last executing test programs:

10.981837642s ago: executing program 0 (id=1265):
socket(0x11, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)

10.886559187s ago: executing program 0 (id=1266):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x400, 0x34}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0)
r3 = io_uring_setup(0x664c, &(0x7f0000000500))
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000280)={0xc, <r6=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000002c0)={0x18, 0x1, 0x0, 0x0, r6})
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r7, r5})
r8 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}})
close_range(r3, 0xffffffffffffffff, 0x0)

8.605435679s ago: executing program 0 (id=1272):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="4db38d11cf22362449f0cd8e5be801aff801669d7e70aa03018bc3007ac0c0e935bc52daccaf8678265f1459b6be5a573a4718ef28202f7e02c62fe298b44f04001af5389fa90be495fdea54bc44337fe8709e34b4ac99ac8da6f1", @ANYRESDEC=r0, @ANYRESOCT=r1], 0x48)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000002c00)=ANY=[@ANYRESOCT=r4, @ANYRES8, @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r10, 0x541b, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmmsg$inet6(r9, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0)
open_tree(r6, &(0x7f0000000640)='\x00', 0x81101)
ioctl$TIOCL_PASTESEL(r6, 0x541c, 0x0)
r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
readv(r12, 0x0, 0x0)
sigaltstack(0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

7.536431806s ago: executing program 2 (id=1274):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) (async)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x1f8, 0x228, 0x25a, 0x1f8, 0x228, 0x4, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0xfc}, 0x5002, 0xa4, 0xec, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x40, 0x0, '\x00', {0x8}}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "8928bf56"}]}}, 0x0}, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
close(r1) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r7 = socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
lremovexattr(0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x6, 0xa}, {0x2, 0xb}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000480)) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$packet(0x11, 0x3, 0x300)

7.127922177s ago: executing program 2 (id=1275):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000100), 0x0, 0x841)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000780)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000311ffc)=0x1, 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x0, 0x0)
write$binfmt_script(r5, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "ecfb2da4955bfd5861d978042a6ad22f6baf924d7bb1f5c47274d2a120e923d6033f5d05901d3dc2bb8087032f8259d85360490a4aa339abd0356bd229401537468c79ba0b2b5d465f3260ed5552"}, 0x59)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES8=r1, @ANYRESHEX=0x0], 0x48)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c)

6.244106063s ago: executing program 4 (id=1279):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x0)
r0 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x6, @sdr={0x3147504d, 0x800}})

6.156815919s ago: executing program 4 (id=1280):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket(0x18, 0x1, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2fc, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xedd8}, @NFTA_SET_DESC={0x2a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x4}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d0}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9af7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8e5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x195}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4beb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200000}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x83f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x642568d3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4000005}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x344}}, 0x0)

6.091867755s ago: executing program 2 (id=1281):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2100, 0x6000, 0x0, 0x2581, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102}}}}) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)
ioctl$HIDIOCSUSAGES(r3, 0x501c4814, 0x0) (async)
ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080)
r4 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) (async)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fedbdf246401010108000000000000000000000020010000000000000000000000000001000000004e2100020a0000201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
close(r8) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})

6.070411749s ago: executing program 4 (id=1282):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x400, 0x34}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0)
r3 = io_uring_setup(0x664c, &(0x7f0000000500))
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000280)={0xc, <r6=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000002c0)={0x18, 0x1, 0x0, 0x0, r6})
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r7, r5})
r8 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}})
close_range(r3, 0xffffffffffffffff, 0x0)

5.876143341s ago: executing program 3 (id=1283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) (async, rerun: 32)
r1 = socket(0x18, 0x3, 0x1) (rerun: 32)
r2 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) (async)
io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

5.795219914s ago: executing program 1 (id=1284):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

5.665395211s ago: executing program 3 (id=1285):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001200010000000000000000002903000000004e2000000000ffffffff00000400040000007f000000000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="01000000031e2e021661c406ba00000008009d030031a2bbb9411f1039"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20004010)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0x2)
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x400c004)
recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1000f0ff1100010000005bae1edbb8461286ce3de40000000001211164cb97c6aef6890ed35a7b7a08bce65fb85d9f992684b080e7a989f224686757cd058070a9348a60c7d88240952fd2a7192e8b393fef1b1e1feca7e521a37ae85e024039933ccd0a1afeb606d5e8026f2ae56490c4102c6c03fa634222f686fcd7510272decd26c5d56e2e2871c6bf51446a3fc976fd5f62d217fc54dc84b12b21a7620ec36898220eff2182d798c655d8b2762a966bbdf0cd6d26001a36059aae3b33a245e98e7adfd0653ff3f0467b4ad40b689092b498b50b086cb07a2139e801d9b286c005ceb500"/245], 0x10}], 0x1}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3], 0x34c}}, 0x0)
r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r9}, 0x48)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010001fff000000000300000100000000", @ANYRES32=0x0, @ANYBLOB="820e00000018000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r12, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
connect$unix(r7, &(0x7f0000000380)=@abs={0xc51689835361e170, 0x0, 0x4e24}, 0x6e)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=@deltclass={0x58, 0x29, 0x4, 0x70bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r12, {0xc, 0x7}, {0x10, 0xffe0}, {0x10, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xe, 0xf7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_prio={0x9}]}, 0x58}}, 0x8000)
syz_usb_control_io(r6, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

5.299886559s ago: executing program 1 (id=1286):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de054a27"})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
fanotify_mark(0xffffffffffffffff, 0x1, 0x74e364f20890bb6e, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x40d, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40162}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1e, r5, 0x10ada85e65c25349, 0x3, 0xfffffffc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000000000000000000000000018160000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018160000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

5.189941795s ago: executing program 0 (id=1287):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x581801, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x800, 0x41, 0x40000337}, &(0x7f0000000dc0), &(0x7f0000000a40))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0)

4.859797264s ago: executing program 0 (id=1288):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timerfd_create(0x0, 0x800)
r4 = syz_io_uring_setup(0x58f5, &(0x7f0000000440)={0x0, 0x20, 0x10100, 0xffffffff, 0x129}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x3, 0x2, &(0x7f0000000340)="91941e7061bf9e14621c57b3d041f0d02af052a3faaa72e0600a47cadb14103d4475dd2341f66410a9b795b87a02ef46b24096ac52e35deb84bd91c3138b24ca8a8a666341419856737ec5dac5a116ebb73d56333db3f321aad80baebb16ee601be785b196baa48e0be37b8c27806cc4ff4e", 0x4, 0x0, 0x0, {0x1}})
io_uring_enter(r4, 0xf, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
r8 = shmat(r7, &(0x7f0000776000/0x4000)=nil, 0x5000)
shmdt(r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]})
syz_open_dev$usbfs(&(0x7f0000000100), 0x778, 0x408400)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
dup(r2)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x0)

4.537904037s ago: executing program 4 (id=1289):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4722, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x10}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac000000000000000000000000000000000010", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

3.648121671s ago: executing program 2 (id=1290):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)

3.644346542s ago: executing program 3 (id=1291):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x28, 0x0, 0x0)

3.643576559s ago: executing program 4 (id=1292):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x3cf301)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a6dd5a1f8a2e95bae968d9ee9875dc05000000000000008f7f6bb6f690598364b2664af60d1940949f15f67bcf6f02c1b6059acf2cf650f8e1dbc586acbe89e8ce2abb9fedd0cfbce57860174f0325f7"])
close(r3)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4241, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
getpid()
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
r6 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)={0x0, 0x40}, 0x18)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000400)=0x1088, 0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0xfffffffffffffffd, &(0x7f0000000100))
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
socket(0x2, 0x80805, 0x0)

3.466519332s ago: executing program 2 (id=1293):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000003c0)={0x3, 0x101})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000400))
r6 = getpid()
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x15, 0x17, 0x10d, &(0x7f0000000540)})
r7 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
sched_setattr(r6, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_join_ibss(&(0x7f0000000200)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018e140002402d3872d7d34982bde42768396aeb8165720badc1e4cbf6bdae0ddbd65561e949acab3c0186ccd0650fbca3852767ca28"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x20014091)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)

2.259976998s ago: executing program 1 (id=1294):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="2c0955b91d7d", 'macsec0\x00'}})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x4, 0x5}, 'port1\x00', 0xa3, 0xb1070, 0x3, 0x2, 0x4, 0x1, 0x2, 0x0, 0x7, 0x2})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0}, &(0x7f0000000140)=0xc)
move_pages(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f00000001c0)=[0xbc24, 0x6], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x2)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000240)=0xfffeffff, 0x0, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={<r4=>0x0, 0x5, 0x65a8, 0x7fffffff, 0x365, 0x3}, &(0x7f00000002c0)=0x14)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={r4, 0x4}, 0xc)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x10001}}, 0x9, 0xa, 0xa8b8, 0x0, 0xcb, 0x5, 0x81}, 0x9c)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=<r6=>r0, 0x26, 0x0, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
fremovexattr(r5, &(0x7f0000000540)=@random={'btrfs.', '\x00'})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000580)={r4, 0xfffffbff}, &(0x7f00000005c0)=0x8)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x0)
fsopen(&(0x7f0000000600)='bfs\x00', 0x1)
ioctl$KDDELIO(r6, 0x4b35, 0x0)
r7 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r8)
sendmsg(r6, &(0x7f0000000b40)={&(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)="bcb406098bdd711c59ac4b3b963c48a76ceaf98d083a512f2fb7188ae2cc83120a2b4aa704f8ce932ddc50a560936f5dfaa6bf87dcb21996026c706017713d9803c5e9a6c0f3d21017b18035225f62335989ca6a6decf187e3eaf34c1f193ea250e42c6e3726051735c187d62ccd4e9c1d95dced01aa58bb9b0f705e68cbaabdb9", 0x81}, {&(0x7f0000000980)="e7b20904ffa2073cab9d24360c1ac6a9129aa86388e84d13469f06773a772e6bb4d8b753a55251121357f8cd60225f1abce9d299ad947373a7d4e2557e16f780294f9419bf180ce29c3b9e44831a6cd4c36c707212ad6b5798bebbd3e490324362aede8ea19fd007be11f601de3e904a46cb4572b7d4087a27f12549637e9bcacecd3659b172c7387daf86504f520370d70c2713834142c8948028bfd8f45f42d370f9956113ad7b74c77ca56ae567f7ef4c1ed3c5b3ef55f5952f3d", 0xbc}], 0x2, &(0x7f0000000a80)=[{0x58, 0x104, 0x0, "1c88b882c876ed2a5936e677f41328418784bc7092326f2fa630c6a1613a3cc2c7c5acab07c31b73b1fa99ba47fbb1c5c46b1afdf8bc4a49ce3e557891b4458ea823"}, {0x40, 0x118, 0x6, "74ba8876068e209c11fa1a6dffa7dadad324914816af1448fa363b2646db6913c3a96bfff59a2cd3e3ebd6266e037292"}, {0x18, 0x0, 0x6, 'P'}], 0xb0}, 0x20001088)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000b80)={0x0, {{0xa, 0x4e24, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}}, 0x108)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x10, 0x3f2, 0x100, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x88804}, 0x8001)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000dc0)={0x4, [<r9=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000e00)=0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000e40)={r9, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x6, 0x9, 0xce1, 0x9, 0x2, 0x2, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000f00)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x29b4, 0x3}, 0x90)
write$P9_RCLUNK(r7, &(0x7f0000000fc0)={0x7, 0x79, 0x2}, 0x7)

1.983779602s ago: executing program 1 (id=1295):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x20000000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1132e88, 0x4)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x4, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/pids.max\x00', 0xc8442, 0x80)
write$cgroup_int(r7, &(0x7f0000000040)=0x600000000000000, 0x12)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
wait4(r8, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r8, 0x10000000000005, 0xe9)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001740)={0x24, r9, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x24}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000280)={{0x6, 0x3, 0xf3, 0x0, 'syz1\x00', 0x1000004}, 0x2, 0x10000000, 0xffffffff, r8, 0x3, 0x9, 'syz0\x00', &(0x7f0000000100)=[')$\x00', 'lo\x00', 'lo\x00'], 0x9})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x20a0, 0x12, 0x20, 0x70bd2d, 0x25dfdbff, {0x26, 0x0, 0x6, 0x8, {0x4e23, 0x4e20, [0x5, 0x3, 0x8, 0x9], [0x8000, 0x2, 0x5, 0x8], r11, [0x5, 0xfffeffff]}, 0x100, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "7ee9449eecb5936223ee0b7fc18d71"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "b31240d03d12ced23db32c0f19aa8c7284fae3acf50a17a2e74ea22b591b011d4ac6b0492fc114708bb10751bd2c10266c2e1e8f"}]}, 0x20a0}, 0x1, 0x0, 0x0, 0x64040020}, 0x400c0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)

1.912456335s ago: executing program 3 (id=1296):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000000000000000000be5a9", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

1.608457413s ago: executing program 0 (id=1297):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r1=>r0})
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r1, 0xfd908000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xf)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, 0x0, 0x0)
r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
pwritev(0xffffffffffffffff, 0x0, 0xffffffffffffff8b, 0xa3, 0x7ffffffd)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x2)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r9, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5})
ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000000180)={0xc, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r10, 0x0, &(0x7f00004fc000/0x4000)=nil, 0x4000, 0xfffffffffffffff0})
ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r9, r9, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r9, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf3})
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], 0x0)

1.459738838s ago: executing program 3 (id=1298):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
write$tun(r3, &(0x7f0000001980)=ANY=[], 0xfca)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000001340))

1.288942646s ago: executing program 4 (id=1299):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0)
close(0x3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x0, 0x9}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0xfffffffe, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)

1.029581232s ago: executing program 1 (id=1300):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
poll(&(0x7f0000001280)=[{r0, 0x190}], 0x1, 0xfffffffb)
io_setup(0xffff, &(0x7f0000000080)=<r1=>0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x4048050}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FICLONE(r5, 0x40049409, r5)
r6 = eventfd(0x8)
r7 = eventfd(0x87)
io_submit(r1, 0x3, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000100)="a439f9299975c2e96a20d3366b1245e4633ffd285d5859c939f9450f7e6043ed60932bc67e4889dc5db7913da0b4646a09939ff151c5bd94cdf93d7d868bbe7c719f51a7a6e7ea6d578c71b1bd4ff95e34d0a628e0aaccaf72792479e397bcad7eb8cbf797b2b8198ad884f9c9dfc8122dc77556f7474bc039cd44235092149256beefdc1ef49a21de18ed387a64b524fe8086842f17cb4d9d8227d28592cbaf942439aa26e7d8c9a2499dbc2c46a3614a3d099b49bb4d0ee512b61af0542f750010f5fa15665c3ee79052def5da1573", 0xd0, 0xb64, 0x0, 0x2, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f00000002c0)="696412871f9a1acd7e5b3c107b3cce10e94526fc70f8d83a929af97e687af5cd3ba4f6f8aefb56f7740521c23fc6439a900e9c29e1a53481bb53fc8a3991882ed77d06c74907b3ff395f83b1a28a3b8c59e3154bc9f0f880f796d289b5d681cfab9b67231b9a5ffbcb326551dd91f0faf0aeab30de8da6844f7fd94f96e06119214fc1a5671747d388321a7dec1ac9799a32295edb71991854d95c03a7c4bd001f88c5625ae0db9c8664c0d258", 0xad, 0x7, 0x0, 0x3, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000003c0)="971a970fa2a2d8f4f9a7b9725302709e24aef4327695efdd84f1aa2105b7e3fa6afcb8aaae5ffbd2cb8b9e222770352d7f7ac0eff31e84089bceeb7125f0867a", 0x40, 0xf, 0x0, 0x2, r7}])
r8 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000480))

896.11083ms ago: executing program 3 (id=1301):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201105"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x1ff, 0xc000, 0x0, 0x0}, {0x0, 0x5001, 0x1000, &(0x7f00000006c0)="b97cde78d2e772f3ab0f928ac91cc7b0514fac45a0bdb78ee49c11a229b64fcbe960a9b9c89d5118a89e9889d649ecbefa1761853dd70e4cea1b60c645b14afefe2b7ac92edd370260791e4652ce8d8b6f30b65d26a6d114858bbedff403687f9bec5747dd15c5c8bc8e18dd8e3e9a70bf21fd2b3b51ec0c84a933db0c5e7bbb7f7311dd415194254720c4b18bcee301a6177b2fa4e9dfe83d305704b8768ef5bb187c28f4eb1e9f5885183163ead391d048f8a5f504d92ea38b326acbc3cdd61e05cf1c4e49f09dc4a76796eb70a3d8354918cc3aa56bd210f674a776894a2f06797d06d16cae0a81d1899a85f44663e06004e6e07938c8c75ac13621ae776036bbe880481760639edde7e3b45311cf5f6bd92511fe30c9a1cc7067c59a1d2c8d27b95014b2ce2f097fdae8b730baf080803d709543e706de10b90558a2b5aa0478b80f580282806494f6f03184dc429dc5f108ee5e2ae0ddd899e4fec12d533d07c9070b1247f47a53e8280bf483fb6d1560ed26722448b0d7724bd709ac670d63bd73ba8e9f3f3f2f97729e1f5ac27d7870e29124919a94b0dbbfdb2a85bf38da854a514dce622bce71b1ede0085027512a90214951b6b34c83897db1f7000bcc6b72792ccd917b55b9ff3c44a90d4d093790a5ebc056ab612baa74802017006245903c8ab998126725132202d0e63cc44ab6dabb532c47487bf49cc0cadf2165eeae787cf70f49cb8c883d33d2004c5b130138f98223492c3e4d3a1d9612f330995d53722c768a7a95faf3a2c7731281d0ec5ea5cbc4041323977de361b8dcfea850bc44af75199a1859a6739b4d3005ceb450100ee300316b3901d71a96be7c3dc4ef6052d6ef70636200c5727fa2ea4d69c4c2a02b908cf611de5ac06d5b16ce288a778bcce748614894c4c8a67e6ee8fb4ac9da8a5ba0f6dd24e81d58edf8419ebfc926f214b2f62d8e69b5f4efee37abf0236154eeeaae65b45660a43d7f9808a5e7110d45cc2a12c81822b62108f8a7c36538513aae31c65db8ff29815fe778e23a1008777013b7795882c62e7c92e97a1c73f7c9696bdd8ab1f88cffb8ec3ea1f85aacb15f79dfdf70529b271a0ae3b351aa9a9b7b36584c0a09f1051b77614b289647cbb1c32abeddf6cc5c0cfcd402bf453c6cff210c833dd2ceed9088a1590cb04d958daea98bc3464219e1e488c9f40c76cfdad13a081dd3d108188516ccb173adc1e815208d12a77a0197a24ec2202af4a260d828fc1ef2ffa65c3b621b93f2a9aa6b75ad41984b41ed9886636c727e69dca14eb9eb4a6fcd1f367e41fdcd493e1f51912761002abb1ddf0030fdeaa904cbad96f4efbbbcf3fcb9f543be3717dca7d612ba5a3751ceb99d6cbf7bc92fc1e5b718021c747f2f1adf7bb23563a57781d221cfe5b87a7da1f241789d73d5a4b8522fefe1fe17baa1b4c7e337497e9ec53a1a59be92011fdd2a480d88f3af0ef935e9f790d6705e67938d830f81e326f0557a729cf61857fb3dac1d4c0b7e41a9f75c37abdef4f72ea19d395ebb5857a39112430f53240e923746625cad38f79510824a6a55a268a707905d04c10455425c630e6dda1e1f2c1b1abd0f4fd4bdd9ff354f3d23259aaa9af4f6c0ee96b56e385acccbc492048176489908e757f6bdce02f290a250283f95e943a81be79804f5faf52c8797a0d2eeebce510cb149708b8b92ff7b96e8385ba3f0914fc099752e1097ba613b5fde4a23ba065e63a8699de7f0141aa5ade488c6f6360695160a4600acc7e41bfe9e02dac67c10ee001777b045b802106876e3910041c366e957ae80bd5896f207a9d85fb806999e6d8974a0ceb01e363f9e7633eef49900f4da2347b10fb28d91675f3b51e948d21ed5211bd82a9b209ab6e2b68e585d14f6b1bcaed5902da42373c08b1756d1b221c00f6f9df407e024c77e76e85bb759ea570fef61bbbdf1c983b2eb43afaf5ba0d178b4b01977cc243ba47d65e6a697a06e9c29f32c33ef81a6a76ff7b6062b03b48f45de0a9e937f940918a1a6b834ec836b788db5d6e56a09241eb338b491b673d52f0213ff589fb85804b880c5b9723185ab18a5a6f59780daaa6610bb4363f94d570db5ac60e1bb19ad3f4df8070e13de4b28895f5c92466bec3268b57072b859ffebf736b23b351c44d894c54f0d52a99e1146e2bd2e4776138eebebc83197eea36f791489efc09e1c1def1e7546439b2efb0602ecf0dc0a35aeb7245ae5abf22663268fe1a771e21271b58ebf53f0f6f10090a519c28df75b53022e02cc48e1ab8fd3a7e845d73ba4c261d570785cda692d2ff626bd4e108cfedb0ac5521f40067f382b1b585c1035fbc492d54cf54cea50a632cec761e7c2c97164e84098cad4d4d1212a1e2243e1cdb20e5dce95c7d354322ead25b6db6c744fdfafcafd05b6e2e3573f8c71998122753c0ad312d6e49ddd311e85bbd21614075583937266d5e83bca41a03274d16b54a771b29c531923d147b1e25804b2b526a4eec5dc15d0dbcbda889b2830ae944d504d7468b24e2c728ed6842921eb96e4450fc098dd3b9d8ddccbf68aea67a4deac843d5fa7855ed0b4746739e459227c53c6dfe32a8c4216abafd179a3016cb54d3b642cac9fed48418e7faa4ba98f81a38ed7cba13baa03a10d8fa51ef89d1768175a7bc89f0426c6af911e37f3aa5bff42f9ecfda9194c6535c53381fe8097dcffa07666f21632c5bd82b897611f4397b0aa6e102415ecc6cd84a917751b26855b99fd46a0640276459edfae5b379f652f1dde0464c85b125374a32cc3c72ca8c907d9ed67719fd420c23e5cdd30d1d1dcdb4bc686fe14a9555a2a3838fcba9ef5f22f9b5a021c2b4be748a16b877180aa2541e23223c165c746eb70a6586d5b91723054a385b2b04491c046e3e649de06c04a98b5622bcb2e8fdd2ed96b5b9eb7404644f6e14483744bd13451776022107d8ab7b43b0a31962f80e723a61b8461d9bd2e5316a2723ef63d65d56a2126c0f3be2b979724fa7cc39cee243d54d1b1e18169b2818dc1d05406b9ade488df99af481e381818b0b670303b55e2c8d14585951bf8b01c395612cf6830b6a5f2c1aa929cc918a6136d2e65cb0816ad03eba1a06011b5ba05885a7c056a77492952a37ba9d6730ceabb1dd98371bd0c10dd8bf7473193bf82cfa1842f2b9ed2f1fbe848e06d9f9dbb2d7dd27457a2c2a71dd22836172d30e371b741ed01a960a3df8dbc04702b2447496e2b2a6f1e95ce4e3fec153664526f8a7d2158e5f5381d268e78e63786dcf13db62b4168592353b219972e3593934a51ea62f342e0c0df3129a71b2c32ac8524a7c0a2a0a51ed1d4acd1a4da8683bc13ee34339c494a0a493def8e0a1ff02a0e6626ebfa22ba6f9b28a60c580a26fb7fa6e58784098364914abebc073f5e58b75a3f6d5d8b900c1df956ce7c08cd8c17f054895dd1368fb029b0215e0f5bcb0bcfb5d1d5e603e157ed563289125a3493177a0f5a8aba3cdab642dc0a1457c8952e7874a281df6083cd6c1aadfd3abc7cda54cc2dcdbc4f09ca88a1617ef9f547032383b0c27ad191714f3af69f655a3de51434939a3973528be24d4b03f4fd681bceb708282fbb3cdcd45d6972a169e6281c87610f84c5eb2d4350de9277a5e32eaae420119e0124ff7cdf57d75afdb47c1308723a2a002ffee01d2c4a3ce9a47c229aeffd7fb6d161c5011d495df76d6c492c291125c9f7168f03c89ceb4a02ff5fdb8c0aa5dc7c79929213bcd035bcceac0ad24401c130e6c15c6e84d6548a5cd4bef3e0a73ba5d78eb59e4bc3d3a4888f90e5beaea08aa8b00a0a873a64bc98d7772f785697686e58033701819ac148358b3cf70dc4d41519eec9ad0cd7f830069f4daf5b6c1d5c20f45e97d6271d9ce726582b61790fcceba433c5adf02cac15aaaff69e02d49ee681517db75008176c543956b43c7c240e19539db3d289a2b11d4b419d2514f3ecf40206097d57e420392e5151815fb885abd0755d5d86bfab8d446e1f6250e37475e49d154747685ed683f20299e96ce0e97ff592877a87f06aaa35e247d25734f74b5d2daea0e669244450a05e448e65352d4190a7669996b84bbfe07408e42bc6681a0b75c8235844d1c427cb6af560ca18f0ae0debe7101563f697b4dac714f6ef02cf273eec4f179fb3bfd8644cf3bbe74ad1e77a652b2f360490824d5b4c8b918d444e52f1cc74c17a839fd558fc6323282b9000e8342fadf766a8ed7b2172f9efa98b7dddb78aa8d013edb6dc182734bdf08d815c0a45b2e9377f72669a68ad0052c4e08035737ce5854f2c85c04490ad49c21fbde9413b3d370b2ad357982baed147ea04b20ca8067d78db56cff60959ce9fabd059c3bb0eb2d54eccd232a80b31d938db8cd95b01bd282cd985d6f3de925c4a6bec0e98fec3940b38a7d788e44fd06d8fbb8405e4a834d3b5a580fa3f5b95c96e9d714d730cdd3a18ebcea8cfab77cf8320f8c7cf84cca24c340958dfc0efa4730878556fc54ccbe7d5b8a173ee6289fef083508df6c7b2bae541412ceb73a361873f151e6a90392a4e100444423f54c49255415ccd8799dc5e14287cd8464eb1cc587e6756ff1968ea101ff35de85fadf20673afb8968eaed790f6cf4433e8519baa6a4f0bb8c54591b773f790951610edef03608ac2272371a5f0e8640f5db8f865ecd27deebe8488f74512470a0a5448253848020b2044c121463785c977f0a3ffbb04729bd4fc4b2e8edf81eb3b92f7b2ee1c88c2a13a7005f855fb5e854d853cd0f90392c7135ad653aa2e9a74b7bf25644d3b3fb91a51fb743cb7d9731ead07c5a30abd27bfa9a88604bcb37ae9a7ccc39ff56c95c0c4bb44052c32367b116567e631d5b017c119a76d26075802498c6a5809afb9abd054ad34fa68ea7a699bb833d5c91fe7b2309f6eda8b5a0d86cc8fb57cae1e9f607c5295eba8d8ea7cdd1422d1d56bc5a2c72f33f2a06aa6f69d1da632c1f579320201ce0049d070c355fc0b63935da3a5c792c5f6832037693b5e29287005b800780145df0bfa414024f494e3d71d74af02323436b701292cbae06f715246bae8ab2071a248f33e84f61c9ff1ef8742b6ba11efc303a72e7b4ccfcff12877ed237feb7e6c024846d8a99b269bfa283ca31e064b1adcdfbbc10121564930178757eb839c6c4d585df8fb639c58651310b27da94583a2de252b550d431ce613f7b6b20254a36784d4ac62da7574433868f26cc776de650dc3556c66250f5eae35edb4f73aca71724411e28a2eec15e861835939fd0468f8a6fe6f806167a87ec467ac6ffa04a3faf77ed33f9c93b7c7096e084bfe0cbb2bf8e344ad99ee7322a0cffba6ef239614731e4b0de3f2fea8ca32d476ef318a48c0f314e3f3d2164e43e5e6f37e399ae5a8777e59c9ba629a54c905bd438433cf8d968281c11c7cb47c89d77f0b7b8469cd82aa21376f8bba30cb089f7e5a02f6e545f7a6d535809e5ed2ad8a5522ab5442d9e59bda88b66e09a497777b1382133535dc0925e8c31e99e193066a5a7794d821add39f4507b5a07f9dfdcba777a2a182314365a779aad431f8b52f0ffa938124e6597fdff1e25e2544928340defa7b869b7f6337157ea96debc2c2d463b393ff26666ab7d671090b405e26d53f28326a752fc56da52f3a5cf795f0d67787a5adc4128a1e8f68286cedb12cad7f8da2c34272340829778bc5b20d783043373d5d4a2bdf6e9e8be3ba7669cdf77b985dff88a31693aca9791edf0870581b04b2"}], 0x2})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

275.394446ms ago: executing program 1 (id=1302):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [<r3=>0x0], [0x0, 0xfffffffc], [0x80, 0x0, 0x0, 0xffffffff]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r3, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00), 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=1303):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)

kernel console output (not intermixed with test programs):

 to read RDB block 3
[  298.505067][ T8878]  loop2: unable to read partition table
[  298.512856][ T8878] loop2: partition table beyond EOD, truncated
[  298.723637][ T8878] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  298.858117][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'.
[  298.888837][ T5199] Dev loop2: unable to read RDB block 3
[  298.897331][ T8892] input: syz1 as /devices/virtual/input/input32
[  298.904858][ T5199]  loop2: unable to read partition table
[  298.922412][ T5199] loop2: partition table beyond EOD, truncated
[  299.005523][ T5830] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0
[  299.189355][ T5830] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0
[  299.239556][ T5830] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0
[  299.248097][ T5830] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0
[  299.259930][ T5830] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0
[  299.421642][ T5830] lenovo 0003:17EF:60EE.0012: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0
[  299.452899][ T5199] Dev loop2: unable to read RDB block 3
[  299.458580][ T5199]  loop2: unable to read partition table
[  299.484483][ T5199] loop2: partition table beyond EOD, truncated
[  299.620938][ T5922] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  299.652011][ T5830] lenovo 0003:17EF:60EE.0012: Fn-lock setting failed: -71
[  299.703859][ T5830] lenovo 0003:17EF:60EE.0012: Sensitivity setting failed: -71
[  299.871121][ T5830] usb 5-1: USB disconnect, device number 63
[  299.877802][ T5922] usb 4-1: not running at top speed; connect to a high speed hub
[  299.893302][ T5922] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  299.912642][ T5922] usb 4-1: config 1 interface 0 has no altsetting 0
[  299.935179][ T5922] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  299.981702][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.006971][ T8905] fido_id[8905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  300.044269][ T5922] usb 4-1: Product: à ’
[  300.057672][ T5922] usb 4-1: Manufacturer: ᠌
[  300.434838][ T8892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.450335][ T8892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.505762][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.851'.
[  300.542087][ T8908] netlink: 'syz.0.851': attribute type 7 has an invalid length.
[  300.585651][ T8908] netlink: 'syz.0.851': attribute type 8 has an invalid length.
[  300.612111][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'.
[  300.666561][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'.
[  301.261080][ T5922] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  301.284031][ T5922] usb 4-1: USB disconnect, device number 55
[  301.590800][ T5900] usb 5-1: new low-speed USB device number 64 using dummy_hcd
[  301.765616][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short
[  301.776815][ T5900] usb 5-1: config index 0 descriptor too short (expected 33540, got 36)
[  301.785414][ T5900] usb 5-1: config 108 has too many interfaces: 60, using maximum allowed: 32
[  301.906372][ T5900] usb 5-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config
[  301.968010][ T5900] usb 5-1: config 108 has 1 interface, different from the descriptor's value: 60
[  302.008025][ T5900] usb 5-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  302.046256][ T5900] usb 5-1: config 108 interface 0 has no altsetting 0
[  302.078725][ T5900] usb 5-1: string descriptor 0 read error: -22
[  302.086890][ T5900] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  302.097909][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2
[  302.172349][ T8946] loop2: detected capacity change from 0 to 7
[  302.179576][ T8946]  loop2:
[  302.182819][ T8946] loop2: partition table partially beyond EOD, truncated
[  302.490238][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.858'.
[  302.640604][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  303.029514][ T8964] overlayfs: missing 'lowerdir'
[  303.967408][ T8976] rtc_cmos 00:00: Alarms can be up to one day in the future
[  303.986496][ T5922] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  304.150989][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  304.160200][ T5922] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.172531][ T5922] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  304.218544][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0
[  304.226335][ T5922] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  304.236438][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.359484][ T5922] usb 4-1: config 0 descriptor??
[  304.473119][   T24] usb 5-1: USB disconnect, device number 64
[  304.825823][ T5922] corsair-cpro 0003:1B1C:0C10.0013: item fetching failed at offset 2/5
[  304.852157][ T5922] corsair-cpro 0003:1B1C:0C10.0013: probe with driver corsair-cpro failed with error -22
[  304.941713][   T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  304.990787][ T5922] usb 4-1: USB disconnect, device number 56
[  305.110781][   T24] usb 5-1: Using ep0 maxpacket: 16
[  305.160272][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.201326][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.242065][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  305.285633][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  305.307323][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.324095][   T24] usb 5-1: config 0 descriptor??
[  305.338300][ T8985] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  305.376390][ T8984] x_tables: duplicate underflow at hook 1
[  305.460255][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.474866][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.538826][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.549743][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.651193][ T5900] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  305.796411][ T8999] macvlan2: left promiscuous mode
[  305.809992][   T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0014/input/input33
[  305.846641][ T9003] netdevsim netdevsim1: Direct firmware load for .
[  305.846641][ T9003]  failed with error -2
[  305.866894][ T9003] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  305.866894][ T9003] 
[  305.880381][ T5900] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  305.908038][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.920176][ T5900] usb 3-1: Product: syz
[  305.942819][ T5900] usb 3-1: Manufacturer: syz
[  305.957247][ T5900] usb 3-1: SerialNumber: syz
[  305.981239][ T5900] usb 3-1: config 0 descriptor??
[  305.987036][   T24] appleir 0003:05AC:8241.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  306.019112][ T5900] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 049
[  306.075490][ T5830] usb 5-1: USB disconnect, device number 65
[  306.118219][ T9007] fido_id[9007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  308.091330][ T5900]  (null): failure setting delay to 10us
[  308.119340][ T5900] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  308.331450][ T5950] usb 3-1: USB disconnect, device number 49
[  309.162824][ T9026] bond1 (unregistering): Released all slaves
[  309.675269][ T9042] xt_TCPMSS: Only works on TCP SYN packets
[  309.681988][ T9043] xt_TCPMSS: Only works on TCP SYN packets
[  310.146129][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'.
[  310.263526][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  310.341730][ T9059] ip6gretap0: entered promiscuous mode
[  310.348594][ T9059] macsec1: entered promiscuous mode
[  310.368075][ T9059] ip6gretap0: left promiscuous mode
[  310.408968][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'.
[  310.429313][ T9060] netlink: 'syz.0.891': attribute type 18 has an invalid length.
[  310.440154][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'.
[  310.449949][ T5950] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  310.600863][ T5950] usb 4-1: Using ep0 maxpacket: 8
[  310.617697][ T5950] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  310.675969][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.706111][ T5950] usb 4-1: Product: syz
[  310.721256][ T5950] usb 4-1: Manufacturer: syz
[  310.725938][ T5950] usb 4-1: SerialNumber: syz
[  310.744117][ T5950] usb 4-1: config 0 descriptor??
[  310.758194][ T5950] gspca_main: se401-2.14.0 probing 047d:5003
[  311.075053][ T9079] netlink: 240 bytes leftover after parsing attributes in process `syz.3.890'.
[  311.085909][ T9079] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16)
[  311.094725][ T9079] openvswitch: netlink: Message has 75 unknown bytes.
[  311.126366][ T5950] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  311.134740][ T5950] se401 4-1:0.0: probe with driver se401 failed with error -71
[  311.151787][ T5950] usb 4-1: USB disconnect, device number 57
[  311.168194][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'.
[  313.431542][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'.
[  313.458717][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'.
[  313.657770][ T5950] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  313.750963][    T9] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  313.840764][ T5950] usb 2-1: Using ep0 maxpacket: 16
[  313.850002][ T5950] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.869284][ T5950] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.888968][ T5950] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  313.922558][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  313.974719][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  313.985484][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0
[  313.993047][ T5950] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  314.004981][    T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  314.021025][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.040842][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.053271][    T9] usb 4-1: Product: syz
[  314.074044][ T5950] usb 2-1: config 0 descriptor??
[  314.079049][    T9] usb 4-1: Manufacturer: syz
[  314.099316][    T9] usb 4-1: SerialNumber: syz
[  314.183473][    T9] usb 4-1: config 0 descriptor??
[  314.191558][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  314.198144][    T9] hub 4-1:0.0: probe with driver hub failed with error -5
[  314.343767][    T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35
[  314.507139][ T5950] hid (null): invalid report_size 25705
[  314.543850][ T9131] netlink: 'syz.4.908': attribute type 2 has an invalid length.
[  314.591002][ T9131] netlink: 164 bytes leftover after parsing attributes in process `syz.4.908'.
[  314.749671][ T5950] usb 2-1: USB disconnect, device number 63
[  315.742114][ T5900] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  315.924047][ T5900] usb 2-1: Using ep0 maxpacket: 8
[  315.933054][ T5900] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  315.951803][ T5900] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  316.001483][ T5900] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  316.110832][ T5900] usb 2-1: config 250 has no interface number 0
[  316.131538][ T5900] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  316.234342][ T5900] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  316.286701][ T5900] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  316.318872][ T5900] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  316.475118][ T5900] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  316.594151][ T5900] usb 2-1: config 250 interface 228 has no altsetting 0
[  316.773393][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  316.863258][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  316.945731][ T5900] usb 2-1: Product: syz
[  316.949971][ T5900] usb 2-1: SerialNumber: syz
[  317.139592][ T5900] hub 2-1:250.228: bad descriptor, ignoring hub
[  317.156982][    T9] usb 4-1: USB disconnect, device number 58
[  317.172067][ T5900] hub 2-1:250.228: probe with driver hub failed with error -5
[  317.222792][ T9151] sit1: entered allmulticast mode
[  317.342229][ T5900] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 64 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  317.501263][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  317.590849][   T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  317.664097][    T9] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  317.687347][    T9] usb 4-1: config 0 has no interface number 0
[  317.694291][    T9] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  317.709655][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  317.719973][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.726238][ T5900] usb 2-1: reset high-speed USB device number 64 using dummy_hcd
[  317.729092][    T9] usb 4-1: Product: syz
[  317.740645][    T9] usb 4-1: Manufacturer: syz
[  317.746832][    T9] usb 4-1: SerialNumber: syz
[  317.762202][    T9] usb 4-1: config 0 descriptor??
[  317.762912][   T24] usb 5-1: Using ep0 maxpacket: 16
[  317.778297][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  317.780951][    T9] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1
[  317.806093][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  317.815841][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.830285][   T24] usb 5-1: Product: syz
[  317.836044][   T24] usb 5-1: Manufacturer: syz
[  317.853276][   T24] usb 5-1: SerialNumber: syz
[  317.867784][   T24] usb 5-1: config 0 descriptor??
[  317.871291][ T9174] netlink: 'syz.2.916': attribute type 1 has an invalid length.
[  317.878966][   T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  317.902158][   T24] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  317.945170][ T9174] 8021q: adding VLAN 0 to HW filter on device bond1
[  317.968038][ T9176] macvlan3: entered promiscuous mode
[  317.973713][ T9176] macvlan3: entered allmulticast mode
[  317.982153][ T9176] bond1: entered promiscuous mode
[  317.990610][ T9176] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  318.000551][ T9176] bond1: left promiscuous mode
[  318.054313][ T9174] bond1: (slave ip6gretap1): making interface the new active one
[  318.064331][ T9174] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  318.116942][ T9174] macvlan3: entered promiscuous mode
[  318.122871][ T9174] macvlan3: entered allmulticast mode
[  318.129447][ T9174] bond1: entered promiscuous mode
[  318.136507][ T9174] ip6gretap1: entered promiscuous mode
[  318.143982][ T9174] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  318.152060][ T9174] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1
[  318.174165][ T9174] bond1: left promiscuous mode
[  318.191596][ T9174] ip6gretap1: left promiscuous mode
[  318.269783][ T5900] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71)
[  318.329616][ T5900] usb 2-1: USB disconnect, device number 64
[  318.367257][ T5900] usblp0: removed
[  318.414631][ T9182] netlink: 'syz.1.917': attribute type 4 has an invalid length.
[  318.437008][ T5950] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  318.460445][ T9182] netlink: 'syz.1.917': attribute type 4 has an invalid length.
[  318.483055][    T9] usb 4-1: USB disconnect, device number 59
[  318.507723][    T9] yurex 4-1:0.50: USB YUREX #1 now disconnected
[  318.563660][   T24] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  318.591103][ T5950] usb 3-1: device descriptor read/64, error -71
[  318.606199][ T9184] binder: 9183:9184 unknown command 0
[  318.616370][ T9184] binder: 9183:9184 ioctl c0306201 200000000640 returned -22
[  318.657497][   T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  318.699157][   T24] em28xx 5-1:0.0: board has no eeprom
[  318.891999][   T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  318.930198][   T24] em28xx 5-1:0.0: dvb set to bulk mode.
[  318.949227][ T5908] em28xx 5-1:0.0: Binding DVB extension
[  318.966699][   T24] usb 5-1: USB disconnect, device number 66
[  318.990815][ T5950] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  318.992400][   T24] em28xx 5-1:0.0: Disconnecting em28xx
[  319.054128][ T5908] em28xx 5-1:0.0: Registering input extension
[  319.064400][   T24] em28xx 5-1:0.0: Closing input extension
[  319.141088][ T5950] usb 3-1: device descriptor read/64, error -71
[  319.184210][   T24] em28xx 5-1:0.0: Freeing device
[  319.269778][ T5950] usb usb3-port1: attempt power cycle
[  319.471793][   T30] kauditd_printk_skb: 139 callbacks suppressed
[  319.471814][   T30] audit: type=1326 audit(1764449306.034:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.3.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f785458f749 code=0x0
[  319.651871][ T5950] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  319.683797][ T5950] usb 3-1: device descriptor read/8, error -71
[  320.039522][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.925'.
[  320.071169][ T5950] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  320.107781][ T5950] usb 3-1: device descriptor read/8, error -71
[  320.221290][ T5950] usb usb3-port1: unable to enumerate USB device
[  320.400437][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.424505][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.433356][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.441150][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.448591][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.504616][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.521744][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.529236][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.565495][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.597319][   T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  320.629506][   T24] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  320.632552][ T9220] tipc: New replicast peer: 255.255.255.255
[  320.741720][ T9220] tipc: Enabled bearer <udp:syz2>, priority 10
[  320.768599][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.819761][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.865133][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.884967][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.892869][ T9223] fido_id[9223]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  320.913078][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.923177][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.933292][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.943459][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.954334][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.035106][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.045093][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.058765][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.069784][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.081516][    T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  321.082793][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.097427][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.107485][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.117868][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.127318][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.388606][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.424636][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.455510][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.516749][    T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  321.546719][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.568078][    T9] usb 4-1: config 0 descriptor??
[  321.703861][ T5950] usb 3-1: new low-speed USB device number 54 using dummy_hcd
[  321.797577][ T9234] input: syz0 as /devices/virtual/input/input37
[  321.921788][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short
[  321.993939][ T9227] fuse: Unknown parameter ']roìyup_iÜE00000000000000000000'
[  322.046126][ T5950] usb 3-1: config index 0 descriptor too short (expected 33540, got 36)
[  322.085090][ T5950] usb 3-1: config 108 has too many interfaces: 60, using maximum allowed: 32
[  322.110956][ T5830] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  322.120430][ T9236] input: syz0 as /devices/virtual/input/input38
[  322.166729][ T5950] usb 3-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config
[  322.185567][ T5950] usb 3-1: config 108 has 1 interface, different from the descriptor's value: 60
[  322.212998][ T5950] usb 3-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  322.304290][ T5950] usb 3-1: config 108 interface 0 has no altsetting 0
[  322.314379][ T5830] usb 2-1: Using ep0 maxpacket: 32
[  322.437890][ T5830] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  322.465025][ T5950] usb 3-1: string descriptor 0 read error: -22
[  322.488040][ T5830] usb 2-1: config 0 has no interface number 0
[  322.503410][ T5950] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  322.578615][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.586198][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  322.650626][ T5830] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  322.679111][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2
[  322.728183][ T5830] usb 2-1: config 0 interface 85 has no altsetting 0
[  322.806290][ T5830] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  322.850124][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.869300][ T5830] usb 2-1: Product: syz
[  322.879730][ T5830] usb 2-1: Manufacturer: syz
[  322.896875][ T5830] usb 2-1: SerialNumber: syz
[  322.909480][ T5830] usb 2-1: config 0 descriptor??
[  323.021797][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'.
[  323.105843][ T9241] netlink: 104 bytes leftover after parsing attributes in process `syz.4.934'.
[  323.335981][ T5830] appletouch 2-1:0.85: Failed to read mode from device.
[  323.426846][ T5830] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  323.456487][ T5830] usb 2-1: USB disconnect, device number 65
[  323.539106][ T9246] rtc_cmos 00:00: Alarms can be up to one day in the future
[  323.658324][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  323.726753][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  323.756741][    T9] usb 4-1: USB disconnect, device number 60
[  324.382038][   T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  324.419776][ T5908] usb 3-1: USB disconnect, device number 54
[  324.541029][   T24] usb 2-1: Using ep0 maxpacket: 32
[  324.548499][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.583336][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.605937][   T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  324.621483][    T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  324.639382][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.682623][   T24] usb 2-1: config 0 descriptor??
[  324.773988][    T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  324.785144][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.808871][    T9] usb 4-1: config 0 descriptor??
[  324.826644][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  324.895414][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.907968][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.081749][ T5900] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  325.125095][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  325.132535][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  325.146112][   T24] usb 2-1: USB disconnect, device number 66
[  325.231806][ T5900] usb 5-1: Using ep0 maxpacket: 16
[  325.236902][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.243603][ T5900] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config
[  325.253827][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.256215][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  325.276489][ T5900] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  325.288905][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.299374][ T5900] usb 5-1: Product: syz
[  325.303669][ T5900] usb 5-1: Manufacturer: syz
[  325.308304][ T5900] usb 5-1: SerialNumber: syz
[  325.323892][    T9] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  325.485587][ T9268] loop2: detected capacity change from 0 to 7
[  325.494379][ T9268]  loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  325.503240][ T9268] loop2: p1 start 3018249949 is beyond EOD, truncated
[  325.510247][ T9268] loop2: p2 start 1879129398 is beyond EOD, truncated
[  325.517301][ T9268] loop2: p3 start 4093120540 is beyond EOD, truncated
[  325.524397][ T9268] loop2: p4 start 2524654898 is beyond EOD, truncated
[  325.530246][ T5900] usb 5-1: 0:2 : does not exist
[  325.539479][ T9268] loop2: p5 start 674059 is beyond EOD, truncated
[  325.547905][ T9268] loop2: p6 start 57445 is beyond EOD, truncated
[  325.556614][ T9268] loop2: p7 start 1646166690 is beyond EOD, truncated
[  325.558280][ T5900] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  325.572785][ T9268] loop2: p8 start 3277892638 is beyond EOD, truncated
[  325.579703][ T9268] loop2: p9 start 4163259941 is beyond EOD, truncated
[  325.617829][ T5900] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  325.647953][ T5900] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5)
[  325.698588][ T5900] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5)
[  325.726085][ T5900] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  325.748329][ T5900] usb 5-1: USB disconnect, device number 67
[  325.827659][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  326.119262][    T9] gspca_cpia1: usb_control_msg 02, error -71
[  326.177376][ T9279] kvm: pic: level sensitive irq not supported
[  326.362513][    T9] gspca_cpia1: usb_control_msg 05, error -71
[  326.385274][    T9] cpia1 4-1:0.0: unexpected systemstate: 00
[  326.495596][    T9] usb 4-1: USB disconnect, device number 61
[  326.894667][    T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  327.161570][    T9] usb 5-1: Using ep0 maxpacket: 16
[  327.372093][ T5908] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  327.384717][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  327.410188][ T9303] trusted_key: syz.3.950 sent an empty control message without MSG_MORE.
[  327.498796][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  327.535522][ T5908] usb 3-1: Using ep0 maxpacket: 16
[  327.535801][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  327.550029][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.572382][    T9] usb 5-1: Product: syz
[  327.598731][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  327.610481][    T9] usb 5-1: Manufacturer: syz
[  327.647713][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  327.648033][    T9] usb 5-1: SerialNumber: syz
[  327.796935][    T9] usb 5-1: config 0 descriptor??
[  327.821645][    T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  327.831792][    T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  327.856042][ T5908] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  327.929099][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.961150][ T5908] usb 3-1: Product: syz
[  327.971688][ T5908] usb 3-1: Manufacturer: syz
[  327.986224][ T5908] usb 3-1: SerialNumber: syz
[  328.245184][ T5908] usb 3-1: config 0 descriptor??
[  328.346263][ T5908] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  328.458494][    T9] em28xx 5-1:0.0: unknown em28xx chip ID (223)
[  328.468388][ T5908] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  329.012744][ T5908] em28xx 3-1:0.0: unknown em28xx chip ID (223)
[  329.532311][    T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  329.543712][    T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  329.551286][    T9] em28xx 5-1:0.0: No AC97 audio processor
[  329.841923][ T5950] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  330.081786][ T5950] usb 2-1: Using ep0 maxpacket: 32
[  330.092171][ T5908] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  330.234195][ T5908] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  330.251304][ T5908] em28xx 3-1:0.0: No AC97 audio processor
[  330.259811][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.281278][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.322879][ T5950] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  330.375136][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.407484][ T5950] usb 2-1: config 0 descriptor??
[  330.635891][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.673552][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.890081][ T5908] usb 5-1: USB disconnect, device number 68
[  330.899355][ T5908] em28xx 5-1:0.0: Disconnecting em28xx
[  330.916244][ T5950] usbhid 2-1:0.0: can't add hid device: -71
[  330.935146][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  330.984363][ T5950] usb 2-1: USB disconnect, device number 67
[  331.003890][ T5908] em28xx 5-1:0.0: Freeing device
[  331.258051][ T5908] usb 3-1: USB disconnect, device number 55
[  331.265493][ T5908] em28xx 3-1:0.0: Disconnecting em28xx
[  331.312308][ T5908] em28xx 3-1:0.0: Freeing device
[  331.360792][ T5830] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  331.531541][ T5830] usb 4-1: Using ep0 maxpacket: 16
[  331.547462][ T5830] usb 4-1: config 4 has an invalid interface number: 51 but max is 0
[  331.574333][ T5830] usb 4-1: config 4 has no interface number 0
[  331.589896][ T5830] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  331.992886][ T5908] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  332.000640][ T5830] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  332.017028][ T5830] usb 4-1: config 4 interface 51 has no altsetting 0
[  332.046613][ T5830] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  332.062699][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.079586][ T5830] usb 4-1: Product: syz
[  332.087458][ T5830] usb 4-1: Manufacturer: syz
[  332.097907][ T5830] usb 4-1: SerialNumber: syz
[  332.119148][ T9324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  332.132147][ T5908] usb 2-1: device descriptor read/64, error -71
[  332.171156][ T9324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  332.440793][ T5908] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  332.580815][ T5908] usb 2-1: device descriptor read/64, error -71
[  332.692059][ T5908] usb usb2-port1: attempt power cycle
[  333.222851][ T5908] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  333.272448][ T5908] usb 2-1: device descriptor read/8, error -71
[  333.543796][    T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  333.544337][ T5908] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  333.602547][ T5908] usb 2-1: device descriptor read/8, error -71
[  333.723589][ T5908] usb usb2-port1: unable to enumerate USB device
[  333.731001][    T9] usb 5-1: Using ep0 maxpacket: 8
[  333.849500][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  333.928348][    T9] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  334.008668][ T5830] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -71
[  334.019298][   T30] audit: type=1326 audit(1764449320.554:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9346 comm="syz.0.963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7172f8f749 code=0x0
[  334.047140][    T9] usb 5-1: Product: syz
[  334.070776][    T9] usb 5-1: Manufacturer: syz
[  334.075422][    T9] usb 5-1: SerialNumber: syz
[  334.082595][ T5830] usb 4-1: USB disconnect, device number 62
[  334.102321][ T5908] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  334.132587][    T9] usb 5-1: config 0 descriptor??
[  334.226577][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  334.281871][ T5908] usb 3-1: Using ep0 maxpacket: 8
[  334.293632][ T5908] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  334.303975][ T5908] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  334.320836][ T5908] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  334.338285][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  334.352874][ T5908] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  334.362244][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.370357][ T5908] usb 3-1: Product: syz
[  334.376535][ T5908] usb 3-1: Manufacturer: syz
[  334.381529][ T5908] usb 3-1: SerialNumber: syz
[  334.389374][ T5908] usb 3-1: config 0 descriptor??
[  334.402426][ T5908] hub 3-1:0.0: bad descriptor, ignoring hub
[  334.541904][ T5908] hub 3-1:0.0: probe with driver hub failed with error -5
[  334.628433][    T9] gspca_zc3xx: reg_w_i err -71
[  334.663113][    T9] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  334.704917][    T9] usb 5-1: USB disconnect, device number 69
[  335.090866][ T5830] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  335.251062][ T5830] usb 2-1: Using ep0 maxpacket: 8
[  335.274451][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  335.303418][ T5830] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  335.359039][ T5830] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  335.368564][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.402484][ T5830] usb 2-1: Product: syz
[  335.433259][ T5830] usb 2-1: Manufacturer: syz
[  335.439472][ T5830] usb 2-1: SerialNumber: syz
[  335.451876][ T5830] usb 2-1: config 0 descriptor??
[  335.689902][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.718976][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.789872][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.818840][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.934706][ T5830] usb 2-1: USB disconnect, device number 72
[  336.641645][    T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  336.760538][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.971'.
[  336.832985][    T9] usb 2-1: Using ep0 maxpacket: 32
[  336.878950][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.920614][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.932004][    T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  336.941864][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.957097][    T9] usb 2-1: config 0 descriptor??
[  337.021711][ T5830] usb 3-1: USB disconnect, device number 56
[  337.194692][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.212124][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.440621][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  337.448041][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  337.460049][    T9] usb 2-1: USB disconnect, device number 73
[  337.551873][   T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  337.691940][   T24] usb 3-1: device descriptor read/64, error -71
[  337.819600][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.977'.
[  337.950922][   T24] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  337.982208][    T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  338.094456][   T24] usb 3-1: device descriptor read/64, error -71
[  338.145397][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30
[  338.161757][    T9] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.171772][ T9412] mac80211_hwsim hwsim9 è: renamed from wlan1 (while UP)
[  338.185977][    T9] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.196285][    T9] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127
[  338.210257][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  338.217033][    T9] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  338.226182][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.226847][   T24] usb usb3-port1: attempt power cycle
[  338.243218][    T9] usb 4-1: config 0 descriptor??
[  338.262009][    T9] hub 4-1:0.0: USB hub found
[  338.308625][ T9414] tipc: Started in network mode
[  338.314300][ T9414] tipc: Node identity 82724477b21a, cluster identity 4711
[  338.324841][ T9414] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  338.610870][   T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  338.642082][   T24] usb 3-1: device descriptor read/8, error -71
[  338.699541][    T9] hub 4-1:0.0: 4 ports detected
[  338.854906][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.878626][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.886617][   T24] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  338.896531][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.913566][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.922421][   T24] usb 3-1: device descriptor read/8, error -71
[  338.933054][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.945427][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.955116][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.975774][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.023830][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.035436][   T24] usb usb3-port1: unable to enumerate USB device
[  339.048742][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.091846][ T5922] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[  339.259939][ T5922] usb 5-1: device descriptor read/all, error -71
[  339.457953][ T5908] tipc: Node number set to 812139639
[  339.626490][    T9] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  339.634165][    T9] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  339.661517][    T9] usb 4-1: USB disconnect, device number 63
[  339.947650][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'.
[  340.456686][ T9433] netlink: 80 bytes leftover after parsing attributes in process `syz.2.986'.
[  340.690966][ T5922] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  340.731166][    T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  340.871976][ T5922] usb 2-1: Using ep0 maxpacket: 32
[  340.889309][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.903468][    T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  340.906941][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.940881][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.950842][ T5922] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  340.964642][    T9] usb 4-1: config 0 descriptor??
[  340.994730][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  341.002542][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.032237][ T5922] usb 2-1: config 0 descriptor??
[  341.269371][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.281475][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.400127][    T9] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  341.499336][ T5922] usbhid 2-1:0.0: can't add hid device: -71
[  341.513861][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  341.547793][ T5922] usb 2-1: USB disconnect, device number 74
[  341.807688][    T9] gspca_cpia1: usb_control_msg 02, error -71
[  341.819839][    T9] cpia1 4-1:0.0: only firmware version 1 is supported (got: 183)
[  341.841946][    T9] usb 4-1: USB disconnect, device number 64
[  342.254522][ T9462] ip6gretap0: entered promiscuous mode
[  342.260500][ T9462] macsec1: entered promiscuous mode
[  342.293344][ T9462] ip6gretap0: left promiscuous mode
[  343.042814][ T9485] netlink: 96 bytes leftover after parsing attributes in process `syz.4.999'.
[  343.067910][ T9485] syzkaller0: entered promiscuous mode
[  343.075477][ T9485] syzkaller0: entered allmulticast mode
[  343.115901][ T9485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.125525][ T9486] netlink: 96 bytes leftover after parsing attributes in process `syz.4.999'.
[  343.148626][ T9483] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  343.170253][ T9486] tipc: Resetting bearer <eth:syzkaller0>
[  343.219717][ T9486] tipc: Disabling bearer <eth:syzkaller0>
[  343.428149][   T24] hid_parser_main: 73 callbacks suppressed
[  343.428168][   T24] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  343.462445][ T9494] FAULT_INJECTION: forcing a failure.
[  343.462445][ T9494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.479563][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.0.1002 Not tainted syzkaller #0 PREEMPT(full) 
[  343.479585][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  343.479603][ T9494] Call Trace:
[  343.479612][ T9494]  <TASK>
[  343.479620][ T9494]  dump_stack_lvl+0x189/0x250
[  343.479646][ T9494]  ? __pfx____ratelimit+0x10/0x10
[  343.479669][ T9494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.479689][ T9494]  ? __pfx__printk+0x10/0x10
[  343.479703][ T9494]  ? lock_acquire+0x175/0x360
[  343.479727][ T9494]  should_fail_ex+0x414/0x560
[  343.479757][ T9494]  copy_fpstate_to_sigframe+0xa8d/0xce0
[  343.479783][ T9494]  ? copy_fpstate_to_sigframe+0x181/0xce0
[  343.479810][ T9494]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  343.479832][ T9494]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  343.479863][ T9494]  ? __lock_acquire+0xab9/0xd20
[  343.479882][ T9494]  ? fpu__alloc_mathframe+0xad/0x130
[  343.479906][ T9494]  get_sigframe+0x58d/0x7d0
[  343.479932][ T9494]  ? __pfx_get_sigframe+0x10/0x10
[  343.479957][ T9494]  ? posixtimer_deliver_signal+0x305/0x410
[  343.479986][ T9494]  x64_setup_rt_frame+0x15b/0xd40
[  343.480014][ T9494]  ? lockdep_hardirqs_on+0x9c/0x150
[  343.480036][ T9494]  ? _raw_spin_unlock_irq+0x2e/0x50
[  343.480056][ T9494]  ? get_signal+0x1150/0x1340
[  343.480077][ T9494]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  343.480102][ T9494]  ? arch_do_signal_or_restart+0x385/0x790
[  343.480128][ T9494]  arch_do_signal_or_restart+0x3f1/0x790
[  343.480152][ T9494]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  343.480188][ T9494]  ? exit_to_user_mode_loop+0x40/0x130
[  343.480204][ T9494]  exit_to_user_mode_loop+0x72/0x130
[  343.480219][ T9494]  do_syscall_64+0x2bd/0xfa0
[  343.480242][ T9494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.480256][ T9494]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  343.480271][ T9494]  ? clear_bhb_loop+0x60/0xb0
[  343.480289][ T9494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.480304][ T9494] RIP: 0033:0x7f7172f8e1ff
[  343.480318][ T9494] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  343.480330][ T9494] RSP: 002b:00007f7173e00030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  343.480346][ T9494] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00007f7172f8e1ff
[  343.480355][ T9494] RDX: 0000000000000001 RSI: 00007f7173e00090 RDI: 0000000000000003
[  343.480364][ T9494] RBP: 00007f7173e00090 R08: 0000000000000000 R09: 00007f7173dffdf7
[  343.480374][ T9494] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  343.480383][ T9494] R13: 00007f71731e6038 R14: 00007f71731e5fa0 R15: 00007f717330fa28
[  343.480406][ T9494]  </TASK>
[  343.743308][   T24] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  343.752116][   T24] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  343.803465][   T24] hid-generic 0003:0004:0000.0017: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  344.244734][ T9500] fido_id[9500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  344.290780][ T5830] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  344.487129][ T5830] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  344.498819][ T5830] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  344.509328][ T5830] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d
[  344.519390][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.549994][ T9502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  344.583231][ T5830] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  344.776790][ T9502] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  346.107547][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'.
[  346.441516][ T5922] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  346.695821][ T5922] usb 3-1: Using ep0 maxpacket: 16
[  346.748048][ T5922] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02
[  346.759058][ T5922] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3
[  346.767391][ T5922] usb 3-1: Manufacturer: syz
[  346.789375][ T5922] usb 3-1: SerialNumber: syz
[  346.832596][ T5922] usb 3-1: config 0 descriptor??
[  346.889458][ T5922] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  346.908909][ T5922] usb 3-1: Detected SIO
[  346.980951][ T5922] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  347.120347][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.138879][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.448666][ T5830] usb 4-1: USB disconnect, device number 65
[  347.733650][ T9554] loop2: detected capacity change from 0 to 7
[  347.782453][ T9554] Dev loop2: unable to read RDB block 7
[  347.788330][ T9554]  loop2: unable to read partition table
[  347.827162][ T9554] loop2: partition table beyond EOD, truncated
[  347.927544][ T9554] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  348.198439][ T9560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  348.471440][ T9563] loop2: detected capacity change from 0 to 7
[  348.482613][ T5886]  loop2:
[  348.485875][ T5886] loop2: partition table partially beyond EOD, truncated
[  348.498012][ T9563]  loop2:
[  348.501506][ T9563] loop2: partition table partially beyond EOD, truncated
[  348.737955][ T9567] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  348.858276][  T979] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  348.960574][ T9569] netlink: 'syz.4.1024': attribute type 4 has an invalid length.
[  349.032894][  T979] usb 2-1: Using ep0 maxpacket: 32
[  349.044876][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1024'.
[  349.090208][   T24] usb 3-1: USB disconnect, device number 61
[  349.112303][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  349.182541][   T24] ftdi_sio 3-1:0.0: device disconnected
[  349.225400][ T9569] lo: entered promiscuous mode
[  349.252094][ T9575] netlink: 'syz.2.1025': attribute type 13 has an invalid length.
[  349.301823][  T979] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  349.306156][ T9574] random: crng reseeded on system resumption
[  349.606063][  T979] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  349.635376][ T5922] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  349.661760][  T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  349.661792][  T979] usb 2-1: config 1 has no interface number 0
[  349.661840][  T979] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  349.750423][  T979] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  349.778225][  T979] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  349.801637][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.815187][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  349.833350][  T979] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  349.836577][   T30] audit: type=1326 audit(1764449336.394:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.4.1027" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f3c075865e7 code=0x0
[  349.883185][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.915368][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.938690][ T5922] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  349.968282][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.994613][ T5922] usb 4-1: config 0 descriptor??
[  350.041938][  T979] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  350.201744][   T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  350.217929][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.241951][ T5908] usb 2-1: USB disconnect, device number 75
[  350.249297][ T5908] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  350.290887][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.431775][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  350.461590][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  350.483166][   T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  350.514022][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  350.533564][   T24] usb 3-1: SerialNumber: syz
[  350.688276][ T5922] usbhid 4-1:0.0: can't add hid device: -71
[  350.704696][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  350.749186][ T5922] usb 4-1: USB disconnect, device number 66
[  350.827515][   T24] usb 3-1: 0:2 : does not exist
[  350.842801][   T24] usb 3-1: unit 5: unexpected type 0x0a
[  350.860480][ T9589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1029'.
[  350.895487][   T24] usb 3-1: USB disconnect, device number 62
[  350.948589][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  351.299818][ T9606] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32)
[  351.535733][ T9614] loop2: detected capacity change from 0 to 7
[  351.572002][ T9614]  loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  351.602068][ T9614] loop2: p1 start 3018249949 is beyond EOD, truncated
[  351.640534][ T9614] loop2: p2 start 1879129398 is beyond EOD, truncated
[  351.657867][ T9614] loop2: p3 start 4093120540 is beyond EOD, truncated
[  351.687584][ T9614] loop2: p4 start 2524654898 is beyond EOD, truncated
[  351.715632][ T9614] loop2: p5 start 674059 is beyond EOD, truncated
[  351.743060][ T9614] loop2: p6 start 57445 is beyond EOD, truncated
[  351.769331][ T9614] loop2: p7 start 1646166690 is beyond EOD, truncated
[  351.777922][ T9614] loop2: p8 start 3277892638 is beyond EOD, truncated
[  351.953792][ T9614] loop2: p9 start 4163259941 is beyond EOD, truncated
[  351.970211][ T5199]  loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  351.977110][ T5199] loop2: p1 start 3018249949 is beyond EOD, truncated
[  351.997134][ T5199] loop2: p2 start 1879129398 is beyond EOD, truncated
[  352.017477][ T5199] loop2: p3 start 4093120540 is beyond EOD, truncated
[  352.147840][ T5199] loop2: p4 start 2524654898 is beyond EOD, truncated
[  352.288086][ T5199] loop2: p5 start 674059 is beyond EOD, truncated
[  352.294704][ T5199] loop2: p6 start 57445 is beyond EOD, truncated
[  352.312990][ T5199] loop2: p7 start 1646166690 is beyond EOD, truncated
[  352.322881][ T5199] loop2: p8 start 3277892638 is beyond EOD, truncated
[  352.329833][ T5199] loop2: p9 start 4163259941 is beyond EOD, truncated
[  353.361591][ T5830] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  353.472424][ T9645] fuse: Bad value for 'user_id'
[  353.499597][ T9645] fuse: Bad value for 'user_id'
[  353.522019][ T5830] usb 5-1: Using ep0 maxpacket: 32
[  353.534851][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.556630][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.588337][ T5830] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  353.603630][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.633259][ T5830] usb 5-1: config 0 descriptor??
[  353.845217][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.863149][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.093925][ T5830] usbhid 5-1:0.0: can't add hid device: -71
[  354.112339][ T5830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  354.157301][ T5830] usb 5-1: USB disconnect, device number 72
[  354.243576][ T9660] netlink: 'syz.3.1050': attribute type 2 has an invalid length.
[  355.443890][ T9672] input: syz0 as /devices/virtual/input/input45
[  356.078851][ T9679] syzkaller1: entered promiscuous mode
[  356.108441][ T9679] syzkaller1: entered allmulticast mode
[  356.285175][ T9679] netlink: 'syz.0.1057': attribute type 2 has an invalid length.
[  356.348590][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'.
[  356.378186][ T9679] af_packet: tpacket_rcv: packet too big, clamped from 3960 to 3942. macoff=106
[  356.682194][ T9685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  357.591702][ T5830] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  357.921247][ T5830] usb 2-1: Using ep0 maxpacket: 16
[  358.152588][ T5830] usb 2-1: config 2 has an invalid interface number: 187 but max is 1
[  358.180741][ T5830] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  358.200179][ T5830] usb 2-1: config 2 has an invalid interface number: 2 but max is 1
[  358.230733][ T5830] usb 2-1: config 2 has no interface number 0
[  358.241737][ T5830] usb 2-1: config 2 has no interface number 1
[  358.265470][ T5830] usb 2-1: config 2 interface 187 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  358.310727][ T5830] usb 2-1: config 2 interface 187 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  358.369657][ T5830] usb 2-1: config 2 interface 187 altsetting 5 endpoint 0x5 has invalid maxpacket 26528, setting to 1024
[  358.429519][ T5830] usb 2-1: config 2 interface 187 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1024
[  358.449981][ T5830] usb 2-1: config 2 interface 187 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  358.490562][ T5830] usb 2-1: config 2 interface 187 altsetting 5 has a duplicate endpoint with address 0x5, skipping
[  358.547555][ T5830] usb 2-1: config 2 interface 187 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  358.594767][ T5830] usb 2-1: config 2 interface 187 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  358.655641][ T5830] usb 2-1: config 2 interface 187 altsetting 5 has a duplicate endpoint with address 0xB, skipping
[  358.681869][ T9705] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1063'.
[  358.710951][ T5830] usb 2-1: config 2 interface 187 altsetting 5 endpoint 0xA has an invalid bInterval 0, changing to 7
[  358.740951][ T5830] usb 2-1: config 2 interface 187 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  358.770746][ T5830] usb 2-1: config 2 interface 2 altsetting 105 has a duplicate endpoint with address 0xB, skipping
[  358.801026][ T5830] usb 2-1: config 2 interface 2 altsetting 105 has an invalid descriptor for endpoint zero, skipping
[  358.860754][ T5830] usb 2-1: config 2 interface 2 altsetting 105 endpoint 0xD has an invalid bInterval 254, changing to 11
[  358.883252][ T9707] vim2m vim2m.0: vidioc_s_fmt queue busy
[  358.933454][ T5830] usb 2-1: config 2 interface 2 altsetting 105 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  358.951922][ T5830] usb 2-1: config 2 interface 2 altsetting 105 has a duplicate endpoint with address 0xE, skipping
[  358.973693][ T5830] usb 2-1: config 2 interface 2 altsetting 105 has an endpoint descriptor with address 0x54, changing to 0x4
[  358.990882][ T5830] usb 2-1: config 2 interface 2 altsetting 105 endpoint 0x4 has an invalid bInterval 94, changing to 7
[  359.003938][ T5830] usb 2-1: config 2 interface 2 altsetting 105 endpoint 0x4 has invalid maxpacket 58668, setting to 1024
[  359.017164][ T5830] usb 2-1: config 2 interface 2 altsetting 105 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  359.033086][ T5830] usb 2-1: config 2 interface 187 has no altsetting 0
[  359.050993][ T5830] usb 2-1: config 2 interface 2 has no altsetting 0
[  359.116738][ T5830] usb 2-1: New USB device found, idVendor=1199, idProduct=9002, bcdDevice=c0.43
[  359.142419][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.171467][ T5830] usb 2-1: Product: а
[  359.194929][ T5830] usb 2-1: Manufacturer: 中↣꥔孇䳜ꤺ⣉㱎禊巺弿䛭첦Ҭἕ�렆炫�莩࣑蔱蛆�鷄䪷⾲꒼�椻�帻�鞄퓎딓₯ꚡ细胱䶪ጺ鄹笆䱘矰�΅ꌚ䞃紼郟贼떹�秜厧뙫傟�컫�菉ﶪ觿䕴戣륄䷣ᢡ芖㻆⢓㒕㧸逦ڣꙋ᳽⣢訩挪Ծ˛滣ꆆ幒뒽➦�喂奰붧ᓺ氠欄垇�ᘖ㎎炀皣Ϟ쥕懈鳀姄片蜨溞ីÔ로唷
[  359.325094][ T5830] usb 2-1: SerialNumber: syz
[  359.376307][ T9691] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  359.861598][ T5830] usb 2-1: USB disconnect, device number 76
[  362.821061][ T5908] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  362.993126][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  363.050831][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  363.089934][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  363.122899][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  363.148339][ T5908] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  363.170050][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.195099][ T5908] usb 4-1: config 0 descriptor??
[  363.377345][ T9753] ip6gretap0: entered promiscuous mode
[  363.392346][ T9753] macsec1: entered promiscuous mode
[  363.415012][ T9753] ip6gretap0: left promiscuous mode
[  363.657143][ T5908] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  363.716053][ T5908] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  365.371558][  T979] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  365.540879][  T979] usb 2-1: Using ep0 maxpacket: 8
[  365.596549][  T979] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  365.708099][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.784084][  T979] usb 2-1: Product: syz
[  365.840160][  T979] usb 2-1: Manufacturer: syz
[  365.862317][  T979] usb 2-1: SerialNumber: syz
[  365.938330][  T979] usb 2-1: config 0 descriptor??
[  365.963607][  T979] gspca_main: se401-2.14.0 probing 047d:5003
[  365.991985][ T5950] usb 4-1: reset high-speed USB device number 67 using dummy_hcd
[  366.056589][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1089'.
[  366.172924][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.229537][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.289053][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.326441][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.362055][   T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  366.369903][ T9794] ip6gretap0: entered promiscuous mode
[  366.376239][ T9794] macsec1: entered promiscuous mode
[  366.421511][ T9794] ip6gretap0: left promiscuous mode
[  366.541863][   T24] usb 3-1: device descriptor read/64, error -71
[  366.812490][   T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  366.881969][ T5907] usb 4-1: USB disconnect, device number 67
[  366.971551][   T24] usb 3-1: device descriptor read/64, error -71
[  367.099003][   T24] usb usb3-port1: attempt power cycle
[  367.193137][  T979] gspca_se401: read req failed req 0x06 error -19
[  367.280810][  T979] usb 2-1: USB disconnect, device number 77
[  367.311392][ T9809] xt_limit: Overflow, try lower: 2/0
[  367.531112][ T5907] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  367.550883][   T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  367.577948][   T24] usb 3-1: device descriptor read/8, error -71
[  367.730780][  T979] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  367.780782][ T5907] usb 4-1: Using ep0 maxpacket: 32
[  367.821023][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[  367.841340][   T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  367.863063][   T24] usb 3-1: device descriptor read/8, error -71
[  367.951416][ T5907] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  367.981410][   T24] usb usb3-port1: unable to enumerate USB device
[  367.998011][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.040753][  T979] usb 2-1: Using ep0 maxpacket: 8
[  368.047757][  T979] usb 2-1: config 2 has an invalid interface number: 241 but max is 0
[  368.058794][ T5907] usb 4-1: Product: syz
[  368.082598][ T5907] usb 4-1: Manufacturer: syz
[  368.163655][  T979] usb 2-1: config 2 has no interface number 0
[  368.175320][ T5907] usb 4-1: SerialNumber: syz
[  368.193555][  T979] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  368.234849][ T5907] usb 4-1: config 0 descriptor??
[  368.256853][ T9806] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  368.276680][  T979] usb 2-1: config 2 interface 241 has no altsetting 0
[  368.292559][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  368.309811][  T979] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  368.394729][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.612735][ T9806] xt_CT: You must specify a L4 protocol and not use inversions on it
[  368.624212][  T979] usb 2-1: Product: syz
[  368.631135][  T979] usb 2-1: Manufacturer: syz
[  368.644564][  T979] usb 2-1: SerialNumber: syz
[  368.653695][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.697005][  T979] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected
[  368.708435][  T979] ti_usb_3410_5052 2-1:2.241: missing endpoints
[  368.907900][ T9807] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  368.947807][ T9807] macsec1: entered promiscuous mode
[  368.965214][ T9807] macsec1: entered allmulticast mode
[  368.982282][ T9807] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  369.043063][ T9807] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  369.057986][ T9807] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  369.218534][  T979] usb 2-1: USB disconnect, device number 78
[  370.173531][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'.
[  370.185173][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'.
[  370.636227][ T9835] rtc_cmos 00:00: Alarms can be up to one day in the future
[  371.333014][ T5907] usb 4-1: USB disconnect, device number 68
[  371.541275][ T9844] ip6gretap0: entered promiscuous mode
[  371.609266][ T9844] macsec1: entered promiscuous mode
[  371.639141][ T9844] ip6gretap0: left promiscuous mode
[  371.981753][ T5907] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  372.144531][ T5907] usb 4-1: device descriptor read/64, error -71
[  372.589377][ T5907] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  372.731247][ T5907] usb 4-1: device descriptor read/64, error -71
[  372.896841][ T5907] usb usb4-port1: attempt power cycle
[  373.250776][ T5907] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  373.281518][ T5907] usb 4-1: device descriptor read/8, error -71
[  373.520771][ T5907] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  373.562819][ T5907] usb 4-1: device descriptor read/8, error -71
[  373.671174][ T5907] usb usb4-port1: unable to enumerate USB device
[  375.006730][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'.
[  376.008073][   T30] audit: type=1326 audit(1764449362.564:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9905 comm="syz.3.1121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f785458f749 code=0x0
[  376.030124][    C0] vkms_vblank_simulate: vblank timer overrun
[  376.100813][  T979] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  376.230825][  T979] usb 2-1: device descriptor read/64, error -71
[  376.471648][  T979] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  376.545239][ T9908] loop6: detected capacity change from 0 to 524279808
[  376.610849][  T979] usb 2-1: device descriptor read/64, error -71
[  376.641803][ T9910] loop6: detected capacity change from 524279808 to 1
[  376.678986][ T9910] Dev loop6: unable to read RDB block 1
[  376.697165][ T9910]  loop6: unable to read partition table
[  376.721990][  T979] usb usb2-port1: attempt power cycle
[  376.756072][ T9910] loop6: partition table beyond EOD, truncated
[  376.806774][ T9910] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï	) failed (rc=-5)
[  376.926947][ T5199] Dev loop6: unable to read RDB block 1
[  376.932742][ T5199]  loop6: unable to read partition table
[  376.939356][ T5199] loop6: partition table beyond EOD, truncated
[  377.270353][  T979] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  377.551549][  T979] usb 2-1: device descriptor read/8, error -71
[  377.820885][  T979] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  377.880393][  T979] usb 2-1: device descriptor read/8, error -71
[  378.293387][  T979] usb usb2-port1: unable to enumerate USB device
[  378.480968][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[  378.537556][ T9935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1126'.
[  380.140782][   T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  380.341435][   T24] usb 2-1: Using ep0 maxpacket: 8
[  380.352832][   T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  380.400353][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.440718][   T24] usb 2-1: Product: syz
[  380.462148][   T24] usb 2-1: Manufacturer: syz
[  380.480599][   T24] usb 2-1: SerialNumber: syz
[  380.540483][   T24] usb 2-1: config 0 descriptor??
[  380.582977][   T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  380.616501][   T24] usb 2-1: setting power ON
[  380.626591][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  380.669542][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  380.720336][   T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  380.740291][   T24] usb 2-1: media controller created
[  380.792632][ T9956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.821778][ T9956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.872276][  T979] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  380.875814][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  380.987432][ T9970] fuse: Unknown parameter 'œ¤§.ƒý™¿ÌŽ*'
[  381.052845][   T24] usb 2-1: selecting invalid altsetting 6
[  381.084903][   T24] usb 2-1: digital interface selection failed (-22)
[  381.097290][ T9972] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1137'.
[  381.110760][  T979] usb 4-1: Using ep0 maxpacket: 32
[  381.114805][   T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  381.126893][   T24] usb 2-1: setting power OFF
[  381.140484][  T979] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  381.145414][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  381.159531][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  381.169650][   T24] (NULL device *): no alternate interface
[  381.174231][  T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.231546][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  381.280742][  T979] usb 4-1: config 0 has no interface number 0
[  381.322132][  T979] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  381.348694][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.389200][  T979] usb 4-1: Product: syz
[  381.396812][  T979] usb 4-1: Manufacturer: syz
[  381.400148][ T9974] bridge2: entered allmulticast mode
[  381.412508][  T979] usb 4-1: SerialNumber: syz
[  381.457540][  T979] usb 4-1: config 0 descriptor??
[  381.474834][  T979] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  381.660756][   T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  381.685266][  T979] usb 4-1: qt2_setup_urbs - submit read urb failed -8
[  381.721017][  T979] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8
[  382.005803][  T979] usb 4-1: USB disconnect, device number 73
[  382.103217][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  382.340897][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  382.360840][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  382.369949][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.429014][ T9977] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  382.458107][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  382.675073][   T24] usb 3-1: USB disconnect, device number 67
[  382.915993][  T979] usb 2-1: USB disconnect, device number 83
[  383.402653][ T9996] loop2: detected capacity change from 0 to 7
[  383.433150][ T5850]  loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  383.449862][ T5850] loop2: p1 start 3018249949 is beyond EOD, truncated
[  383.481383][ T5850] loop2: p2 start 1879129398 is beyond EOD, truncated
[  383.490515][ T5850] loop2: p3 start 4093120540 is beyond EOD, truncated
[  383.508580][ T5850] loop2: p4 start 2524654898 is beyond EOD, truncated
[  383.528852][ T5850] loop2: p5 start 674059 is beyond EOD, truncated
[  383.542789][ T5850] loop2: p6 start 57445 is beyond EOD, truncated
[  383.566161][ T5850] loop2: p7 start 1646166690 is beyond EOD, truncated
[  383.580493][ T5850] loop2: p8 start 3277892638 is beyond EOD, truncated
[  383.587917][ T5850] loop2: p9 start 4163259941 is beyond EOD, truncated
[  383.599341][ T9996]  loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  383.621237][ T9996] loop2: p1 start 3018249949 is beyond EOD, truncated
[  383.641118][ T9996] loop2: p2 start 1879129398 is beyond EOD, truncated
[  383.650337][ T9996] loop2: p3 start 4093120540 is beyond EOD, truncated
[  383.662987][ T9996] loop2: p4 start 2524654898 is beyond EOD, truncated
[  383.670590][ T9996] loop2: p5 start 674059 is beyond EOD, truncated
[  383.691371][ T9996] loop2: p6 start 57445 is beyond EOD, truncated
[  383.697867][ T9996] loop2: p7 start 1646166690 is beyond EOD, truncated
[  383.705764][ T9996] loop2: p8 start 3277892638 is beyond EOD, truncated
[  383.712881][ T9996] loop2: p9 start 4163259941 is beyond EOD, truncated
[  383.729631][T10001] bond1: option mode: invalid value (255)
[  383.765233][T10001] bond1 (unregistering): Released all slaves
[  383.830364][T10005] bridge0: port 1(hsr0) entered blocking state
[  383.838739][T10005] bridge0: port 1(hsr0) entered disabled state
[  383.860898][T10005] hsr0: entered allmulticast mode
[  383.876096][T10005] hsr_slave_0: entered allmulticast mode
[  383.883022][T10008] openvswitch: netlink: Duplicate or invalid key (type 0).
[  383.890586][T10005] hsr_slave_1: entered allmulticast mode
[  383.898987][T10008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.911548][T10005] hsr0: entered promiscuous mode
[  384.028772][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  384.036211][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  384.143635][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0809
[  384.370878][  T979] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  384.445970][T10026] vim2m vim2m.0: vidioc_s_fmt queue busy
[  384.495807][T10032] fuse: Invalid uid '0x0000000000000003'
[  384.521541][T10032] input: syz0 as /devices/virtual/input/input53
[  384.571563][  T979] usb 4-1: Using ep0 maxpacket: 8
[  384.582055][  T979] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  384.607267][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.619920][  T979] usb 4-1: Product: syz
[  384.625250][  T979] usb 4-1: Manufacturer: syz
[  384.630217][  T979] usb 4-1: SerialNumber: syz
[  384.646616][  T979] usb 4-1: config 0 descriptor??
[  384.955200][T10019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  385.028556][  T979] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  385.802522][T10044] syz.2.1157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  386.729035][T10046] netlink: 'syz.4.1158': attribute type 3 has an invalid length.
[  386.969607][T10051] loop2: detected capacity change from 0 to 7
[  386.992785][T10051] Dev loop2: unable to read RDB block 7
[  387.006566][T10051]  loop2: unable to read partition table
[  387.021907][T10051] loop2: partition table beyond EOD, truncated
[  387.045865][T10051] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  387.615677][  T979] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  387.750745][ T5907] usb 3-1: new low-speed USB device number 68 using dummy_hcd
[  387.933560][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short
[  387.943126][ T5907] usb 3-1: config index 0 descriptor too short (expected 33540, got 36)
[  387.955031][ T5907] usb 3-1: config 108 has too many interfaces: 60, using maximum allowed: 32
[  387.970523][ T5907] usb 3-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config
[  387.983667][   T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  388.005195][ T5907] usb 3-1: config 108 has 1 interface, different from the descriptor's value: 60
[  388.046862][ T5907] usb 3-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  388.076536][ T5907] usb 3-1: config 108 interface 0 has no altsetting 0
[  388.093039][ T5907] usb 3-1: string descriptor 0 read error: -22
[  388.099434][ T5907] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  388.109678][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2
[  388.144661][ T5907] usb 4-1: USB disconnect, device number 74
[  388.202488][   T24] usb 5-1: Using ep0 maxpacket: 8
[  388.218053][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  388.239631][   T24] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  388.294163][T10076] input: syz1 as /devices/virtual/input/input55
[  388.313992][T10076] binder: 10067:10076 ioctl c0306201 0 returned -14
[  388.375778][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'.
[  388.392138][   T24] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  388.404578][   T24] usb 5-1: Product: syz
[  388.411484][   T24] usb 5-1: Manufacturer: syz
[  388.450325][   T24] usb 5-1: SerialNumber: syz
[  388.652110][ T5907] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  388.891913][   T24] usb 5-1: palm_os_3_probe - error -110 getting connection information
[  388.900272][   T24] visor 5-1:1.0: probe with driver visor failed with error -110
[  389.269654][ T5907] usb 4-1: device descriptor read/64, error -71
[  389.631484][ T5907] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  389.781722][ T5907] usb 4-1: device descriptor read/64, error -71
[  389.894710][ T5907] usb usb4-port1: attempt power cycle
[  390.156807][T10079] syz.1.1166 (10079): drop_caches: 2
[  390.242133][ T5907] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  390.271575][ T5907] usb 4-1: device descriptor read/8, error -71
[  390.512695][ T5907] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  390.573365][ T5907] usb 4-1: device descriptor read/8, error -71
[  390.672918][ T5950] usb 3-1: USB disconnect, device number 68
[  390.691916][ T5907] usb usb4-port1: unable to enumerate USB device
[  390.799182][ T5907] usb 5-1: USB disconnect, device number 73
[  391.063430][T10096] loop2: detected capacity change from 0 to 7
[  391.077744][T10096] Dev loop2: unable to read RDB block 7
[  391.091522][T10096]  loop2: unable to read partition table
[  391.101285][T10096] loop2: partition table beyond EOD, truncated
[  391.107633][T10096] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  391.303131][T10101] rtc_cmos 00:00: Alarms can be up to one day in the future
[  392.011232][ T5950] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  392.140787][ T5950] usb 5-1: device descriptor read/64, error -71
[  392.162862][ T5907] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  392.329369][ T5907] usb 2-1: Using ep0 maxpacket: 16
[  392.354484][ T5907] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  392.365907][ T5907] usb 2-1: config 0 has no interface number 0
[  392.382947][ T5907] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  392.396193][ T5950] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  392.417645][ T5907] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  392.462105][ T5907] usb 2-1: config 0 interface 41 has no altsetting 0
[  392.475352][ T5907] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  392.502200][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.515784][ T5907] usb 2-1: Product: syz
[  392.519999][ T5907] usb 2-1: Manufacturer: syz
[  392.541224][ T5907] usb 2-1: SerialNumber: syz
[  392.543222][T10114] dvmrp0: entered allmulticast mode
[  392.561895][ T5950] usb 5-1: device descriptor read/64, error -71
[  392.569296][ T5907] usb 2-1: config 0 descriptor??
[  392.594861][T10109] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  392.634976][T10109] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  392.661187][   T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  392.701839][ T5950] usb usb5-port1: attempt power cycle
[  392.827194][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  392.844657][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.858514][   T24] usb 3-1: Product: syz
[  392.866362][   T24] usb 3-1: Manufacturer: syz
[  392.871159][   T24] usb 3-1: SerialNumber: syz
[  392.899090][T10109] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  392.910105][T10109] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  393.062109][ T5950] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  393.092079][ T5950] usb 5-1: device descriptor read/8, error -71
[  393.301625][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  393.318747][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.331529][ T5950] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  393.358735][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.376002][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  393.382117][ T5950] usb 5-1: device descriptor read/8, error -71
[  393.402299][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.413035][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.426512][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.453212][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.462553][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.470239][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.493081][T10146] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  393.574446][ T5950] usb usb5-port1: unable to enumerate USB device
[  393.610344][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.669060][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.755396][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.800314][  T979] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0
[  393.903388][  T979] hid-generic 0003:0003:0000.0019: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  394.217971][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  394.279334][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  394.283066][T10149] fido_id[10149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  394.373338][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  394.419021][   T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  394.488719][   T24] usb 3-1: USB disconnect, device number 69
[  395.078526][   T30] audit: type=1326 audit(1764449381.634:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.153088][   T30] audit: type=1326 audit(1764449381.664:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.175621][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.261299][   T30] audit: type=1326 audit(1764449381.664:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.361747][   T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  395.376404][ T5922] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  395.417406][   T30] audit: type=1326 audit(1764449381.664:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.498740][   T30] audit: type=1326 audit(1764449381.664:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.550902][ T5922] usb 5-1: Using ep0 maxpacket: 32
[  395.560266][   T24] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  395.572027][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0
[  395.586009][ T5922] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  395.596544][   T30] audit: type=1326 audit(1764449381.664:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.621606][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204
[  395.621701][   T30] audit: type=1326 audit(1764449381.664:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.663635][   T30] audit: type=1326 audit(1764449381.664:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.687678][   T30] audit: type=1326 audit(1764449381.664:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.710314][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.728053][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  395.728199][   T30] audit: type=1326 audit(1764449381.664:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785458f749 code=0x7ffc0000
[  395.760471][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.779222][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.810778][ T5922] usb 5-1: Product: syz
[  395.816902][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.828243][ T5922] usb 5-1: config 0 descriptor??
[  395.965113][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  396.040910][   T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  396.050183][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.092601][   T24] usb 3-1: config 0 descriptor??
[  396.100824][ T5900] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  396.300868][ T5900] usb 4-1: device descriptor read/64, error -71
[  396.390928][ T5907] Error reading MAC address
[  396.450791][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.461892][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.519635][ T5907] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71
[  396.572238][ T5907] usb 2-1: USB disconnect, device number 84
[  396.588589][ T5900] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  396.592528][T10164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  396.602279][   T24] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.001A/input/input56
[  396.783160][ T5900] usb 4-1: device descriptor read/64, error -71
[  396.801961][   T24] uclogic 0003:28BD:0909.001A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0
[  396.835363][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.861020][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.884774][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.901800][ T5900] usb usb4-port1: attempt power cycle
[  396.903941][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.952581][  T979] usb 3-1: USB disconnect, device number 70
[  397.039776][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.070300][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.261498][ T5900] usb 4-1: new full-speed USB device number 81 using dummy_hcd
[  397.336202][ T5900] usb 4-1: device descriptor read/8, error -71
[  397.930241][ T5900] usb 4-1: new full-speed USB device number 82 using dummy_hcd
[  397.975293][ T5900] usb 4-1: device descriptor read/8, error -71
[  398.092802][ T5900] usb usb4-port1: unable to enumerate USB device
[  398.161954][ T5922] usbhid 5-1:0.0: can't add hid device: -71
[  398.168040][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  398.246653][ T5922] usb 5-1: USB disconnect, device number 78
[  398.397428][T10192] syzkaller0: entered promiscuous mode
[  398.404266][T10192] syzkaller0: entered allmulticast mode
[  398.799007][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'.
[  398.901551][T10209] netlink: 'syz.3.1199': attribute type 21 has an invalid length.
[  398.937909][T10209] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1199'.
[  398.966198][T10209] netlink: 'syz.3.1199': attribute type 5 has an invalid length.
[  398.981672][T10209] netlink: 'syz.3.1199': attribute type 6 has an invalid length.
[  398.995264][T10209] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1199'.
[  399.740837][ T5907] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  399.890761][ T5900] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  399.890977][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  399.939654][ T5907] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  399.955681][ T5907] usb 5-1: config 2 has no interface number 0
[  399.965562][ T5907] usb 5-1: config 2 interface 88 has no altsetting 0
[  399.976577][ T5907] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  399.990872][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.002904][ T5907] usb 5-1: Product: syz
[  400.040925][ T5907] usb 5-1: Manufacturer: syz
[  400.045592][ T5907] usb 5-1: SerialNumber: syz
[  400.125393][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  400.220955][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  400.364692][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  400.498770][ T5900] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  400.519180][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.539756][ T5900] usb 4-1: Product: syz
[  400.556279][ T5900] usb 4-1: Manufacturer: syz
[  400.581548][ T5900] usb 4-1: SerialNumber: syz
[  400.607627][ T5900] usb 4-1: config 0 descriptor??
[  400.675048][ T5908] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  400.717404][ T5900] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  400.730746][ T5900] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  400.992992][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.003609][ T5908] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  401.061320][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  401.072214][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  401.080313][ T5908] usb 3-1: SerialNumber: syz
[  401.128188][ T5908] usb 3-1: bad CDC descriptors
[  401.145396][ T5908] usb-storage 3-1:1.0: USB Mass Storage device detected
[  401.175796][ T5908] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  401.268808][T10238] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1208'.
[  401.335460][ T5900] em28xx 4-1:0.0: unknown em28xx chip ID (223)
[  401.342474][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.343003][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.385670][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.413532][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.461202][  T979] usb 3-1: USB disconnect, device number 71
[  401.708783][ T5907] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  401.721158][ T5907] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  401.741853][ T5907] asix 5-1:2.88: probe with driver asix failed with error -71
[  401.798208][ T5907] usb 5-1: USB disconnect, device number 79
[  402.460829][ T5900] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  402.470540][ T5900] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  402.493912][ T5900] em28xx 4-1:0.0: No AC97 audio processor
[  403.156387][T10266] ip6gretap0: entered promiscuous mode
[  403.181659][T10266] macsec1: entered promiscuous mode
[  403.194332][T10266] ip6gretap0: left promiscuous mode
[  403.245880][ T5900] usb 4-1: USB disconnect, device number 83
[  403.255314][ T5900] em28xx 4-1:0.0: Disconnecting em28xx
[  403.371551][ T5900] em28xx 4-1:0.0: Freeing device
[  403.529435][T10274] xt_l2tp: invalid flags combination: 4
[  403.627850][T10272] netlink: 'syz.2.1216': attribute type 10 has an invalid length.
[  404.045395][T10286] netlink: 'syz.1.1223': attribute type 4 has an invalid length.
[  404.063412][ T5950] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  404.076537][T10286] netlink: 'syz.1.1223': attribute type 4 has an invalid length.
[  404.085197][ T5900] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  404.151730][ T5908] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  404.231948][ T5950] usb 3-1: Using ep0 maxpacket: 32
[  404.263955][ T5950] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11
[  404.276582][ T5950] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  404.292259][ T5900] usb 4-1: Using ep0 maxpacket: 8
[  404.297850][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0
[  404.305406][ T5950] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  404.315420][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.322151][ T5900] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  404.333711][ T5950] usb 3-1: config 0 descriptor??
[  404.383744][ T5908] usb 5-1: Using ep0 maxpacket: 8
[  404.411668][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  404.475545][ T5908] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  404.531323][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  404.591697][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.599824][ T5908] usb 5-1: Product: syz
[  404.687151][ T5900] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  404.703910][ T5908] usb 5-1: Manufacturer: syz
[  404.708567][ T5908] usb 5-1: SerialNumber: syz
[  404.804543][ T5908] usb 5-1: config 0 descriptor??
[  404.826129][ T5900] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  404.850538][ T5908] gspca_main: se401-2.14.0 probing 047d:5003
[  404.862602][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.107282][ T5900] usb 4-1: GET_CAPABILITIES returned 0
[  405.125268][ T5900] usbtmc 4-1:16.0: can't read capabilities
[  405.327655][ T5900] usb 4-1: USB disconnect, device number 84
[  405.420246][T10299] loop7: detected capacity change from 0 to 16384
[  405.723871][T10303] ip6gretap0: entered promiscuous mode
[  405.747587][T10303] macsec1: entered promiscuous mode
[  405.761409][T10303] ip6gretap0: left promiscuous mode
[  405.794406][ T5908] gspca_se401: read req failed req 0x06 error -19
[  405.811288][ T5908] usb 5-1: USB disconnect, device number 80
[  405.821829][T10300] loop7: detected capacity change from 16384 to 0
[  406.144235][T10309] binder: 10305:10309 ioctl 4018620d 0 returned -22
[  406.371799][ T5908] usb 4-1: new low-speed USB device number 85 using dummy_hcd
[  406.412642][ T5900] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[  406.522592][ T5908] usb 4-1: device descriptor read/64, error -71
[  406.574132][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  406.604216][ T5950] usbhid 3-1:0.0: can't add hid device: -71
[  406.604742][T10277] [U] 
[  406.610442][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  406.621619][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  406.642476][ T5900] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  406.655782][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.680802][ T5900] usb 5-1: config 0 descriptor??
[  406.682835][ T5950] usb 3-1: USB disconnect, device number 72
[  406.699530][T10310] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  406.792575][ T5908] usb 4-1: new low-speed USB device number 86 using dummy_hcd
[  406.950845][ T5908] usb 4-1: device descriptor read/64, error -71
[  407.023965][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.035590][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.052382][ T5900] usbhid 5-1:0.0: can't add hid device: -71
[  407.054982][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.058665][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  407.078116][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.181420][ T5908] usb usb4-port1: attempt power cycle
[  407.224930][ T5900] usb 5-1: USB disconnect, device number 81
[  407.531832][ T5908] usb 4-1: new low-speed USB device number 87 using dummy_hcd
[  407.551458][ T5908] usb 4-1: device descriptor read/8, error -71
[  407.875747][ T5908] usb 4-1: new low-speed USB device number 88 using dummy_hcd
[  407.911567][ T5908] usb 4-1: device descriptor read/8, error -71
[  408.110866][ T5908] usb usb4-port1: unable to enumerate USB device
[  408.266731][  T979] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  408.470747][  T979] usb 3-1: Using ep0 maxpacket: 16
[  408.478643][  T979] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  408.500702][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  408.534405][  T979] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  408.544129][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.553191][  T979] usb 3-1: Product: syz
[  408.563342][  T979] usb 3-1: Manufacturer: syz
[  408.600969][  T979] usb 3-1: SerialNumber: syz
[  408.631230][  T979] usb 3-1: config 0 descriptor??
[  408.653774][  T979] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  408.663767][  T979] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  409.231087][ T5907] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  409.325679][  T979] em28xx 3-1:0.0: unknown em28xx chip ID (223)
[  409.491242][ T5907] usb 2-1: Using ep0 maxpacket: 8
[  409.504837][T10343] netlink: 'syz.3.1238': attribute type 10 has an invalid length.
[  409.520231][T10343] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.532108][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  409.543602][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  409.555904][ T5907] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  409.569330][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  409.744020][ T5907] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  409.783424][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  409.817093][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.919842][ T5907] usb 2-1: config 0 descriptor??
[  410.012646][T10339] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  410.411053][  T979] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  410.419894][  T979] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  410.427709][  T979] em28xx 3-1:0.0: No AC97 audio processor
[  410.450393][ T5900] usb 2-1: USB disconnect, device number 85
[  410.453499][ T5843] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  410.814005][T10347] ip6gretap0: entered promiscuous mode
[  410.824167][T10347] macsec1: entered promiscuous mode
[  410.866849][T10347] ip6gretap0: left promiscuous mode
[  411.081730][ T5950] usb 3-1: USB disconnect, device number 73
[  411.102629][ T5950] em28xx 3-1:0.0: Disconnecting em28xx
[  411.161607][ T5950] em28xx 3-1:0.0: Freeing device
[  412.094659][  T979] usb 3-1: new low-speed USB device number 74 using dummy_hcd
[  412.162938][T10370] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1247'.
[  412.310291][  T979] usb 3-1: unable to get BOS descriptor or descriptor too short
[  412.311661][   T24] usb 5-1: new low-speed USB device number 83 using dummy_hcd
[  412.322370][  T979] usb 3-1: config index 0 descriptor too short (expected 33540, got 36)
[  412.340519][  T979] usb 3-1: config 108 has too many interfaces: 60, using maximum allowed: 32
[  412.371316][  T979] usb 3-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config
[  412.382545][  T979] usb 3-1: config 108 has 1 interface, different from the descriptor's value: 60
[  412.394965][  T979] usb 3-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  412.408793][  T979] usb 3-1: config 108 interface 0 has no altsetting 0
[  412.451291][  T979] usb 3-1: string descriptor 0 read error: -22
[  412.457716][  T979] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  412.467550][  T979] usb 3-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2
[  412.521654][   T24] usb 5-1: Invalid ep0 maxpacket: 16
[  412.690775][   T24] usb 5-1: new low-speed USB device number 84 using dummy_hcd
[  412.740218][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'.
[  412.903361][   T24] usb 5-1: Invalid ep0 maxpacket: 16
[  412.913051][   T24] usb usb5-port1: attempt power cycle
[  412.950878][  T979] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  413.122905][  T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  413.173087][  T979] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  413.186589][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.202190][  T979] usb 4-1: config 0 descriptor??
[  413.265157][  T979] pwc: Askey VC010 type 2 USB webcam detected.
[  413.272845][   T24] usb 5-1: new low-speed USB device number 85 using dummy_hcd
[  413.313291][   T24] usb 5-1: Invalid ep0 maxpacket: 16
[  413.660892][T10392] x_tables: unsorted underflow at hook 2
[  413.671823][   T24] usb 5-1: new low-speed USB device number 86 using dummy_hcd
[  413.692201][   T24] usb 5-1: Invalid ep0 maxpacket: 16
[  413.697984][   T24] usb usb5-port1: unable to enumerate USB device
[  413.713210][T10392] netlink: 'syz.1.1253': attribute type 7 has an invalid length.
[  413.735838][T10392] netlink: 'syz.1.1253': attribute type 8 has an invalid length.
[  413.833451][  T979] pwc: recv_control_msg error -32 req 02 val 2b00
[  413.843634][  T979] pwc: recv_control_msg error -32 req 02 val 2700
[  413.852237][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.862442][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.878087][  T979] pwc: recv_control_msg error -32 req 02 val 2c00
[  413.885570][  T979] pwc: recv_control_msg error -32 req 04 val 1000
[  413.893668][  T979] pwc: recv_control_msg error -32 req 04 val 1300
[  413.905092][  T979] pwc: recv_control_msg error -32 req 04 val 1400
[  413.922514][  T979] pwc: recv_control_msg error -32 req 02 val 2000
[  413.937884][  T979] pwc: recv_control_msg error -32 req 02 val 2100
[  413.954666][  T979] pwc: recv_control_msg error -32 req 04 val 1500
[  413.971478][  T979] pwc: recv_control_msg error -32 req 02 val 2500
[  413.990774][  T979] pwc: recv_control_msg error -71 req 02 val 2400
[  414.006338][  T979] pwc: recv_control_msg error -71 req 02 val 2600
[  414.021123][  T979] pwc: recv_control_msg error -71 req 02 val 2900
[  414.055688][  T979] pwc: recv_control_msg error -71 req 02 val 2800
[  414.065638][  T979] pwc: recv_control_msg error -71 req 04 val 1100
[  414.073284][  T979] pwc: recv_control_msg error -71 req 04 val 1200
[  414.085989][  T979] pwc: Registered as video103.
[  414.108427][  T979] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input58
[  414.250360][  T979] usb 4-1: USB disconnect, device number 89
[  414.743641][ T5950] usb 3-1: USB disconnect, device number 74
[  414.991780][ T5900] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  415.153433][ T5900] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[  415.171995][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.204398][ T5900] usb 2-1: config 0 has no interface number 0
[  415.231942][ T5900] usb 2-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  415.271820][ T5900] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  415.312645][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.333450][ T5900] usb 2-1: config 0 descriptor??
[  415.361414][ T5900] usbhid 2-1:0.32: couldn't find an input interrupt endpoint
[  415.381753][   T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  415.553928][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  415.603394][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  415.657643][   T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  415.690301][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  415.720094][   T24] usb 3-1: SerialNumber: syz
[  415.965740][   T24] usb 3-1: 0:2 : does not exist
[  416.046042][   T24] usb 3-1: USB disconnect, device number 75
[  416.099859][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  416.411612][ T5900] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  416.520118][T10438] rtc_cmos 00:00: Alarms can be up to one day in the future
[  416.580841][ T5900] usb 5-1: Using ep0 maxpacket: 32
[  416.593608][ T5900] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  416.603956][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.612685][ T5900] usb 5-1: Product: syz
[  416.617100][ T5900] usb 5-1: Manufacturer: syz
[  416.622723][ T5900] usb 5-1: SerialNumber: syz
[  416.640310][ T5900] usb 5-1: config 0 descriptor??
[  416.874318][ T5900] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device:
[  416.901979][ T5900] eb 9a 47 80 9b f8 7a f0 
[  416.916132][ T5900] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  417.034187][ T5922] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  417.065034][  T979] usb 5-1: USB disconnect, device number 87
[  417.434641][ T5922] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  417.448830][ T5922] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  417.464167][ T5922] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d
[  417.474314][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.630777][  T979] usb 4-1: new low-speed USB device number 90 using dummy_hcd
[  417.724568][T10442] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  417.808894][ T5950] usb 2-1: USB disconnect, device number 86
[  417.845052][ T5922] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  417.892616][  T979] usb 4-1: unable to get BOS descriptor or descriptor too short
[  417.934928][  T979] usb 4-1: config index 0 descriptor too short (expected 33540, got 36)
[  417.953148][  T979] usb 4-1: config 108 has too many interfaces: 60, using maximum allowed: 32
[  417.975459][  T979] usb 4-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config
[  418.026724][  T979] usb 4-1: config 108 has 1 interface, different from the descriptor's value: 60
[  418.044291][T10442] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  418.080760][  T979] usb 4-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  418.123874][ T5908] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  418.140559][  T979] usb 4-1: config 108 interface 0 has no altsetting 0
[  418.178936][  T979] usb 4-1: string descriptor 0 read error: -22
[  418.188275][  T979] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  418.199804][  T979] usb 4-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2
[  418.292830][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.376793][ T5908] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  418.442130][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1268'.
[  418.519305][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.520596][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'.
[  418.559298][ T5908] usb 5-1: config 0 descriptor??
[  418.792412][ T5908] usbhid 5-1:0.0: can't add hid device: -71
[  418.798567][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  418.836479][ T5908] usb 5-1: USB disconnect, device number 88
[  419.320749][ T5908] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  419.475187][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  419.497718][ T5908] usb 5-1: too many configurations: 35, using maximum allowed: 8
[  419.555958][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -61
[  419.565601][ T5908] usb 5-1: can't read configurations, error -61
[  419.627969][  T979] usb 3-1: USB disconnect, device number 76
[  419.730744][ T5908] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  419.891982][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  419.900222][ T5908] usb 5-1: too many configurations: 35, using maximum allowed: 8
[  419.914658][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -61
[  419.923619][ T5908] usb 5-1: can't read configurations, error -61
[  419.930380][ T5908] usb usb5-port1: attempt power cycle
[  419.936577][ T5900] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  420.117293][ T5900] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  420.130779][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.144885][ T5900] usb 2-1: config 0 descriptor??
[  420.162805][   T24] usb 4-1: USB disconnect, device number 90
[  420.290855][ T5908] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  420.365006][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  420.372092][ T5908] usb 5-1: too many configurations: 35, using maximum allowed: 8
[  420.412242][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -61
[  420.456568][ T5908] usb 5-1: can't read configurations, error -61
[  420.590162][ T5900] ath6kl: Unsupported hardware version: 0x0
[  420.625384][ T5900] ath6kl: Failed to init ath6kl core: -22
[  420.632279][ T5908] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  420.646709][ T5900] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22
[  420.679960][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  420.687834][ T5908] usb 5-1: too many configurations: 35, using maximum allowed: 8
[  420.707827][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -61
[  420.718495][ T5908] usb 5-1: can't read configurations, error -61
[  420.725205][ T5908] usb usb5-port1: unable to enumerate USB device
[  420.835977][    T9] usb 2-1: USB disconnect, device number 87
[  421.291940][T10494] rtc_cmos 00:00: Alarms can be up to one day in the future
[  421.400781][    T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  421.509919][T10500] loop2: detected capacity change from 0 to 7
[  421.541819][ T5886] Dev loop2: unable to read RDB block 7
[  421.554307][ T5886]  loop2: unable to read partition table
[  421.570888][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.574762][ T5886] loop2: partition table beyond EOD, truncated
[  421.598354][T10500] Dev loop2: unable to read RDB block 7
[  421.606529][T10500]  loop2: unable to read partition table
[  421.630222][T10500] loop2: partition table beyond EOD, truncated
[  421.641525][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.656440][T10500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  421.729325][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  421.765625][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  421.788466][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.814060][    T9] usb 3-1: config 0 descriptor??
[  421.892087][ T5908] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  422.063613][    T9] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  422.084780][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  422.084801][   T30] audit: type=1326 audit(1764449408.624:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.115832][ T5908] usb 4-1: Using ep0 maxpacket: 8
[  422.143983][ T5908] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  422.161117][ T5908] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  422.180216][ T5908] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  422.204326][   T30] audit: type=1326 audit(1764449408.624:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.252935][ T5908] usb 4-1: config 250 has no interface number 0
[  422.279920][ T5908] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  422.300925][   T30] audit: type=1326 audit(1764449408.624:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.330755][ T5908] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  422.360738][ T5908] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  422.380896][   T30] audit: type=1326 audit(1764449408.624:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.410753][ T5908] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  422.473131][ T5908] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  422.475657][   T30] audit: type=1326 audit(1764449408.624:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.509447][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.519223][   T30] audit: type=1326 audit(1764449408.624:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.541633][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.563544][   T30] audit: type=1326 audit(1764449408.624:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.625181][ T5908] usb 4-1: config 250 interface 228 has no altsetting 0
[  422.652275][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  422.665314][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  422.671559][   T30] audit: type=1326 audit(1764449408.624:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.678308][ T5908] usb 4-1: Product: syz
[  422.728523][   T30] audit: type=1326 audit(1764449408.624:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  422.897902][T10519] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  422.912538][   T30] audit: type=1326 audit(1764449408.644:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7172f8f749 code=0x7ffc0000
[  423.034151][ T5908] usb 4-1: SerialNumber: syz
[  423.067187][ T5908] hub 4-1:250.228: bad descriptor, ignoring hub
[  423.155888][T10522] loop2: detected capacity change from 0 to 7
[  423.163773][T10522]  loop2:
[  423.166760][ T5908] hub 4-1:250.228: probe with driver hub failed with error -5
[  423.176630][T10522] loop2: partition table partially beyond EOD, truncated
[  423.284990][ T5908] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 91 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  423.583165][ T5908] usb 4-1: USB disconnect, device number 91
[  423.618354][ T5908] usblp1: removed
[  423.842692][T10536] program syz.4.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  424.234008][ T5950] usb 3-1: USB disconnect, device number 78
[  425.395552][T10555] loop2: detected capacity change from 0 to 7
[  425.410920][T10555] Dev loop2: unable to read RDB block 7
[  425.431706][T10555]  loop2: unable to read partition table
[  425.458004][T10555] loop2: partition table beyond EOD, truncated
[  425.488132][T10555] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  426.442814][    T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  426.539897][T10580] syz_tun: entered promiscuous mode
[  426.581094][ T5922] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  426.603524][    T9] usb 5-1: Using ep0 maxpacket: 32
[  426.614194][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.651844][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  426.673159][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.695064][    T9] usb 5-1: config 0 descriptor??
[  426.716258][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  426.723604][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  426.753202][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  426.770695][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  426.803681][ T5922] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  426.834298][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.904215][ T5922] usb 4-1: config 0 descriptor??
[  426.974116][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  427.035465][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.136766][ T5922] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  427.156609][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  427.246990][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  427.251838][    T9] usb 5-1: USB disconnect, device number 93
[  427.300774][ T5922] usb 4-1: media controller created
[  427.334470][T10579] ------------[ cut here ]------------
[  427.340390][T10579] usb 4-1: BOGUS control dir, pipe 80005c80 doesn't match bRequestType c0
[  427.401825][T10579] WARNING: CPU: 0 PID: 10579 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0
[  427.411793][T10579] Modules linked in:
[  427.416079][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.3.1301 Not tainted syzkaller #0 PREEMPT(full) 
[  427.425574][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  427.436475][T10579] RIP: 0010:usb_submit_urb+0x114d/0x18b0
[  427.442216][T10579] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 18 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 d0 8f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80
[  427.459071][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  427.463124][T10579] RSP: 0018:ffffc9000aaf7820 EFLAGS: 00010246
[  427.478321][T10579] RAX: bd4387ba831dc700 RBX: ffff888077b77600 RCX: 0000000000080000
[  427.486592][T10579] RDX: ffffc9000c695000 RSI: 0000000000003553 RDI: 0000000000003554
[  427.495338][T10579] RBP: 1ffff11009469a44 R08: 0000000000000003 R09: 0000000000000004
[  427.503505][T10579] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888056ed4100
[  427.511582][T10579] R13: ffff88804a34d220 R14: 0000000080005c80 R15: ffff88807abf04e0
[  427.519604][T10579] FS:  00007f78553586c0(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  427.529220][T10579] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  427.536039][T10579] CR2: 00007f78527f4ff0 CR3: 00000000318ba000 CR4: 00000000003526f0
[  427.544080][T10579] Call Trace:
[  427.547364][T10579]  <TASK>
[  427.550304][T10579]  usb_start_wait_urb+0x114/0x4c0
[  427.555875][T10579]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  427.561592][T10579]  usb_control_msg+0x232/0x3e0
[  427.566382][T10579]  dib0700_i2c_xfer+0xba7/0xf70
[  427.571346][T10579]  __i2c_transfer+0x874/0x2170
[  427.576149][T10579]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.581862][T10579]  ? __pfx___i2c_transfer+0x10/0x10
[  427.587089][T10579]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  427.592640][T10579]  ? i2c_transfer+0x120/0x3a0
[  427.597372][T10579]  i2c_transfer+0x25b/0x3a0
[  427.602007][T10579]  ? __pfx_i2c_transfer+0x10/0x10
[  427.607098][T10579]  ? _copy_from_user+0x94/0xb0
[  427.612882][T10579]  i2cdev_ioctl_rdwr+0x460/0x740
[  427.617936][T10579]  i2cdev_ioctl+0x64b/0x7f0
[  427.622706][T10579]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  427.627785][T10579]  ? __fget_files+0x3a0/0x420
[  427.632601][T10579]  ? __fget_files+0x2a/0x420
[  427.637269][T10579]  ? bpf_lsm_file_ioctl+0x9/0x20
[  427.643100][T10579]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  427.648197][T10579]  __se_sys_ioctl+0xfc/0x170
[  427.652977][T10579]  do_syscall_64+0xfa/0xfa0
[  427.657531][T10579]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.662871][T10579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.669005][T10579]  ? clear_bhb_loop+0x60/0xb0
[  427.674558][T10579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.680504][T10579] RIP: 0033:0x7f785458f749
[  427.685197][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.705697][T10579] RSP: 002b:00007f7855358038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  427.714234][T10579] RAX: ffffffffffffffda RBX: 00007f78547e5fa0 RCX: 00007f785458f749
[  427.722340][T10579] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004
[  427.730363][T10579] RBP: 00007f7854613f91 R08: 0000000000000000 R09: 0000000000000000
[  427.739022][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.747113][T10579] R13: 00007f78547e6038 R14: 00007f78547e5fa0 R15: 00007f785490fa28
[  427.755225][T10579]  </TASK>
[  427.758286][T10579] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  427.765590][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.3.1301 Not tainted syzkaller #0 PREEMPT(full) 
[  427.774978][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  427.785049][T10579] Call Trace:
[  427.788346][T10579]  <TASK>
[  427.791294][T10579]  dump_stack_lvl+0x99/0x250
[  427.795921][T10579]  ? __asan_memcpy+0x40/0x70
[  427.800532][T10579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.805748][T10579]  ? __pfx__printk+0x10/0x10
[  427.810377][T10579]  vpanic+0x237/0x6d0
[  427.814410][T10579]  ? __pfx_vpanic+0x10/0x10
[  427.818974][T10579]  panic+0xb9/0xc0
[  427.822724][T10579]  ? __pfx_panic+0x10/0x10
[  427.827171][T10579]  __warn+0x31b/0x4b0
[  427.831176][T10579]  ? usb_submit_urb+0x114d/0x18b0
[  427.836228][T10579]  ? usb_submit_urb+0x114d/0x18b0
[  427.841293][T10579]  report_bug+0x2be/0x4f0
[  427.845651][T10579]  ? usb_submit_urb+0x114d/0x18b0
[  427.850701][T10579]  ? usb_submit_urb+0x114d/0x18b0
[  427.855830][T10579]  ? usb_submit_urb+0x114f/0x18b0
[  427.860876][T10579]  handle_bug+0x84/0x160
[  427.865145][T10579]  exc_invalid_op+0x1a/0x50
[  427.869660][T10579]  asm_exc_invalid_op+0x1a/0x20
[  427.874521][T10579] RIP: 0010:usb_submit_urb+0x114d/0x18b0
[  427.880174][T10579] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 18 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 d0 8f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80
[  427.899792][T10579] RSP: 0018:ffffc9000aaf7820 EFLAGS: 00010246
[  427.905869][T10579] RAX: bd4387ba831dc700 RBX: ffff888077b77600 RCX: 0000000000080000
[  427.913856][T10579] RDX: ffffc9000c695000 RSI: 0000000000003553 RDI: 0000000000003554
[  427.921862][T10579] RBP: 1ffff11009469a44 R08: 0000000000000003 R09: 0000000000000004
[  427.929842][T10579] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888056ed4100
[  427.937840][T10579] R13: ffff88804a34d220 R14: 0000000080005c80 R15: ffff88807abf04e0
[  427.945939][T10579]  usb_start_wait_urb+0x114/0x4c0
[  427.950994][T10579]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  427.956574][T10579]  usb_control_msg+0x232/0x3e0
[  427.961456][T10579]  dib0700_i2c_xfer+0xba7/0xf70
[  427.966358][T10579]  __i2c_transfer+0x874/0x2170
[  427.971148][T10579]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.976374][T10579]  ? __pfx___i2c_transfer+0x10/0x10
[  427.981594][T10579]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  427.987062][T10579]  ? i2c_transfer+0x120/0x3a0
[  427.991757][T10579]  i2c_transfer+0x25b/0x3a0
[  427.996277][T10579]  ? __pfx_i2c_transfer+0x10/0x10
[  428.001348][T10579]  ? _copy_from_user+0x94/0xb0
[  428.006134][T10579]  i2cdev_ioctl_rdwr+0x460/0x740
[  428.011115][T10579]  i2cdev_ioctl+0x64b/0x7f0
[  428.015647][T10579]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  428.020694][T10579]  ? __fget_files+0x3a0/0x420
[  428.025467][T10579]  ? __fget_files+0x2a/0x420
[  428.030073][T10579]  ? bpf_lsm_file_ioctl+0x9/0x20
[  428.035052][T10579]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  428.040185][T10579]  __se_sys_ioctl+0xfc/0x170
[  428.044790][T10579]  do_syscall_64+0xfa/0xfa0
[  428.049313][T10579]  ? lockdep_hardirqs_on+0x9c/0x150
[  428.054532][T10579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.060610][T10579]  ? clear_bhb_loop+0x60/0xb0
[  428.065312][T10579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.071218][T10579] RIP: 0033:0x7f785458f749
[  428.075644][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.095260][T10579] RSP: 002b:00007f7855358038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  428.103723][T10579] RAX: ffffffffffffffda RBX: 00007f78547e5fa0 RCX: 00007f785458f749
[  428.111717][T10579] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004
[  428.119736][T10579] RBP: 00007f7854613f91 R08: 0000000000000000 R09: 0000000000000000
[  428.127721][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  428.135698][T10579] R13: 00007f78547e6038 R14: 00007f78547e5fa0 R15: 00007f785490fa28
[  428.143929][T10579]  </TASK>
[  428.147260][T10579] Kernel Offset: disabled
[  428.151590][T10579] Rebooting in 86400 seconds..