0x5, 0x4}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x441}}, {0x19, &(0x7f00000002c0)=@string={0x19, 0x3, "11f28d27c405b578c84ff2abd947454648fde46919b202"}}]})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00130d00000054fa68fe66e9ce8ef9694d067e"], 0x0, 0x0, 0x0, 0x0}) (async)
socket$kcm(0xa, 0x922000000003, 0x11)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) (async)
futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2)
futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2)

387.798175ms ago: executing program 3 (id=611):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
read(r3, &(0x7f0000001bc0)=""/55, 0x37)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

197.403297ms ago: executing program 1 (id=612):
r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000000)={0x0, 0x3dbd, 0x800, 0x2, 0x335}, &(0x7f0000000080), &(0x7f00000000c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3]}, 0x5)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000200)=0x63e, 0x0, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x101ff, 0x5, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000280)={0x3ac, 0x9, 0x2, "71d5287c26dd3ad6210a7d0ab17ca9a426f66316ad3bc957fe12d868413c9915", 0x31303553})
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'dvmrp1\x00'})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@expire={0x240, 0x18, 0xc9744bcdc33b6c7d, 0x70bd27, 0x25dfdbff, {{{@in=@rand_addr=0x64010100, @in=@local, 0x4e21, 0x0, 0x4e21, 0xa000, 0x2909941388c5994c, 0x0, 0x20, 0x32, 0x0, r6}, {@in=@multicast1, 0x4d6, 0xff}, @in=@multicast1, {0x7, 0xffff, 0x94f9, 0x8, 0x2, 0x7773, 0x9, 0x4}, {0xffffffffffffa048, 0x672, 0x88, 0x2}, {0x5, 0x5, 0x10}, 0x70bd2b, 0x3507, 0x2, 0x1, 0x1, 0x1}, 0x5}, [@replay_thresh={0x8, 0xb, 0x9286}, @lastused={0xc, 0xf, 0x1}, @migrate={0x134, 0x11, [{@in=@multicast1, @in=@local, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x3c, 0x4, 0x0, 0x3502, 0x2, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in=@empty, @in=@broadcast, 0x32, 0x4, 0x0, 0x3506, 0xa, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@private2, 0x2b, 0x4, 0x0, 0x3507, 0x2, 0xa}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in=@empty, 0x2b, 0x0, 0x0, 0x3503, 0x2, 0x8}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000640), 0xa00, 0x0)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xc}}}, 0x28}, 0x1, 0x0, 0x0, 0x24}, 0x20000000)
read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020)
r8 = syz_io_uring_complete(r4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r8)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x80, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0xf}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x60, 0x1}, {0x1}, {0x48}, {0x48}, {0x1b, 0x1}, {0x18}, {0x30}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x200}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xd4}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x8010)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002980), r2)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000002a80)={0x66f, 0x81, 0x6, 0x5, 0x8, 0x78f0bad9, 0x8})
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000002ac0), 0x4)
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000002b00))
ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000002c40)=""/82)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002cc0)={<r11=>0x0, 0x1, r8})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r8, 0xc03064ca, &(0x7f0000002d80)={&(0x7f0000002d00)=[r11], &(0x7f0000002d40)=[0x187fafe, 0x1a9, 0x8], 0x245, 0x1, 0x2})

138.705321ms ago: executing program 1 (id=613):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="18", 0x1)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x0, 0x1})
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_usb_connect(0x0, 0x36, &(0x7f0000001480)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac2b000000010902240003000000000904060000ff4f9b0009040658"], 0x0)

0s ago: executing program 3 (id=614):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', 0x0})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x200000000001, 0x6, 0x8, 0x3}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
close_range(r3, r3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
times(0x0)
close_range(r4, r5, 0x200000000000000)
r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=<r7=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x541b, 0x0)
fchdir(0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

kernel console output (not intermixed with test programs):

USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.704961][   T10] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.732666][    T9] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  166.745365][   T92] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  166.759971][   T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  166.789746][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.822818][   T10] usb 2-1: config 0 descriptor??
[  166.856755][   T10] hso 2-1:0.1: Failed to find BULK IN ep
[  166.875467][   T92] usb 5-1: device descriptor read/64, error -71
[  167.040095][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.061361][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.165385][   T92] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  167.306175][   T92] usb 5-1: device descriptor read/64, error -71
[  167.384400][ T6973] netlink: 'syz.0.230': attribute type 29 has an invalid length.
[  167.425791][   T92] usb usb5-port1: attempt power cycle
[  167.482715][ T6975] netlink: 'syz.0.230': attribute type 29 has an invalid length.
[  167.654209][ T6973] netlink: 500 bytes leftover after parsing attributes in process `syz.0.230'.
[  167.765626][   T92] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  167.786828][   T92] usb 5-1: device descriptor read/8, error -71
[  167.827394][   T10] usb 4-1: USB disconnect, device number 11
[  167.983318][ T5939] usb 2-1: USB disconnect, device number 16
[  168.115427][   T92] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  168.148861][   T92] usb 5-1: device descriptor read/8, error -71
[  168.275854][   T92] usb usb5-port1: unable to enumerate USB device
[  168.664749][   T92] usb 3-1: USB disconnect, device number 10
[  168.723970][ T6986] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  168.804031][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.235'.
[  169.042414][ T6990] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  169.093625][ T6997] program syz.0.237 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  169.180338][ T6997] netlink: 'syz.0.237': attribute type 10 has an invalid length.
[  169.199921][ T6997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.237'.
[  169.260274][ T6997] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  169.265093][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'.
[  169.406916][ T7001] FAULT_INJECTION: forcing a failure.
[  169.406916][ T7001] name failslab, interval 1, probability 0, space 0, times 0
[  169.460141][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.3.238 Not tainted syzkaller #0 PREEMPT(full) 
[  169.460163][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  169.460173][ T7001] Call Trace:
[  169.460180][ T7001]  <TASK>
[  169.460187][ T7001]  dump_stack_lvl+0x189/0x250
[  169.460209][ T7001]  ? __pfx____ratelimit+0x10/0x10
[  169.460225][ T7001]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.460243][ T7001]  ? __pfx__printk+0x10/0x10
[  169.460269][ T7001]  ? __pfx___might_resched+0x10/0x10
[  169.460283][ T7001]  ? fs_reclaim_acquire+0x7d/0x100
[  169.460302][ T7001]  should_fail_ex+0x414/0x560
[  169.460328][ T7001]  should_failslab+0xa8/0x100
[  169.460352][ T7001]  kmem_cache_alloc_noprof+0x73/0x3c0
[  169.460373][ T7001]  ? skb_clone+0x212/0x3a0
[  169.460396][ T7001]  skb_clone+0x212/0x3a0
[  169.460414][ T7001]  ? nfnetlink_rcv+0x486/0x2520
[  169.460439][ T7001]  nfnetlink_rcv+0x4b4/0x2520
[  169.460464][ T7001]  ? __dev_queue_xmit+0x1d79/0x3b50
[  169.460493][ T7001]  ? __dev_queue_xmit+0x27b/0x3b50
[  169.460522][ T7001]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  169.460557][ T7001]  ? ref_tracker_free+0x63a/0x7d0
[  169.460571][ T7001]  ? __asan_memcpy+0x40/0x70
[  169.460588][ T7001]  ? __pfx_ref_tracker_free+0x10/0x10
[  169.460601][ T7001]  ? __skb_clone+0x63/0x7a0
[  169.460623][ T7001]  ? __skb_clone+0x483/0x7a0
[  169.460647][ T7001]  ? skb_clone+0x246/0x3a0
[  169.460669][ T7001]  ? __netlink_deliver_tap+0x807/0x850
[  169.460684][ T7001]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.460714][ T7001]  netlink_unicast+0x82c/0x9e0
[  169.460744][ T7001]  ? __pfx_netlink_unicast+0x10/0x10
[  169.460769][ T7001]  ? netlink_sendmsg+0x642/0xb30
[  169.460784][ T7001]  ? skb_put+0x11b/0x210
[  169.460803][ T7001]  netlink_sendmsg+0x805/0xb30
[  169.460826][ T7001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.460844][ T7001]  ? aa_sock_msg_perm+0xf1/0x1d0
[  169.460861][ T7001]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.460877][ T7001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.460894][ T7001]  __sock_sendmsg+0x21c/0x270
[  169.460920][ T7001]  ____sys_sendmsg+0x505/0x830
[  169.460943][ T7001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.460975][ T7001]  ? import_iovec+0x74/0xa0
[  169.460997][ T7001]  ___sys_sendmsg+0x21f/0x2a0
[  169.461018][ T7001]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.461066][ T7001]  ? __fget_files+0x2a/0x420
[  169.461079][ T7001]  ? __fget_files+0x3a0/0x420
[  169.461100][ T7001]  __x64_sys_sendmsg+0x19b/0x260
[  169.461121][ T7001]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.461155][ T7001]  ? __pfx_ksys_write+0x10/0x10
[  169.461182][ T7001]  ? rcu_is_watching+0x15/0xb0
[  169.461210][ T7001]  ? do_syscall_64+0xbe/0x3b0
[  169.461239][ T7001]  do_syscall_64+0xfa/0x3b0
[  169.461255][ T7001]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.461269][ T7001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.461284][ T7001]  ? clear_bhb_loop+0x60/0xb0
[  169.461302][ T7001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.461317][ T7001] RIP: 0033:0x7f696538eba9
[  169.461330][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.461343][ T7001] RSP: 002b:00007f69661ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.461359][ T7001] RAX: ffffffffffffffda RBX: 00007f69655d5fa0 RCX: 00007f696538eba9
[  169.461370][ T7001] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  169.461380][ T7001] RBP: 00007f69661ba090 R08: 0000000000000000 R09: 0000000000000000
[  169.461389][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.461397][ T7001] R13: 00007f69655d6038 R14: 00007f69655d5fa0 R15: 00007f69656ffa28
[  169.461420][ T7001]  </TASK>
[  170.275613][   T92] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  170.285346][ T5936] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  170.385498][ T5939] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  170.471065][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  170.477799][   T92] usb 4-1: device descriptor read/64, error -71
[  170.496445][ T5936] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  170.540328][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  170.552458][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  170.563553][ T5936] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  170.576729][ T5939] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  170.586079][ T5939] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  170.597849][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  170.607030][ T5936] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  170.616452][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.624473][ T5936] usb 5-1: Product: syz
[  170.628906][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  170.639967][ T5936] usb 5-1: Manufacturer: syz
[  170.644693][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  170.655943][ T5936] usb 5-1: SerialNumber: syz
[  170.664537][ T5936] usb 5-1: config 0 descriptor??
[  170.665321][ T5939] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  170.680376][ T7007] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  170.688011][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  170.690525][ T5936] usb 5-1: ucan: probing device on interface #0
[  170.705544][ T5939] usb 3-1: Product: syz
[  170.709716][ T5939] usb 3-1: Manufacturer: syz
[  170.714415][ T5936] usb 5-1: ucan: invalid endpoint configuration
[  170.723069][ T5936] usb 5-1: ucan: probe failed; try to update the device firmware
[  170.743445][ T5939] cdc_wdm 3-1:1.0: skipping garbage
[  170.753080][ T5939] cdc_wdm 3-1:1.0: skipping garbage
[  170.755532][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  170.766128][   T92] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  170.792765][ T5939] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  170.802701][ T5939] cdc_wdm 3-1:1.0: Unknown control protocol
[  170.920778][   T92] usb 4-1: device descriptor read/64, error -71
[  170.944440][ T7017] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  170.967027][   T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  170.972524][ T5939] usb 5-1: USB disconnect, device number 19
[  171.000252][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.004524][ T5936] usb 3-1: USB disconnect, device number 11
[  171.054787][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  171.069351][   T92] usb usb4-port1: attempt power cycle
[  171.114672][   T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  171.144584][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.174057][   T10] usb 2-1: config 0 descriptor??
[  171.409527][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.420535][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.440543][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.445440][   T92] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  171.452053][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.480053][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.506018][   T92] usb 4-1: device descriptor read/8, error -71
[  171.545733][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.569335][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'.
[  171.609730][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.644442][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.662842][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.673982][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.769733][   T92] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  171.800211][   T92] usb 4-1: device descriptor read/8, error -71
[  171.903954][ T7039] batadv1: entered promiscuous mode
[  171.912117][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv1
[  171.924562][   T92] usb usb4-port1: unable to enumerate USB device
[  171.931734][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  171.939061][ T7040] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  171.939061][ T7040] The task syz.4.250 (7040) triggered the difference, watch for misbehavior.
[  171.957436][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  172.002077][   T10] usb 2-1: USB disconnect, device number 17
[  172.217022][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.241691][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.295322][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  172.447596][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  172.459028][    T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00
[  172.465342][ T5936] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  172.487539][   T10] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  172.495163][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.506978][    T9] usb 3-1: config 0 descriptor??
[  172.614100][ T7052] binder: 7051:7052 ioctl 4018620d 0 returned -22
[  172.645349][   T10] usb 1-1: Invalid ep0 maxpacket: 16
[  172.645471][ T5936] usb 5-1: Using ep0 maxpacket: 8
[  172.661121][ T5936] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config
[  172.672532][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.682861][ T7053] binder: 7051:7053 ioctl c018620c 0 returned -14
[  172.689536][ T5936] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  172.705819][ T5936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.718913][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.729039][ T5936] usb 5-1: Product: syz
[  172.733252][ T5936] usb 5-1: Manufacturer: ķ㻣슮㨘⣧苾꼌夞㰬ꄂ닙㵁㳽욓恀璎훸⚐漙쩙ｏ關됓멟䑡枈볪蒕㶃챈칭ᙜⰉ곽듒峛咐钪๭䴉녷뉫퍩ꓽ鴌ꋚؼ裡釂䶩탩ᵖ왯鐰섓≔ॊ뀿ퟺ䤥钙폪⥲뢝耈贒ᓽ쨞펹欯淝猷탏স呾鉺焢듊ﶏ꿥౶䎑ᯅ냥然ᔹ⋽ᶼ냴ꤊ붫饷蟍㩕鳎僶穋댚ꪏ
[  172.767554][ T5936] usb 5-1: SerialNumber: syz
[  172.777664][   T10] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  172.785953][ T7047] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  172.945492][   T10] usb 1-1: Invalid ep0 maxpacket: 16
[  172.951447][   T10] usb usb1-port1: attempt power cycle
[  173.014019][ T5936] usb 5-1: 0:2 : does not exist
[  173.042915][ T5936] usb 5-1: USB disconnect, device number 20
[  173.103933][ T6597] udevd[6597]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.312866][   T10] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  173.355989][   T10] usb 1-1: Invalid ep0 maxpacket: 16
[  173.485804][   T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  173.575713][   T10] usb 1-1: Invalid ep0 maxpacket: 16
[  173.587507][   T10] usb usb1-port1: unable to enumerate USB device
[  173.894205][ T7073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.259'.
[  173.938549][ T7073] unsupported nlmsg_type 40
[  175.084873][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  175.102369][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  175.153622][    T9] usb 3-1: USB disconnect, device number 12
[  175.535425][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  175.710083][    T9] usb 3-1: Using ep0 maxpacket: 32
[  175.718098][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.737957][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.795025][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  175.819148][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.860471][    T9] usb 3-1: config 0 descriptor??
[  175.893673][    T9] hub 3-1:0.0: USB hub found
[  176.156682][    T9] hub 3-1:0.0: 1 port detected
[  176.286796][ T7101] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  176.369565][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  176.369585][   T30] audit: type=1326 audit(1757761566.550:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  176.455359][   T30] audit: type=1326 audit(1757761566.550:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  176.554880][   T30] audit: type=1326 audit(1757761566.550:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  176.595633][ T7108] kvm: pic: non byte write
[  176.618183][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'.
[  176.640956][   T30] audit: type=1326 audit(1757761566.550:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  176.663104][    C0] vkms_vblank_simulate: vblank timer overrun
[  176.721188][   T30] audit: type=1326 audit(1757761566.550:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  176.751595][   T30] audit: type=1326 audit(1757761566.550:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  176.958530][   T30] audit: type=1326 audit(1757761566.550:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  176.980745][    C0] vkms_vblank_simulate: vblank timer overrun
[  177.095761][ T7117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  177.166304][ T7119] loop4: detected capacity change from 0 to 2560
[  177.193129][   T30] audit: type=1326 audit(1757761566.550:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  177.215333][    C0] vkms_vblank_simulate: vblank timer overrun
[  177.244951][ T7122] buffer_io_error: 36 callbacks suppressed
[  177.244972][ T7122] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  177.291550][    T9] hub 3-1:0.0: hub_hub_status failed (err = -32)
[  177.309046][ T7119] Buffer I/O error on dev loop4, logical block 256, lost async page write
[  177.361895][    T9] hub 3-1:0.0: config failed, can't get hub status (err -32)
[  177.443061][   T30] audit: type=1326 audit(1757761566.600:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa07738eba9 code=0x7ffc0000
[  177.443191][ T7119] Buffer I/O error on dev loop4, logical block 257, lost async page write
[  177.465269][    C0] vkms_vblank_simulate: vblank timer overrun
[  177.527490][ T7122] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  177.546571][    T9] usbhid 3-1:0.0: can't add hid device: -32
[  177.558065][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  177.576233][ T7122] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  177.587640][ T7119] Buffer I/O error on dev loop4, logical block 258, lost async page write
[  177.625527][ T7122] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  177.665664][ T7119] Buffer I/O error on dev loop4, logical block 259, lost async page write
[  177.718738][ T7119] Buffer I/O error on dev loop4, logical block 260, lost async page write
[  177.739723][ T7122] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  177.869686][ T7119] ldm_validate_partition_table(): Disk read failed.
[  177.883101][ T7119] Dev loop4: unable to read RDB block 0
[  177.893153][ T7119]  loop4: unable to read partition table
[  177.951690][ T7119] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[  177.988281][ T5235] ldm_validate_partition_table(): Disk read failed.
[  178.004068][ T5235] Dev loop4: unable to read RDB block 0
[  178.017254][ T5235]  loop4: unable to read partition table
[  178.024826][ T7129] FAULT_INJECTION: forcing a failure.
[  178.024826][ T7129] name failslab, interval 1, probability 0, space 0, times 0
[  178.038172][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.0.274 Not tainted syzkaller #0 PREEMPT(full) 
[  178.038192][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  178.038202][ T7129] Call Trace:
[  178.038208][ T7129]  <TASK>
[  178.038214][ T7129]  dump_stack_lvl+0x189/0x250
[  178.038237][ T7129]  ? __pfx____ratelimit+0x10/0x10
[  178.038253][ T7129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.038272][ T7129]  ? __pfx__printk+0x10/0x10
[  178.038304][ T7129]  should_fail_ex+0x414/0x560
[  178.038331][ T7129]  should_failslab+0xa8/0x100
[  178.038355][ T7129]  __kmalloc_noprof+0xcb/0x4f0
[  178.038376][ T7129]  ? io_alloc_ocqe+0x6f/0x550
[  178.038393][ T7129]  io_alloc_ocqe+0x6f/0x550
[  178.038406][ T7129]  ? io_cqe_cache_refill+0x1af/0x240
[  178.038432][ T7129]  io_cqe_overflow_locked+0x26/0x40
[  178.038451][ T7129]  __io_submit_flush_completions+0x248/0xe40
[  178.038474][ T7129]  ? io_issue_sqe+0x57e/0xfd0
[  178.038494][ T7129]  ? __asan_memset+0x22/0x50
[  178.038517][ T7129]  io_submit_sqes+0x18ee/0x1d30
[  178.038563][ T7129]  __se_sys_io_uring_enter+0x2df/0x2b20
[  178.038600][ T7129]  ? ksys_write+0x1cb/0x250
[  178.038624][ T7129]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  178.038645][ T7129]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  178.038663][ T7129]  ? __pfx_vfs_write+0x10/0x10
[  178.038685][ T7129]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  178.038705][ T7129]  ? __fget_files+0x3a0/0x420
[  178.038723][ T7129]  ? fput+0xa0/0xd0
[  178.038739][ T7129]  ? ksys_write+0x22a/0x250
[  178.038761][ T7129]  ? __pfx_ksys_write+0x10/0x10
[  178.038779][ T7129]  ? rcu_is_watching+0x15/0xb0
[  178.038799][ T7129]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  178.038824][ T7129]  do_syscall_64+0xfa/0x3b0
[  178.038840][ T7129]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.038855][ T7129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.038871][ T7129]  ? clear_bhb_loop+0x60/0xb0
[  178.038890][ T7129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.038911][ T7129] RIP: 0033:0x7f98e778eba9
[  178.038926][ T7129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.038939][ T7129] RSP: 002b:00007f98e8679038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  178.038955][ T7129] RAX: ffffffffffffffda RBX: 00007f98e79d5fa0 RCX: 00007f98e778eba9
[  178.038967][ T7129] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  178.038976][ T7129] RBP: 00007f98e8679090 R08: 0000000000000000 R09: 0000000000000000
[  178.038986][ T7129] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  178.038995][ T7129] R13: 00007f98e79d6038 R14: 00007f98e79d5fa0 R15: 00007f98e7affa28
[  178.039019][ T7129]  </TASK>
[  178.424339][ T7131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'.
[  179.195709][ T5945] usb 3-1: USB disconnect, device number 13
[  179.670070][ T7158] tipc: Started in network mode
[  179.692995][ T7158] tipc: Node identity 6a20fba6306b, cluster identity 4711
[  179.718046][ T7158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.792723][ T7158] syzkaller0: entered promiscuous mode
[  179.808315][ T7158] syzkaller0: entered allmulticast mode
[  180.091446][ T5936] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  180.415415][ T5936] usb 3-1: device descriptor read/64, error -71
[  180.479849][   T30] audit: type=1326 audit(1757761570.680:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  180.569189][ T7167] FAULT_INJECTION: forcing a failure.
[  180.569189][ T7167] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.583944][ T7167] CPU: 1 UID: 0 PID: 7167 Comm: syz.3.286 Not tainted syzkaller #0 PREEMPT(full) 
[  180.583964][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  180.583974][ T7167] Call Trace:
[  180.583980][ T7167]  <TASK>
[  180.583986][ T7167]  dump_stack_lvl+0x189/0x250
[  180.584010][ T7167]  ? __pfx____ratelimit+0x10/0x10
[  180.584026][ T7167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.584045][ T7167]  ? __pfx__printk+0x10/0x10
[  180.584076][ T7167]  should_fail_ex+0x414/0x560
[  180.584103][ T7167]  _copy_to_user+0x31/0xb0
[  180.584125][ T7167]  simple_read_from_buffer+0xe1/0x170
[  180.584152][ T7167]  proc_fail_nth_read+0x1b3/0x220
[  180.584172][ T7167]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  180.584192][ T7167]  ? rw_verify_area+0x2a6/0x4d0
[  180.584211][ T7167]  ? __lock_acquire+0xab9/0xd20
[  180.584233][ T7167]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  180.584252][ T7167]  vfs_read+0x200/0xa30
[  180.584271][ T7167]  ? fdget_pos+0x247/0x320
[  180.584288][ T7167]  ? __pfx___mutex_lock+0x10/0x10
[  180.584305][ T7167]  ? __pfx_vfs_read+0x10/0x10
[  180.584326][ T7167]  ? __fget_files+0x2a/0x420
[  180.584342][ T7167]  ? __fget_files+0x3a0/0x420
[  180.584355][ T7167]  ? __fget_files+0x2a/0x420
[  180.584375][ T7167]  ksys_read+0x145/0x250
[  180.584396][ T7167]  ? __pfx_ksys_read+0x10/0x10
[  180.584415][ T7167]  ? rcu_is_watching+0x15/0xb0
[  180.584434][ T7167]  ? do_syscall_64+0xbe/0x3b0
[  180.584454][ T7167]  do_syscall_64+0xfa/0x3b0
[  180.584469][ T7167]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.584484][ T7167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.584499][ T7167]  ? clear_bhb_loop+0x60/0xb0
[  180.584517][ T7167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.584532][ T7167] RIP: 0033:0x7f696538d5bc
[  180.584545][ T7167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  180.584558][ T7167] RSP: 002b:00007f69661ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  180.584573][ T7167] RAX: ffffffffffffffda RBX: 00007f69655d5fa0 RCX: 00007f696538d5bc
[  180.584584][ T7167] RDX: 000000000000000f RSI: 00007f69661ba0a0 RDI: 0000000000000006
[  180.584593][ T7167] RBP: 00007f69661ba090 R08: 0000000000000000 R09: 0000000000000000
[  180.584602][ T7167] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  180.584611][ T7167] R13: 00007f69655d6038 R14: 00007f69655d5fa0 R15: 00007f69656ffa28
[  180.584635][ T7167]  </TASK>
[  180.886697][ T5939] tipc: Node number set to 1514929062
[  181.325523][ T5936] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  181.505300][ T5936] usb 3-1: device descriptor read/64, error -71
[  182.036061][ T5936] usb usb3-port1: attempt power cycle
[  182.425335][ T5936] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  182.526855][ T5936] usb 3-1: device descriptor read/8, error -71
[  182.828569][ T7159] tipc: Resetting bearer <eth:syzkaller0>
[  182.855305][ T5936] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  182.933116][ T7159] tipc: Disabling bearer <eth:syzkaller0>
[  183.116549][ T5936] usb 3-1: device not accepting address 17, error -71
[  183.128252][ T5936] usb usb3-port1: unable to enumerate USB device
[  183.138190][ T7199] netlink: 596 bytes leftover after parsing attributes in process `syz.4.292'.
[  183.158807][ T7195] netlink: 'syz.4.292': attribute type 29 has an invalid length.
[  183.169242][ T7197] netlink: 'syz.4.292': attribute type 29 has an invalid length.
[  184.365287][ T5936] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  184.595535][ T5936] usb 2-1: Using ep0 maxpacket: 8
[  184.616286][ T5936] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  184.657961][ T5936] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.698452][ T5936] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  184.738292][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.762877][ T5936] usb 2-1: Product: syz
[  184.773066][ T5936] usb 2-1: Manufacturer: syz
[  184.785527][ T5936] usb 2-1: SerialNumber: syz
[  184.850476][ T5936] usb 2-1: config 0 descriptor??
[  184.860203][ T5936] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[  185.078749][ T5936] snd_usb_toneport 2-1:0.0: set_interface failed
[  185.111225][ T5936] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[  185.144898][ T5936] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71
[  185.214195][ T7240] bridge2: entered promiscuous mode
[  185.219643][ T7240] bridge2: entered allmulticast mode
[  185.344085][ T5936] usb 2-1: USB disconnect, device number 18
[  185.599514][ T7248] mmap: syz.0.307 (7248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  186.470600][ T7259] program syz.1.311 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.283332][ T7274] netlink: 'syz.1.313': attribute type 29 has an invalid length.
[  187.315314][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  187.414287][ T7277] capability: warning: `syz.3.315' uses deprecated v2 capabilities in a way that may be insecure
[  187.433923][ T7274] netlink: 500 bytes leftover after parsing attributes in process `syz.1.313'.
[  187.471477][ T7275] netlink: 'syz.1.313': attribute type 29 has an invalid length.
[  187.534271][    T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  187.615764][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.649117][ T7280] netlink: 'syz.3.315': attribute type 1 has an invalid length.
[  187.677188][    T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  187.695582][    T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  187.703631][    T9] usb 1-1: Manufacturer: syz
[  187.723888][    T9] usb 1-1: config 0 descriptor??
[  187.935689][    T9] rc_core: IR keymap rc-hauppauge not found
[  187.941621][    T9] Registered IR keymap rc-empty
[  187.987999][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  188.050094][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  188.293760][ T7291] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  188.573151][ T7288] netlink: 'syz.2.316': attribute type 5 has an invalid length.
[  188.911591][ T5932] usb 1-1: USB disconnect, device number 18
[  189.081415][ T7298] pim6reg: entered allmulticast mode
[  189.497555][ T7304] trusted_key: encrypted_key: hex blob is missing
[  189.553591][ T7304] trusted_key: encrypted_key: hex blob is missing
[  189.947576][ T7294] pim6reg: left allmulticast mode
[  189.953060][ T5939] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  190.215744][ T5939] usb 1-1: Using ep0 maxpacket: 32
[  190.246641][ T5939] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  190.254951][ T5939] usb 1-1: config 0 has no interface number 0
[  190.284174][ T5939] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  190.293781][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.364665][ T5939] usb 1-1: Product: syz
[  190.383173][ T5939] usb 1-1: Manufacturer: syz
[  190.411828][ T5939] usb 1-1: SerialNumber: syz
[  190.428170][ T7315] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  190.446072][ T5939] usb 1-1: config 0 descriptor??
[  190.497641][ T5939] smsc95xx v2.0.0
[  190.612948][ T7322] netlink: 'syz.3.325': attribute type 1 has an invalid length.
[  190.622061][ T7323] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  190.638422][ T7322] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  190.743568][ T7319] warning: `syz.4.324' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  190.773663][ T7331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.900188][ T5939] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  190.911577][ T5939] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  191.239207][ T7343] overlayfs: missing 'lowerdir'
[  191.335988][   T92] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  191.498783][   T92] usb 5-1: Using ep0 maxpacket: 8
[  191.520810][   T92] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  191.537255][   T92] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.549917][   T92] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  191.561200][   T92] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  191.572233][   T92] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.587265][   T92] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  191.608911][   T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.045187][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.064215][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.174032][    T9] usb 5-1: USB disconnect, device number 21
[  192.225457][ T5936] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  192.464134][ T5936] usb 3-1: config 0 has an invalid interface number: 129 but max is 0
[  192.499054][ T5936] usb 3-1: config 0 has no interface number 0
[  192.511512][ T7369] loop9: detected capacity change from 0 to 7
[  192.535760][ T5936] usb 3-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid maxpacket 30207, setting to 64
[  192.560032][ T5939] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  192.599332][ T6598] buffer_io_error: 352 callbacks suppressed
[  192.599354][ T6598] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.599436][ T5939] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  192.648022][ T5936] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e
[  192.664409][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.665758][ T6598] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.693192][ T5939] usb 1-1: USB disconnect, device number 19
[  192.700272][ T5936] usb 3-1: Product: syz
[  192.725116][ T6598] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.727807][ T5936] usb 3-1: Manufacturer: syz
[  192.775451][ T5936] usb 3-1: SerialNumber: syz
[  192.788743][ T6598] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.810398][ T5936] r8152-cfgselector 3-1: Unknown version 0x0000
[  192.825393][ T5936] r8152-cfgselector 3-1: config 0 descriptor??
[  192.841035][ T6598] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.876861][ T7350] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  192.903108][ T5936] r8152 3-1:0.129: Expected endpoints are not found
[  193.065309][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  193.122489][ T7380] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  193.215444][    T9] usb 2-1: device descriptor read/64, error -71
[  193.465325][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  193.615536][    T9] usb 2-1: device descriptor read/64, error -71
[  193.736424][    T9] usb usb2-port1: attempt power cycle
[  194.085692][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  194.108131][    T9] usb 2-1: device descriptor read/8, error -71
[  194.366359][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  194.476256][    T9] usb 2-1: device descriptor read/8, error -71
[  194.591019][    T9] usb usb2-port1: unable to enumerate USB device
[  194.703483][ T5939] r8152-cfgselector 3-1: USB disconnect, device number 18
[  195.707001][ T7419] FAULT_INJECTION: forcing a failure.
[  195.707001][ T7419] name failslab, interval 1, probability 0, space 0, times 0
[  195.745672][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.4.349 Not tainted syzkaller #0 PREEMPT(full) 
[  195.745702][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  195.745716][ T7419] Call Trace:
[  195.745724][ T7419]  <TASK>
[  195.745733][ T7419]  dump_stack_lvl+0x189/0x250
[  195.745765][ T7419]  ? __pfx____ratelimit+0x10/0x10
[  195.745788][ T7419]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.745815][ T7419]  ? __pfx__printk+0x10/0x10
[  195.745852][ T7419]  ? __pfx___might_resched+0x10/0x10
[  195.745882][ T7419]  should_fail_ex+0x414/0x560
[  195.745920][ T7419]  should_failslab+0xa8/0x100
[  195.745955][ T7419]  __kmalloc_noprof+0xcb/0x4f0
[  195.745983][ T7419]  ? __kasan_kmalloc+0x93/0xb0
[  195.746010][ T7419]  ? nla_strdup+0x9d/0x140
[  195.746038][ T7419]  nla_strdup+0x9d/0x140
[  195.746062][ T7419]  nf_tables_newchain+0x1998/0x2900
[  195.746110][ T7419]  ? __pfx_nf_tables_newchain+0x10/0x10
[  195.746176][ T7419]  ? nfnl_pernet+0x23/0x240
[  195.746219][ T7419]  ? __nla_parse+0x40/0x60
[  195.746247][ T7419]  nfnetlink_rcv+0x112f/0x2520
[  195.746315][ T7419]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  195.746366][ T7419]  ? ref_tracker_free+0x63a/0x7d0
[  195.746418][ T7419]  ? __netlink_deliver_tap+0x807/0x850
[  195.746442][ T7419]  ? netlink_deliver_tap+0x2e/0x1b0
[  195.746484][ T7419]  netlink_unicast+0x82c/0x9e0
[  195.746528][ T7419]  ? __pfx_netlink_unicast+0x10/0x10
[  195.746569][ T7419]  ? netlink_sendmsg+0x642/0xb30
[  195.746589][ T7419]  ? skb_put+0x11b/0x210
[  195.746614][ T7419]  netlink_sendmsg+0x805/0xb30
[  195.746637][ T7419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.746656][ T7419]  ? aa_sock_msg_perm+0xf1/0x1d0
[  195.746676][ T7419]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.746702][ T7419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.746727][ T7419]  __sock_sendmsg+0x21c/0x270
[  195.746766][ T7419]  ____sys_sendmsg+0x505/0x830
[  195.746799][ T7419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.746834][ T7419]  ? import_iovec+0x74/0xa0
[  195.746858][ T7419]  ___sys_sendmsg+0x21f/0x2a0
[  195.746878][ T7419]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.746925][ T7419]  ? __fget_files+0x2a/0x420
[  195.746938][ T7419]  ? __fget_files+0x3a0/0x420
[  195.746959][ T7419]  __x64_sys_sendmsg+0x19b/0x260
[  195.746981][ T7419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.747008][ T7419]  ? __pfx_ksys_write+0x10/0x10
[  195.747027][ T7419]  ? rcu_is_watching+0x15/0xb0
[  195.747047][ T7419]  ? do_syscall_64+0xbe/0x3b0
[  195.747067][ T7419]  do_syscall_64+0xfa/0x3b0
[  195.747082][ T7419]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.747097][ T7419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.747112][ T7419]  ? clear_bhb_loop+0x60/0xb0
[  195.747131][ T7419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.747146][ T7419] RIP: 0033:0x7f91c458eba9
[  195.747160][ T7419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.747174][ T7419] RSP: 002b:00007f91c5388038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.747191][ T7419] RAX: ffffffffffffffda RBX: 00007f91c47d5fa0 RCX: 00007f91c458eba9
[  195.747202][ T7419] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  195.747212][ T7419] RBP: 00007f91c5388090 R08: 0000000000000000 R09: 0000000000000000
[  195.747221][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  195.747230][ T7419] R13: 00007f91c47d6038 R14: 00007f91c47d5fa0 R15: 00007f91c48ffa28
[  195.747265][ T7419]  </TASK>
[  196.439678][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  196.725003][    T9] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.775343][    T9] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.805590][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  196.824398][    T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00
[  196.833719][   T92] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  196.859456][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.918340][    T9] usb 3-1: config 0 descriptor??
[  197.026389][   T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.039754][   T92] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  197.050509][   T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.099972][ T5945] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  197.214596][   T92] usb 5-1: config 0 descriptor??
[  197.316327][ T7435] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  197.370244][ T5945] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[  197.383753][ T5945] usb 1-1: config 5 has no interface number 0
[  197.394557][ T5945] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  197.410779][ T5945] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[  197.423813][ T5945] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0
[  197.448163][   T92] usbhid 5-1:0.0: can't add hid device: -71
[  197.454227][   T92] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  197.466403][   T92] usb 5-1: USB disconnect, device number 22
[  197.473477][ T5945] usb 1-1: config 5 interface 123 has no altsetting 0
[  197.486883][ T5945] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  197.502254][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.511418][ T5945] usb 1-1: Product: syz
[  197.516935][ T5945] usb 1-1: Manufacturer: syz
[  197.521833][ T5945] usb 1-1: SerialNumber: syz
[  197.932845][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.010682][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.204300][ T5945] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[  198.325525][   T92] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  198.408986][ T5945] usb 1-1: USB disconnect, device number 20
[  198.585682][   T92] usb 5-1: Using ep0 maxpacket: 32
[  198.620992][   T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.688411][   T92] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  198.719177][   T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.736608][   T92] usb 5-1: config 0 descriptor??
[  198.773332][   T92] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  198.821482][   T92] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  199.038778][    C1] ldusb 5-1:0.0: Ring buffer overflow, 32 bytes dropped
[  199.104429][ T7482] FAULT_INJECTION: forcing a failure.
[  199.104429][ T7482] name failslab, interval 1, probability 0, space 0, times 0
[  199.126247][ T7482] CPU: 1 UID: 0 PID: 7482 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT(full) 
[  199.126277][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  199.126292][ T7482] Call Trace:
[  199.126301][ T7482]  <TASK>
[  199.126310][ T7482]  dump_stack_lvl+0x189/0x250
[  199.126344][ T7482]  ? __pfx____ratelimit+0x10/0x10
[  199.126367][ T7482]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.126394][ T7482]  ? __pfx__printk+0x10/0x10
[  199.126430][ T7482]  ? __pfx___might_resched+0x10/0x10
[  199.126451][ T7482]  ? fs_reclaim_acquire+0x7d/0x100
[  199.126477][ T7482]  should_fail_ex+0x414/0x560
[  199.126516][ T7482]  should_failslab+0xa8/0x100
[  199.126550][ T7482]  kmem_cache_alloc_noprof+0x73/0x3c0
[  199.126579][ T7482]  ? io_submit_one+0x11f/0x1310
[  199.126606][ T7482]  io_submit_one+0x11f/0x1310
[  199.126645][ T7482]  ? __pfx_io_submit_one+0x10/0x10
[  199.126668][ T7482]  ? __might_fault+0xb0/0x130
[  199.126709][ T7482]  ? __might_fault+0xb0/0x130
[  199.126743][ T7482]  __se_sys_io_submit+0x185/0x2f0
[  199.126781][ T7482]  ? __pfx___se_sys_io_submit+0x10/0x10
[  199.126812][ T7482]  ? ksys_write+0x22a/0x250
[  199.126853][ T7482]  ? do_syscall_64+0xbe/0x3b0
[  199.126880][ T7482]  do_syscall_64+0xfa/0x3b0
[  199.126903][ T7482]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.126924][ T7482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.126968][ T7482]  ? clear_bhb_loop+0x60/0xb0
[  199.126994][ T7482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.127013][ T7482] RIP: 0033:0x7f98e778eba9
[  199.127032][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.127052][ T7482] RSP: 002b:00007f98e8679038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  199.127074][ T7482] RAX: ffffffffffffffda RBX: 00007f98e79d5fa0 RCX: 00007f98e778eba9
[  199.127090][ T7482] RDX: 0000200000000440 RSI: 0000000000000001 RDI: 00007f98e8658000
[  199.127106][ T7482] RBP: 00007f98e8679090 R08: 0000000000000000 R09: 0000000000000000
[  199.127119][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.127132][ T7482] R13: 00007f98e79d6038 R14: 00007f98e79d5fa0 R15: 00007f98e7affa28
[  199.127167][ T7482]  </TASK>
[  199.356037][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  199.362671][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  199.651577][   T92] usb 5-1: USB disconnect, device number 23
[  199.668856][   T92] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  199.903575][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  199.909959][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  199.971129][    T9] usb 3-1: USB disconnect, device number 19
[  200.402707][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.043291][ T7508] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  201.131535][ T7510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.366'.
[  201.786118][ T7530] FAULT_INJECTION: forcing a failure.
[  201.786118][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.832926][ T7530] CPU: 0 UID: 0 PID: 7530 Comm: syz.1.371 Not tainted syzkaller #0 PREEMPT(full) 
[  201.832957][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  201.832971][ T7530] Call Trace:
[  201.832980][ T7530]  <TASK>
[  201.832990][ T7530]  dump_stack_lvl+0x189/0x250
[  201.833021][ T7530]  ? __pfx____ratelimit+0x10/0x10
[  201.833044][ T7530]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.833071][ T7530]  ? __pfx__printk+0x10/0x10
[  201.833116][ T7530]  should_fail_ex+0x414/0x560
[  201.833154][ T7530]  _copy_to_user+0x31/0xb0
[  201.833186][ T7530]  simple_read_from_buffer+0xe1/0x170
[  201.833223][ T7530]  proc_fail_nth_read+0x1b3/0x220
[  201.833252][ T7530]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  201.833280][ T7530]  ? rw_verify_area+0x2a6/0x4d0
[  201.833305][ T7530]  ? __lock_acquire+0xab9/0xd20
[  201.833334][ T7530]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  201.833360][ T7530]  vfs_read+0x200/0xa30
[  201.833386][ T7530]  ? fdget_pos+0x247/0x320
[  201.833410][ T7530]  ? __pfx___mutex_lock+0x10/0x10
[  201.833433][ T7530]  ? __pfx_vfs_read+0x10/0x10
[  201.833461][ T7530]  ? __fget_files+0x2a/0x420
[  201.833484][ T7530]  ? __fget_files+0x3a0/0x420
[  201.833501][ T7530]  ? __fget_files+0x2a/0x420
[  201.833529][ T7530]  ksys_read+0x145/0x250
[  201.833559][ T7530]  ? __pfx_ksys_read+0x10/0x10
[  201.833592][ T7530]  ? do_syscall_64+0xbe/0x3b0
[  201.833619][ T7530]  do_syscall_64+0xfa/0x3b0
[  201.833640][ T7530]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.833660][ T7530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.833680][ T7530]  ? clear_bhb_loop+0x60/0xb0
[  201.833715][ T7530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.833735][ T7530] RIP: 0033:0x7f1137d8d5bc
[  201.833754][ T7530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  201.833773][ T7530] RSP: 002b:00007f1138b2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  201.833795][ T7530] RAX: ffffffffffffffda RBX: 00007f1137fd5fa0 RCX: 00007f1137d8d5bc
[  201.833811][ T7530] RDX: 000000000000000f RSI: 00007f1138b2e0a0 RDI: 0000000000000004
[  201.833824][ T7530] RBP: 00007f1138b2e090 R08: 0000000000000000 R09: 0000000000000000
[  201.833837][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.833850][ T7530] R13: 00007f1137fd6038 R14: 00007f1137fd5fa0 R15: 00007f11380ffa28
[  201.833882][ T7530]  </TASK>
[  202.248615][ T7533] pimreg: entered allmulticast mode
[  202.254997][ T7532] pimreg: left allmulticast mode
[  202.665449][ T5932] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  202.721935][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  202.745470][    T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  202.805455][ T5932] usb 3-1: device descriptor read/64, error -71
[  202.920614][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.947378][ T7541] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.967559][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.025462][ T5939] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  203.037944][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  203.057091][ T5932] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  203.065414][    T9] usb 4-1: can't read configurations, error -71
[  203.225365][ T5932] usb 3-1: device descriptor read/64, error -71
[  203.242639][ T5939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.282979][ T5939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.377185][ T5932] usb usb3-port1: attempt power cycle
[  203.406851][ T5939] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  203.424436][ T5939] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.445848][ T5939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.455102][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.463469][ T5939] usb 1-1: Product: syz
[  203.478757][ T5939] usb 1-1: Manufacturer: syz
[  203.483383][ T5939] usb 1-1: SerialNumber: syz
[  203.565981][ T5939] cdc_mbim 1-1:1.0: skipping garbage
[  203.640220][ T7565] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  203.745366][ T5932] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  203.760960][ T7554] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  203.777725][ T5932] usb 3-1: device descriptor read/8, error -71
[  204.036026][ T5932] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  204.066230][ T5932] usb 3-1: device descriptor read/8, error -71
[  204.178062][ T5932] usb usb3-port1: unable to enumerate USB device
[  204.205963][ T7554] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  204.390411][ T5939] cdc_mbim 1-1:1.0: bind() failure
[  204.429304][ T5939] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  204.452055][ T5939] cdc_ncm 1-1:1.1: bind() failure
[  204.876547][ T5945] usb 1-1: USB disconnect, device number 21
[  204.965671][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  205.022106][ T7590] fuse: Bad value for 'fd'
[  205.045404][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.385'.
[  205.057447][ T7591] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  205.156036][    T9] usb 2-1: device descriptor read/64, error -71
[  205.271050][ T7596] random: crng reseeded on system resumption
[  205.415310][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  205.635390][    T9] usb 2-1: device descriptor read/64, error -71
[  205.746728][    T9] usb usb2-port1: attempt power cycle
[  205.965374][ T5939] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  206.095432][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  206.118500][    T9] usb 2-1: device descriptor read/8, error -71
[  206.137176][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short
[  206.165334][ T5939] usb 3-1: unable to read config index 0 descriptor/start: -71
[  206.199613][ T5939] usb 3-1: can't read configurations, error -71
[  206.215641][ T5970] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  206.265981][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'.
[  206.275113][ T7612] bond0: ARP target 170.170.170.170 is already present
[  206.291206][ T7612] bond0: option arp_ip_target: invalid value (2863311530)
[  206.376128][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  206.435393][ T5970] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  206.443629][ T5970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.454016][ T5970] usb 1-1: config 0 has no interface number 0
[  206.460562][    T9] usb 2-1: device descriptor read/8, error -71
[  206.467165][ T5970] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  206.477395][ T5970] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  206.494597][ T5970] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  206.520273][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.537532][   T30] kauditd_printk_skb: 44 callbacks suppressed
[  206.537552][   T30] audit: type=1326 audit(1757761596.740:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  206.581486][ T5970] usb 1-1: Product: syz
[  206.600419][    T9] usb usb2-port1: unable to enumerate USB device
[  206.607287][ T5970] usb 1-1: Manufacturer: syz
[  206.713694][ T5970] usb 1-1: SerialNumber: syz
[  206.761755][   T30] audit: type=1326 audit(1757761596.770:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  206.790229][ T5970] usb 1-1: config 0 descriptor??
[  206.856400][   T30] audit: type=1326 audit(1757761596.770:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  206.963586][   T30] audit: type=1326 audit(1757761596.770:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  207.014556][   T30] audit: type=1326 audit(1757761596.770:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  207.051725][   T30] audit: type=1326 audit(1757761596.770:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  207.088425][   T30] audit: type=1326 audit(1757761596.770:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  207.114418][   T30] audit: type=1326 audit(1757761596.770:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  207.218723][   T30] audit: type=1326 audit(1757761596.770:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  207.260806][ T5932] usb 1-1: USB disconnect, device number 22
[  207.342633][ T7629] fuse: Bad value for 'fd'
[  207.405478][ T5939] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  207.440313][   T30] audit: type=1326 audit(1757761596.770:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  207.577608][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  207.618940][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  207.654870][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  207.679559][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  207.709156][ T5939] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  207.724222][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.753924][ T5939] usb 3-1: Product: syz
[  207.767162][ T5939] usb 3-1: Manufacturer: syz
[  207.775687][ T5939] usb 3-1: SerialNumber: syz
[  207.795179][ T5939] usb 3-1: config 0 descriptor??
[  208.028278][ T5939] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  208.230578][ T5970] usb 3-1: USB disconnect, device number 26
[  208.429889][ T5939] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  208.463849][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.471976][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.483760][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.492830][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.505341][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.513310][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.526619][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.551075][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.567675][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.581281][ T7638] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  208.592318][ T7639] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  208.675319][ T5939] usb 2-1: Using ep0 maxpacket: 8
[  208.692675][ T5939] usb 2-1: config 116 has too many interfaces: 150, using maximum allowed: 32
[  208.753857][ T5939] usb 2-1: config 116 has an invalid descriptor of length 156, skipping remainder of the config
[  208.881764][ T5939] usb 2-1: config 116 has 0 interfaces, different from the descriptor's value: 150
[  208.973204][ T5939] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[  208.998288][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.027986][ T5939] usb 2-1: Product: syz
[  209.085585][ T5939] usb 2-1: Manufacturer: syz
[  209.095763][ T5939] usb 2-1: SerialNumber: syz
[  209.314551][ T7636] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  209.545321][ T5932] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  209.724258][ T5939] usb 2-1: USB disconnect, device number 27
[  209.795315][ T5932] usb 1-1: Using ep0 maxpacket: 16
[  209.801900][ T5932] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  209.815560][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  209.834763][ T5932] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  209.846873][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.860653][ T5932] usb 1-1: Product: syz
[  209.930178][ T5932] usb 1-1: Manufacturer: syz
[  209.970515][ T5932] usb 1-1: SerialNumber: syz
[  210.247401][ T5932] usb 1-1: 0:2 : does not exist
[  210.267132][ T5932] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  210.369278][ T5932] usb 1-1: USB disconnect, device number 23
[  210.634634][ T6597] udevd[6597]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.755699][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'.
[  210.992421][ T5945] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  211.307771][ T5945] usb 2-1: config 0 has an invalid interface number: 84 but max is 0
[  211.343614][ T5945] usb 2-1: config 0 has no interface number 0
[  211.388217][ T5945] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  211.423710][ T5945] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 1024
[  211.464598][ T5945] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  211.499801][ T5945] usb 2-1: config 0 interface 84 has no altsetting 0
[  211.521241][ T5945] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05
[  211.535038][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.572753][ T7683] syzkaller1: entered promiscuous mode
[  211.595398][ T7683] syzkaller1: entered allmulticast mode
[  211.682248][ T5945] usb 2-1: config 0 descriptor??
[  211.696514][ T7669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  211.706566][ T5945] option 2-1:0.84: GSM modem (1-port) converter detected
[  212.018830][ T7693] caif0: entered promiscuous mode
[  212.024065][ T7693] caif0: entered allmulticast mode
[  212.257945][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  212.257966][   T30] audit: type=1326 audit(1757761602.440:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.2.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa07738eba9 code=0x0
[  212.296033][ T5945] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  212.402084][ T7702] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  212.544949][ T5936] usb 2-1: USB disconnect, device number 28
[  212.557059][ T5936] option 2-1:0.84: device disconnected
[  212.629515][ T5945] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  212.638826][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.650280][ T5945] usb 5-1: Product: syz
[  212.655087][ T5945] usb 5-1: Manufacturer: syz
[  212.659958][ T5945] usb 5-1: SerialNumber: syz
[  212.683543][ T5945] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  212.714957][    T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  213.168291][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.181049][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.857031][    T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  213.883975][    T9] ath9k_htc: Failed to initialize the device
[  213.949277][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  214.552516][ T7722] dvmrp1: entered allmulticast mode
[  214.728994][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.424'.
[  215.107811][    T9] usb 5-1: USB disconnect, device number 24
[  215.142937][ T7737] validate_nla: 42 callbacks suppressed
[  215.142957][ T7737] netlink: 'syz.0.428': attribute type 2 has an invalid length.
[  215.173318][ T5945] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  215.202488][ T7737] netlink: 'syz.0.428': attribute type 2 has an invalid length.
[  215.215016][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'.
[  215.340045][ T5970] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  215.365576][ T5945] usb 2-1: Using ep0 maxpacket: 16
[  215.373687][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  215.391877][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  215.454407][ T5945] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  215.464506][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.476655][ T5945] usb 2-1: Product: syz
[  215.480992][ T5945] usb 2-1: Manufacturer: syz
[  215.484772][ T7746] loop5: detected capacity change from 0 to 7
[  215.489052][ T5945] usb 2-1: SerialNumber: syz
[  215.497076][ T5970] usb 3-1: device descriptor read/64, error -71
[  215.506660][ T7746] Dev loop5: unable to read RDB block 7
[  215.520971][ T5945] usb 2-1: config 0 descriptor??
[  215.527729][ T7746]  loop5: unable to read partition table
[  215.532026][ T5945] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  215.559058][ T7744] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  215.567691][ T7746] loop5: partition table beyond EOD, truncated
[  215.576478][ T7746] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  215.585760][ T5945] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  215.714518][ T7750] netlink: 348 bytes leftover after parsing attributes in process `syz.3.432'.
[  215.746138][ T5970] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  215.896522][ T5970] usb 3-1: device descriptor read/64, error -71
[  216.007286][ T5970] usb usb3-port1: attempt power cycle
[  216.131560][ T5945] em28xx 2-1:0.0: chip ID is em2874
[  216.275489][    T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  216.355337][ T5970] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  216.389614][ T5970] usb 3-1: device descriptor read/8, error -71
[  216.415551][    T9] usb 1-1: device descriptor read/64, error -71
[  216.550480][ T5939] usb 2-1: USB disconnect, device number 29
[  216.556566][ T5864] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  216.570075][ T5939] em28xx 2-1:0.0: Disconnecting em28xx
[  216.579225][ T5939] em28xx 2-1:0.0: Freeing device
[  216.635499][ T5936] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  216.646925][ T5970] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  216.668799][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  216.676933][ T5970] usb 3-1: device descriptor read/8, error -71
[  216.685483][ T5864] usb 5-1: device descriptor read/64, error -71
[  216.765426][ T5936] usb 4-1: device descriptor read/64, error -71
[  216.787549][ T5970] usb usb3-port1: unable to enumerate USB device
[  216.815365][    T9] usb 1-1: device descriptor read/64, error -71
[  216.927542][    T9] usb usb1-port1: attempt power cycle
[  216.930101][ T5864] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  217.005665][ T5936] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  217.066369][ T5864] usb 5-1: device descriptor read/64, error -71
[  217.135465][ T5936] usb 4-1: device descriptor read/64, error -71
[  217.175772][ T5864] usb usb5-port1: attempt power cycle
[  217.245590][ T5936] usb usb4-port1: attempt power cycle
[  217.265570][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  217.299462][    T9] usb 1-1: device descriptor read/8, error -71
[  217.511591][ T7777] netlink: 'syz.1.440': attribute type 8 has an invalid length.
[  217.535320][ T5864] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  217.555993][ T5864] usb 5-1: device descriptor read/8, error -71
[  217.595561][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  217.627521][    T9] usb 1-1: device descriptor read/8, error -71
[  217.635340][ T5936] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  217.660204][ T5936] usb 4-1: device descriptor read/8, error -71
[  217.735930][    T9] usb usb1-port1: unable to enumerate USB device
[  217.795922][ T5864] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  217.815958][ T5864] usb 5-1: device descriptor read/8, error -71
[  217.910685][ T5936] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  217.925937][ T5864] usb usb5-port1: unable to enumerate USB device
[  217.935971][ T5936] usb 4-1: device descriptor read/8, error -71
[  217.955330][ T5970] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  218.045570][ T5936] usb usb4-port1: unable to enumerate USB device
[  218.120434][ T5970] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  218.133675][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.141852][ T5970] usb 2-1: Product: syz
[  218.146284][ T5970] usb 2-1: Manufacturer: syz
[  218.150909][ T5970] usb 2-1: SerialNumber: syz
[  218.162140][ T5970] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  218.187282][   T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  218.611290][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.623493][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.707064][ T5970] usb 2-1: USB disconnect, device number 30
[  219.268387][   T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  219.298555][   T10] ath9k_htc: Failed to initialize the device
[  219.320051][ T5970] usb 2-1: ath9k_htc: USB layer deinitialized
[  219.364957][ T7791] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[  219.623550][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.448'.
[  219.715386][ T5958] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  219.780909][ T7801] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  219.855408][ T5970] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  219.960480][ T5958] usb 3-1: device descriptor read/64, error -71
[  220.239899][ T5970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.255325][ T5958] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  220.269881][ T5970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  220.485273][ T7813] netlink: 84 bytes leftover after parsing attributes in process `syz.3.450'.
[  220.499064][ T7813] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  220.530226][ T5958] usb 3-1: device descriptor read/64, error -71
[  220.543200][ T5970] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  220.556338][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.568508][ T5970] usb 5-1: Product: syz
[  220.603128][ T5970] usb 5-1: Manufacturer: syz
[  220.661175][ T5970] usb 5-1: SerialNumber: syz
[  220.666134][ T5958] usb usb3-port1: attempt power cycle
[  220.913184][ T5970] usb 5-1: cannot find UAC_HEADER
[  220.974825][ T5970] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  221.025343][ T5958] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  221.056099][ T5958] usb 3-1: device descriptor read/8, error -71
[  221.120864][ T5970] usb 5-1: USB disconnect, device number 29
[  221.141049][ T6597] udevd[6597]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.325373][ T5958] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  221.417056][ T5958] usb 3-1: device descriptor read/8, error -71
[  221.532890][ T5958] usb usb3-port1: unable to enumerate USB device
[  221.695672][ T7826] ipvlan2: entered promiscuous mode
[  221.722823][ T7826] bridge0: port 4(ipvlan2) entered blocking state
[  221.765611][ T7826] bridge0: port 4(ipvlan2) entered disabled state
[  221.805555][ T7826] ipvlan2: entered allmulticast mode
[  221.838209][ T7826] bridge0: entered allmulticast mode
[  221.860451][ T7826] ipvlan2: left allmulticast mode
[  221.867383][ T7826] bridge0: left allmulticast mode
[  222.057627][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'.
[  222.145368][ T5970] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  222.305855][ T5970] usb 1-1: Using ep0 maxpacket: 32
[  222.316524][ T5970] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db
[  222.339117][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.415093][ T5970] usb 1-1: config 0 descriptor??
[  222.476505][ T5970] pwc: Logitech ViewPort AV 100 webcam detected.
[  222.616247][ T7842] block device autoloading is deprecated and will be removed.
[  222.675318][ T5970] pwc: Failed to set LED on/off time (-71)
[  222.708544][ T5970] pwc: send_video_command error -71
[  222.713829][ T5970] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  222.730578][ T5970] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  222.886919][ T5970] usb 1-1: USB disconnect, device number 28
[  223.185505][ T5945] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  223.335424][ T5945] usb 3-1: Using ep0 maxpacket: 16
[  223.343043][ T5945] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  223.352922][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.411250][ T5945] usb 3-1: config 0 descriptor??
[  223.808379][ T7864] snd_dummy snd_dummy.0: control 2:0:-4:syz0:0 is already present
[  224.260827][ T7868] netlink: 'syz.4.465': attribute type 4 has an invalid length.
[  225.311135][ T7873] netlink: 'syz.3.467': attribute type 6 has an invalid length.
[  225.343514][ T7874] netlink: 'syz.3.467': attribute type 6 has an invalid length.
[  225.616085][ T5936] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  225.788286][ T5945] lenovo 0003:17EF:6047.0004: invalid report_count 314333
[  225.799255][ T5945] lenovo 0003:17EF:6047.0004: item 0 4 1 9 parsing failed
[  225.815438][ T5936] usb 4-1: Using ep0 maxpacket: 32
[  225.875305][ T5936] usb 4-1: config 0 has an invalid descriptor of length 234, skipping remainder of the config
[  225.883186][ T5945] lenovo 0003:17EF:6047.0004: hid_parse failed
[  225.906283][ T5936] usb 4-1: config 0 has no interfaces?
[  225.954450][ T5945] lenovo 0003:17EF:6047.0004: probe with driver lenovo failed with error -22
[  225.975114][ T5936] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  226.018674][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.045588][ T5936] usb 4-1: Product: syz
[  226.049812][ T5936] usb 4-1: Manufacturer: syz
[  226.054443][ T5936] usb 4-1: SerialNumber: syz
[  226.172144][ T5936] usb 4-1: config 0 descriptor??
[  226.419716][ T5936] usb 4-1: USB disconnect, device number 22
[  226.596311][ T7888] netlink: 'syz.1.471': attribute type 7 has an invalid length.
[  226.615416][ T5932] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  226.713302][ T7888] : entered promiscuous mode
[  226.792055][ T5932] usb 1-1: Using ep0 maxpacket: 16
[  226.800488][ T5932] usb 1-1: config 4 has an invalid interface number: 51 but max is 0
[  226.817676][ T5932] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  226.860413][ T5932] usb 1-1: config 4 has no interface number 0
[  226.872776][ T5932] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  226.903099][ T5932] usb 1-1: config 4 interface 51 has no altsetting 0
[  226.927854][ T5932] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  226.962239][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.000595][ T5932] usb 1-1: Product: syz
[  227.004934][ T5932] usb 1-1: Manufacturer: syz
[  227.010133][ T5932] usb 1-1: SerialNumber: syz
[  227.091408][ T5932] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22
[  227.290420][ T7900] netlink: 48 bytes leftover after parsing attributes in process `syz.4.475'.
[  227.445418][ T5945] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  227.635998][ T5945] usb 2-1: Using ep0 maxpacket: 32
[  227.679320][ T5945] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  227.718809][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.828251][ T5970] usb 3-1: USB disconnect, device number 35
[  227.845587][ T5945] usb 2-1: config 0 descriptor??
[  228.040832][ T7910] program syz.4.476 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  228.065156][ T7910] netlink: 'syz.4.476': attribute type 10 has an invalid length.
[  228.074776][ T7910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.476'.
[  228.084591][ T7910] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  228.161064][ T5945] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  228.196331][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  228.245940][ T5945] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  228.274504][ T5945] usb 2-1: media controller created
[  228.297302][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'.
[  228.477189][ T7916] netlink: 'syz.2.477': attribute type 10 has an invalid length.
[  228.485325][ T7916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.477'.
[  228.494524][ T7916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  228.562973][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[  228.632853][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  229.172607][ T5945] DVB: Unable to find symbol dib7000p_attach()
[  229.222109][ T5945] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  229.605314][ T5945] rc_core: IR keymap rc-dib0700-rc5 not found
[  229.616313][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'.
[  229.647821][ T5945] Registered IR keymap rc-empty
[  229.685332][ T7921] bond0: ARP target 170.170.170.170 is already present
[  229.742767][ T7921] bond0: option arp_ip_target: invalid value (2863311530)
[  229.808501][   T10] usb 1-1: USB disconnect, device number 29
[  230.265315][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  230.361953][ T7927] netlink: 88 bytes leftover after parsing attributes in process `syz.3.481'.
[  230.405491][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'.
[  230.435726][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'.
[  230.495548][   T10] usb 1-1: Using ep0 maxpacket: 32
[  230.523921][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.550588][   T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  230.590575][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.621508][   T10] usb 1-1: config 0 descriptor??
[  230.642311][   T10] gspca_main: spca501-2.14.0 probing 0000:0000
[  231.068967][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.122002][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.170682][   T10] gspca_spca501: reg write: error -71
[  231.194221][   T10] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  231.217144][ T5958] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  231.245430][   T10] spca501 1-1:0.0: probe with driver spca501 failed with error -22
[  231.285843][   T10] usb 1-1: USB disconnect, device number 30
[  231.405404][ T5958] usb 3-1: Using ep0 maxpacket: 16
[  231.434440][ T5958] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.463699][ T5958] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.488772][ T5958] usb 3-1: config 0 interface 0 has no altsetting 0
[  231.513157][ T5958] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  231.541109][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.575643][ T5958] usb 3-1: config 0 descriptor??
[  232.128096][   T30] audit: type=1326 audit(1757761622.300:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.202982][   T30] audit: type=1326 audit(1757761622.300:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.225490][ T5936] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  232.314951][   T30] audit: type=1326 audit(1757761622.300:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.407721][ T5936] usb 4-1: config 4 has an invalid interface number: 196 but max is 0
[  232.416936][   T30] audit: type=1326 audit(1757761622.300:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.446722][ T5936] usb 4-1: config 4 has no interface number 0
[  232.472738][ T5936] usb 4-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  232.522991][ T5936] usb 4-1: config 4 interface 196 has no altsetting 0
[  232.539092][   T30] audit: type=1326 audit(1757761622.300:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.597871][ T5936] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03
[  232.612212][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.647854][ T5936] usb 4-1: Product: syz
[  232.657518][ T5936] usb 4-1: Manufacturer: syz
[  232.666833][   T30] audit: type=1326 audit(1757761622.300:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.710695][ T5936] usb 4-1: SerialNumber: syz
[  232.745818][ T7944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  232.773905][ T5936] keyspan 4-1:4.196: Keyspan 1 port adapter converter detected
[  232.809258][ T5936] keyspan 4-1:4.196: found no endpoint descriptor for endpoint 84
[  232.823410][   T30] audit: type=1326 audit(1757761622.300:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.874097][   T30] audit: type=1326 audit(1757761622.300:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.893420][ T5936] keyspan 4-1:4.196: found no endpoint descriptor for endpoint 81
[  232.945463][   T30] audit: type=1326 audit(1757761622.300:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  232.978586][ T5936] keyspan 4-1:4.196: found no endpoint descriptor for endpoint 1
[  232.992025][ T5936] keyspan 4-1:4.196: found no endpoint descriptor for endpoint 2
[  233.010567][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.014882][ T5936] keyspan 4-1:4.196: found no endpoint descriptor for endpoint 83
[  233.069765][   T30] audit: type=1326 audit(1757761622.300:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98e778eba9 code=0x7ffc0000
[  233.071302][ T5936] keyspan 4-1:4.196: found no endpoint descriptor for endpoint 3
[  233.105381][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.159519][ T5936] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  233.184601][ T5936] usb 4-1: USB disconnect, device number 23
[  233.237630][ T5936] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  233.303516][ T5936] keyspan 4-1:4.196: device disconnected
[  233.345326][ T5932] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  233.500652][ T5932] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.524576][ T5932] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.581471][ T5932] usb 5-1: config 1 interface 0 has no altsetting 0
[  233.622288][ T5932] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.40
[  233.645667][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.684019][ T5932] usb 5-1: Product: 뵪
[  233.693277][ T5932] usb 5-1: Manufacturer: Ю
[  233.702511][ T5932] usb 5-1: SerialNumber: syz
[  233.747338][ T5945] dvb-usb: could not initialize remote control.
[  233.785625][ T5945] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  233.971195][ T5932] usbhid 5-1:1.0: can't add hid device: -71
[  233.982564][ T5932] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  233.993984][ T5945] usb 2-1: USB disconnect, device number 31
[  234.001462][ T5932] usb 5-1: USB disconnect, device number 31
[  234.254557][ T5945] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  234.298328][ T5958] usbhid 3-1:0.0: can't add hid device: -71
[  234.320326][ T5958] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  234.358443][ T5958] usb 3-1: USB disconnect, device number 36
[  234.622732][ T7966] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  234.655810][ T5970] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  234.994668][ T7988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.498'.
[  235.025833][ T5932] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  235.044677][ T7988] veth0_to_hsr: entered promiscuous mode
[  235.059066][ T7988] veth0_to_hsr: left promiscuous mode
[  235.075307][ T5936] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  235.205446][ T5936] usb 2-1: device descriptor read/64, error -71
[  235.211828][ T5932] usb 5-1: Using ep0 maxpacket: 32
[  235.219072][ T5932] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  235.227932][ T5932] usb 5-1: config 0 has no interface number 0
[  235.234061][ T5932] usb 5-1: config 0 interface 89 has no altsetting 0
[  235.243866][ T5932] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  235.253089][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  235.260770][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.269017][ T5932] usb 5-1: Product: syz
[  235.273496][ T5932] usb 5-1: Manufacturer: syz
[  235.278635][ T5932] usb 5-1: SerialNumber: syz
[  235.290699][ T5932] usb 5-1: config 0 descriptor??
[  235.299115][ T5932] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  235.309410][ T5932] em28xx 5-1:0.89: Video interface 89 found: bulk
[  235.355320][ T5970] usb 1-1: device descriptor read/64, error -71
[  235.425335][   T24] usb 3-1: Using ep0 maxpacket: 32
[  235.433810][   T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  235.443106][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.454105][   T24] usb 3-1: config 0 descriptor??
[  235.465334][ T5936] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  235.595459][ T5970] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  235.605336][ T5936] usb 2-1: device descriptor read/64, error -71
[  235.664742][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  235.677935][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  235.688434][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  235.695958][   T24] usb 3-1: media controller created
[  235.716266][ T5936] usb usb2-port1: attempt power cycle
[  235.724027][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  235.745710][ T5970] usb 1-1: Using ep0 maxpacket: 8
[  235.765614][ T5970] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  235.785696][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.793845][ T5970] usb 1-1: Product: syz
[  235.799230][ T5970] usb 1-1: Manufacturer: syz
[  235.803883][ T5970] usb 1-1: SerialNumber: syz
[  235.812397][ T5970] usb 1-1: config 0 descriptor??
[  235.841296][   T24] DVB: Unable to find symbol dib7000p_attach()
[  235.849450][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  235.903844][ T5932] em28xx 5-1:0.89: unknown em28xx chip ID (81)
[  235.945320][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  235.951481][   T24] Registered IR keymap rc-empty
[  235.960949][   T24] dvb-usb: could not initialize remote control.
[  235.967571][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  236.025900][ T5970] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  236.082518][ T5936] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  236.117040][ T5936] usb 2-1: device descriptor read/8, error -71
[  236.124759][ T7999] bridge3: entered promiscuous mode
[  236.136541][ T7999] bridge3: entered allmulticast mode
[  236.375442][ T5936] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  236.396155][ T5936] usb 2-1: device descriptor read/8, error -71
[  236.525627][ T5936] usb usb2-port1: unable to enumerate USB device
[  236.779776][ T5932] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  236.781730][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.802475][ T5932] em28xx 5-1:0.89: board has no eeprom
[  236.811111][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.185482][ T5932] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  237.192816][ T5932] em28xx 5-1:0.89: analog set to bulk mode.
[  237.199067][ T5939] em28xx 5-1:0.89: Registering V4L2 extension
[  237.243585][ T5932] usb 5-1: USB disconnect, device number 32
[  237.313777][ T5932] em28xx 5-1:0.89: Disconnecting em28xx
[  237.371933][ T5939] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  237.383287][ T5939] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  237.391188][ T5939] em28xx 5-1:0.89: No AC97 audio processor
[  237.446605][ T5939] usb 5-1: Decoder not found
[  237.451391][ T5939] em28xx 5-1:0.89: failed to create media graph
[  237.460464][ T5939] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  237.483261][ T5939] em28xx 5-1:0.89: Registering snapshot button...
[  237.497564][ T5939] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input13
[  237.520722][ T5939] em28xx 5-1:0.89: Remote control support is not available for this card.
[  237.530849][ T5932] em28xx 5-1:0.89: Closing input extension
[  237.539401][ T5932] em28xx 5-1:0.89: Deregistering snapshot button
[  237.604852][ T5932] em28xx 5-1:0.89: Freeing device
[  237.752026][ T5970] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  237.788264][ T5970] usb 1-1: USB disconnect, device number 32
[  237.907390][ T8013] netlink: 'syz.4.504': attribute type 5 has an invalid length.
[  237.947725][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.504'.
[  239.006128][ T5932] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  239.176888][ T8030] could not allocate digest TFM handle blake2s-160
[  239.185463][ T5932] usb 4-1: Using ep0 maxpacket: 32
[  239.203292][ T5932] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  239.250577][ T5932] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  239.290163][ T5932] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  239.327596][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  239.347782][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  239.375380][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  239.409563][ T5932] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  239.438108][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.497314][ T5932] usb 4-1: config 0 descriptor??
[  239.520063][ T8042] loop5: detected capacity change from 0 to 7
[  239.570358][ T8042] Dev loop5: unable to read RDB block 7
[  239.576270][ T8042]  loop5: unable to read partition table
[  239.595382][ T8042] loop5: partition table beyond EOD, truncated
[  239.613018][ T8042] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  239.738484][ T5932] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  239.816427][ T5932] usb 4-1: USB disconnect, device number 24
[  239.876110][ T5932] usblp0: removed
[  240.287269][ T8054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.514'.
[  240.365321][ T5932] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  240.491333][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'.
[  240.515510][ T5932] usb 4-1: Using ep0 maxpacket: 32
[  240.526016][ T5932] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  240.542317][ T5932] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  240.565356][ T5932] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  240.588965][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  240.614591][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  240.627909][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  240.644157][ T5932] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  240.653608][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.690613][ T5932] usb 4-1: config 0 descriptor??
[  240.900936][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.919125][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.970849][ T5932] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  240.970893][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.048042][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.114103][ T5932] usb 3-1: USB disconnect, device number 37
[  241.247489][ T5932] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  242.218475][   T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  242.243536][ T8082] program syz.4.522 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.261141][ T8082] netlink: 'syz.4.522': attribute type 10 has an invalid length.
[  242.269397][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.522'.
[  242.280880][ T8082] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  242.324910][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'.
[  242.415400][   T24] usb 2-1: Using ep0 maxpacket: 16
[  242.422247][   T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  242.431875][   T24] usb 2-1: config 0 has no interface number 0
[  242.445467][   T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  242.464800][   T24] usb 2-1: config 0 interface 41 has no altsetting 0
[  242.474537][   T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  242.484085][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.492264][   T24] usb 2-1: Product: syz
[  242.499309][   T24] usb 2-1: Manufacturer: syz
[  242.504983][   T24] usb 2-1: SerialNumber: syz
[  242.514833][   T24] usb 2-1: config 0 descriptor??
[  242.534173][ T8072] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  242.546467][   T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22
[  242.820254][   T10] usb 4-1: USB disconnect, device number 25
[  242.846398][ T5958] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  243.039854][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.524'.
[  243.177080][ T5958] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  243.185712][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'.
[  243.235787][   T10] usblp0: removed
[  243.270285][ T5958] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  243.311227][ T5958] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  243.324931][ T5958] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  243.342436][ T5958] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  243.393048][ T5958] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  243.425541][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  243.475308][ T5958] usb 3-1: Product: syz
[  243.491114][ T5958] usb 3-1: Manufacturer: syz
[  243.538171][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.547053][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.649577][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.663409][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.720897][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  243.760535][ T5958] cdc_wdm 3-1:1.0: skipping garbage
[  243.767343][ T5958] cdc_wdm 3-1:1.0: skipping garbage
[  243.778770][ T8100] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  243.810731][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.839525][ T5958] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  243.869563][ T5958] cdc_wdm 3-1:1.0: Unknown control protocol
[  243.870753][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.895337][   T10] usb 4-1: Using ep0 maxpacket: 32
[  243.916600][   T10] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  243.926288][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.945135][   T10] usb 4-1: config 0 descriptor??
[  243.979157][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  243.987454][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.016118][ T6441] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.545699][   T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  244.573079][   T10] gspca_nw80x: reg_w err -71
[  244.577904][   T10] nw80x 4-1:0.0: probe with driver nw80x failed with error -71
[  244.608761][   T10] usb 4-1: USB disconnect, device number 26
[  244.725423][   T24] usb 1-1: Using ep0 maxpacket: 32
[  244.740636][   T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  244.753302][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.790893][   T24] usb 1-1: config 0 descriptor??
[  245.040756][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  245.065133][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  245.080666][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  245.088534][   T24] usb 1-1: media controller created
[  245.164646][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  245.382634][   T24] DVB: Unable to find symbol dib7000p_attach()
[  245.399667][ T5932] usb 3-1: USB disconnect, device number 38
[  245.415113][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  245.540141][ T5958] usb 2-1: USB disconnect, device number 36
[  245.570614][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  245.609321][   T24] Registered IR keymap rc-empty
[  245.637217][   T24] dvb-usb: could not initialize remote control.
[  245.664648][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  246.016172][   T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  246.195257][   T10] usb 4-1: Using ep0 maxpacket: 8
[  246.202825][   T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  246.215308][   T10] usb 4-1: config 179 has no interface number 0
[  246.223027][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  246.305453][ T5932] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  246.438427][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  246.451540][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  246.463197][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  246.474863][   T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  246.488886][   T10] usb 4-1: config 179 interface 65 has no altsetting 0
[  246.496226][   T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  246.506628][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.517544][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.531681][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.579730][   T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15
[  246.592059][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  246.790280][   T10] usb 4-1: USB disconnect, device number 27
[  246.821401][ T6598] udevd[6598]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  247.062424][ T5932] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  247.081868][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.123983][ T5932] usb 5-1: config 0 descriptor??
[  247.558220][ T5932] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[  247.668136][ T5932] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  249.905504][ T5864] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  249.951884][ T5932] usb 5-1: USB disconnect, device number 33
[  250.046109][ T5864] usb 3-1: device descriptor read/64, error -71
[  250.079192][ T8172] bridge4: entered promiscuous mode
[  250.084660][ T8172] bridge4: entered allmulticast mode
[  250.186193][ T5932] usb 5-1: new low-speed USB device number 34 using dummy_hcd
[  250.305335][ T5864] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  250.406505][ T5932] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  250.418202][ T5932] usb 5-1: config 0 has no interface number 0
[  250.424412][ T5932] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  250.439295][ T5932] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  250.451137][ T5932] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  250.468094][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.491374][ T5932] usb 5-1: config 0 descriptor??
[  250.505446][ T5864] usb 3-1: device descriptor read/64, error -71
[  250.513257][ T8160] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  250.533301][ T5932] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  250.635380][ T5864] usb usb3-port1: attempt power cycle
[  250.740816][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.741652][   T24] usb 1-1: USB disconnect, device number 33
[  250.781193][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.907602][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.955470][   T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  250.985314][ T5864] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  251.030085][ T5864] usb 3-1: device descriptor read/8, error -71
[  251.045759][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.207158][ T5958] usb 5-1: USB disconnect, device number 34
[  251.325708][ T5864] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  251.367524][ T5864] usb 3-1: device descriptor read/8, error -71
[  251.486251][ T5864] usb usb3-port1: unable to enumerate USB device
[  252.052235][ T8210] netlink: 'syz.0.556': attribute type 10 has an invalid length.
[  252.068452][ T8210] team0: Port device dummy0 added
[  252.130321][ T8211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.557'.
[  252.752900][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.807434][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.915323][ T5864] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  253.025720][ T5958] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  253.086287][ T5864] usb 3-1: Using ep0 maxpacket: 32
[  253.156790][ T5864] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  253.231229][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.301799][ T5864] usb 3-1: config 0 descriptor??
[  253.556459][ T5864] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  253.600079][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  253.641003][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  253.689308][ T5864] usb 3-1: media controller created
[  253.734735][ T8229] could not allocate digest TFM handle sha384-neon
[  253.878513][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  254.181129][ T5864] DVB: Unable to find symbol dib7000p_attach()
[  254.197727][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  254.425296][ T5864] rc_core: IR keymap rc-dib0700-rc5 not found
[  254.439765][ T8256] netlink: 'syz.3.564': attribute type 29 has an invalid length.
[  254.449670][ T8256] netlink: 'syz.3.564': attribute type 29 has an invalid length.
[  254.461644][ T8256] netlink: 500 bytes leftover after parsing attributes in process `syz.3.564'.
[  254.503203][ T5864] Registered IR keymap rc-empty
[  254.510984][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'.
[  254.550124][ T8253] bond0: ARP target 170.170.170.170 is already present
[  254.567993][ T8253] bond0: option arp_ip_target: invalid value (2863311530)
[  255.783928][ T8273] netlink: 'syz.0.569': attribute type 3 has an invalid length.
[  255.815441][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'.
[  256.715481][ T5936] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  256.969371][ T5936] usb 4-1: device descriptor read/64, error -71
[  257.125757][ T5945] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  257.215377][ T5936] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  257.283028][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'.
[  257.295752][ T8298] bond0: ARP target 170.170.170.170 is already present
[  257.306148][ T5945] usb 2-1: config 0 has no interfaces?
[  257.313443][ T8298] bond0: option arp_ip_target: invalid value (2863311530)
[  257.324998][ T5945] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  257.349962][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.365416][ T5936] usb 4-1: device descriptor read/64, error -71
[  257.405356][ T5958] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  257.423158][ T5945] usb 2-1: Product: syz
[  257.448148][ T5945] usb 2-1: Manufacturer: syz
[  257.452874][ T5945] usb 2-1: SerialNumber: syz
[  257.466008][ T5945] usb 2-1: config 0 descriptor??
[  257.476531][ T5936] usb usb4-port1: attempt power cycle
[  257.611217][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  257.624211][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  257.637065][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  257.647439][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  257.660933][ T5958] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  257.670385][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.717774][ T5958] usb 5-1: config 0 descriptor??
[  257.736507][ T5939] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  257.835566][ T5936] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  257.859445][ T5936] usb 4-1: device descriptor read/8, error -71
[  257.901067][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.922187][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  257.945271][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  257.966955][ T5939] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  257.978043][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.027811][ T5939] usb 1-1: Product: syz
[  258.032053][ T5939] usb 1-1: Manufacturer: syz
[  258.041792][ T5939] usb 1-1: SerialNumber: syz
[  258.062600][ T5939] usb 1-1: config 0 descriptor??
[  258.073230][ T5939] usb 1-1: ucan: probing device on interface #0
[  258.087026][ T5939] usb 1-1: ucan: invalid EP count (1)
[  258.092539][ T5939] usb 1-1: ucan: probe failed; try to update the device firmware
[  258.105350][ T5936] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  258.136198][ T5936] usb 4-1: device descriptor read/8, error -71
[  258.158962][ T5958] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max
[  258.212966][ T5958] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  258.256028][ T5936] usb usb4-port1: unable to enumerate USB device
[  258.276525][ T5958] usb 1-1: USB disconnect, device number 34
[  259.049173][ T5936] usb 5-1: USB disconnect, device number 35
[  259.165406][ T5958] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  259.275744][ T5864] dvb-usb: could not initialize remote control.
[  259.284286][ T5864] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  259.304780][ T5864] usb 3-1: USB disconnect, device number 43
[  259.315301][ T5958] usb 1-1: Using ep0 maxpacket: 16
[  259.341637][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.362579][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.376022][ T5958] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  259.406230][ T5958] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  259.418471][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.432131][ T5958] usb 1-1: config 0 descriptor??
[  259.500108][ T5864] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  259.785791][ T8310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.786065][ T5945] usb 2-1: USB disconnect, device number 38
[  259.856104][ T8319] program syz.2.580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  259.868222][ T8319] netlink: 'syz.2.580': attribute type 10 has an invalid length.
[  259.876601][ T8319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.580'.
[  259.969879][ T5958] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  259.983333][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'.
[  260.030262][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'.
[  260.112199][ T5958] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  260.119990][ T5958] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  260.257918][ T5958] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input18
[  260.325516][ T5945] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  260.455363][ T8312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.493720][ T8319] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  260.649411][ T5945] usb 2-1: device descriptor read/64, error -71
[  260.761674][ T5958] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  260.789482][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  260.796172][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  260.926313][ T5958] usb 1-1: USB disconnect, device number 35
[  261.085333][ T5945] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  261.224740][ T8327] fido_id[8327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  261.272989][ T5945] usb 2-1: device descriptor read/64, error -71
[  261.385898][ T5945] usb usb2-port1: attempt power cycle
[  261.535355][ T5958] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  261.778342][ T5958] usb 1-1: Using ep0 maxpacket: 32
[  261.789896][ T5958] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  261.798722][ T5945] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  261.812147][ T5958] usb 1-1: config 0 has no interface number 0
[  261.818441][ T5958] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  261.835796][ T5945] usb 2-1: device descriptor read/8, error -71
[  261.844285][ T5958] usb 1-1: config 0 interface 85 has no altsetting 0
[  261.864171][ T5958] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  261.877395][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.885667][ T5958] usb 1-1: Product: syz
[  261.890747][ T5958] usb 1-1: Manufacturer: syz
[  261.897863][ T5958] usb 1-1: SerialNumber: syz
[  261.909114][ T5958] usb 1-1: config 0 descriptor??
[  262.075634][ T5945] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  262.106478][ T5945] usb 2-1: device descriptor read/8, error -71
[  262.215826][ T5945] usb usb2-port1: unable to enumerate USB device
[  262.380158][ T5958] appletouch 1-1:0.85: Geyser mode initialized.
[  262.391370][ T5958] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input19
[  262.792192][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.801464][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.822607][ T5939] usb 1-1: USB disconnect, device number 36
[  262.852708][ T5939] appletouch 1-1:0.85: input: appletouch disconnected
[  262.871758][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.587'.
[  262.973561][ T8340] bond0: ARP target 170.170.170.170 is already present
[  263.035413][ T8340] bond0: option arp_ip_target: invalid value (2863311530)
[  263.106749][ T8343] syz_tun: entered allmulticast mode
[  263.173359][ T8342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.588'.
[  263.629021][ T5864] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  263.785310][ T5958] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  263.796466][ T5864] usb 3-1: Using ep0 maxpacket: 32
[  263.831158][ T5864] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  263.848023][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.902040][ T5864] usb 3-1: config 0 descriptor??
[  263.956012][ T5958] usb 1-1: Using ep0 maxpacket: 8
[  263.973642][ T5958] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  263.995379][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.003585][ T5958] usb 1-1: Product: syz
[  264.007973][ T5945] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  264.021330][ T5958] usb 1-1: Manufacturer: syz
[  264.026486][ T5958] usb 1-1: SerialNumber: syz
[  264.037817][ T5958] usb 1-1: config 0 descriptor??
[  264.060067][ T5958] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  264.122746][ T5864] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  264.134769][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.145615][ T5970] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  264.153146][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  264.154355][ T5945] usb 2-1: device descriptor read/64, error -71
[  264.171719][ T5864] usb 3-1: media controller created
[  264.201390][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  264.282451][ T5864] DVB: Unable to find symbol dib7000p_attach()
[  264.290861][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  264.362334][ T5970] usb 5-1: Using ep0 maxpacket: 16
[  264.378096][ T5970] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  264.396608][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.418113][ T5970] usb 5-1: Product: syz
[  264.433544][ T5970] usb 5-1: Manufacturer: syz
[  264.438967][ T5945] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  264.458606][ T5970] usb 5-1: SerialNumber: syz
[  264.479971][ T5970] usb 5-1: config 0 descriptor??
[  264.495685][ T5864] rc_core: IR keymap rc-dib0700-rc5 not found
[  264.547990][ T5864] Registered IR keymap rc-empty
[  264.564138][ T5864] dvb-usb: could not initialize remote control.
[  264.577635][ T5945] usb 2-1: device descriptor read/64, error -71
[  264.583469][ T5864] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  264.592146][ T5958] gspca_sonixj: reg_w1 err -110
[  264.592273][ T5958] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  264.695800][ T5945] usb usb2-port1: attempt power cycle
[  264.708152][ T5970] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  264.748381][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.776285][ T5970] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  264.785892][ T5970] usb 5-1: media controller created
[  264.876313][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.075363][ T5945] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  265.087424][ T8380] fuse: Bad value for 'group_id'
[  265.093721][ T8380] fuse: Bad value for 'group_id'
[  265.106355][ T5945] usb 2-1: device descriptor read/8, error -71
[  265.345708][ T5945] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  265.386114][ T5945] usb 2-1: device descriptor read/8, error -71
[  265.495976][ T5945] usb usb2-port1: unable to enumerate USB device
[  265.504821][ T5970] zl10353_read_register: readreg error (reg=127, ret==0)
[  265.530614][ T5970] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  265.553063][ T5970] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  265.662172][ T5945] usb 1-1: USB disconnect, device number 37
[  265.757216][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.599'.
[  265.766623][ T8383] bond0: ARP target 170.170.170.170 is already present
[  265.773734][ T8383] bond0: option arp_ip_target: invalid value (2863311530)
[  265.895247][    C1] hrtimer: interrupt took 87143 ns
[  266.217469][ T8389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.601'.
[  266.381052][ T8390] overlayfs: missing 'lowerdir'
[  267.271136][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  267.271160][   T30] audit: type=1326 audit(1757761657.450:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.300030][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.321532][   T30] audit: type=1326 audit(1757761657.460:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.344514][   T30] audit: type=1326 audit(1757761657.460:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.366712][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.373701][   T30] audit: type=1326 audit(1757761657.460:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.385571][ T5945] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  267.395982][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.396216][   T30] audit: type=1326 audit(1757761657.460:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.432518][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.460657][   T30] audit: type=1326 audit(1757761657.460:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.483012][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.490212][   T30] audit: type=1326 audit(1757761657.460:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.512612][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.526806][   T30] audit: type=1326 audit(1757761657.460:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.549045][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.556988][   T30] audit: type=1326 audit(1757761657.460:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.572116][ T5945] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  267.579226][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.580707][   T30] audit: type=1326 audit(1757761657.460:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f696538eba9 code=0x7ffc0000
[  267.616584][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.624530][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.645755][ T8401] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  267.657080][ T5945] usb 2-1: Product: syz
[  267.661305][ T5945] usb 2-1: Manufacturer: syz
[  267.677034][ T5945] usb 2-1: SerialNumber: syz
[  267.691174][ T5945] usb 2-1: config 0 descriptor??
[  267.912826][ T5945] usb 2-1: USB disconnect, device number 47
[  269.284270][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.307538][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.330283][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.341478][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.746146][ T8374] ------------[ cut here ]------------
[  269.752014][ T8374] usb 3-1: BOGUS control dir, pipe 80002c80 doesn't match bRequestType c0
[  269.797454][ T8374] WARNING: CPU: 0 PID: 8374 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830
[  269.807509][ T8374] Modules linked in:
[  269.811759][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.4.596 Not tainted syzkaller #0 PREEMPT(full) 
[  269.821671][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  269.831987][ T8374] RIP: 0010:usb_submit_urb+0x112b/0x1830
[  269.837826][ T8374] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 a0 04 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 86 10 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80
[  269.857584][ T8374] RSP: 0018:ffffc9001abc7850 EFLAGS: 00010246
[  269.863700][ T8374] RAX: f0afdb6977d35700 RBX: ffff88802fdfa500 RCX: ffff88802a61da00
[  269.869437][ T5939] usb 3-1: USB disconnect, device number 44
[  269.872320][ T8374] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  269.885950][ T8374] RBP: 1ffff110286da1d0 R08: 0000000000000003 R09: 0000000000000004
[  269.893952][ T8374] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000
[  269.902857][ T8374] R13: ffff8881436d0e80 R14: 0000000080002c80 R15: ffff888055a77ae0
[  269.911490][ T8374] FS:  00007f91c53676c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000
[  269.920762][ T8374] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  269.927614][ T8374] CR2: 0000200000055030 CR3: 000000007ec4a000 CR4: 00000000003526f0
[  269.935724][ T8374] Call Trace:
[  269.939045][ T8374]  <TASK>
[  269.942025][ T8374]  usb_start_wait_urb+0x114/0x4c0
[  269.947355][ T8374]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  269.952976][ T8374]  usb_control_msg+0x232/0x3e0
[  269.957893][ T8374]  dib0700_i2c_xfer+0xba7/0xf70
[  269.962828][ T8374]  ? __lock_acquire+0xab9/0xd20
[  269.967823][ T8374]  __i2c_transfer+0x871/0x2170
[  269.972664][ T8374]  ? i2c_transfer+0x120/0x3a0
[  269.977455][ T8374]  ? __pfx___i2c_transfer+0x10/0x10
[  269.982758][ T8374]  ? rt_mutex_lock_nested+0x172/0x1e0
[  269.988256][ T8374]  ? i2c_transfer+0x120/0x3a0
[  269.992980][ T8374]  i2c_transfer+0x25b/0x3a0
[  269.997564][ T8374]  ? __pfx_i2c_transfer+0x10/0x10
[  270.002642][ T8374]  ? _copy_from_user+0x94/0xb0
[  270.007534][ T8374]  i2cdev_ioctl_rdwr+0x460/0x740
[  270.012537][ T8374]  i2cdev_ioctl+0x64b/0x7f0
[  270.017270][ T8374]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  270.022360][ T8374]  ? __fget_files+0x3a0/0x420
[  270.027126][ T8374]  ? __fget_files+0x2a/0x420
[  270.031770][ T8374]  ? bpf_lsm_file_ioctl+0x9/0x20
[  270.036809][ T8374]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  270.041886][ T8374]  __se_sys_ioctl+0xfc/0x170
[  270.046616][ T8374]  do_syscall_64+0xfa/0x3b0
[  270.051168][ T8374]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.056470][ T8374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.062617][ T8374]  ? clear_bhb_loop+0x60/0xb0
[  270.067402][ T8374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.073314][ T8374] RIP: 0033:0x7f91c458eba9
[  270.077828][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.097549][ T8374] RSP: 002b:00007f91c5367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  270.106047][ T8374] RAX: ffffffffffffffda RBX: 00007f91c47d6090 RCX: 00007f91c458eba9
[  270.114069][ T8374] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004
[  270.122090][ T8374] RBP: 00007f91c4611e19 R08: 0000000000000000 R09: 0000000000000000
[  270.130108][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.138219][ T8374] R13: 00007f91c47d6128 R14: 00007f91c47d6090 R15: 00007f91c48ffa28
[  270.146323][ T8374]  </TASK>
[  270.149371][ T8374] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  270.156665][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.4.596 Not tainted syzkaller #0 PREEMPT(full) 
[  270.165881][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  270.175945][ T8374] Call Trace:
[  270.179247][ T8374]  <TASK>
[  270.182192][ T8374]  dump_stack_lvl+0x99/0x250
[  270.186805][ T8374]  ? __asan_memcpy+0x40/0x70
[  270.191422][ T8374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.196639][ T8374]  ? __pfx__printk+0x10/0x10
[  270.201340][ T8374]  vpanic+0x281/0x750
[  270.205349][ T8374]  ? __pfx__printk+0x10/0x10
[  270.209973][ T8374]  ? __pfx_vpanic+0x10/0x10
[  270.214491][ T8374]  ? is_bpf_text_address+0x292/0x2b0
[  270.219806][ T8374]  panic+0xb9/0xc0
[  270.223628][ T8374]  ? __pfx_panic+0x10/0x10
[  270.228073][ T8374]  __warn+0x31b/0x4b0
[  270.232066][ T8374]  ? usb_submit_urb+0x112b/0x1830
[  270.237097][ T8374]  ? usb_submit_urb+0x112b/0x1830
[  270.242189][ T8374]  report_bug+0x2be/0x4f0
[  270.246539][ T8374]  ? usb_submit_urb+0x112b/0x1830
[  270.251577][ T8374]  ? usb_submit_urb+0x112b/0x1830
[  270.256615][ T8374]  ? usb_submit_urb+0x112d/0x1830
[  270.261651][ T8374]  handle_bug+0x84/0x160
[  270.265906][ T8374]  exc_invalid_op+0x1a/0x50
[  270.270452][ T8374]  asm_exc_invalid_op+0x1a/0x20
[  270.275318][ T8374] RIP: 0010:usb_submit_urb+0x112b/0x1830
[  270.280970][ T8374] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 a0 04 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 86 10 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80
[  270.300604][ T8374] RSP: 0018:ffffc9001abc7850 EFLAGS: 00010246
[  270.306701][ T8374] RAX: f0afdb6977d35700 RBX: ffff88802fdfa500 RCX: ffff88802a61da00
[  270.314697][ T8374] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  270.322781][ T8374] RBP: 1ffff110286da1d0 R08: 0000000000000003 R09: 0000000000000004
[  270.330780][ T8374] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000
[  270.338779][ T8374] R13: ffff8881436d0e80 R14: 0000000080002c80 R15: ffff888055a77ae0
[  270.346802][ T8374]  usb_start_wait_urb+0x114/0x4c0
[  270.351856][ T8374]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  270.357431][ T8374]  usb_control_msg+0x232/0x3e0
[  270.362243][ T8374]  dib0700_i2c_xfer+0xba7/0xf70
[  270.367125][ T8374]  ? __lock_acquire+0xab9/0xd20
[  270.371998][ T8374]  __i2c_transfer+0x871/0x2170
[  270.376775][ T8374]  ? i2c_transfer+0x120/0x3a0
[  270.381465][ T8374]  ? __pfx___i2c_transfer+0x10/0x10
[  270.386672][ T8374]  ? rt_mutex_lock_nested+0x172/0x1e0
[  270.392055][ T8374]  ? i2c_transfer+0x120/0x3a0
[  270.396749][ T8374]  i2c_transfer+0x25b/0x3a0
[  270.401280][ T8374]  ? __pfx_i2c_transfer+0x10/0x10
[  270.406352][ T8374]  ? _copy_from_user+0x94/0xb0
[  270.411141][ T8374]  i2cdev_ioctl_rdwr+0x460/0x740
[  270.416098][ T8374]  i2cdev_ioctl+0x64b/0x7f0
[  270.420643][ T8374]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  270.425690][ T8374]  ? __fget_files+0x3a0/0x420
[  270.430373][ T8374]  ? __fget_files+0x2a/0x420
[  270.434968][ T8374]  ? bpf_lsm_file_ioctl+0x9/0x20
[  270.439931][ T8374]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  270.444974][ T8374]  __se_sys_ioctl+0xfc/0x170
[  270.449641][ T8374]  do_syscall_64+0xfa/0x3b0
[  270.454182][ T8374]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.459404][ T8374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.465506][ T8374]  ? clear_bhb_loop+0x60/0xb0
[  270.470195][ T8374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.476097][ T8374] RIP: 0033:0x7f91c458eba9
[  270.480521][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.500140][ T8374] RSP: 002b:00007f91c5367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  270.508575][ T8374] RAX: ffffffffffffffda RBX: 00007f91c47d6090 RCX: 00007f91c458eba9
[  270.516563][ T8374] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004
[  270.524546][ T8374] RBP: 00007f91c4611e19 R08: 0000000000000000 R09: 0000000000000000
[  270.532530][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.540512][ T8374] R13: 00007f91c47d6128 R14: 00007f91c47d6090 R15: 00007f91c48ffa28
[  270.548533][ T8374]  </TASK>
[  270.551910][ T8374] Kernel Offset: disabled
[  270.556238][ T8374] Rebooting in 86400 seconds..