last executing test programs:

20.477095286s ago: executing program 2 (id=2736):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x3f)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700)}, 0x68)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c88a8", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0xc840)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

15.66728898s ago: executing program 2 (id=2750):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x38011, r1, 0xd175000)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket(0x400000000010, 0x3, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, 0x0, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

14.007669541s ago: executing program 3 (id=2755):
socket$packet(0x11, 0x2, 0x300)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0xa, @vbi={0x200, 0xba7, 0x1000, 0x34524742, [0x7, 0x3], [0x4, 0x101], 0x10b}})
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%-5lx  \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000540)={'ip6_vti0\x00', <r10=>r6, 0x29, 0xf8, 0x4, 0x8, 0x18, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x1, 0x0, 0x3}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f00000006c0)=""/34, 0x22, <r11=>0x0, &(0x7f0000001300)=""/4096, 0x1000}}, 0x10)
r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r13 = dup(r12)
sendmsg$inet(r13, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1c, 0x8004, 0x5, 0x8, 0x408, r14, 0xe84, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5, 0x6, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x9, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x3, 0x1, 0x0, r9}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000000440)=""/204, 0x41000, 0x22, '\x00', r10, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x3, 0x2, 0x2}, 0x10, r11, r13, 0x8, &(0x7f0000000940)=[r14, r15], &(0x7f0000000980)=[{0x0, 0x5, 0x8}, {0x3, 0x4, 0xf, 0x9}, {0x7, 0x5, 0xf, 0x7}, {0x4, 0x1, 0x3, 0xb}, {0x2, 0x1, 0x3, 0x7}, {0x4, 0x2, 0x5, 0x8}, {0x4, 0x3, 0x9, 0x2}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x4, @void, @value}, 0x94)
r16 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r17=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

12.948757783s ago: executing program 3 (id=2756):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
fsopen(0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4000840)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x80, 0x4, 0x2, "02010200", '\nj#\x00'}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="400300f8ad00"], 0x0, 0x0, 0x0, 0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x439, 0x70bd26, 0xfffffffe, {0x0, 0x0, 0xe403, 0x0, 0x5281}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0xfffffffffffffdf3}, 0x1, 0x0, 0x0, 0x20000844}, 0x8880)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b37, &(0x7f0000000040)={'wlan0\x00'})

12.81684537s ago: executing program 2 (id=2757):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x200, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000008000000000000000000000b7080000000000007baaf0ff00000000b508ffffff1f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x6400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

12.452676156s ago: executing program 2 (id=2758):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x22, 0x1, 0x3}, 0x18, 0x2)
r3 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x5, 0xa, 0x1, "d995b23ebadefa70e1a1ec4faf75b1d9575a8e2a1694bbc00d43aebc8bc5411b", 0x33524742})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000000c0)={0x400, r3}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r4 = shmget$private(0x0, 0x800000, 0x10, &(0x7f0000173000/0x800000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000)

10.848719959s ago: executing program 1 (id=2759):
r0 = socket$key(0xf, 0x3, 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = io_uring_setup(0x30d0, &(0x7f00000005c0)={0x0, 0x0, 0x10003})
close_range(r2, 0xffffffffffffffff, 0x0) (async)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x1fffffff) (async)
close(r1) (async)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000082505a1a44000010203010902580001fd02a005090400390da40f010300000030000900041524120000a317a88b045e4f01a66707c0ffcb7e392a082413e3c683cbab9fafefd9f4c44f6b4c189c83c05965160d72b212951d"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

7.652548246s ago: executing program 1 (id=2760):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x3f)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700)}, 0x68)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5df696334e2d8363970c8c3b029c88880576b08935b03795560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975c7617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f76680c1db20c3089a3bdc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7cae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec2bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a2350564f4bdbcf4e048f2b34570d5ef2bb7939256325574c3bf96f022efde18e9274d5d40af19b0afe0c774b56ff010000bf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97e14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b8ff3072ca215dde339bef126b07eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c88a8", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0xc840)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.594730856s ago: executing program 3 (id=2761):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e"], 0x0) (async, rerun: 32)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (rerun: 32)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) (async, rerun: 64)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async, rerun: 64)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_usb_connect$uac1(0x3, 0x8d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0xf0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x3, 0x1, [0x6], 0x9}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xbc, 0x66, 0x8, {0x7, 0x25, 0x1, 0x1, 0x3, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x88, 0x8, 0xdf, {0x7, 0x25, 0x1, 0x80, 0x41, 0x8}}}}}}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x31, &(0x7f00000006c0)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x71, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xd, 0x40, 0x200, 0x3}, @generic={0x3, 0x10, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "7020ba1e055154d3a5b1c0443711391b"}]}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async, rerun: 32)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c0000000a000700726f75746500000014000480080002400000000008000140000000000900010073797a31000000000900010073797a3200000000140000001100010000000000000000000000000a0000000000000000200092ab42cd877e"], 0x94}}, 0x0) (async, rerun: 64)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32)
syz_usb_disconnect(r5) (async, rerun: 32)
sendmsg$xdp(r0, 0x0, 0x0) (async)
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async, rerun: 64)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffb000/0x2000)=nil, 0x3) (rerun: 64)

6.354382996s ago: executing program 0 (id=2763):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3b}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xe7}, {0x8, 0x0, 0x0, 0x1}, {}, 0x0, 0x2, 0xa, 0x4, 0xff, 0x6f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @local, 0x2, 0x0, 0x2449})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000080)={{@host}, 0x3, 0xd})

6.269364218s ago: executing program 2 (id=2764):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0)
ftruncate(0xffffffffffffffff, 0x3f)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700)="06", 0x1}, 0x68)
listen(r1, 0x4)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5df696334e2d8363970c8c3b029c88880576b08935b03795560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975c7617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f76680c1db20c3089a3bdc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7cae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec2bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a2350564f4bdbcf4e048f2b34570d5ef2bb7939256325574c3bf96f022efde18e9274d5d40af19b0afe0c774b56ff010000bf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97e14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b8ff3072ca215dde339bef126b07eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c88a8", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0xc840)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0)
gettid()
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.108241344s ago: executing program 0 (id=2765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={r6, 0x0, 0x5, 0x4, 0x7})
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
io_setup(0x8, &(0x7f0000004200)=<r7=>0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "08000000000000000f008000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0)
io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, @void, @value}, 0x25)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000018000100fdffffff01000000020020000001fe0b0000000008001e00020000000c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r13 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r13, 0xc0405602, &(0x7f0000000040)={0x2c, 0x1, 0x3, "fff600f40f000000000000b967351bca40ba3e27ff7eefad00000000ffffffff", 0x3032344d})

4.876734551s ago: executing program 0 (id=2767):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x38011, r1, 0xd175000)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket(0x400000000010, 0x3, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, 0x0, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4.580296818s ago: executing program 1 (id=2768):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x38, 0x0, 0xa29, 0x0, 0x2000, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x38}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="34374feef32a3deafdada3d9c01cf9a93daac365657361b3411b787c0c874da0ae", 0x21}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x10000000000004, 0x200004, 0x804, 0x4, 0x6, 0x120000, 0x7f, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x7, 0x1], 0xffff1000, 0x141200})
bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x800000000002, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x40, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0xe8, 0x4, 0x5, 0x0, 0x4, 0x6, 0x6, 0x0, 0x1, 0x0, 0x1, 0x5, 0x0, 0x15, 0x802, 0x4, 0xa, 0x1, 0x6, '\x00', 0x9, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x80, 0x0, 0x0, '\x00', 0x0, 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f001d2e0f783c2e652e0f214bf30f09ba4200b80040eff40fc71de3ec66b9870300000f32ba4300ed", 0x29}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

4.48093102s ago: executing program 3 (id=2769):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000ffef00000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040)

3.932521367s ago: executing program 3 (id=2770):
sysfs$3(0x3)
sysfs$3(0x3)
sysfs$3(0x3)
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8)
r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffffa)
pipe2$watch_queue(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xd4)
r5 = syz_usb_connect$cdc_ncm(0x1, 0xb8, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x2, 0x1, 0xf7, 0x20, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x7, 0x10}, {0x6, 0x24, 0x1a, 0x2, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x67, 0x0, 0x8, 0xb6, 0x2, 0x5}, @dmm={0x7, 0x24, 0x14, 0xba, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0xfdb}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x19}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x4, 0x4, 0x2, 0xff, 0xa1}, 0x38, &(0x7f0000000240)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "4be6bcb800a77800dd77b38d39d5ac25"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "0fc64d543f8df5976ba02ce1897628ce"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x35, 0x5, 0x6, 0xd19e, 0xff}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x405}}, {0x60, &(0x7f00000003c0)=@string={0x60, 0x3, "0bdb177f4f34b707bbf88e96e46906260e0e2f803b56bbc8018ecabf5f649ce2dc84397c94748bf963a1fc98bc62a67e7458a5168bd0e8411674c0b58563b64e882f97881a6335cc945c002e3c0a6e9074b65224f1300ef141d80e226ead"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}]})
syz_usb_control_io$cdc_ncm(r5, &(0x7f00000005c0)={0x14, &(0x7f0000000500)={0x40, 0x3, 0x3f, {0x3f, 0x30, "cf775e00f41ac9da4c339cc384e9d2aef96be074aaac907ac690767ba8a564524422de9986acf958e48d7c3043797f0bc4e17aadc36f4c663250c5ca98"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x40, 0x16, 0xea, "adcd832565ff7368c499fbf9554df1893e4d9eddfaee8a153fdf59e2f82dc16138df237076209d23b7573551ae24f10db0732e038aa4c6f1f692a1c9870b6711c594e413ad7842732a306359ecbfe581440728cde7b3e26c65f3e829262c69503d0422dd149d464ce4f76cac05c9ee4ef730b53906b49a28de8db6c7d0dfa07cd6be099e3fde9cbc1f8489c16737a0888cf1fb37de11d9499ae137142a87330a5f94c2980283a098aeb74b67c1b17f35ffaeaf9b8c16b3edc460c72ff7d17806a80ecce96935d70d963e4ac1eaf50446467b5615d875dfebf32fb8491995c7a8275028dc29f0747465b2"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0xd9, 0xc, 0x0, 0x5, 0x4, 0x2, 0x5, 0x27, 0xfffa, 0x200, 0x2, 0x4}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000880)={0x20, 0x89, 0x2}})
sysfs$3(0x3)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @desc4}, &(0x7f0000000a00)={0x0, "7ea24e9ca788c4c059811e9fe87cadeec52172f330c12b6aca986d09414b94b238345d7fdbac64a3714a6c9518944229781c7e30ae42198e15fdeebd4ba22679", 0x10}, 0x48, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000a80)={r2, 0x0, r6}, &(0x7f0000000ac0), 0x0, &(0x7f0000000c00)={&(0x7f0000000b00)={'sha1_mb\x00'}, &(0x7f0000000b40)="5277ee8256f3cf24a1438c75dd0370780d417448f45df45388253c5e79751a0c38e1b54c73d59176cc7687470bc900d3fd97a3909c0f399b521e014bd9c8af2154632e66d273df53cb98386f2fdba848bc38e91c2fb3b475c390d503a13e0f9255b9676c8c6783242b2d5eac53b9c85e067e08363f29f4c536a88ffb1dfe0c29b60a5fea6c3ba21c829742abbdb96135a5259e894ad3524392ca748fe3b9b2f9097a24bda066eda2266167e0be5f34d94a4cb0f4acab2cc73f", 0xb9})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000cc0)={0x14, &(0x7f0000000c40)={0x0, 0x9, 0x30, {0x30, 0x11, "430120b38c7059fe4e027e882a529f49e781ec463b6c299a350a309993257c74baac8b8c6f7331f8a940eea44587"}}, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x1c, &(0x7f0000000d00)={0x0, 0x0, 0xf7, "96720b175b06c42acf7e7115e2815257dc558008887c879284d12112779dadd08f6d98db9742f5017635f7a6551787ea5b0358cc070b1359c70f18c232e5f961fa6db1935ed45811dfb3c545b31d28a82b19d579cc493d6cb7252c7e68ff07ca1f1a8f547c4f203252f9d1bc5b1b7c234da370a90616be19c88d596fdb115728c209ef73d39f916ddd4ba50c0bbaaa17a9c1c3f9076c9cedc64e4b31ec8dc7ef5991e9e0049ed08f3ba09c58833934bd1c8d823f910f8ca3d9577ee714c20937786b0b90aeb6c1b73e8b5145b034eb9fcb4579eead66298545fc6b97efbde22c49027e9fb89e78e81dda05f4195293d2818a173573191c"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x5}})
sysfs$3(0x3)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000ec0)=[{{0x4, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x8)
sysfs$3(0x3)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/kernel/kexec_crash_loaded', 0x1195c2, 0x160)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0xfffffffffffffffe)
sysfs$3(0x3)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r7, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r1, 0x10000000)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000f40)=@IORING_OP_READ_FIXED={0x4, 0x54, 0x4000, @fd=r0, 0x0, 0x9, 0x7, 0x12, 0x1, {0x3, r10}})
timer_create(0x0, &(0x7f0000001140)={0x0, 0x15, 0x0, @thr={&(0x7f0000000f80)="2b23913260ae1543bea3c64091bf81ab210398a7d293f35aef68bc877c29e663f8d299b810193bf27128ff4754e7f34bec4312e33870702ab06e8664c14a3cdc710419e817430e230cb6bab557b2fdcf7d6488ee89916ff33f27dca220b1177da252d96b7d711ead095240c0ad37b3981de5f55aca0c6648eb3a74bc25631e270d4bb58033ad05e06405bd8ec3e180a9f866319c68f38e7211587b4d3e9e2a4f0809506d256d034bec0f2038ce2df7ec6159a3ac58e89198d4cb6d0a126e3a806535bd730220bbd0496dc75489579dcdbc4b238b1fadda2a41ce446d558b", &(0x7f0000001080)="9bbf21fea9b62a978b02375c3f22ff90b3d3069dfdc31bed64100b5e5758f216dc99634c08c2a300c0a27bd5a411adc41cb46312879df1ad259e83d584051220225d061f73373c062ede9769edb85953b4531052f7b341c00dafb9721e9307310b4447cc8768790ff3157b3b1306ec3dacbb870fb5bc2a20e8145f10576b1303ede00d4b7175c054c0dfdbb90538d434d9109bca1a613e24d42095"}}, &(0x7f0000001180))
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000011c0)={<r11=>0x0, 0x800}, &(0x7f0000001200)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001240)={r11, 0x58, 0x20}, &(0x7f0000001280)=0xc)
setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f00000012c0)={@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2c}}, 0xc)
dup(r3)

3.491281821s ago: executing program 1 (id=2771):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x6010000}, 0x0)

3.39239602s ago: executing program 1 (id=2772):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
mmap(&(0x7f0000fd5000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, r1, 0x4f90b000)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040), 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$nl_route(r0, 0x0, 0x40000)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r8 = io_uring_setup(0x4edd, &(0x7f0000000240)={0x0, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x14, 0x0, 0x2)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000000)=[0x0, 0xb1320000], 0x2)
write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d)
pwritev2(r6, &(0x7f0000000440)=[{&(0x7f00000001c0)="b2ba", 0x2}, {0x0}], 0x2, 0x5, 0x80, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)

3.274109827s ago: executing program 4 (id=2773):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async, rerun: 32)
socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async, rerun: 32)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async)
io_setup(0xffff, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xfde0}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x4}]}]}, 0x54}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000004000800000", @ANYBLOB="feffffff00"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/14], 0x50)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/51, 0x33, 0x0) (async)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) (async)
r6 = gettid()
r7 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7}) (async)
io_uring_enter(r7, 0x1, 0x2, 0x1, 0x0, 0x0) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=<r10=>0x0) (async, rerun: 64)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
timer_settime(r10, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0)

1.900481395s ago: executing program 2 (id=2774):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x10, 0x6, 0x680, 0x508, 0x418, 0xf0, 0x418, 0x418, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x2b, 0x22, 0x8}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, @mcast1]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xff], 'veth1\x00', 'ip6gretap0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) (async, rerun: 64)
socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000280)=ANY=[], 0x28)
socket$inet6(0xa, 0x8080a, 0x39)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000800)={0x38, 0x5, 0x0, 0xe, 0x0, 0x5, 0x800000f, 0x7, 0xfffffffd, 0x1}, 0x0) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
pread64(r2, 0x0, 0x0, 0xfffffffffffffff7)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) (async)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x20) (async)
r4 = syz_open_procfs(0x0, 0x0)
read$eventfd(r4, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) (rerun: 32)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x44) (async, rerun: 32)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000740)="0b6e9a767190fb6b69da75d2628b6674dfbfed69d0efe8cdc786cdc42242d21961e70f7053aa308b01952aff01a23cb273bfa1c4775a42d00b9abeebb55e142e0cb128c12eecf56726353a461ea89d228e5a04611181316e2f670311822e8e04b739bb55e2ff7f41f6b4226b20591a34691901afc837f7c2ec42090835ebaff367d078b52cfa00"/150) (rerun: 32)

1.822247689s ago: executing program 4 (id=2775):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)

1.682843087s ago: executing program 4 (id=2776):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"]}, 0x296)

1.540736532s ago: executing program 0 (id=2777):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x6, {0x2, 0x4e20, @multicast2}, 'sit0\x00'}) (async)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x6, {0x2, 0x4e20, @multicast2}, 'sit0\x00'})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) (async)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x8, 0xff76})
write$char_usb(r7, &(0x7f0000000040)="e2", 0x918)
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) (async)
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe})
fcntl$lock(r3, 0x6, &(0x7f0000000440)={0x2, 0x1, 0x1, 0x4})

1.48399628s ago: executing program 1 (id=2778):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x3f)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700)="06", 0x1}, 0x68)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5df696334e2d8363970c8c3b029c88880576b08935b03795560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975c7617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f76680c1db20c3089a3bdc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7cae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec2bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a2350564f4bdbcf4e048f2b34570d5ef2bb7939256325574c3bf96f022efde18e9274d5d40af19b0afe0c774b56ff010000bf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97e14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b8ff3072ca215dde339bef126b07eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c88a8", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0xc840)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.425790052s ago: executing program 4 (id=2779):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000081dc27080e65000000000000000080"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000180)=0x3)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='silent\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', <r2=>0x0, 0x0, 0x8, 0x100, 0x5c81, {{0x28, 0x4, 0x2, 0x0, 0xa0, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x1b, 0xb9, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @local]}, @timestamp_addr={0x44, 0x1c, 0x50, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@multicast1, 0x1}, {@broadcast, 0x100}]}, @timestamp_addr={0x44, 0x54, 0xd6, 0x1, 0xe, [{@multicast2, 0x265edb97}, {@remote, 0x5}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa98}, {@broadcast, 0x9}, {@loopback, 0x8}, {@local, 0x3}, {@multicast1, 0x401}, {@local, 0x5fc}, {@loopback, 0xfffffff4}]}, @end]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b700000000000000956b9fe9f0a4463dc506b59ec65ab6fbfd6ec20f321f2a824f2ba1047eed77e11cbbe462b29e6327f399779b332c1c93ce4c2fec91aa5698aa0a44238c4add3d02c4b92b67b8894062a801b8b99e028e5453"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000002e80)=""/4107, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

468.890442ms ago: executing program 4 (id=2780):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000100003050000000400007fff00000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040)

462.872129ms ago: executing program 0 (id=2781):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001008f71a19a78"], 0x38}, 0x1, 0x0, 0x0, 0x20044801}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x4)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3d, 0x4, 0x800, 0x0, 0x2, 0x39a, 0x2b6f, 0x1}}, {0x6, 0x2, [0x183]}}, {{0x1c, 0x1, {0x4, 0x2, 0x2, 0x1, 0x2, 0x3572, 0x2, 0x1}}, {0x2, 0x2, [0x0]}}]}]}, 0x94}}, 0x0)

447.448604ms ago: executing program 3 (id=2782):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getchain={0x54, 0x66, 0xfcd66a900070b359, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}, [{0x6, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xf38a}, {0x8, 0xb, 0xc0}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x100}]}, 0x54}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="0c010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100000002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000330000000000005f00000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080010000800000000000000000000000000000000000000000010100000000000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a000000940000000000000000000000ad04000008001f00000000000c0015000000000029f3ffff"], 0x10c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)

155.487132ms ago: executing program 0 (id=2783):
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x1, @local}, 0xbfd915989f6f32b6, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'virt_wifi0\x00'})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x3a, @multicast1, 0x4e23, 0x2, 'ovf\x00', 0x5, 0x81, 0x17}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4e22, 0x4, 0x81, 0xfffffff7, 0x6}}, 0x44)
mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x97000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', <r1=>0x0, 0x8, 0x700, 0x6c, 0x1ff, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0x7e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @noop]}}}}})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, r1}, 0xc)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'macsec0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200))
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x202241, 0x120, 0x20}, 0x18)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}})
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x50, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000340)=0xe, 0x0, 0x4)
sched_setattr(0xffffffffffffffff, &(0x7f0000000380)={0x38, 0x0, 0x10000002, 0x1, 0xfffffffd, 0x80, 0x3, 0x1e, 0x2}, 0x0)
r4 = accept4$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x1c, 0x800)
setsockopt$inet6_buf(r4, 0x29, 0xd2, &(0x7f0000000440)="0899a578e900f48a6de3a2a4e764cb4dd5d9912870d1e06f4d756c20f6d79cdf0631a850cc66d44c46bfb68fa01e62bea08615c192daafc02c6f60937b1eb42101b6417ec00f7784132e9a6210888608bd9faca15bb69a267316991f965d1b8d3bf37588d7afe38ea926482294d83d4a9a75ba449640", 0x76)
r5 = fsopen(&(0x7f00000004c0)='qnx4\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000500)='\'\x00', &(0x7f0000000540)="fa99e4c44698dac8a283c5ad2ddf69f39aff04221c514aec5e37a0c9d40f61bfc187dcc6ba631a6e1dc7ba8daf79869746002445387e230800218fb157ee305931580a", 0x43)
r6 = fcntl$dupfd(r0, 0x406, r4)
r7 = syz_io_uring_complete(r3)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f00000005c0))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000680)={{r7}, "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"})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x1, &(0x7f0000001680)=""/51, &(0x7f00000016c0)=0x33)
bind$netlink(r6, &(0x7f0000001700)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000001740)={0x8, 'veth1_vlan\x00', {'macvlan1\x00'}, 0xff80})
fremovexattr(r6, &(0x7f0000001780)=@random={'security.', '.(\'@!\x00'})
openat$cuse(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x40881)

0s ago: executing program 4 (id=2784):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0)
ftruncate(0xffffffffffffffff, 0x3f)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700)="06", 0x1}, 0x68)
listen(r1, 0x4)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5df696334e2d8363970c8c3b029c88880576b08935b03795560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975c7617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f76680c1db20c3089a3bdc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7cae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec2bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a2350564f4bdbcf4e048f2b34570d5ef2bb7939256325574c3bf96f022efde18e9274d5d40af19b0afe0c774b56ff010000bf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97e14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b8ff3072ca215dde339bef126b07eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c88a8", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0xc840)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0)
gettid()
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

IP: 0033:0x7f7678b8e169
[  755.393998][T14407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  755.394015][T14407] RSP: 002b:00007f7679a83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  755.394037][T14407] RAX: ffffffffffffffda RBX: 00007f7678db5fa0 RCX: 00007f7678b8e169
[  755.394052][T14407] RDX: 0000200000000000 RSI: 00000000c040564a RDI: 0000000000000003
[  755.394065][T14407] RBP: 00007f7679a83090 R08: 0000000000000000 R09: 0000000000000000
[  755.394077][T14407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  755.394088][T14407] R13: 0000000000000000 R14: 00007f7678db5fa0 R15: 00007f7678edfa28
[  755.394118][T14407]  </TASK>
[  755.395648][T14407] ERROR: Out of memory at tomoyo_realpath_from_path.
[  755.907643][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'.
[  755.917085][T14412] netlink: 'syz.0.2397': attribute type 9 has an invalid length.
[  755.931130][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.934194][T14412] macvlan3: entered allmulticast mode
[  756.098292][ T5922] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  756.191823][ T5899] usb 2-1: USB disconnect, device number 75
[  756.268132][ T5922] usb 4-1: Using ep0 maxpacket: 8
[  756.289150][ T5922] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  756.411937][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  757.218012][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  757.237530][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  757.296949][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.407473][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  757.464222][ T5929] usb 3-1: USB disconnect, device number 44
[  757.482493][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.648741][ T5901] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  757.704436][ T5922] usb 4-1: GET_CAPABILITIES returned 0
[  757.718132][ T5922] usbtmc 4-1:16.0: can't read capabilities
[  757.850151][ T5901] usb 2-1: config index 0 descriptor too short (expected 2084, got 36)
[  757.858821][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  757.874243][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  757.884564][ T5901] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  757.894066][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.916318][ T5901] usb 2-1: config 0 descriptor??
[  757.941136][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  757.941154][   T30] audit: type=1326 audit(1744732065.273:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  757.978143][   T30] audit: type=1326 audit(1744732065.273:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.009139][   T30] audit: type=1326 audit(1744732065.273:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.039879][   T30] audit: type=1326 audit(1744732065.273:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.098236][ T5922] usb 4-1: USB disconnect, device number 24
[  758.111915][T14440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.137477][   T30] audit: type=1326 audit(1744732065.273:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.137556][   T30] audit: type=1326 audit(1744732065.273:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.137616][   T30] audit: type=1326 audit(1744732065.313:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.137686][   T30] audit: type=1326 audit(1744732065.313:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.137731][   T30] audit: type=1326 audit(1744732065.313:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.137776][   T30] audit: type=1326 audit(1744732065.313:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  758.504050][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.521332][T14446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  758.719694][T14441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.719795][T14441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.719857][T14441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.817886][T14448] syz.1.2403 (14448): drop_caches: 2
[  759.118203][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.850555][ T5899] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  760.148675][ T5899] usb 5-1: device descriptor read/64, error -71
[  760.318513][ T5922] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  760.399086][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  760.408588][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  760.419414][ T5899] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  760.523393][ T5922] usb 4-1: config 0 has no interfaces?
[  760.548385][ T5922] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  760.613786][ T5901] usbhid 2-1:0.0: can't add hid device: -71
[  760.633201][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  760.641469][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.658227][ T5901] usb 2-1: USB disconnect, device number 76
[  760.664322][ T5922] usb 4-1: Product: syz
[  760.668169][ T5899] usb 5-1: device descriptor read/64, error -71
[  760.685716][ T5922] usb 4-1: Manufacturer: syz
[  760.696172][ T5922] usb 4-1: SerialNumber: syz
[  760.763742][T14469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  761.330618][ T5899] usb usb5-port1: attempt power cycle
[  761.452760][ T5922] usb 4-1: config 0 descriptor??
[  761.634534][ T5929] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  761.683051][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.798178][ T5899] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  761.848700][ T5929] usb 3-1: Using ep0 maxpacket: 8
[  761.855623][ T5929] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  761.865833][ T5929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  761.895187][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  761.910262][ T5899] usb 5-1: device descriptor read/8, error -71
[  761.936381][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  761.974818][ T5929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  762.158086][ T5929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  762.167543][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.208700][ T5899] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  762.343115][T14476] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2414'.
[  762.995346][ T5929] usb 3-1: GET_CAPABILITIES returned 0
[  763.005691][ T5929] usbtmc 3-1:16.0: can't read capabilities
[  763.231563][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  763.231583][   T30] audit: type=1326 audit(1744732070.573:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.258162][ T5905] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  763.318050][   T30] audit: type=1326 audit(1744732070.613:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.374244][ T5922] usb 3-1: USB disconnect, device number 45
[  763.399513][   T30] audit: type=1326 audit(1744732070.633:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.448164][   T30] audit: type=1326 audit(1744732070.633:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.469459][ T5905] usb 2-1: config 0 has no interfaces?
[  763.484625][   T30] audit: type=1326 audit(1744732070.633:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.548433][   T30] audit: type=1326 audit(1744732070.643:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.571031][   T30] audit: type=1326 audit(1744732070.643:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.591050][ T5905] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  763.617426][   T30] audit: type=1326 audit(1744732070.673:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.648183][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.676341][   T30] audit: type=1326 audit(1744732070.713:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.698179][ T5905] usb 2-1: Product: syz
[  763.708186][   T30] audit: type=1326 audit(1744732070.713:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e498e169 code=0x7ffc0000
[  763.709394][ T5905] usb 2-1: Manufacturer: syz
[  763.801496][ T5899] usb 5-1: device descriptor read/8, error -71
[  763.858029][ T5905] usb 2-1: SerialNumber: syz
[  763.889092][ T5905] usb 2-1: config 0 descriptor??
[  763.946542][ T5899] usb usb5-port1: unable to enumerate USB device
[  763.964626][ T5922] usb 4-1: USB disconnect, device number 25
[  764.079556][T14483] xt_CT: No such helper "pptp"
[  764.240536][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.280043][T14486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  764.388314][ T5899] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  764.428398][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.468498][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.485246][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.568215][ T5903] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  764.569282][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.596521][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.608451][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  764.632239][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.651423][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.674284][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  764.678684][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.708636][ T5899] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  764.717789][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=6
[  764.732232][ T5899] usb 5-1: SerialNumber: syz
[  764.748316][ T5903] usb 4-1: Using ep0 maxpacket: 8
[  764.774049][ T5899] usb 5-1: config 0 descriptor??
[  764.793903][ T5903] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  764.803176][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  764.813159][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  764.823315][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  764.835000][ T5903] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  764.849489][ T5903] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  764.859010][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.997558][T14487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.009149][T14487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.083147][ T5899] usbhid 5-1:0.0: can't add hid device: -71
[  765.097043][ T5903] usb 4-1: GET_CAPABILITIES returned 0
[  765.125144][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  765.135615][ T5903] usbtmc 4-1:16.0: can't read capabilities
[  765.163483][ T5899] usb 5-1: USB disconnect, device number 29
[  765.385209][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'.
[  765.394303][T14509] netlink: 'syz.1.2423': attribute type 9 has an invalid length.
[  765.439969][ T5905] usb 2-1: USB disconnect, device number 77
[  765.523248][ T5903] usb 4-1: USB disconnect, device number 26
[  765.741281][T14519] FAULT_INJECTION: forcing a failure.
[  765.741281][T14519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  765.755765][T14519] CPU: 1 UID: 0 PID: 14519 Comm: syz.4.2427 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) 
[  765.755791][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  765.755803][T14519] Call Trace:
[  765.755810][T14519]  <TASK>
[  765.755818][T14519]  dump_stack_lvl+0x241/0x360
[  765.755851][T14519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  765.755878][T14519]  ? __pfx__printk+0x10/0x10
[  765.755912][T14519]  should_fail_ex+0x424/0x570
[  765.755936][T14519]  _copy_to_user+0x31/0xb0
[  765.755966][T14519]  video_usercopy+0xf30/0x1330
[  765.756007][T14519]  ? __pfx_subdev_do_ioctl_lock+0x10/0x10
[  765.756052][T14519]  ? __pfx_video_usercopy+0x10/0x10
[  765.756104][T14519]  ? __fget_files+0x2a/0x420
[  765.756128][T14519]  ? __fget_files+0x2a/0x420
[  765.756150][T14519]  v4l2_ioctl+0x189/0x1e0
[  765.756183][T14519]  ? __pfx_v4l2_ioctl+0x10/0x10
[  765.756218][T14519]  __se_sys_ioctl+0xf1/0x160
[  765.756246][T14519]  do_syscall_64+0xf3/0x230
[  765.756275][T14519]  ? clear_bhb_loop+0x45/0xa0
[  765.756300][T14519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.756321][T14519] RIP: 0033:0x7f1f8438e169
[  765.756340][T14519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  765.756358][T14519] RSP: 002b:00007f1f821f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  765.756380][T14519] RAX: ffffffffffffffda RBX: 00007f1f845b5fa0 RCX: 00007f1f8438e169
[  765.756396][T14519] RDX: 0000200000000000 RSI: 00000000c040564a RDI: 0000000000000003
[  765.756410][T14519] RBP: 00007f1f821f6090 R08: 0000000000000000 R09: 0000000000000000
[  765.756423][T14519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  765.756436][T14519] R13: 0000000000000000 R14: 00007f1f845b5fa0 R15: 00007f1f846dfa28
[  765.756466][T14519]  </TASK>
[  766.170312][ T5905] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  766.248172][ T5929] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  766.360318][ T5905] usb 2-1: config 0 has no interfaces?
[  766.367771][ T5905] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  766.395028][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.404042][ T5905] usb 2-1: Product: syz
[  766.408927][ T5905] usb 2-1: Manufacturer: syz
[  766.413559][ T5905] usb 2-1: SerialNumber: syz
[  766.424632][ T5905] usb 2-1: config 0 descriptor??
[  766.437568][ T5929] usb 3-1: device descriptor read/64, error -71
[  766.553418][T14530] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  766.648926][T14515] input: syz0 as /devices/virtual/input/input73
[  766.708157][ T5929] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  766.878324][ T5929] usb 3-1: device descriptor read/64, error -71
[  767.050431][ T5929] usb usb3-port1: attempt power cycle
[  767.558142][ T5929] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  767.700584][ T5929] usb 3-1: device descriptor read/8, error -71
[  768.409495][ T5929] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  768.445923][ T5929] usb 3-1: device descriptor read/8, error -71
[  768.591856][ T5929] usb usb3-port1: unable to enumerate USB device
[  768.682567][ T5905] usb 2-1: USB disconnect, device number 78
[  768.991962][T14558] FAULT_INJECTION: forcing a failure.
[  768.991962][T14558] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  769.006689][T14558] CPU: 1 UID: 0 PID: 14558 Comm: syz.1.2439 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) 
[  769.006718][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  769.006729][T14558] Call Trace:
[  769.006735][T14558]  <TASK>
[  769.006742][T14558]  dump_stack_lvl+0x241/0x360
[  769.006771][T14558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  769.006793][T14558]  ? __pfx__printk+0x10/0x10
[  769.006823][T14558]  should_fail_ex+0x424/0x570
[  769.006843][T14558]  _copy_to_user+0x31/0xb0
[  769.006867][T14558]  simple_read_from_buffer+0xc4/0x170
[  769.006893][T14558]  proc_fail_nth_read+0x1ef/0x260
[  769.006913][T14558]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  769.006931][T14558]  ? rw_verify_area+0x246/0x630
[  769.006947][T14558]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  769.006964][T14558]  vfs_read+0x21f/0xb90
[  769.006985][T14558]  ? __pfx___mutex_lock+0x10/0x10
[  769.007006][T14558]  ? __pfx_vfs_read+0x10/0x10
[  769.007024][T14558]  ? __fget_files+0x2a/0x420
[  769.007039][T14558]  ? __fget_files+0x39d/0x420
[  769.007051][T14558]  ? __fget_files+0x2a/0x420
[  769.007071][T14558]  ksys_read+0x19d/0x2d0
[  769.007090][T14558]  ? __pfx_ksys_read+0x10/0x10
[  769.007111][T14558]  ? do_syscall_64+0xb6/0x230
[  769.007133][T14558]  do_syscall_64+0xf3/0x230
[  769.007152][T14558]  ? clear_bhb_loop+0x45/0xa0
[  769.007169][T14558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.007184][T14558] RIP: 0033:0x7f84dc38cb7c
[  769.007198][T14558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  769.007211][T14558] RSP: 002b:00007f84dd237030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  769.007228][T14558] RAX: ffffffffffffffda RBX: 00007f84dc5b5fa0 RCX: 00007f84dc38cb7c
[  769.007239][T14558] RDX: 000000000000000f RSI: 00007f84dd2370a0 RDI: 0000000000000004
[  769.007249][T14558] RBP: 00007f84dd237090 R08: 0000000000000000 R09: 0000000000000000
[  769.007259][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  769.007268][T14558] R13: 0000000000000000 R14: 00007f84dc5b5fa0 R15: 00007f84dc6dfa28
[  769.007291][T14558]  </TASK>
[  769.638058][ T5903] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  769.647246][ T5905] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  769.865814][ T5905] usb 2-1: Using ep0 maxpacket: 8
[  769.871384][ T5903] usb 3-1: config 0 has no interfaces?
[  769.881977][ T5903] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  769.948836][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.976451][ T5905] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  770.025278][ T9962] net_ratelimit: 740 callbacks suppressed
[  770.025299][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.041021][ T5903] usb 3-1: Product: syz
[  770.041044][ T5903] usb 3-1: Manufacturer: syz
[  770.041061][ T5903] usb 3-1: SerialNumber: syz
[  770.043422][ T5905] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  770.043453][ T5905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  770.043480][ T5905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  770.043504][ T5905] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  770.043551][ T5905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  770.043577][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.084402][ T5903] usb 3-1: config 0 descriptor??
[  770.291311][ T5905] usb 2-1: GET_CAPABILITIES returned 0
[  770.291367][ T5905] usbtmc 2-1:16.0: can't read capabilities
[  770.342340][T14575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  770.503529][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'.
[  770.602576][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  770.602595][   T30] audit: type=1326 audit(1744732077.923:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.647793][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.661304][   T30] audit: type=1326 audit(1744732077.923:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.692251][ T5903] usb 2-1: USB disconnect, device number 79
[  770.779600][   T30] audit: type=1326 audit(1744732077.923:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.806285][   T30] audit: type=1326 audit(1744732077.923:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.834558][   T30] audit: type=1326 audit(1744732077.923:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.858490][   T30] audit: type=1326 audit(1744732077.923:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.888801][   T30] audit: type=1326 audit(1744732077.923:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.911708][   T30] audit: type=1326 audit(1744732077.923:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  770.985762][   T30] audit: type=1326 audit(1744732077.923:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  771.038919][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'.
[  771.065737][   T30] audit: type=1326 audit(1744732077.923:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84dc38e169 code=0x7ffc0000
[  771.312002][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.359012][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'.
[  772.175369][ T5922] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  772.328075][ T5905] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  772.488040][ T5922] usb 4-1: device descriptor read/64, error -71
[  772.503805][ T5905] usb 2-1: config 0 has no interfaces?
[  772.514155][T14570] syz.4.2441 (14570): drop_caches: 2
[  772.523736][ T5905] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  772.533800][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.558815][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.589939][ T5905] usb 2-1: Product: syz
[  772.594403][ T5905] usb 2-1: Manufacturer: syz
[  772.632147][ T5905] usb 2-1: SerialNumber: syz
[  772.685189][ T5905] usb 2-1: config 0 descriptor??
[  772.817566][ T5922] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  773.225510][ T5905] usb 3-1: USB disconnect, device number 50
[  773.378205][ T5922] usb 4-1: device descriptor read/64, error -71
[  773.488504][ T5922] usb usb4-port1: attempt power cycle
[  773.902623][ T5922] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  773.968108][ T5922] usb 4-1: device descriptor read/8, error -71
[  774.307466][ T5922] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  774.361608][ T5922] usb 4-1: device descriptor read/8, error -71
[  774.528996][ T5922] usb usb4-port1: unable to enumerate USB device
[  774.821609][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'.
[  774.891278][T14638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2460'.
[  774.928565][ T5922] usb 2-1: USB disconnect, device number 80
[  774.950724][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'.
[  774.960366][T14642] netlink: 'syz.1.2463': attribute type 9 has an invalid length.
[  774.984567][T14642] macvlan8: entered allmulticast mode
[  775.288570][ T5903] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  775.538796][T14661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  775.588069][T14029] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  775.693787][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'.
[  775.734687][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'.
[  775.791444][ T5903] usb 4-1: config index 0 descriptor too short (expected 22555, got 27)
[  775.978279][ T5903] usb 4-1: config 135 has too many interfaces: 147, using maximum allowed: 32
[  776.012004][ T5903] usb 4-1: config 135 has an invalid descriptor of length 167, skipping remainder of the config
[  776.075731][T14661] syz.2.2467 (14661): drop_caches: 2
[  776.084717][ T5903] usb 4-1: config 135 has 0 interfaces, different from the descriptor's value: 147
[  776.107668][T14029] usb 2-1: config 0 has no interfaces?
[  776.160494][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08
[  776.179963][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.188637][T14029] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  776.199916][T14029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.211027][ T5903] usb 4-1: Product: syz
[  776.211049][ T5903] usb 4-1: Manufacturer: syz
[  776.211067][ T5903] usb 4-1: SerialNumber: syz
[  776.216669][T14029] usb 2-1: Product: syz
[  776.216693][T14029] usb 2-1: Manufacturer: syz
[  776.216713][T14029] usb 2-1: SerialNumber: syz
[  776.228927][T14029] usb 2-1: config 0 descriptor??
[  776.398911][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.914418][T14673] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2471'.
[  777.050877][ T5903] usb 4-1: USB disconnect, device number 31
[  777.066499][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.212594][T14029] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  777.397016][T14029] usb 5-1: config 0 has no interfaces?
[  777.409429][T14029] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  777.418861][T14029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.427027][T14029] usb 5-1: Product: syz
[  777.431719][T14029] usb 5-1: Manufacturer: syz
[  777.437385][T14029] usb 5-1: SerialNumber: syz
[  777.449593][T14029] usb 5-1: config 0 descriptor??
[  777.620006][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2474'.
[  777.746236][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'.
[  777.758603][T14686] netlink: 'syz.3.2476': attribute type 9 has an invalid length.
[  777.905687][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'.
[  777.908102][ T5922] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  778.072579][T14690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2478'.
[  778.174870][ T5901] usb 2-1: USB disconnect, device number 81
[  778.223421][ T5922] usb 3-1: config 252 has an invalid interface number: 254 but max is 0
[  778.241077][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'.
[  778.329576][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.339727][ T5922] usb 3-1: config 252 has no interface number 0
[  778.434728][ T5922] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  778.511561][ T5922] usb 3-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0
[  778.597709][ T5922] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0
[  778.634077][ T5922] usb 3-1: config 252 interface 254 has no altsetting 0
[  778.669315][ T5922] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29
[  778.705796][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.714198][ T5901] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  778.740509][ T5922] usb 3-1: Product: syz
[  778.798164][ T5903] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  778.878122][ T5901] usb 2-1: Using ep0 maxpacket: 8
[  778.885571][ T5901] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  778.894693][ T5901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  778.908082][ T5922] usb 3-1: Manufacturer: syz
[  778.912895][ T5922] usb 3-1: SerialNumber: syz
[  778.923835][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  778.968126][ T5903] usb 4-1: Using ep0 maxpacket: 8
[  778.982632][ T5903] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  779.029308][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.033636][ T5922] bfusb 3-1:252.254: probe with driver bfusb failed with error -5
[  779.053923][ T5903] usb 4-1: Product: syz
[  779.058796][ T5903] usb 4-1: Manufacturer: syz
[  779.063548][ T5903] usb 4-1: SerialNumber: syz
[  779.063577][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  779.083903][ T5901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  779.093789][ T5903] usb 4-1: config 0 descriptor??
[  779.114712][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  779.132440][ T5903] gspca_main: se401-2.14.0 probing 047d:5003
[  779.169123][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.254954][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.268977][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.303478][ T5922] usb 3-1: USB disconnect, device number 51
[  779.459054][ T5901] usb 2-1: usb_control_msg returned -32
[  779.475785][ T5901] usbtmc 2-1:16.0: can't read capabilities
[  779.772566][ T5903] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  779.780608][ T5903] se401 4-1:0.0: probe with driver se401 failed with error -71
[  779.818906][T14712] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  779.833175][ T5903] usb 4-1: USB disconnect, device number 32
[  780.049716][T14719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  780.629232][T14029] usb 5-1: USB disconnect, device number 30
[  780.884028][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.311734][T14719] syz.3.2485 (14719): drop_caches: 2
[  781.492427][ T2154] usb 2-1: USB disconnect, device number 82
[  781.549290][T14738] loop9: detected capacity change from 0 to 7
[  781.556180][T14738] Dev loop9: unable to read RDB block 7
[  781.562003][T14738]  loop9: unable to read partition table
[  781.567830][T14738] loop9: partition table beyond EOD, truncated
[  781.574465][T14738] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  782.232695][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.860607][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.998148][T14029] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  783.058717][ T2154] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  783.258102][T14029] usb 4-1: device descriptor read/64, error -71
[  783.299790][ T2154] usb 2-1: config 0 has no interfaces?
[  783.322490][ T2154] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  783.459951][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.578173][T14029] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  783.655116][ T2154] usb 2-1: Product: syz
[  783.727712][ T2154] usb 2-1: Manufacturer: syz
[  783.742143][ T2154] usb 2-1: SerialNumber: syz
[  783.788136][ T5899] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  783.816775][ T2154] usb 2-1: config 0 descriptor??
[  783.848333][T14029] usb 4-1: device descriptor read/64, error -71
[  783.979229][T14029] usb usb4-port1: attempt power cycle
[  784.064933][ T5899] usb 3-1: config 0 has no interfaces?
[  784.078739][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.095626][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  784.117775][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.131282][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'.
[  784.146969][ T5899] usb 3-1: Product: syz
[  784.177896][ T5899] usb 3-1: Manufacturer: syz
[  784.194306][ T5899] usb 3-1: SerialNumber: syz
[  784.221919][ T5899] usb 3-1: config 0 descriptor??
[  784.438280][T14029] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  784.466326][T14776] input: syz0 as /devices/virtual/input/input74
[  784.510851][T14029] usb 4-1: device descriptor read/8, error -71
[  784.768555][T14029] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  784.799873][T14029] usb 4-1: device descriptor read/8, error -71
[  784.927508][T14029] usb usb4-port1: unable to enumerate USB device
[  785.578802][T14029] usb 2-1: USB disconnect, device number 83
[  785.710146][T14810] netlink: 'syz.1.2521': attribute type 4 has an invalid length.
[  786.734887][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.763603][T14821] xt_CT: No such helper "pptp"
[  787.298615][ T5903] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  787.930020][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.010251][ T5903] usb 2-1: config 0 has no interfaces?
[  788.039526][T14029] usb 3-1: USB disconnect, device number 52
[  788.046226][ T5903] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  788.070305][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.085270][ T5903] usb 2-1: Product: syz
[  788.091636][ T5903] usb 2-1: Manufacturer: syz
[  788.096264][ T5903] usb 2-1: SerialNumber: syz
[  788.103729][ T5903] usb 2-1: config 0 descriptor??
[  788.509446][T14861] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  788.558579][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.708035][T14029] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  788.788149][ T5903] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  788.851560][T14029] usb 3-1: device descriptor read/64, error -71
[  788.930009][ T2154] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  789.078692][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  789.098173][T14029] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  789.139900][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  789.161679][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  789.174034][ T2154] usb 4-1: config 0 has no interfaces?
[  789.185080][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  789.206456][ T2154] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  789.216110][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.241245][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.258528][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  789.278139][T14029] usb 3-1: device descriptor read/64, error -71
[  789.291250][ T2154] usb 4-1: Product: syz
[  789.297192][ T5903] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  789.311547][ T2154] usb 4-1: Manufacturer: syz
[  789.320220][ T2154] usb 4-1: SerialNumber: syz
[  789.330204][ T5903] usb 5-1: Manufacturer: syz
[  789.341146][ T2154] usb 4-1: config 0 descriptor??
[  789.350796][ T5903] usb 5-1: config 0 descriptor??
[  789.388332][T14029] usb usb3-port1: attempt power cycle
[  789.738482][T14029] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  789.798626][T14029] usb 3-1: device descriptor read/8, error -71
[  790.000583][ T2154] usb 2-1: USB disconnect, device number 84
[  790.061407][T14029] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  790.443319][T14029] usb 3-1: device descriptor read/8, error -71
[  790.606963][T14029] usb usb3-port1: unable to enumerate USB device
[  790.848104][ T5899] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  791.018061][ T5899] usb 2-1: Using ep0 maxpacket: 8
[  791.025792][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short
[  791.035218][ T5899] usb 2-1: config 5 has an invalid interface number: 215 but max is 0
[  791.044599][ T5899] usb 2-1: config 5 has no interface number 0
[  791.051405][ T5899] usb 2-1: config 5 interface 215 has no altsetting 0
[  791.061688][ T5899] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  791.074135][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.082426][ T5899] usb 2-1: Product: à š
[  791.086648][ T5899] usb 2-1: Manufacturer: �
[  791.091617][ T5899] usb 2-1: SerialNumber: ⑀�꜉垲㘅ᨲ⼺�ꂸ㎩�䪲ड옦雧沣裿︀⟎㈳碊㆟�毌ວ�鞃쑞岋ᗀ�鯄⵪���♵钋ᚓ箦樞鳦�欚蘯秬ŗ�≋뿅줸硂慦몒ﮒ韣㯞뚥ᶣ⻎魥裌먩헿㢗˿鋮푓᭒䇠룕�笠☒셬�줽䬞멕쬟둖ႄ�犱뢥嫒�⛅�➎㧽Ƽ�㌾�홃
[  791.373613][    T9] usb 5-1: USB disconnect, device number 31
[  791.819557][T14029] usb 4-1: USB disconnect, device number 37
[  791.872224][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  792.041775][    T9] usb 5-1: config 0 has no interfaces?
[  792.060914][ T5899] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected
[  792.072156][    T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  792.092882][ T5899] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  792.100265][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.141073][ T5899] usb 2-1: USB disconnect, device number 85
[  792.151197][    T9] usb 5-1: Product: syz
[  792.155411][    T9] usb 5-1: Manufacturer: syz
[  792.161330][    T9] usb 5-1: SerialNumber: syz
[  792.183758][ T5899] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  792.225112][    T9] usb 5-1: config 0 descriptor??
[  792.238291][ T5922] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  792.373644][ T5899] cypress_m8 2-1:5.215: device disconnected
[  792.398566][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.409054][ T5922] usb 3-1: Using ep0 maxpacket: 16
[  792.431379][ T5922] usb 3-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30
[  792.588155][T14883] input: syz0 as /devices/virtual/input/input76
[  792.606643][ T5922] usb 3-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  792.681137][ T5899] usb 5-1: USB disconnect, device number 32
[  792.693454][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0
[  792.720372][ T5922] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[  792.747515][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.757280][ T5922] usb 3-1: Product: syz
[  792.765745][ T5922] usb 3-1: Manufacturer: syz
[  792.771845][ T5922] usb 3-1: SerialNumber: syz
[  792.786460][ T5922] usb 3-1: config 0 descriptor??
[  792.802017][ T5922] usb 3-1: cannot find UAC_HEADER
[  792.831010][ T5922] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  792.873484][T13586] udevd[13586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  793.045409][ T5922] usb 3-1: USB disconnect, device number 57
[  793.058920][T14911] loop9: detected capacity change from 0 to 7
[  793.071790][T14911] Dev loop9: unable to read RDB block 7
[  793.077605][T14911]  loop9: unable to read partition table
[  793.085278][T14911] loop9: partition table beyond EOD, truncated
[  793.091602][T14911] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  793.538229][ T5901] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  793.700497][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.708800][ T5899] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  793.898083][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  794.077115][ T5899] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  794.098053][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  794.115969][ T5901] usb 2-1: config 0 has no interfaces?
[  794.274442][ T5901] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  794.376027][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.382870][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.384274][ T5901] usb 2-1: Product: syz
[  794.393084][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  794.396297][ T5901] usb 2-1: Manufacturer: syz
[  794.436934][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  794.444433][ T5901] usb 2-1: SerialNumber: syz
[  794.465630][ T5901] usb 2-1: config 0 descriptor??
[  794.493322][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  794.547793][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  794.562998][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.754283][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'.
[  794.778065][T14029] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  794.787541][ T5899] usb 5-1: GET_CAPABILITIES returned 0
[  794.794055][ T5899] usbtmc 5-1:16.0: can't read capabilities
[  794.828058][ T5901] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  794.938027][T14029] usb 4-1: Using ep0 maxpacket: 8
[  794.948054][T14029] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  794.960022][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.974030][T14029] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  794.983344][T14029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.991510][T14029] usb 4-1: Product: syz
[  794.995694][T14029] usb 4-1: Manufacturer: syz
[  795.000369][T14029] usb 4-1: SerialNumber: syz
[  795.011579][ T5901] usb 3-1: config index 0 descriptor too short (expected 37460, got 77)
[  795.012232][T14029] usb 4-1: config 0 descriptor??
[  795.049504][ T5901] usb 3-1: config 100 has too many interfaces: 62, using maximum allowed: 32
[  795.053845][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  795.053863][   T30] audit: type=1326 audit(1744732102.373:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.058529][ T5901] usb 3-1: config 100 has an invalid descriptor of length 249, skipping remainder of the config
[  795.097472][ T5901] usb 3-1: config 100 has 0 interfaces, different from the descriptor's value: 62
[  795.130338][ T5901] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  795.151893][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.159924][   T30] audit: type=1326 audit(1744732102.393:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.159973][   T30] audit: type=1326 audit(1744732102.393:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.160126][   T30] audit: type=1326 audit(1744732102.393:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.160170][   T30] audit: type=1326 audit(1744732102.393:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.160214][   T30] audit: type=1326 audit(1744732102.393:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.160257][   T30] audit: type=1326 audit(1744732102.393:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.160303][   T30] audit: type=1326 audit(1744732102.403:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.160347][   T30] audit: type=1326 audit(1744732102.403:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  795.194796][ T5901] usb 3-1: Product: syz
[  795.356091][T14029] usb 4-1: USB disconnect, device number 38
[  795.366398][ T5901] usb 3-1: Manufacturer: syz
[  795.372527][ T5899] usb 5-1: USB disconnect, device number 33
[  795.389094][ T5901] usb 3-1: SerialNumber: syz
[  795.404196][   T30] audit: type=1326 audit(1744732102.433:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  796.227328][ T5899] usb 2-1: USB disconnect, device number 86
[  796.300801][ T5929] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  796.592172][ T5929] usb 4-1: config 0 has no interfaces?
[  796.605498][ T5929] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  796.625836][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.637675][ T5929] usb 4-1: Product: syz
[  796.644725][ T5929] usb 4-1: Manufacturer: syz
[  796.653621][ T5929] usb 4-1: SerialNumber: syz
[  796.678969][ T5929] usb 4-1: config 0 descriptor??
[  797.070901][T14956] input: syz0 as /devices/virtual/input/input77
[  797.198454][T14029] usb 4-1: USB disconnect, device number 39
[  797.594891][T14979] netem: change failed
[  797.795036][ T5901] usb 3-1: USB disconnect, device number 58
[  797.826957][ T5922] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  798.158626][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.271831][ T5922] usb 2-1: config 0 has no interfaces?
[  798.362819][ T5922] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  798.408023][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.436817][ T5922] usb 2-1: Product: syz
[  798.574462][ T5922] usb 2-1: Manufacturer: syz
[  798.601717][ T5922] usb 2-1: SerialNumber: syz
[  798.639494][ T5922] usb 2-1: config 0 descriptor??
[  798.898042][    T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  798.968394][ T5922] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  799.071010][    T9] usb 3-1: device descriptor read/64, error -71
[  799.148191][ T5922] usb 4-1: Using ep0 maxpacket: 8
[  799.160564][ T5922] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  799.192487][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  799.318105][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  799.340781][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  799.373821][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  799.410663][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  799.438903][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.461486][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  799.486790][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.508063][    T9] usb 3-1: device descriptor read/64, error -71
[  799.648661][    T9] usb usb3-port1: attempt power cycle
[  799.735304][ T5922] usb 4-1: GET_CAPABILITIES returned 0
[  799.764083][ T5922] usbtmc 4-1:16.0: can't read capabilities
[  799.999364][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.019900][    T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  800.048809][ T5922] usb 4-1: USB disconnect, device number 40
[  800.070284][    T9] usb 3-1: device descriptor read/8, error -71
[  800.079295][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.328112][    T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  800.348703][    T9] usb 3-1: device descriptor read/8, error -71
[  800.388426][ T5922] usb 2-1: USB disconnect, device number 87
[  800.459105][    T9] usb usb3-port1: unable to enumerate USB device
[  801.458086][ T5899] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  801.491326][T14029] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  801.548051][ T5922] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  801.610309][ T5899] usb 2-1: config 0 has no interfaces?
[  801.619062][ T5899] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  801.628386][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.636547][ T5899] usb 2-1: Product: syz
[  801.645352][ T5899] usb 2-1: Manufacturer: syz
[  801.656999][T14029] usb 4-1: config 0 has no interfaces?
[  801.668252][ T5899] usb 2-1: SerialNumber: syz
[  801.682238][T14029] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  801.692739][T14029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.702044][ T5899] usb 2-1: config 0 descriptor??
[  801.708168][ T5922] usb 5-1: Using ep0 maxpacket: 8
[  801.725166][ T5922] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  801.742948][ T5922] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  801.746025][T14029] usb 4-1: Product: syz
[  801.765595][T14029] usb 4-1: Manufacturer: syz
[  801.768268][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  801.776906][T14029] usb 4-1: SerialNumber: syz
[  801.798099][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  801.806110][T14029] usb 4-1: config 0 descriptor??
[  801.818303][ T5922] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  801.845181][ T5922] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  801.855085][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.893555][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'.
[  801.902699][T15023] netlink: 'syz.2.2585': attribute type 9 has an invalid length.
[  801.917392][T15023] macvlan5: entered allmulticast mode
[  801.973446][T15014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2580'.
[  801.987979][T15014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2580'.
[  802.068133][T15013] input: syz0 as /devices/virtual/input/input78
[  802.086520][ T5922] usb 5-1: GET_CAPABILITIES returned 0
[  802.092511][ T5922] usbtmc 5-1:16.0: can't read capabilities
[  802.155494][ T5899] usb 4-1: USB disconnect, device number 41
[  802.192456][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.201357][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.211855][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.220306][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.229124][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.237394][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.260705][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.349471][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  802.349491][   T30] audit: type=1326 audit(1744732109.693:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.379086][   T30] audit: type=1326 audit(1744732109.693:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.406700][ T5922] usb 5-1: USB disconnect, device number 34
[  802.406902][   T30] audit: type=1326 audit(1744732109.693:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.435406][   T30] audit: type=1326 audit(1744732109.693:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.476629][   T30] audit: type=1326 audit(1744732109.693:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.500398][   T30] audit: type=1326 audit(1744732109.693:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.522845][   T30] audit: type=1326 audit(1744732109.693:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.545380][   T30] audit: type=1326 audit(1744732109.693:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.568233][   T30] audit: type=1326 audit(1744732109.693:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.591121][   T30] audit: type=1326 audit(1744732109.693:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  802.655678][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'.
[  802.818722][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2591'.
[  803.446643][T15062] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2597'.
[  803.558263][ T5901] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  803.613404][ T5922] usb 2-1: USB disconnect, device number 88
[  803.733305][ T5901] usb 5-1: Using ep0 maxpacket: 8
[  803.758325][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  803.791057][ T5901] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  804.218860][ T5922] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  804.466317][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.559542][ T2928] net_ratelimit: 739 callbacks suppressed
[  804.559565][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.561433][ T5901] usb 5-1: config 0 descriptor??
[  804.627605][ T5922] usb 2-1: config 0 has no interfaces?
[  804.662594][ T5922] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  804.672975][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.682847][ T5922] usb 2-1: Product: syz
[  804.687093][ T5922] usb 2-1: Manufacturer: syz
[  804.698877][ T5922] usb 2-1: SerialNumber: syz
[  804.720570][ T5922] usb 2-1: config 0 descriptor??
[  804.892358][T15079] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2603'.
[  804.907199][T15079] netlink: zone id is out of range
[  804.917296][T15079] netlink: zone id is out of range
[  804.962616][T15079] netlink: zone id is out of range
[  804.978249][T15079] netlink: zone id is out of range
[  804.994179][T15081] loop9: detected capacity change from 0 to 7
[  805.007625][ T5901] holtek 0003:1241:5015.001F: unknown main item tag 0x0
[  805.015035][T15079] netlink: zone id is out of range
[  805.024770][ T5901] holtek 0003:1241:5015.001F: unknown main item tag 0x0
[  805.039858][T15079] netlink: zone id is out of range
[  805.047762][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.060269][T15081] Dev loop9: unable to read RDB block 7
[  805.068096][ T5901] holtek 0003:1241:5015.001F: item fetching failed at offset 2/5
[  805.068503][T15079] netlink: zone id is out of range
[  805.081760][T15079] netlink: zone id is out of range
[  805.087305][T15081]  loop9: unable to read partition table
[  805.094460][ T5901] holtek 0003:1241:5015.001F: parse failed
[  805.103653][T15081] loop9: partition table beyond EOD, truncated
[  805.122013][ T5901] holtek 0003:1241:5015.001F: probe with driver holtek failed with error -22
[  805.131989][T15081] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  805.223814][ T5901] usb 5-1: USB disconnect, device number 35
[  805.588126][ T5899] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  805.849155][ T5899] usb 4-1: no configurations
[  805.953978][ T5899] usb 4-1: can't read configurations, error -22
[  806.168044][ T5899] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  806.265074][T15096] "syz.4.2607" (15096) uses obsolete ecb(arc4) skcipher
[  806.415655][ T5899] usb 4-1: no configurations
[  806.482605][ T5899] usb 4-1: can't read configurations, error -22
[  806.493478][ T5899] usb usb4-port1: attempt power cycle
[  806.668082][ T5901] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  806.917899][ T5899] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  807.054655][ T5901] usb 3-1: config index 0 descriptor too short (expected 64609, got 77)
[  807.065467][ T5901] usb 3-1: config 105 has too many interfaces: 126, using maximum allowed: 32
[  807.138516][ T5899] usb 4-1: no configurations
[  807.143173][ T5899] usb 4-1: can't read configurations, error -22
[  807.155684][ T5901] usb 3-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config
[  807.181868][ T5929] usb 2-1: USB disconnect, device number 89
[  807.278449][ T5899] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  807.364693][ T5901] usb 3-1: config 105 has 0 interfaces, different from the descriptor's value: 126
[  807.386671][ T5899] usb 4-1: no configurations
[  807.433782][ T5899] usb 4-1: can't read configurations, error -22
[  807.456888][ T5901] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  807.469491][ T5899] usb usb4-port1: unable to enumerate USB device
[  807.538583][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.567199][ T5901] usb 3-1: Product: syz
[  807.584620][ T5901] usb 3-1: Manufacturer: syz
[  807.728214][ T5901] usb 3-1: SerialNumber: syz
[  807.788058][ T5929] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  808.129689][ T5929] usb 2-1: too many configurations: 150, using maximum allowed: 8
[  808.143046][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -61
[  808.151272][ T5929] usb 2-1: can't read configurations, error -61
[  808.318284][ T5929] usb 2-1: new full-speed USB device number 91 using dummy_hcd
[  808.480184][ T5929] usb 2-1: too many configurations: 150, using maximum allowed: 8
[  808.499470][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -61
[  808.509472][ T5929] usb 2-1: can't read configurations, error -61
[  808.521395][ T5929] usb usb2-port1: attempt power cycle
[  808.888229][ T5929] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  808.949560][ T5929] usb 2-1: too many configurations: 150, using maximum allowed: 8
[  808.960075][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -61
[  808.967837][ T5929] usb 2-1: can't read configurations, error -61
[  809.099005][ T5929] usb 2-1: new full-speed USB device number 93 using dummy_hcd
[  809.129897][ T5929] usb 2-1: too many configurations: 150, using maximum allowed: 8
[  809.143852][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -61
[  809.168075][ T5929] usb 2-1: can't read configurations, error -61
[  809.175281][ T5929] usb usb2-port1: unable to enumerate USB device
[  809.439964][ T5901] usb 3-1: USB disconnect, device number 63
[  809.679332][ T9964] net_ratelimit: 6 callbacks suppressed
[  809.679353][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.851241][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'.
[  810.008093][ T5899] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  810.181974][ T5899] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  810.193997][ T5899] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  810.204498][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  810.213610][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.225101][T15127] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  810.235242][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  810.318890][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.327659][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.635732][T15138] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2621'.
[  811.061817][T15145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  811.070594][T15145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.386675][ T5899] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  811.602362][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.968035][ T5901] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  811.985976][ T5899] usb 5-1: config 0 has no interfaces?
[  812.017633][ T5899] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  812.026825][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.034948][ T5899] usb 5-1: Product: syz
[  812.039163][ T5899] usb 5-1: Manufacturer: syz
[  812.043822][ T5899] usb 5-1: SerialNumber: syz
[  812.060027][ T5899] usb 5-1: config 0 descriptor??
[  812.210396][ T5901] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  812.242964][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  812.312659][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 7
[  812.338750][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24929, setting to 1024
[  812.364290][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  812.405253][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  812.419444][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.436223][ T5901] usb 2-1: config 0 descriptor??
[  812.665196][ T5901] usb 3-1: USB disconnect, device number 64
[  812.709544][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  812.718761][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.082112][T15167] netlink: 'syz.2.2629': attribute type 1 has an invalid length.
[  813.213417][T15171] bond2: entered promiscuous mode
[  813.234716][T15171] bond2: entered allmulticast mode
[  813.248510][T15171] 8021q: adding VLAN 0 to HW filter on device bond2
[  813.278195][ T5901] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  813.340563][T15167] 8021q: adding VLAN 0 to HW filter on device batadv2
[  813.364911][T15167] batadv2: entered promiscuous mode
[  813.416201][ T9964] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  813.470194][T15167] batadv2: entered allmulticast mode
[  813.516772][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  813.544295][T15167] bond2: (slave batadv2): Enslaving as an active interface with an up link
[  813.571612][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  813.729634][ T9964] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  813.753845][ T5901] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  813.767044][ T5929] usb 5-1: USB disconnect, device number 36
[  813.818197][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.886214][ T5901] usb 4-1: config 0 descriptor??
[  813.931448][ T5901] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22
[  814.125628][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'.
[  814.522565][ T5901] usb 2-1: USB disconnect, device number 94
[  814.802468][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  814.808948][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  814.898999][ T5901] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  815.068293][ T5901] usb 2-1: Using ep0 maxpacket: 16
[  815.083369][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.093702][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  815.105754][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  815.117997][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.126063][ T5901] usb 2-1: Product: syz
[  815.145363][ T5901] usb 2-1: Manufacturer: syz
[  815.154520][ T5901] usb 2-1: SerialNumber: syz
[  815.384304][ T5901] usb 2-1: 0:2 : does not exist
[  815.410570][ T5901] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  815.440983][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.448508][ T5901] usb 2-1: USB disconnect, device number 95
[  815.480237][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.698819][T13586] udevd[13586]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  815.858523][ T5903] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  815.919569][ T5901] usb 4-1: USB disconnect, device number 46
[  815.954245][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'.
[  815.963386][T15223] netlink: 'syz.1.2645': attribute type 9 has an invalid length.
[  815.973557][T15222] tty tty4: ldisc open failed (-12), clearing slot 3
[  816.002553][T15223] macvlan9: entered allmulticast mode
[  816.031788][ T5903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  816.076408][ T5903] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  816.090401][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.121461][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  816.238137][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.246205][ T5903] usb 3-1: Product: syz
[  816.307743][ T5903] usb 3-1: Manufacturer: syz
[  816.345927][ T5903] usb 3-1: SerialNumber: syz
[  816.900412][T13316] bond0: (slave syz_tun): Releasing backup interface
[  817.107594][ T9962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.368720][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.445845][ T9962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.566560][T15246] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  817.687751][ T9962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.718832][T15255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  817.730260][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  817.744022][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  817.756118][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  817.771102][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  817.834708][ T9962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.268605][ T9962] bridge_slave_1: left allmulticast mode
[  818.281743][ T9962] bridge_slave_1: left promiscuous mode
[  818.300442][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.377404][ T9962] bridge_slave_0: left allmulticast mode
[  818.399308][ T9962] bridge_slave_0: left promiscuous mode
[  818.405129][ T9962] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.598173][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  818.727637][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2657'.
[  818.746181][T15271] netlink: 'syz.3.2657': attribute type 9 has an invalid length.
[  818.914836][    T9] usb 5-1: Using ep0 maxpacket: 32
[  818.923411][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  818.932827][    T9] usb 5-1: can't read configurations, error -61
[  819.016288][ T5903] cdc_ncm 3-1:1.0: bind() failure
[  819.051033][ T5903] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  819.066173][ T5903] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  819.076199][ T5903] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  819.096559][ T5903] usb 3-1: USB disconnect, device number 65
[  819.158038][    T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  819.310543][    T9] usb 5-1: Using ep0 maxpacket: 32
[  819.327658][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  819.339292][    T9] usb 5-1: can't read configurations, error -61
[  819.358728][    T9] usb usb5-port1: attempt power cycle
[  819.701478][    T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  819.742016][    T9] usb 5-1: Using ep0 maxpacket: 32
[  819.751257][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  819.759173][    T9] usb 5-1: can't read configurations, error -61
[  819.838088][ T5847] Bluetooth: hci4: command tx timeout
[  819.908056][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  819.935274][    T9] usb 5-1: Using ep0 maxpacket: 32
[  819.943327][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  819.956703][    T9] usb 5-1: can't read configurations, error -61
[  819.964021][    T9] usb usb5-port1: unable to enumerate USB device
[  820.073965][ T9962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.113442][ T9962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.131398][ T9962] bond0 (unregistering): Released all slaves
[  820.235392][ T9962] : left promiscuous mode
[  820.370464][ T9962] tipc: Disabling bearer <eth:team0>
[  820.404385][ T9962] tipc: Disabling bearer <udp:syz0>
[  820.446499][ T9962] tipc: Left network mode
[  820.480683][T15258] chnl_net:caif_netlink_parms(): no params data found
[  821.053678][T15258] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.066017][T15258] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.076733][T15258] bridge_slave_0: entered allmulticast mode
[  821.095129][T15258] bridge_slave_0: entered promiscuous mode
[  821.158963][T15258] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.183474][T15258] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.198454][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.207465][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.226804][T15258] bridge_slave_1: entered allmulticast mode
[  821.237696][T15258] bridge_slave_1: entered promiscuous mode
[  821.565068][T15258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.591451][T15258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.838868][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.906215][ T5929] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  821.920384][ T5847] Bluetooth: hci4: command tx timeout
[  822.342408][T15258] team0: Port device team_slave_0 added
[  822.399138][ T5929] usb 4-1: config index 0 descriptor too short (expected 12336, got 77)
[  822.415184][ T5929] usb 4-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  822.458447][ T9962] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode
[  822.596014][ T5929] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  822.618289][ T5929] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  822.658159][ T5929] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  822.667321][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.722818][ T5929] usb 4-1: Product: syz
[  822.727052][ T5929] usb 4-1: Manufacturer: syz
[  822.757989][ T5929] usb 4-1: SerialNumber: syz
[  822.769688][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.778139][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.837484][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.886642][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.895434][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.923273][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.967880][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.120418][T15338] loop9: detected capacity change from 0 to 7
[  823.207065][T15258] team0: Port device team_slave_1 added
[  823.242716][T15338] Dev loop9: unable to read RDB block 7
[  823.277527][T15338]  loop9: unable to read partition table
[  823.322784][T15338] loop9: partition table beyond EOD, truncated
[  823.353033][T15338] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  823.375172][ T9962] hsr_slave_0: left promiscuous mode
[  823.420651][ T9962] hsr_slave_1: left promiscuous mode
[  823.446978][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  823.485989][ T9962] batman_adv: batadv0: Removing interface: batadv_slave_0
[  823.561117][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  823.585163][ T9962] batman_adv: batadv0: Removing interface: batadv_slave_1
[  823.676187][ T9962] veth1_macvtap: left promiscuous mode
[  823.694012][ T9962] veth0_macvtap: left promiscuous mode
[  823.765109][ T9962] veth1_vlan: left promiscuous mode
[  823.788579][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'.
[  823.799625][ T9962] veth0_vlan: left promiscuous mode
[  823.818205][T15348] netlink: 'syz.2.2670': attribute type 9 has an invalid length.
[  823.999133][ T5847] Bluetooth: hci4: command tx timeout
[  824.148541][ T9962] pimreg3 (unregistering): left allmulticast mode
[  824.698111][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  824.698134][   T30] audit: type=1326 audit(1744732132.033:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  824.737447][   T30] audit: type=1326 audit(1744732132.033:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  824.784002][   T30] audit: type=1326 audit(1744732132.033:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  824.822758][   T30] audit: type=1326 audit(1744732132.083:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  824.855858][   T30] audit: type=1326 audit(1744732132.083:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  824.903154][   T30] audit: type=1326 audit(1744732132.083:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  825.019727][   T30] audit: type=1326 audit(1744732132.113:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  825.053952][   T30] audit: type=1326 audit(1744732132.163:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  825.076909][   T30] audit: type=1326 audit(1744732132.163:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  825.115644][   T30] audit: type=1326 audit(1744732132.193:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15351 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f8438e169 code=0x7ffc0000
[  825.173390][ T9962] team0 (unregistering): Port device team_slave_1 removed
[  825.375919][ T5929] usb 4-1: USB disconnect, device number 48
[  825.413042][ T9962] team0 (unregistering): Port device team_slave_0 removed
[  825.908306][ T2154] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  826.062309][ T2154] usb 5-1: Using ep0 maxpacket: 32
[  826.070325][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61
[  826.078797][ T5847] Bluetooth: hci4: command tx timeout
[  826.093473][ T2154] usb 5-1: can't read configurations, error -61
[  826.270653][ T2154] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  826.336305][  T198] net_ratelimit: 739 callbacks suppressed
[  826.336329][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.428379][ T2154] usb 5-1: Using ep0 maxpacket: 32
[  826.450917][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61
[  826.468309][ T2154] usb 5-1: can't read configurations, error -61
[  826.496529][ T2154] usb usb5-port1: attempt power cycle
[  826.734282][T15348] macvlan6: entered allmulticast mode
[  826.741551][T15258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.755050][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  826.793413][T15258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.830322][T15373] loop9: detected capacity change from 0 to 7
[  826.845149][T15373] Dev loop9: unable to read RDB block 7
[  826.858059][ T2154] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  826.858262][T15373]  loop9: unable to read partition table
[  826.874939][T15373] loop9: partition table beyond EOD, truncated
[  826.881634][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.901802][ T2154] usb 5-1: Using ep0 maxpacket: 32
[  826.905694][T15373] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  826.919251][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61
[  826.926864][ T2154] usb 5-1: can't read configurations, error -61
[  826.952536][T15258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.960495][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.979052][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  827.066821][T15258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  827.128261][ T2154] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  827.148713][ T2154] usb 5-1: Using ep0 maxpacket: 32
[  827.163377][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61
[  827.171630][ T2154] usb 5-1: can't read configurations, error -61
[  827.181813][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  827.198612][ T2154] usb usb5-port1: unable to enumerate USB device
[  827.314325][T15258] hsr_slave_0: entered promiscuous mode
[  827.331626][T15258] hsr_slave_1: entered promiscuous mode
[  827.337736][T15258] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  827.363200][T15258] Cannot create hsr debugfs directory
[  827.778774][ T5903] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  827.818480][T15378] syz.3.2678 (15378): drop_caches: 2
[  827.976076][ T5903] usb 3-1: Using ep0 maxpacket: 32
[  827.991093][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0
[  828.015118][ T5903] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  828.028205][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.046533][ T5903] usb 3-1: config 0 descriptor??
[  828.163556][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.375016][T15258] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  828.397726][T15258] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  828.412580][T15258] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  828.436342][T15258] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  828.631347][T15258] 8021q: adding VLAN 0 to HW filter on device bond0
[  828.667789][T15258] 8021q: adding VLAN 0 to HW filter on device team0
[  828.739458][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.746697][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  828.840477][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.847708][ T9955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  829.127057][T15258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  829.148604][ T5929] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  829.240053][ T5903] usb 3-1: string descriptor 0 read error: -71
[  829.283784][ T5903] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  829.307947][T15258] veth0_vlan: entered promiscuous mode
[  829.329536][ T5929] usb 4-1: Using ep0 maxpacket: 8
[  829.333611][ T5903] usb 3-1: USB disconnect, device number 66
[  829.363501][T15258] veth1_vlan: entered promiscuous mode
[  829.403415][ T5929] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  829.418087][ T5929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  829.448109][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  829.480373][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  829.508002][ T5929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  829.525273][T15258] veth0_macvtap: entered promiscuous mode
[  829.550745][T15258] veth1_macvtap: entered promiscuous mode
[  829.556707][ T5929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  829.583890][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.606504][T15258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  829.638081][T15258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.658043][T15258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  829.679003][T15258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.708034][T15258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  829.728040][T15258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.750109][T15258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  829.790971][T15258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  829.821919][T15258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.843470][ T5929] usb 4-1: GET_CAPABILITIES returned 0
[  829.858385][ T5929] usbtmc 4-1:16.0: can't read capabilities
[  829.880860][T15258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  829.917486][T15258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.938254][T15258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  829.949214][T15258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.963487][T15258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  829.991259][T15258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  830.013291][T15258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  830.066789][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  830.066811][   T30] audit: type=1326 audit(1744732137.403:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.099133][   T30] audit: type=1326 audit(1744732137.403:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.105576][T15258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  830.123209][   T30] audit: type=1326 audit(1744732137.403:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.239109][T15258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  830.255263][   T30] audit: type=1326 audit(1744732137.403:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.264219][ T5929] usb 4-1: USB disconnect, device number 49
[  830.372602][   T30] audit: type=1326 audit(1744732137.403:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.466542][   T30] audit: type=1326 audit(1744732137.413:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.535567][   T30] audit: type=1326 audit(1744732137.413:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.588501][   T30] audit: type=1326 audit(1744732137.413:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.623880][   T30] audit: type=1326 audit(1744732137.433:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.656487][   T30] audit: type=1326 audit(1744732137.433:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  830.686165][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.795337][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.043416][  T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.061898][  T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.213481][T15457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  831.572448][T15459] syz.4.2687 (15459): drop_caches: 2
[  832.078863][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.313583][T15467] netlink: 'syz.1.2688': attribute type 2 has an invalid length.
[  832.570073][ T5929] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  832.750168][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  832.759135][ T5929] usb 2-1: not running at top speed; connect to a high speed hub
[  832.768129][ T5929] usb 2-1: config 36 has an invalid descriptor of length 1, skipping remainder of the config
[  832.778732][ T5929] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 3
[  832.791311][ T5929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  832.801280][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.808615][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.809455][ T5929] usb 2-1: Product: syz
[  832.821904][ T5929] usb 2-1: Manufacturer: syz
[  832.826632][ T5929] usb 2-1: SerialNumber: syz
[  833.045157][T15467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.054062][T15467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.998615][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.007869][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.226415][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'.
[  834.236760][T15498] netlink: 'syz.2.2690': attribute type 9 has an invalid length.
[  834.281915][T15498] macvlan7: entered allmulticast mode
[  834.656858][T15510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  835.245250][ T5929] usb 2-1: USB disconnect, device number 96
[  835.258073][T14029] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  835.470425][T14029] usb 3-1: config 0 has no interfaces?
[  835.488597][T14029] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  835.499088][T14029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.507119][T14029] usb 3-1: Product: syz
[  835.516692][T14029] usb 3-1: Manufacturer: syz
[  835.525441][T14029] usb 3-1: SerialNumber: syz
[  835.547245][T14029] usb 3-1: config 0 descriptor??
[  835.658109][ T5929] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  835.728227][ T5899] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  835.834461][ T5929] usb 2-1: Using ep0 maxpacket: 8
[  835.851941][ T5929] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  835.865965][ T5929] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  835.916734][ T5929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  835.923694][T15510] syz.4.2691 (15510): drop_caches: 2
[  835.927763][ T5929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  835.932788][ T5899] usb 4-1: Using ep0 maxpacket: 8
[  835.985523][ T5899] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  835.994315][ T5929] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  836.014693][ T5899] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  836.027566][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  836.041950][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  836.107433][ T5899] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  836.152024][ T5899] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  836.155263][ T5929] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  836.171063][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.346015][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.418724][ T5899] usb 4-1: GET_CAPABILITIES returned 0
[  836.424403][ T5899] usbtmc 4-1:16.0: can't read capabilities
[  836.700834][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  836.700855][   T30] audit: type=1326 audit(1744732144.043:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  836.757145][   T30] audit: type=1326 audit(1744732144.073:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7678b8e169 code=0x7ffc0000
[  836.757869][ T5929] usb 2-1: GET_CAPABILITIES returned 0
[  836.979494][T14029] usb 4-1: USB disconnect, device number 50
[  837.026368][ T5929] usbtmc 2-1:16.0: can't read capabilities
[  837.079484][   T30] audit: type=1326 audit(1744732144.393:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.118458][ T5929] usb 2-1: USB disconnect, device number 97
[  837.170450][   T30] audit: type=1326 audit(1744732144.393:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.296070][   T30] audit: type=1326 audit(1744732144.403:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.351817][   T30] audit: type=1326 audit(1744732144.403:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.386311][   T30] audit: type=1326 audit(1744732144.403:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.560912][   T30] audit: type=1326 audit(1744732144.403:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.638098][   T30] audit: type=1326 audit(1744732144.403:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.692577][   T30] audit: type=1326 audit(1744732144.403:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  837.797875][T15556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  837.839658][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.902819][T15560] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2703'.
[  838.158050][ T5899] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  838.550392][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.620382][ T5903] usb 3-1: USB disconnect, device number 67
[  838.693912][T15556] syz.3.2701 (15556): drop_caches: 2
[  838.733277][ T5899] usb 2-1: config 0 has no interfaces?
[  838.744119][ T5899] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  838.769183][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.798479][ T2154] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  839.339502][ T5899] usb 2-1: Product: syz
[  839.381912][ T5899] usb 2-1: Manufacturer: syz
[  839.386678][ T5899] usb 2-1: SerialNumber: syz
[  839.428263][ T5899] usb 2-1: config 0 descriptor??
[  839.442242][ T2154] usb 5-1: config 0 has no interfaces?
[  839.455458][ T2154] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  839.474339][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.482468][ T2154] usb 5-1: Product: syz
[  839.486770][ T2154] usb 5-1: Manufacturer: syz
[  839.491511][ T2154] usb 5-1: SerialNumber: syz
[  839.507789][ T2154] usb 5-1: config 0 descriptor??
[  839.652719][T15557] Cannot find del_set index 0 as target
[  839.760003][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.769778][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.432260][ T5929] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  840.588461][ T5929] usb 3-1: Using ep0 maxpacket: 32
[  840.596275][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  840.607084][ T5929] usb 3-1: config 0 has no interfaces?
[  840.613134][ T5929] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  840.623727][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.637767][ T5929] usb 3-1: config 0 descriptor??
[  840.828998][ T5899] usb 2-1: USB disconnect, device number 98
[  840.900630][    T9] usb 3-1: USB disconnect, device number 68
[  841.439361][ T5929] usb 5-1: USB disconnect, device number 45
[  841.528060][    T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  841.698498][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'.
[  841.700029][    T9] usb 2-1: Using ep0 maxpacket: 8
[  841.734415][    T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  841.742787][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  841.773408][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  841.794942][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  841.804486][T15594] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2715'.
[  841.807322][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  841.829319][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  841.839933][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.898040][ T5929] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  842.055170][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  842.060869][ T5929] usb 3-1: Using ep0 maxpacket: 8
[  842.067842][    T9] usbtmc 2-1:16.0: can't read capabilities
[  842.076564][ T5929] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  842.098842][ T5929] usb 3-1: config 0 has no interface number 0
[  842.115928][ T5929] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  842.128435][ T5929] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  842.200926][ T5929] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  842.285575][ T5929] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  842.316213][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  842.316227][   T30] audit: type=1326 audit(1744732149.643:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.354583][   T30] audit: type=1326 audit(1744732149.643:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.383263][   T30] audit: type=1326 audit(1744732149.643:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.409403][   T30] audit: type=1326 audit(1744732149.643:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.411137][ T5929] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  842.453067][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.462294][ T2154] usb 2-1: USB disconnect, device number 99
[  842.467130][ T5929] usb 3-1: config 0 descriptor??
[  842.487002][ T5929] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  842.544067][   T30] audit: type=1326 audit(1744732149.643:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.670308][T15607] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2718'.
[  842.699348][   T30] audit: type=1326 audit(1744732149.643:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.828409][   T30] audit: type=1326 audit(1744732149.653:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.896955][   T30] audit: type=1326 audit(1744732149.653:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.919652][   T30] audit: type=1326 audit(1744732149.653:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.949811][ T5929] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  842.950441][   T30] audit: type=1326 audit(1744732149.653:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  842.982279][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.099040][T15611] netlink: 'syz.1.2720': attribute type 8 has an invalid length.
[  843.411659][ T5929] usb 5-1: config 0 has no interfaces?
[  843.471608][ T5929] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  843.483333][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.610405][ T5929] usb 5-1: Product: syz
[  843.614635][ T5929] usb 5-1: Manufacturer: syz
[  843.726065][ T5929] usb 5-1: SerialNumber: syz
[  843.831956][ T5929] usb 5-1: config 0 descriptor??
[  844.234488][ T5901] usb 3-1: USB disconnect, device number 69
[  844.374129][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.652814][ T5901] ldusb 3-1:0.55: LD USB Device #1 now disconnected
[  845.518553][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.531363][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.602394][ T5922] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  845.775609][ T5922] usb 3-1: Using ep0 maxpacket: 32
[  845.800092][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short
[  845.806989][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'.
[  845.836020][ T5922] usb 3-1: config 7 has an invalid interface number: 187 but max is 0
[  845.890383][ T5922] usb 3-1: config 7 has no interface number 0
[  845.924566][ T5922] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  845.973064][ T5922] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  846.020315][ T5922] usb 3-1: config 7 interface 187 has no altsetting 0
[  846.043045][ T5922] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  846.066612][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.083323][ T5922] usb 3-1: Product: syz
[  846.090172][ T5922] usb 3-1: Manufacturer: syz
[  846.094906][ T5922] usb 3-1: SerialNumber: syz
[  846.118316][T15632] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  846.141591][T15632] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  846.275538][ T5929] usb 5-1: USB disconnect, device number 46
[  846.301981][ T2154] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  846.374074][ T5922] usb 3-1: Unused bulk OUT endpoint found: 0x03
[  846.385339][ T5922] usb 3-1: Not enough endpoints found in device, aborting!
[  846.500023][ T2154] usb 4-1: config 0 has an invalid interface number: 98 but max is 0
[  846.514299][ T2154] usb 4-1: config 0 has no interface number 0
[  846.520602][ T2154] usb 4-1: config 0 interface 98 has no altsetting 0
[  846.529655][ T2154] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  846.544701][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.622013][ T5929] usb 3-1: USB disconnect, device number 70
[  846.635023][ T2154] usb 4-1: Product: syz
[  846.641251][ T2154] usb 4-1: Manufacturer: syz
[  846.646519][ T2154] usb 4-1: SerialNumber: syz
[  846.749951][ T2154] usb 4-1: config 0 descriptor??
[  846.775560][T15644] @: renamed from vlan0 (while UP)
[  846.977038][ T2154] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  847.368251][ T5922] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  847.538006][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  847.545020][ T5922] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  847.553424][ T5922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  847.586653][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  847.597362][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  847.608062][ T5922] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  847.621549][ T5922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  847.630745][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.644564][ T2154] usb 4-1: reset high-speed USB device number 51 using dummy_hcd
[  847.873720][ T5922] usb 2-1: GET_CAPABILITIES returned 0
[  847.893379][ T5922] usbtmc 2-1:16.0: can't read capabilities
[  848.139578][T15669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  848.191304][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  848.191320][   T30] audit: type=1326 audit(1744732155.463:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.234722][ T5901] usb 2-1: USB disconnect, device number 100
[  848.438509][   T30] audit: type=1326 audit(1744732155.473:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.465051][   T30] audit: type=1326 audit(1744732155.473:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.541076][   T30] audit: type=1326 audit(1744732155.473:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.563471][    C1] vkms_vblank_simulate: vblank timer overrun
[  848.717075][   T30] audit: type=1326 audit(1744732155.473:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.741296][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.810289][   T30] audit: type=1326 audit(1744732155.493:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.832769][    C1] vkms_vblank_simulate: vblank timer overrun
[  848.846820][   T30] audit: type=1326 audit(1744732155.523:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.869826][   T30] audit: type=1326 audit(1744732155.523:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.892768][   T30] audit: type=1326 audit(1744732155.523:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.915203][    C1] vkms_vblank_simulate: vblank timer overrun
[  848.942511][   T30] audit: type=1326 audit(1744732155.523:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.1.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdccf98e169 code=0x7ffc0000
[  848.964948][    C1] vkms_vblank_simulate: vblank timer overrun
[  849.082812][T15677] tipc: Started in network mode
[  849.087796][T15677] tipc: Node identity ac14140f, cluster identity 4711
[  849.096872][T15677] tipc: Enabled bearer <udp:syz0>, priority 10
[  849.205259][T15680] netlink: 211456 bytes leftover after parsing attributes in process `syz.1.2740'.
[  849.215068][T15680] netlink: zone id is out of range
[  849.220726][T15680] netlink: zone id is out of range
[  849.225977][T15680] netlink: zone id is out of range
[  849.236174][T15680] netlink: zone id is out of range
[  849.241930][T15680] netlink: get zone limit has 8 unknown bytes
[  849.883159][T15700] "syz.1.2747" (15700) uses obsolete ecb(arc4) skcipher
[  850.031163][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.218166][ T5903] tipc: Node number set to 2886997007
[  850.638676][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.346548][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.125099][ T2154] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71)
[  852.233164][ T2154] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware
[  852.284604][ T2154] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  852.294103][ T5899] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  852.358075][ T5899] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  852.399763][ T2154] usb 4-1: USB disconnect, device number 51
[  852.565158][T15714] geneve1: entered allmulticast mode
[  852.827466][T15720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.858537][ T5903] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  853.098367][ T5903] usb 3-1: Using ep0 maxpacket: 8
[  853.499036][T15729] syz.0.2749 (15729): drop_caches: 2
[  853.573147][ T5903] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  853.723415][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  853.835937][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  853.849057][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.883311][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  853.895233][ T2154] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  853.968261][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  853.999874][T15733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  854.063942][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  854.117836][ T2154] usb 2-1: config 0 has no interfaces?
[  854.128249][ T2154] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  854.150467][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.169654][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.268499][ T2154] usb 2-1: Product: syz
[  854.272729][ T2154] usb 2-1: Manufacturer: syz
[  854.337851][ T2154] usb 2-1: SerialNumber: syz
[  854.377772][ T2154] usb 2-1: config 0 descriptor??
[  854.439871][T15734] syz.4.2754 (15734): drop_caches: 2
[  854.527244][ T5903] usb 3-1: GET_CAPABILITIES returned 0
[  854.565584][ T5903] usbtmc 3-1:16.0: can't read capabilities
[  854.733190][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2753'.
[  854.753192][T15737] ip6gre1: entered promiscuous mode
[  854.990252][T14029] usb 3-1: USB disconnect, device number 71
[  855.764317][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.868146][T14029] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  856.060821][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  856.060837][   T30] audit: type=1800 audit(1744732163.383:1068): pid=15751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2758" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0
[  856.271105][T14029] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  856.382544][T14029] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.477557][T14029] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  856.636146][T14029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.763448][T14029] hub 4-1:4.0: USB hub found
[  857.058752][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.166807][ T5903] usb 2-1: USB disconnect, device number 101
[  857.628051][ T5903] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[  857.880939][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short
[  860.250789][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.347171][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -71
[  860.386065][ T5903] usb 2-1: can't read configurations, error -71
[  861.460989][T14029] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  861.520253][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.568712][T14029] usb 4-1: USB disconnect, device number 52
[  862.178617][T15778] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2765'.
[  862.358147][T14029] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  862.541752][T14029] usb 3-1: no configurations
[  862.560560][T14029] usb 3-1: can't read configurations, error -22
[  862.738965][T14029] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  862.800141][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.000550][T14029] usb 3-1: no configurations
[  863.016636][T14029] usb 3-1: can't read configurations, error -22
[  863.043597][T14029] usb usb3-port1: attempt power cycle
[  863.213054][T15781] loop9: detected capacity change from 0 to 8
[  863.223499][T15781] Dev loop9: unable to read RDB block 8
[  863.229477][T15781]  loop9: unable to read partition table
[  863.235438][T15781] loop9: partition table beyond EOD, truncated
[  863.246454][T15781] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5)
[  863.430734][T14029] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  863.538038][ T5901] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  863.614757][T14029] usb 3-1: no configurations
[  863.628481][T14029] usb 3-1: can't read configurations, error -22
[  863.697608][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  863.744586][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  863.772378][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.778204][T14029] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  863.813528][T14029] usb 3-1: no configurations
[  863.813684][ T5901] usb 5-1: Product: syz
[  863.822030][T14029] usb 3-1: can't read configurations, error -22
[  863.826278][ T5901] usb 5-1: Manufacturer: syz
[  863.836439][ T5901] usb 5-1: SerialNumber: syz
[  863.848367][T14029] usb usb3-port1: unable to enumerate USB device
[  863.892389][ T5901] usb 5-1: config 0 descriptor??
[  863.911450][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'.
[  863.961544][T15792] netlink: 'syz.3.2769': attribute type 9 has an invalid length.
[  864.081105][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.109541][ T5922] usb 5-1: USB disconnect, device number 47
[  864.389895][T14029] usb 4-1: new low-speed USB device number 53 using dummy_hcd
[  864.620658][T15796] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  864.657652][T14029] usb 4-1: No LPM exit latency info found, disabling LPM.
[  864.728078][T14029] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  864.822850][T15800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  865.518579][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.629032][T14029] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  865.740158][T15801] syz.1.2772 (15801): drop_caches: 2
[  865.864078][T14029] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  865.886113][T14029] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  865.903371][T14029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.971772][T14029] usb 4-1: Product: Р
[  866.007969][T14029] usb 4-1: Manufacturer: à Š
[  866.012632][T14029] usb 4-1: SerialNumber: á°‰
[  866.048388][T15804] batman_adv: batadv0: Removing interface: dummy0
[  866.079619][T14029] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  866.142986][T14029] usb 4-1: no configuration chosen from 1 choice
[  866.650148][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.595395][T14029] usb 4-1: USB disconnect, device number 53
[  867.701164][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'.
[  867.737484][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'.
[  867.766029][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2780'.
[  867.782968][T15830] netlink: 'syz.4.2780': attribute type 9 has an invalid length.
[  867.826562][T15831] netlink: 'syz.3.2782': attribute type 11 has an invalid length.
[  867.854201][T15830] macvlan2: entered allmulticast mode
[  867.902473][T15830] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  868.034685][T15835] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003
[  868.093845][T15835] 
[  868.096216][T15835] ======================================================
[  868.103246][T15835] WARNING: possible circular locking dependency detected
[  868.110266][T15835] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted
[  868.117373][T15835] ------------------------------------------------------
[  868.124397][T15835] syz.0.2783/15835 is trying to acquire lock:
[  868.130464][T15835] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x10f0/0x39c0
[  868.139615][T15835] 
[  868.139615][T15835] but task is already holding lock:
[  868.146990][T15835] ffff88807cf966a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  868.157108][T15835] 
[  868.157108][T15835] which lock already depends on the new lock.
[  868.157108][T15835] 
[  868.167516][T15835] 
[  868.167516][T15835] the existing dependency chain (in reverse order) is:
[  868.176535][T15835] 
[  868.176535][T15835] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  868.185156][T15835]        lock_acquire+0x116/0x2f0
[  868.190199][T15835]        __mutex_lock+0x1a5/0x10c0
[  868.195321][T15835]        smc_switch_to_fallback+0x35/0xda0
[  868.201132][T15835]        smc_sendmsg+0x11f/0x530
[  868.206074][T15835]        __sock_sendmsg+0x221/0x270
[  868.211282][T15835]        __sys_sendto+0x365/0x4c0
[  868.216312][T15835]        __x64_sys_sendto+0xde/0x100
[  868.221601][T15835]        do_syscall_64+0xf3/0x230
[  868.226634][T15835]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.233058][T15835] 
[  868.233058][T15835] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  868.240811][T15835]        lock_acquire+0x116/0x2f0
[  868.245843][T15835]        lock_sock_nested+0x48/0x100
[  868.251153][T15835]        do_ipv6_setsockopt+0xccd/0x3680
[  868.256806][T15835]        ipv6_setsockopt+0x5d/0x170
[  868.262041][T15835]        do_sock_setsockopt+0x3b1/0x710
[  868.267597][T15835]        __x64_sys_setsockopt+0x1ee/0x280
[  868.273315][T15835]        do_syscall_64+0xf3/0x230
[  868.278347][T15835]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.284765][T15835] 
[  868.284765][T15835] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  868.291978][T15835]        validate_chain+0xa69/0x24e0
[  868.297271][T15835]        __lock_acquire+0xad5/0xd80
[  868.302477][T15835]        lock_acquire+0x116/0x2f0
[  868.307500][T15835]        __mutex_lock+0x1a5/0x10c0
[  868.312657][T15835]        do_ip_setsockopt+0x10f0/0x39c0
[  868.318209][T15835]        ip_setsockopt+0x63/0x100
[  868.323239][T15835]        smc_setsockopt+0x25c/0xd50
[  868.328451][T15835]        do_sock_setsockopt+0x3b1/0x710
[  868.334002][T15835]        __x64_sys_setsockopt+0x1ee/0x280
[  868.339727][T15835]        do_syscall_64+0xf3/0x230
[  868.344767][T15835]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.351189][T15835] 
[  868.351189][T15835] other info that might help us debug this:
[  868.351189][T15835] 
[  868.361415][T15835] Chain exists of:
[  868.361415][T15835]   rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock
[  868.361415][T15835] 
[  868.375077][T15835]  Possible unsafe locking scenario:
[  868.375077][T15835] 
[  868.382532][T15835]        CPU0                    CPU1
[  868.387896][T15835]        ----                    ----
[  868.393279][T15835]   lock(&smc->clcsock_release_lock);
[  868.398690][T15835]                                lock(sk_lock-AF_INET6);
[  868.405816][T15835]                                lock(&smc->clcsock_release_lock);
[  868.413710][T15835]   lock(rtnl_mutex);
[  868.417698][T15835] 
[  868.417698][T15835]  *** DEADLOCK ***
[  868.417698][T15835] 
[  868.425842][T15835] 1 lock held by syz.0.2783/15835:
[  868.430955][T15835]  #0: ffff88807cf966a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  868.441514][T15835] 
[  868.441514][T15835] stack backtrace:
[  868.447407][T15835] CPU: 1 UID: 0 PID: 15835 Comm: syz.0.2783 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) 
[  868.447429][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  868.447441][T15835] Call Trace:
[  868.447450][T15835]  <TASK>
[  868.447457][T15835]  dump_stack_lvl+0x241/0x360
[  868.447489][T15835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  868.447514][T15835]  ? __pfx__printk+0x10/0x10
[  868.447538][T15835]  ? print_lock+0x171/0x1a0
[  868.447560][T15835]  print_circular_bug+0x2e1/0x300
[  868.447583][T15835]  check_noncircular+0x142/0x160
[  868.447607][T15835]  validate_chain+0xa69/0x24e0
[  868.447630][T15835]  ? finish_task_switch+0x1e5/0x870
[  868.447653][T15835]  __lock_acquire+0xad5/0xd80
[  868.447673][T15835]  lock_acquire+0x116/0x2f0
[  868.447689][T15835]  ? do_ip_setsockopt+0x10f0/0x39c0
[  868.447713][T15835]  __mutex_lock+0x1a5/0x10c0
[  868.447734][T15835]  ? do_ip_setsockopt+0x10f0/0x39c0
[  868.447764][T15835]  ? do_ip_setsockopt+0x10f0/0x39c0
[  868.447784][T15835]  ? __pfx___mutex_lock+0x10/0x10
[  868.447804][T15835]  ? __lock_acquire+0xad5/0xd80
[  868.447825][T15835]  ? __pfx___mutex_trylock_common+0x10/0x10
[  868.447851][T15835]  do_ip_setsockopt+0x10f0/0x39c0
[  868.447875][T15835]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  868.447899][T15835]  ? smc_setsockopt+0x1b2/0xd50
[  868.447922][T15835]  ? __pfx___mutex_lock+0x10/0x10
[  868.447949][T15835]  ip_setsockopt+0x63/0x100
[  868.447968][T15835]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  868.447993][T15835]  smc_setsockopt+0x25c/0xd50
[  868.448013][T15835]  ? __pfx_aa_sk_perm+0x10/0x10
[  868.448037][T15835]  ? __pfx_smc_setsockopt+0x10/0x10
[  868.448056][T15835]  ? aa_sock_opt_perm+0x79/0x120
[  868.448082][T15835]  ? __pfx_smc_setsockopt+0x10/0x10
[  868.448102][T15835]  do_sock_setsockopt+0x3b1/0x710
[  868.448122][T15835]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  868.448138][T15835]  ? __fget_files+0x2a/0x420
[  868.448157][T15835]  ? __fget_files+0x39d/0x420
[  868.448171][T15835]  ? __fget_files+0x2a/0x420
[  868.448189][T15835]  __x64_sys_setsockopt+0x1ee/0x280
[  868.448208][T15835]  do_syscall_64+0xf3/0x230
[  868.448229][T15835]  ? clear_bhb_loop+0x45/0xa0
[  868.448248][T15835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.448265][T15835] RIP: 0033:0x7f46f698e169
[  868.448282][T15835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  868.448297][T15835] RSP: 002b:00007f46f78b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  868.448315][T15835] RAX: ffffffffffffffda RBX: 00007f46f6bb5fa0 RCX: 00007f46f698e169
[  868.448328][T15835] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003
[  868.448339][T15835] RBP: 00007f46f6a10a68 R08: 000000000000000c R09: 0000000000000000
[  868.448350][T15835] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  868.448361][T15835] R13: 0000000000000000 R14: 00007f46f6bb5fa0 R15: 00007f46f6cdfa28
[  868.448379][T15835]  </TASK>
[  868.740913][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.756811][T14029] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  868.919950][T14029] usb 4-1: Using ep0 maxpacket: 16
[  868.926757][T14029] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  868.934845][T14029] usb 4-1: config 0 has no interface number 0
[  868.944935][T14029] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  868.954084][T14029] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  868.966999][T14029] usb 4-1: Product: syz
[  868.971286][T14029] usb 4-1: SerialNumber: syz
[  868.980357][T14029] usb 4-1: config 0 descriptor??
[  868.989228][T14029] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input81
[  869.108084][ T5922] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  869.210225][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  869.210488][ T5901] usb 4-1: USB disconnect, device number 54
[  869.217219][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  869.235903][ T5901] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  869.268963][ T5922] usb 5-1: no configurations
[  869.273592][ T5922] usb 5-1: can't read configurations, error -22
[  869.438115][ T5922] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  869.598474][ T5922] usb 5-1: no configurations
[  869.603206][ T5922] usb 5-1: can't read configurations, error -22
[  869.610043][ T5922] usb usb5-port1: attempt power cycle
[  869.838292][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.948032][ T5922] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  869.979495][ T5922] usb 5-1: no configurations
[  869.984124][ T5922] usb 5-1: can't read configurations, error -22
[  870.120208][ T5922] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  870.149078][ T5922] usb 5-1: no configurations
[  870.154047][ T5922] usb 5-1: can't read configurations, error -22
[  870.161217][ T5922] usb usb5-port1: unable to enumerate USB device
[  870.718370][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.408673][ T9955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.318364][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.608293][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.238541][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.240436][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  876.252978][ T1299] ieee802154 phy1 wpan1: encryption failed: -22