last executing test programs:

11.893288723s ago: executing program 3 (id=333):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xffff069e, 0x100, 0x100}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa6c84aa4a7e60502}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0x6}, {0xfff3, 0x10}, {0x10, 0xa}}, [{0x8, 0xb, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0xd, 0x8, 0x0, 0x3}, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000480)=0x4)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r7, r8, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000100)={0x30, r9, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0})
r10 = socket(0x11, 0x3, 0x0)
r11 = epoll_create1(0x0)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000000)={0xe000202b})
epoll_pwait(r12, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
r13 = dup3(r10, r12, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r13, &(0x7f00000001c0)={0x200f})
r14 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r14, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x4000000)

9.692281393s ago: executing program 3 (id=339):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000100)) (async)
ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000100))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
getpgid(0xffffffffffffffff) (async)
r3 = getpgid(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80000004}) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80000004})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
tgkill(r3, r5, 0x18) (async)
tgkill(r3, r5, 0x18)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4048040, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1}, &(0x7f000009de80), 0x0) (async)
cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1}, &(0x7f000009de80), 0x0)

8.141986344s ago: executing program 3 (id=344):
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000000))
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1409, 0x200, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x8800)

8.031146732s ago: executing program 0 (id=345):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKRESETZONE(r1, 0x40101288, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x84e4, @remote, 0x3}, 0x1c)
lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)

7.869714009s ago: executing program 3 (id=347):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
eventfd(0x4) (async)
r1 = eventfd(0x4)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000a80)=""/54, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000a80)=""/54, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000b40)=""/96, &(0x7f0000000480)=""/53})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)="8224aca5f41b9e0ec5e7a706c919a7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b571215bb02a6af4b9a01fb336bef1be8a68a68c10547c28452b", 0xa7}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) (async)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)="8224aca5f41b9e0ec5e7a706c919a7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b571215bb02a6af4b9a01fb336bef1be8a68a68c10547c28452b", 0xa7}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000a40)="07b1bb56f4bbb5916f5ce53f7cb9300cfefdb516d39b4e2ceff1bf1dcde18d1955a6d67a0729c1e6a717017419d3a9743fcfbe3f", 0x34}, {&(0x7f0000002840)="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", 0x1000}], 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/879], 0x328}}], 0x1, 0x4810)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f00000006c0)=""/86, 0x56}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f0000000880)=""/217, 0xd9}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000780)=""/31, 0x1f}], 0x6}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x3000, 0x1000, &(0x7f0000008000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

7.86804898s ago: executing program 4 (id=348):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cf6ffffff070905810300020000000904010000020d00000904010102020d0000090582022000000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)
openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x11, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x9, 0x10, 0xc, 0x10, 0x10, 0xc, 0x4, 0x10, 0xe, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003eaffffff0a031a8075099eaa9d9f"], 0x0, 0x0, 0x0}, 0x0)

7.756192434s ago: executing program 2 (id=349):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000005000000000caa000000090000000000000004b427180010"}})

7.573093103s ago: executing program 2 (id=351):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
socket$kcm(0x29, 0x2, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x18000000, 0x10000000, 0xfff7fffd, 0x3, 0x100000000009, 0x8, 0x4, 0x400003}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0)
r5 = getpid()
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x7, 0x3, 0x3e, 0x8, 0x13, "0600"})
ioctl$TIOCMSET(r6, 0x5418, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000003c0007010000000000000000017c00000400fc800c00018006000600800a000008000280040072050078ffffffffffffff9e1f8160943466eaac8a3c1b4bff922f88a3638ceec0e29e8674539102a5a7b4c189d416190a9d0aff5f5b4a54402bc557826daa37cd9ad7610005cc3a555ecffe71fd08275d29d7fd7c72306e3ae33b5c526286cdc11b4d47b34432ad5d636fe176663a55180b75047d91a93b0e9a3ee867039a889e50fb34e6b05a"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
ptrace(0x10, 0x0)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x8000000000000871, 0x2001)
close_range(r7, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
prlimit64(r5, 0x0, &(0x7f0000000000)={0x100}, 0x0)

7.333780922s ago: executing program 1 (id=352):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

7.039248821s ago: executing program 0 (id=353):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb01", 0x11)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x58, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="660f090f01c8260f01d1b8c2008ed80f060f3566b9810a00000f320f00ef2e670fc79946917dde0f32", 0x29}], 0x1, 0x4, 0x0, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="a2", 0x1}], 0x1)

6.345168958s ago: executing program 1 (id=354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000011000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900030073797a30000000000900010073797a300000000038000000060a010400000000000000000500000008000b4000100004800c00018008000100667764000900010073797a3000000000140000001100010000000000000000000000000a"], 0xac}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0x50, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x2, 0x6, {0x7, 0x25, 0x1, 0x83, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd, 0x9, 0xeb, {0x7, 0x25, 0x1, 0x2, 0x2, 0xaa}}}}}}}]}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@gettaction={0x190, 0x32, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0xff13, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x875}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9be0}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.048512351s ago: executing program 0 (id=355):
r0 = fsopen(&(0x7f0000000300)='adfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc00000002020102000000000000000001000003080009000000000404000380"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x56, 0xa, 0x1, {0x9, 0x101}, {0x60, 0x1}, @ramp={0x0, 0x6, {0x7, 0x8, 0xf48, 0x3}}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1000000001, 0x12)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000406011100000000000000000200000105000100070000000900020073797a320000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000004d564b00f345000000090000000000000023eb8fd94443e1742875c4e0895a44374c4d9e03fbcb55c3248cc18d2390e2e856e6f26e9b3fe08deaab3a9a6de6f1311463754a337f"])
r10 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xe42d, 0x0, 0x0, 0xfffffffe, 0x0, r1})
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a)

5.871549941s ago: executing program 2 (id=356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e)
bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00'})
r7 = socket$inet(0x2, 0x3, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r9, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x31}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20048803)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

5.477840677s ago: executing program 2 (id=357):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0xa77, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff6, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x5, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r1})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xa, 0x1, 0x2, 0x0, 0x1}, 0x50)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
close(0x3)
shutdown(0xffffffffffffffff, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r5, 0x325, 0x70bd2a, 0x0, {0x8}}, 0x14}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.381700925s ago: executing program 3 (id=358):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000680)={0x2, 'virt_wifi0\x00', {0xff}, 0x2f97})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000001000200027bd70000c00000000000000", @ANYRES32=r1, @ANYBLOB="3a002c0800008008000100677265003400028008010107007c0e34ced551f291078a026800"/52, @ANYRES32=0x0, @ANYBLOB="06000f000101000006000f00ff010000080015007eb50f00050013000100000008000500", @ANYRES32=r1, @ANYBLOB="0a000100aaaaaaaaaaaa0000"], 0x74}}, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a00030014000200fc020000000000000000000000000001080017004e234e231400010020010000000000000000000000000001a4c42b01ab074afa174282d70aac6e59a46cf0d08b9535cba053165c969be9b1a9be48f3619e22cd926e14e2bdbd0dbc3388c54343ff6e8d0f8c81"], 0x4c}}, 0x40000)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x416042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x20}, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x8000)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r8, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r9, 0x0, 0x1004000, 0x0, 0x0})
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4.29178442s ago: executing program 0 (id=359):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$tipc(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000280)=0x8)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup2(r3, r6)
setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000080)={r5, 0x70000}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x28, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x402, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_team\x00', 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000df25000000e9a73191fc996bfbc34c36799300000000000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

4.149800305s ago: executing program 1 (id=360):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
memfd_create(0x0, 0xea0839ee05e09f64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r4 = dup(r0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
ftruncate(r5, 0xee72)
ppoll(&(0x7f0000000280)=[{r4, 0x10}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x1b)
r6 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000600)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000280)={0xd788, r9, 0x13, {0x7, 0x5}, 0x80}, 0x1)

4.147414703s ago: executing program 4 (id=361):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r2], 0x1, 0x0, 0x0, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000005000000000caa000000090000000000000004b427180010"}})

3.830316259s ago: executing program 4 (id=362):
r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r2 = socket(0x10, 0x803, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r5 = socket(0x10, 0x803, 0x0) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x40080, 0xce)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054)

2.448693278s ago: executing program 1 (id=363):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
unshare(0x2a020400)
r6 = dup2(r5, r3)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4)
sendto$packet(r0, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

2.383605619s ago: executing program 2 (id=364):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sched_setattr(0x0, 0x0, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0) (async)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async, rerun: 32)
r4 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32)
connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="756ef4022f70229b83f2d164f9efdca28b00"], 0xe)
sendmsg$nl_route(r5, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r10}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5b00000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64)
sendmmsg$inet6(r7, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e28, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1", 0x2}], 0x1}}], 0x2, 0x4000840) (rerun: 64)

2.224793472s ago: executing program 1 (id=365):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb01", 0x11)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x58, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="a2", 0x1}], 0x1)

1.824403588s ago: executing program 1 (id=366):
syz_usb_connect(0x2, 0x546, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000872de608110f0020bcc7010203010902340501000000000904e0000ee84d5a000905070310000880fb09050303"], 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x13)

1.394457699s ago: executing program 0 (id=367):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
close(r0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r3}, 0x80, 0x0}}], 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x2d3e, 0xec84, 0x0, 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r11, 0x84, 0x82, &(0x7f0000000200), 0x8)
syz_emit_ethernet(0x125, &(0x7f0000000240)={@multicast, @random="22b1361e262e", @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @igmp={{0x1a, 0x4, 0x2, 0x34, 0x113, 0x65, 0x0, 0x7, 0x2, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x11, [@broadcast, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x23, 0x64, [@remote, @remote, @local, @multicast1, @empty, @remote, @loopback, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xffffffef}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}, {0x22, 0xb, 0x0, @private=0xa010100, "220ee4b689626bf4bee8e54b6988e603da4e80d34726d3f76fedecd9f32a575022bdc149d8be75c7b7d119d7306f9b1640c2bde001defe3b80208c86d54977367d8769ebf9cdcffe727a2cdcdd81ccc5ad57459f844ddb333163e080cca4879387208ec47eececfc55bfb1dd38fda42a772765e885369e9734278ac6dcbc45db7ef4a76eebea89abccc6ef5115ed2c729a28d4e69700407e5e9b6de334fdf33382372f"}}}}}, 0x0)

1.149675344s ago: executing program 4 (id=368):
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3) (async)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
epoll_create(0x802) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32)
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) (async)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) (async)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) (async)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4)
sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)

864.343535ms ago: executing program 2 (id=369):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
r7 = syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x40100)
lstat(&(0x7f0000000300)='./file0\x00', 0x0)
getresgid(&(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=<r9=>0x0)
getresuid(0x0, &(0x7f0000000580)=<r10=>0x0, &(0x7f0000000340))
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8021, &(0x7f0000000700)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x53f}}], [{@fowner_lt={'fowner<', r9}}, {@uid_gt={'uid>', r10}}, {@hash}, {@context={'context', 0x3d, 'system_u'}}, {@smackfstransmute}, {@smackfsdef}]}})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000004a00030000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x4004880}, 0x0)

785.177892ms ago: executing program 4 (id=370):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0xc, 0x9, 0x4001, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r3, &(0x7f0000000180), 0x8)

401.742636ms ago: executing program 4 (id=371):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003020000000800"]}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xc8, 0x8, 0x200}}, 0x1c}}, 0x4000800)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

87.820056ms ago: executing program 0 (id=372):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r1 = syz_io_uring_setup(0x36e7, &(0x7f0000000400)={0x0, 0x4660, 0x400, 0x3, 0x17}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000480)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x3, 0x75a, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000a94], 0x0, &(0x7f0000000040), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x0, 0xdada, 'pim6reg1\x00', 'syzkaller1\x00', 'wg0\x00', 'team_slave_1\x00', @link_local, [0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff], 0x13e, 0x1ae, 0x1e6, [@arp={{'arp\x00', 0x0, 0x38}, {{0x337, 0x60, 0x1, @dev={0xac, 0x14, 0x14, 0x19}, 0xffffffff, @local, 0xff, @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @random="c5dccc9acf72", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x24, 0xa4}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'macsec0\x00', {0xff}, 'wg2\x00', {0xff}}}}], [@arpreply={'arpreply\x00', 0x10, {{@random="a2d5c63e33b6", 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @common=@dnat={'dnat\x00', 0x10, {{@random="f570b57b995d", 0xfffffffffffffffd}}}}, {0x11, 0x42, 0x16, '\x00', 'pimreg\x00', 'lo\x00', 'wg0\x00', @empty, [0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x316, 0x316, 0x34e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x31, [{0x632, 0x75, 0x8, 0x8}, {0x5, 0xae, 0x3}, {0x7, 0x9, 0x40, 0x8}, {0x2, 0x4, 0x1d, 0x3ff}, {0xa, 0x5, 0xed, 0x6}, {0x7, 0x1, 0x3, 0xff}, {0x3, 0xff, 0x4, 0x2}, {0x0, 0xfb, 0x2, 0x7}, {0x7, 0x5, 0xa, 0xfffffff9}, {0x2, 0x5, 0xc5}, {0x1ff, 0x7, 0x9, 0xa5b}, {0x7, 0x2, 0x5, 0x40}, {0x2, 0x9, 0x6, 0x80000001}, {0x9, 0x2, 0x7f, 0x4}, {0x9, 0x5, 0xd5, 0x3}, {0x1, 0x9, 0xb6, 0x7fff}, {0xb, 0xfe, 0xad, 0x9}, {0x3, 0x4, 0x9, 0x85}, {0xa4a, 0x80, 0xac, 0x6}, {0x8, 0x9, 0x1b, 0x7}, {0x1c, 0x3, 0x3, 0x5}, {0x4ec3, 0x2, 0x9, 0x5}, {0x9, 0x9, 0x1, 0x9}, {0xacbf, 0x40, 0x7, 0x780}, {0x5, 0x7, 0x4, 0xff}, {0x1, 0x8}, {0x8172, 0x8, 0x0, 0x9}, {0x0, 0x13, 0x40, 0xc381}, {0xc78, 0x28, 0xbb, 0x3}, {0x7, 0x81, 0xfb, 0x8}, {0x0, 0x4, 0x5, 0x5}, {0xce5f, 0x0, 0x0, 0x7}, {0x8, 0x4, 0x7b}, {0xf, 0x4, 0x7f, 0x3ffb}, {0x7, 0x6, 0xa}, {0x1, 0x2, 0x1, 0x251ab8f9}, {0x7fff, 0x0, 0x0, 0x2}, {0x6c4, 0x46, 0x8, 0xc}, {0x1000, 0xd, 0x40, 0x3}, {0xb, 0x4, 0x7, 0xff}, {0xd1c2, 0x1, 0x8, 0x3}, {0x6, 0xff, 0x6, 0x2}, {0xfff3, 0x0, 0x9, 0x7fff}, {0x0, 0x3, 0x6, 0x9335}, {0x7, 0x4, 0x1, 0x1}, {0x81, 0x2, 0x7, 0x6}, {0x0, 0x1, 0x29, 0x1}, {0x84, 0x1, 0xa, 0xa80}, {0x3, 0x16, 0xf3, 0x80}, {0x1, 0x9, 0xb, 0x1}, {0x2, 0xc, 0x8c, 0xa2}, {0x3, 0xfa, 0x30, 0x7}, {0x71, 0x1, 0x3}, {0x7fff, 0x8, 0x2, 0x6}, {0x200, 0x73, 0x2}, {0x2, 0x81, 0x0, 0x1}, {0xd3e, 0xb, 0xa6}, {0x3, 0x2, 0x0, 0xd}, {0x8, 0x0, 0x8, 0x8}, {0x6, 0x3, 0x0, 0x3a3a}, {0xc828, 0xf2, 0x0, 0x1000000}, {0x5, 0x9, 0xb7, 0x3}, {0x9, 0x9, 0x0, 0x9018}, {0x0, 0x0, 0x0, 0x3}], {0xd}}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'vlan1\x00', {0xff}, 'wg2\x00', {}, 0x8, 0x1c}}}], [], @snat={'snat\x00', 0x10, {{@random="e8d2547ea300", 0x10}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x26, 0x88f5, 'gretap0\x00', 'netpci0\x00', 'bridge_slave_0\x00', 'team0\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xff], 0xbe, 0x12e, 0x166, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'H.245\x00'}}}], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@link_local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0x2}]}, 0x7d2)
r5 = syz_io_uring_setup(0x378c, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}})
io_uring_enter(r5, 0x38c5, 0x2000000, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0})
io_uring_enter(r1, 0x3495, 0x8cb5, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=373):
r0 = io_uring_setup(0x218a, &(0x7f00000002c0)={0x0, 0xc7a8, 0x80, 0x80001004, 0x228})
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0)

kernel console output (not intermixed with test programs):

iscuous mode
[   95.064629][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.073608][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.112670][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.122772][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.136085][ T5845] veth1_macvtap: entered promiscuous mode
[   95.152324][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.182405][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.183819][ T5842] veth0_macvtap: entered promiscuous mode
[   95.195101][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.224480][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.240019][ T5842] veth1_macvtap: entered promiscuous mode
[   95.274754][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.293491][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.301833][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.343536][ T1160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.347937][ T5836] Bluetooth: hci0: command tx timeout
[   95.358662][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.367403][ T1160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.401556][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.425870][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.441335][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.456001][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.470938][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.483839][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.508516][ T5836] Bluetooth: hci1: command tx timeout
[   95.536263][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.553957][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.574594][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.586710][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.596179][ T5836] Bluetooth: hci2: command tx timeout
[   95.644769][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.669188][ T5836] Bluetooth: hci3: command tx timeout
[   95.674643][ T5836] Bluetooth: hci4: command tx timeout
[   95.678187][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.719526][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.767127][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.792942][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.838442][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.982865][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.991200][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.111663][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.134179][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.168726][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   96.186396][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.197403][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.200250][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.205410][  T856] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.215062][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.331266][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.357352][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   96.375925][  T856] usb 4-1: Using ep0 maxpacket: 8
[   96.380581][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.391488][  T856] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[   96.405930][    T9] usb 1-1: Product: syz
[   96.413855][    T9] usb 1-1: Manufacturer: syz
[   96.419903][    T9] usb 1-1: SerialNumber: syz
[   96.447888][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.458935][  T856] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   96.507162][  T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.526691][  T856] usb 4-1: Product: syz
[   96.538822][  T856] usb 4-1: Manufacturer: syz
[   96.546859][  T856] usb 4-1: SerialNumber: syz
[   96.562991][  T856] usb 4-1: config 0 descriptor??
[   96.605527][  T856] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   96.616989][ T5937] netlink: 'syz.4.5': attribute type 27 has an invalid length.
[   96.626478][  T856] usb 4-1: setting power ON
[   96.633251][   T10] usb 3-1: config 0 has an invalid interface number: 13 but max is 0
[   96.633356][  T856] dvb-usb: bulk message failed: -22 (2/0)
[   96.664110][  T856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   96.668069][   T10] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[   96.689660][  T856] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   96.700437][   T10] usb 3-1: config 0 has no interface number 0
[   96.706623][   T10] usb 3-1: config 0 interface 13 altsetting 14 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   96.709892][  T856] usb 4-1: media controller created
[   96.750233][   T10] usb 3-1: config 0 interface 13 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[   96.787668][   T10] usb 3-1: config 0 interface 13 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[   96.812910][ T5940] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.830342][   T10] usb 3-1: config 0 interface 13 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[   96.861174][  T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   96.862816][   T10] usb 3-1: config 0 interface 13 altsetting 14 endpoint 0xD has an invalid bInterval 22, changing to 7
[   96.896984][ T5943] fuse: Bad value for 'fd'
[   96.902942][   T10] usb 3-1: config 0 interface 13 altsetting 14 endpoint 0x1 has an invalid bInterval 177, changing to 11
[   96.914550][ T5943] fuse: Bad value for 'fd'
[   96.943545][  T856] usb 4-1: selecting invalid altsetting 6
[   96.944975][   T10] usb 3-1: config 0 interface 13 has no altsetting 0
[   96.970239][  T856] usb 4-1: digital interface selection failed (-22)
[   96.986201][  T856] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   96.991479][   T10] usb 3-1: New USB device found, idVendor=1058, idProduct=0631, bcdDevice=ab.45
[   97.014503][  T856] usb 4-1: setting power OFF
[   97.026761][  T856] dvb-usb: bulk message failed: -22 (2/0)
[   97.027274][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.044347][   T10] usb 3-1: Product: syz
[   97.049057][   T10] usb 3-1: Manufacturer: syz
[   97.052616][  T856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   97.053813][   T10] usb 3-1: SerialNumber: syz
[   97.073452][  T856] (NULL device *): no alternate interface
[   97.091595][   T10] usb 3-1: config 0 descriptor??
[   97.181738][  T856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   97.331468][   T10] usb 4-1: USB disconnect, device number 2
[   97.455722][ T5836] Bluetooth: hci0: command tx timeout
[   97.471835][    T9] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[   97.478610][    T9] cdc_ncm 1-1:1.0: setting rx_max = 16384
[   97.589462][ T5836] Bluetooth: hci1: command tx timeout
[   97.668748][ T5836] Bluetooth: hci2: command tx timeout
[   97.684730][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.714459][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.750018][ T5836] Bluetooth: hci4: command tx timeout
[   97.750030][ T5840] Bluetooth: hci3: command tx timeout
[   97.873603][ T5961] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   97.974848][    T9] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   98.084856][ T5971] Zero length message leads to an empty skb
[   98.093361][    T9] usb 1-1: USB disconnect, device number 2
[   98.126257][    T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[   98.822289][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   99.128169][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.136842][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.145817][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   99.154827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.163571][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.172289][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.181252][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.190032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.198782][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.207095][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.275777][  T856] usb 3-1: USB disconnect, device number 2
[   99.708978][ T6002] process 'syz.1.24' launched './file1' with NULL argv: empty string added
[   99.868366][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  100.018164][    T9] usb 3-1: Using ep0 maxpacket: 32
[  100.050160][    T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  100.062058][    T9] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  100.092990][    T9] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  100.130862][    T9] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  100.182869][    T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  100.193696][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.211037][    T9] usb 3-1: Product: syz
[  100.220965][    T9] usb 3-1: Manufacturer: syz
[  100.240623][    T9] usb 3-1: SerialNumber: syz
[  100.275416][    C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  100.287930][   T10] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  100.312495][    T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input5
[  100.408019][ T6007] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  100.410102][ T6008] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  100.457865][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  100.487846][    T9] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  100.505720][    T9]  (id 0x00)
[  100.516202][ T6007] block device autoloading is deprecated and will be removed.
[  100.635647][   T10] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  100.689033][    T9] rc_core: IR keymap rc-imon-pad not found
[  100.694899][    T9] Registered IR keymap rc-empty
[  100.747887][    T9] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  100.774147][    T9] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  100.805577][    T9] imon:send_packet: packet tx failed (-71)
[  100.812855][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  100.828232][  T856] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.831998][   T10] usb usb2-port1: attempt power cycle
[  100.857915][    T9] imon 3-1:155.0: remote input dev register failed
[  100.886449][    T9] imon 3-1:155.0: imon_init_intf0: rc device setup failed
[  100.930719][    T9] imon 3-1:155.0: unable to initialize intf0, err 0
[  100.947636][    T9] imon:imon_probe: failed to initialize context!
[  100.978535][    T9] imon 3-1:155.0: unable to register, err -19
[  101.004455][    T9] usb 3-1: USB disconnect, device number 3
[  101.020832][ T6019] syzkaller0: entered promiscuous mode
[  101.026498][  T856] usb 4-1: Using ep0 maxpacket: 8
[  101.058046][ T6019] syzkaller0: entered allmulticast mode
[  101.076083][  T856] usb 4-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[  101.120086][  T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.148219][  T856] usb 4-1: Product: syz
[  101.156994][  T856] usb 4-1: Manufacturer: syz
[  101.183940][  T856] usb 4-1: SerialNumber: syz
[  101.207237][  T856] usb 4-1: config 0 descriptor??
[  101.217087][  T856] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[  101.228174][   T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  101.301891][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  101.373278][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[  101.440126][  T856] pwc: send_video_command error -71
[  101.445396][  T856] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  101.447851][   T10] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  101.467144][  T856] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  101.522595][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  101.548841][   T10] usb usb2-port1: unable to enumerate USB device
[  102.112257][  T856] usb 4-1: USB disconnect, device number 3
[  102.512916][ T6043] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  102.534709][ T6047] loop3: detected capacity change from 0 to 2640
[  102.550177][ T6047] Buffer I/O error on dev loop3, logical block 0, async page read
[  102.571706][ T6047] Buffer I/O error on dev loop3, logical block 0, async page read
[  102.599554][ T6047] Buffer I/O error on dev loop3, logical block 0, async page read
[  102.607574][ T6047] Buffer I/O error on dev loop3, logical block 0, async page read
[  102.657566][ T6047]  loop3: unable to read partition table
[  102.664733][ T6047] loop_reread_partitions: partition scan of loop3 (3�����) failed (rc=-5)
[  102.682848][ T6050] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  102.727822][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  102.753358][ T5827] Buffer I/O error on dev loop3, logical block 0, lost async page write
[  102.775847][ T5827] Buffer I/O error on dev loop3, logical block 1, lost async page write
[  102.785356][ T5827] Buffer I/O error on dev loop3, logical block 2, lost async page write
[  102.806413][ T5827] Buffer I/O error on dev loop3, logical block 3, lost async page write
[  102.815924][ T5827] Buffer I/O error on dev loop3, logical block 4, lost async page write
[  102.825115][ T5827] Buffer I/O error on dev loop3, logical block 5, lost async page write
[  102.886546][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  102.903848][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  102.927849][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.939265][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  102.949051][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.957078][    T9] usb 4-1: Product: syz
[  102.962059][    T9] usb 4-1: Manufacturer: syz
[  102.966703][    T9] usb 4-1: SerialNumber: syz
[  102.979296][    T9] usb 4-1: config 0 descriptor??
[  102.994670][    T9] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  103.004682][    T9] em28xx 4-1:0.0: Device initialization failed.
[  103.011082][    T9] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  103.081421][   T10] usb 5-1: Using ep0 maxpacket: 8
[  103.088996][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  103.099252][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.127466][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  103.145509][   T10] pvrusb2: **********
[  103.157830][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  103.177780][   T10] pvrusb2: Important functionality might not be entirely working.
[  103.187896][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  103.206996][  T856] usb 4-1: USB disconnect, device number 4
[  103.209553][   T10] pvrusb2: **********
[  103.334745][ T2348] pvrusb2: Invalid write control endpoint
[  103.467296][ T2348] pvrusb2: Invalid write control endpoint
[  103.485518][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  103.500246][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  103.508308][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  103.518813][ T2348] pvrusb2: Device being rendered inoperable
[  103.526018][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  103.534225][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  103.556572][ T2348] pvrusb2: Attached sub-driver cx25840
[  103.561392][   T10] usb 5-1: USB disconnect, device number 2
[  103.562282][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  103.613350][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  103.727848][  T856] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.821483][ T6070] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.177456][  T856] usb 3-1: device descriptor read/64, error -71
[  104.507846][  T856] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.657928][  T856] usb 3-1: device descriptor read/64, error -71
[  104.790700][  T856] usb usb3-port1: attempt power cycle
[  104.807844][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.147883][    T9] usb 5-1: Using ep0 maxpacket: 32
[  105.155032][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.168549][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.190214][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  105.247835][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.297517][    T9] usb 5-1: config 0 descriptor??
[  105.307964][  T856] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  105.347408][    T9] hub 5-1:0.0: USB hub found
[  105.364096][  T856] usb 3-1: device descriptor read/8, error -71
[  105.577643][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'.
[  105.621590][    T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  105.638067][  T856] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.658222][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'.
[  105.682823][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  105.703455][  T856] usb 3-1: device descriptor read/8, error -71
[  105.725887][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  105.809403][    T9] usb 5-1: USB disconnect, device number 3
[  105.818417][  T856] usb usb3-port1: unable to enumerate USB device
[  106.149110][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[  106.455540][ T6112] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  106.646973][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[  106.721178][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[  106.739365][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[  106.783040][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[  106.806616][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[  106.816978][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[  106.831004][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[  107.377568][ T6130] netlink: 'syz.2.56': attribute type 15 has an invalid length.
[  107.503232][ T6131] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  107.847891][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  108.017817][   T10] usb 2-1: Using ep0 maxpacket: 8
[  108.025204][   T10] usb 2-1: config 0 has an invalid interface number: 122 but max is 0
[  108.075655][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.118161][   T10] usb 2-1: config 0 has no interface number 0
[  108.134851][   T10] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  108.203388][   T10] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  108.247763][   T10] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023
[  108.298771][   T10] usb 2-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  108.341723][   T10] usb 2-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[  108.378476][   T10] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  108.398005][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.419962][   T10] usb 2-1: Product: syz
[  108.424300][   T10] usb 2-1: Manufacturer: syz
[  108.445552][   T10] usb 2-1: SerialNumber: syz
[  108.474409][   T10] usb 2-1: config 0 descriptor??
[  108.491989][ T6132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  108.535628][ T6132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  108.562683][ T5914] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  108.735903][ T5914] usb 4-1: device descriptor read/64, error -71
[  108.998503][ T5914] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  109.128448][ T5914] usb 4-1: device descriptor read/64, error -71
[  109.208113][ T5821] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  109.248751][ T5914] usb usb4-port1: attempt power cycle
[  109.367800][ T5821] usb 3-1: Using ep0 maxpacket: 32
[  109.377174][ T5821] usb 3-1: config 0 has an invalid interface number: 136 but max is 0
[  109.474228][  T856] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  109.474919][ T5821] usb 3-1: config 0 has no interface number 0
[  109.493606][ T5821] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32
[  109.507769][ T5821] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2
[  109.517333][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.525926][ T5821] usb 3-1: Product: syz
[  109.531295][ T5821] usb 3-1: Manufacturer: syz
[  109.536477][ T5821] usb 3-1: SerialNumber: syz
[  109.576396][ T5821] usb 3-1: config 0 descriptor??
[  109.587878][ T5914] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  109.600035][ T6144] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  109.612172][ T5914] usb 4-1: device descriptor read/8, error -71
[  109.627294][ T5821] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  109.628786][  T856] usb 5-1: device descriptor read/64, error -71
[  109.823613][ T5929] usb 3-1: USB disconnect, device number 8
[  109.858042][ T5914] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  109.880773][ T5914] usb 4-1: device descriptor read/8, error -71
[  109.890641][  T856] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  109.988750][ T5914] usb usb4-port1: unable to enumerate USB device
[  110.027954][  T856] usb 5-1: device descriptor read/64, error -71
[  110.150409][  T856] usb usb5-port1: attempt power cycle
[  110.350246][   T10] usb 2-1: NFC: intf ffff88802f9f7000 id ffffffff8e908c80
[  110.454935][   T10] nfcmrvl 2-1:0.122: NFC: registered with nci successfully
[  110.487125][ T6157] tipc: Started in network mode
[  110.497824][  T856] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  110.528511][  T856] usb 5-1: device descriptor read/8, error -71
[  110.542692][ T6157] tipc: Node identity cadc5a03df73, cluster identity 4711
[  110.553351][   T10] usb 2-1: USB disconnect, device number 6
[  110.568221][ T6157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.585723][ T6161] syzkaller0: entered promiscuous mode
[  110.595033][ T6161] syzkaller0: entered allmulticast mode
[  110.595104][   T10] usb 2-1: NFC: intf ffff88802f9f7000
[  110.612212][ T6162] netlink: 'syz.2.66': attribute type 5 has an invalid length.
[  110.643367][ T6157] batadv_slave_1: entered promiscuous mode
[  110.652925][ T6157] __nla_validate_parse: 29 callbacks suppressed
[  110.652944][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'.
[  110.698363][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.733860][ T6164] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  110.877850][  T856] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  110.900099][ T6157] batadv_slave_1 (unregistering): left promiscuous mode
[  110.908172][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.909318][  T856] usb 5-1: device descriptor read/8, error -71
[  110.962878][ T5821] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  110.976169][ T6166] tipc: Resetting bearer <eth:syzkaller0>
[  111.021619][ T6153] tipc: Resetting bearer <eth:syzkaller0>
[  111.034258][  T856] usb usb5-port1: unable to enumerate USB device
[  111.052965][ T6153] tipc: Disabling bearer <eth:syzkaller0>
[  111.097798][ T5821] usb 3-1: device descriptor read/64, error -71
[  111.337848][ T5821] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  111.379847][ T6172] misc userio: The device must be registered before sending interrupts
[  111.497938][ T5821] usb 3-1: device descriptor read/64, error -71
[  111.608706][ T5821] usb usb3-port1: attempt power cycle
[  111.677818][   T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  111.757088][ T6174] syz_tun: refused to change device tx_queue_len
[  111.879456][   T10] usb 1-1: No LPM exit latency info found, disabling LPM.
[  111.888214][   T10] usb 1-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt
[  111.908077][   T10] usb 1-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt
[  111.919521][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  111.929751][   T10] usb 1-1: string descriptor 0 read error: -22
[  111.936270][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  111.950276][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.971543][ T6172] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  111.979145][ T5821] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  111.990788][ T6172] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  112.025484][ T5821] usb 3-1: device descriptor read/8, error -71
[  112.376911][ T5821] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  112.377976][ T5929] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  112.398641][ T5821] usb 3-1: device descriptor read/8, error -71
[  112.413060][   T10] usb 1-1: USB disconnect, device number 3
[  112.514379][ T5821] usb usb3-port1: unable to enumerate USB device
[  112.667244][ T6191] veth1: entered allmulticast mode
[  112.678526][ T6191] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  112.679709][ T6195] netlink: 'syz.0.74': attribute type 3 has an invalid length.
[  112.710398][ T5929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.710426][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.793960][ T5929] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  112.793990][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  112.794013][ T5929] usb 2-1: SerialNumber: syz
[  112.978728][   T10] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  113.077832][  T856] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  113.149713][   T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  113.158992][   T10] usb 5-1: config 179 has no interface number 0
[  113.167089][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  113.187832][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  113.197894][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  113.223908][   T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  113.243506][   T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  113.254025][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.266317][ T6196] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  113.270749][  T856] usb 1-1: device descriptor read/64, error -71
[  113.280023][   T10] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  113.293986][   T10] xpad 5-1:179.65: probe with driver xpad failed with error -90
[  113.532607][  T856] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  113.608775][ T5929] usb 2-1: 0:2 : does not exist
[  113.701233][  T856] usb 1-1: device descriptor read/64, error -71
[  113.769926][ T5933] usb 5-1: USB disconnect, device number 8
[  113.777826][ T5929] usb 2-1: USB disconnect, device number 7
[  113.841219][  T856] usb usb1-port1: attempt power cycle
[  113.873685][   T30] audit: type=1326 audit(1762794751.565:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.2.79" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c0018f6c9 code=0x0
[  113.944911][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.207879][  T856] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  114.234252][  T856] usb 1-1: device descriptor read/8, error -71
[  114.499087][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  114.506705][  T856] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  114.514334][ T5933] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  114.549404][  T856] usb 1-1: device descriptor read/8, error -71
[  114.659327][  T856] usb usb1-port1: unable to enumerate USB device
[  114.678214][ T5933] usb 5-1: Using ep0 maxpacket: 16
[  114.686755][ T5929] usb 4-1: no configurations
[  114.693158][ T5929] usb 4-1: can't read configurations, error -22
[  114.699962][ T5933] usb 5-1: config 0 has an invalid interface number: 216 but max is 0
[  114.713825][ T5933] usb 5-1: config 0 has no interface number 0
[  114.721468][ T5933] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[  114.731550][ T5933] usb 5-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  114.743127][ T5933] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  114.765804][ T5933] usb 5-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[  114.775956][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.786003][ T5933] usb 5-1: Product: syz
[  114.791491][ T5933] usb 5-1: Manufacturer: syz
[  114.796208][ T5933] usb 5-1: SerialNumber: syz
[  114.811007][ T5933] usb 5-1: config 0 descriptor??
[  114.820253][ T6221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  114.835986][ T6221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  114.847797][ T5929] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  114.856877][ T5933] usb-storage 5-1:0.216: USB Mass Storage device detected
[  114.876487][ T5933] scsi host1: usb-storage 5-1:0.216
[  114.926360][ T6230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.997827][   T89] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  115.028941][ T5929] usb 4-1: no configurations
[  115.033624][ T5929] usb 4-1: can't read configurations, error -22
[  115.041093][ T5929] usb usb4-port1: attempt power cycle
[  115.047013][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.056536][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.147819][   T89] usb 2-1: Using ep0 maxpacket: 16
[  115.154807][   T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  115.169762][   T89] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  115.179165][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  115.186905][   T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.196121][   T89] usb 2-1: Product: syz
[  115.200408][   T89] usb 2-1: Manufacturer: syz
[  115.205231][   T89] usb 2-1: SerialNumber: syz
[  115.212508][   T89] usb 2-1: config 0 descriptor??
[  115.228056][   T89] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  115.337828][   T10] usb 3-1: Using ep0 maxpacket: 16
[  115.345501][   T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  115.353977][   T10] usb 3-1: config 0 has no interface number 0
[  115.360223][   T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  115.370404][   T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  115.383725][   T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  115.387988][ T5929] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  115.393143][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.408949][   T10] usb 3-1: Product: syz
[  115.413135][   T10] usb 3-1: Manufacturer: syz
[  115.417857][   T10] usb 3-1: SerialNumber: syz
[  115.426011][   T10] usb 3-1: config 0 descriptor??
[  115.438443][ T6230] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  115.446156][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.446975][ T5929] usb 4-1: no configurations
[  115.455932][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.461625][ T6230] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  115.474394][   T89] usb 2-1: USB disconnect, device number 8
[  115.476822][   T60] usb 2-1: Failed to submit usb control message: -71
[  115.487648][ T5929] usb 4-1: can't read configurations, error -22
[  115.495539][   T60] usb 2-1: unable to send the bmi data to the device: -71
[  115.502879][   T60] usb 2-1: unable to get target info from device
[  115.510072][   T60] usb 2-1: could not get target info (-71)
[  115.516138][   T60] usb 2-1: could not probe fw (-71)
[  115.618157][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  115.650467][ T5929] usb 4-1: no configurations
[  115.655232][ T5929] usb 4-1: can't read configurations, error -22
[  115.663729][ T5929] usb usb4-port1: unable to enumerate USB device
[  115.696816][ T6230] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  115.704304][ T6230] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  116.059477][ T6228] usb 5-1: reset high-speed USB device number 9 using dummy_hcd
[  116.277970][ T5933] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  116.314819][   T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x99
[  116.407908][ T5933] usb 2-1: device descriptor read/64, error -71
[  116.530306][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.539522][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.551905][ T5929] usb 3-1: USB disconnect, device number 13
[  116.657947][ T5933] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  116.797818][ T5933] usb 2-1: device descriptor read/64, error -71
[  116.910261][ T5933] usb usb2-port1: attempt power cycle
[  116.912281][   T89] usb 5-1: USB disconnect, device number 9
[  117.247918][ T5933] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  117.268585][ T5933] usb 2-1: device descriptor read/8, error -71
[  117.508045][ T5933] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  117.528525][ T5933] usb 2-1: device descriptor read/8, error -71
[  117.640043][ T5933] usb usb2-port1: unable to enumerate USB device
[  132.872125][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  132.878716][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  173.602624][ T6262] netlink: 196 bytes leftover after parsing attributes in process `syz.4.94'.
[  173.807793][ T5929] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  173.944807][ T6279] capability: warning: `syz.4.98' uses deprecated v2 capabilities in a way that may be insecure
[  173.977007][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  173.999449][ T5929] usb 2-1: no configurations
[  174.026966][ T6280] veth1_to_bond: entered allmulticast mode
[  174.037446][ T5929] usb 2-1: can't read configurations, error -22
[  174.278431][ T5929] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  174.337976][ T6288] delete_channel: no stack
[  174.397938][  T856] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  174.448997][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  174.458656][ T5929] usb 2-1: no configurations
[  174.463344][ T5929] usb 2-1: can't read configurations, error -22
[  174.477563][ T5929] usb usb2-port1: attempt power cycle
[  174.560148][  T856] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  174.573286][  T856] usb 4-1: config 0 has no interface number 0
[  175.338907][   T89] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  175.354809][  T856] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  175.401471][  T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.416200][  T856] usb 4-1: Product: syz
[  175.423297][  T856] usb 4-1: Manufacturer: syz
[  175.430346][  T856] usb 4-1: SerialNumber: syz
[  175.472216][  T856] usb 4-1: config 0 descriptor??
[  175.533837][   T89] usb 3-1: unable to get BOS descriptor or descriptor too short
[  175.591396][   T89] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  175.625224][ T5929] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  175.652256][   T89] usb 3-1: string descriptor 0 read error: -22
[  175.668626][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  175.685498][   T89] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  175.686521][ T5929] usb 2-1: no configurations
[  175.736077][ T5929] usb 2-1: can't read configurations, error -22
[  175.748528][   T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.757806][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  175.768773][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.789922][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.888459][ T5929] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  175.938804][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  175.945144][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  175.951367][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 105, changing to 7
[  175.962965][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25488, setting to 1024
[  175.995935][ T5929] usb 2-1: no configurations
[  176.000717][ T5929] usb 2-1: can't read configurations, error -22
[  176.013184][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.037896][ T5929] usb usb2-port1: unable to enumerate USB device
[  176.086858][ T5895] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  176.096681][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.104942][ T5895] usb 1-1: Product: syz
[  176.109606][ T5895] usb 1-1: Manufacturer: syz
[  176.114237][ T5895] usb 1-1: SerialNumber: syz
[  176.161189][ T5895] usb 1-1: config 0 descriptor??
[  176.191650][   T89] usb 3-1: reset high-speed USB device number 14 using dummy_hcd
[  176.192033][ T5895] mcba_usb 1-1:0.0: Can't find endpoints
[  176.414342][ T6312] binder: 6308:6312 ioctl 400c620e 0 returned -14
[  176.918056][   T89] usb 3-1: device descriptor read/64, error -71
[  177.017814][ T5934] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  177.157828][   T89] usb 3-1: reset high-speed USB device number 14 using dummy_hcd
[  177.207820][ T5934] usb 2-1: Using ep0 maxpacket: 32
[  177.231613][ T5934] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  177.243434][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.252816][ T5934] usb 2-1: Product: syz
[  177.257132][ T5934] usb 2-1: Manufacturer: syz
[  177.263946][ T5934] usb 2-1: SerialNumber: syz
[  177.278298][ T5934] usb 2-1: config 0 descriptor??
[  177.291709][ T5934] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  177.496755][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.530724][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.749197][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.767642][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.781343][ T5914] usb 2-1: USB disconnect, device number 17
[  177.855186][  T856] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  177.874964][  T856] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  177.898887][  T856] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  177.910973][  T856] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  177.922875][  T856] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  177.937773][  T856] usb 4-1: USB disconnect, device number 13
[  177.951288][  T856] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  177.962068][  T856] keyspan 4-1:0.133: device disconnected
[  177.967914][ T6280] veth1_to_bond: left allmulticast mode
[  178.321946][ T6326] tap0: tun_chr_ioctl cmd 2165085029
[  178.356433][ T6326] tap0: tun_chr_ioctl cmd 1074025677
[  178.362158][ T6326] tap0: linktype set to 778
[  178.415848][ T5934] usb 1-1: USB disconnect, device number 8
[  178.517794][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  178.625388][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'.
[  178.678001][  T856] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  178.698547][ T5895] usb 5-1: Using ep0 maxpacket: 32
[  178.860738][   T89] usb 3-1: unable to get BOS descriptor or descriptor too short
[  178.907408][   T89] usb 3-1: device firmware changed
[  178.915301][ T5895] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  178.998020][ T5895] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  179.012322][   T89] usb 3-1: USB disconnect, device number 14
[  179.069952][  T856] usb 4-1: device descriptor read/64, error -71
[  179.099884][ T5895] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  179.111019][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.131605][ T5895] usb 5-1: Product: syz
[  179.135831][ T5895] usb 5-1: Manufacturer: syz
[  179.222810][ T5895] usb 5-1: SerialNumber: syz
[  179.230206][ T6340] binder_alloc: 6336: binder_alloc_buf, no vma
[  179.235999][ T5895] usb 5-1: config 0 descriptor??
[  179.275736][ T6339] program syz.2.115 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  179.327863][  T856] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  179.467827][  T856] usb 4-1: device descriptor read/64, error -71
[  179.589123][  T856] usb usb4-port1: attempt power cycle
[  179.949978][  T856] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  180.101623][  T856] usb 4-1: device descriptor read/8, error -71
[  180.448885][  T856] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  180.472046][  T856] usb 4-1: device descriptor read/8, error -71
[  180.563561][ T5934] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  180.590388][  T856] usb usb4-port1: unable to enumerate USB device
[  180.807855][ T5934] usb 1-1: Using ep0 maxpacket: 32
[  180.815219][ T5934] usb 1-1: config 8 has an invalid interface number: 183 but max is 0
[  180.835190][ T5934] usb 1-1: config 8 has an invalid interface descriptor of length 5, skipping
[  180.857656][ T5934] usb 1-1: config 8 has an invalid interface descriptor of length 5, skipping
[  180.887455][ T5934] usb 1-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config
[  180.916760][ T5934] usb 1-1: config 8 has no interface number 0
[  180.933735][ T5934] usb 1-1: config 8 interface 183 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  181.005067][   T89] usb 5-1: USB disconnect, device number 10
[  181.013692][ T5934] usb 1-1: config 8 interface 183 has no altsetting 0
[  181.049104][ T5934] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50
[  181.077946][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.085989][ T5934] usb 1-1: Product: syz
[  181.100495][ T5934] usb 1-1: Manufacturer: syz
[  181.108088][ T5934] usb 1-1: SerialNumber: syz
[  181.221584][ T6371] Cannot find set identified by id 0 to match
[  181.475982][ T5934] gspca_main: tv8532-2.14.0 probing 0545:808b
[  181.561158][ T5934] usb 1-1: USB disconnect, device number 9
[  181.938083][ T5895] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  181.946411][  T856] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  182.077806][ T5895] usb 4-1: device descriptor read/64, error -71
[  182.100060][  T856] usb 5-1: config 0 has an invalid interface number: 18 but max is 0
[  182.111144][  T856] usb 5-1: config 0 has no interface number 0
[  182.117258][  T856] usb 5-1: config 0 interface 18 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  182.145352][  T856] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  182.163565][  T856] usb 5-1: New USB device found, idVendor=2040, idProduct=c0a0, bcdDevice=82.31
[  182.172900][  T856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.220689][  T856] usb 5-1: config 0 descriptor??
[  182.270502][  T856] smsusb:smsusb_probe: board id=8, interface number 18
[  182.288595][ T5934] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  182.327805][ T5895] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  182.440352][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.440403][ T5934] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x77, changing to 0x7
[  182.440430][ T5934] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x7 has invalid maxpacket 5035, setting to 64
[  182.440458][ T5934] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  182.440480][ T5934] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  182.443521][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  182.443553][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.443572][ T5934] usb 3-1: Product: syz
[  182.443587][ T5934] usb 3-1: Manufacturer: syz
[  182.443601][ T5934] usb 3-1: SerialNumber: syz
[  182.487231][ T5895] usb 4-1: device descriptor read/64, error -71
[  182.601816][ T5895] usb usb4-port1: attempt power cycle
[  182.667612][ T6385] xt_TCPMSS: Only works on TCP SYN packets
[  182.948305][ T5895] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  182.979018][ T5895] usb 4-1: device descriptor read/8, error -71
[  183.250831][ T5895] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  183.467251][ T6389] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.474830][ T5895] usb 4-1: device descriptor read/8, error -71
[  183.594592][ T5895] usb usb4-port1: unable to enumerate USB device
[  184.316193][ T5895] usb 5-1: USB disconnect, device number 11
[  184.785197][ T5934] cdc_ncm 3-1:1.0: bind() failure
[  184.798752][ T5934] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  184.830991][ T5934] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  184.860766][ T5934] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  184.888749][ T6397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.889476][ T5934] usb 3-1: USB disconnect, device number 15
[  184.912660][ T6394] syz.4.128 uses obsolete (PF_INET,SOCK_PACKET)
[  184.932241][ T6397] syzkaller0: entered promiscuous mode
[  184.939324][ T6310] udevd[6310]: setting owner of /dev/bus/usb/003/015 to uid=0, gid=0 failed: No such file or directory
[  184.964781][ T6397] syzkaller0: entered allmulticast mode
[  185.130619][ T6397] tipc: Resetting bearer <eth:syzkaller0>
[  185.228032][ T6396] tipc: Resetting bearer <eth:syzkaller0>
[  185.276512][ T6396] tipc: Disabling bearer <eth:syzkaller0>
[  185.317788][   T89] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  185.502417][   T89] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  185.535630][   T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.586391][   T89] usb 4-1: config 0 descriptor??
[  185.839504][   T89] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  186.106350][ T6435] netlink: 208 bytes leftover after parsing attributes in process `syz.3.131'.
[  186.107388][ T6435] xt_l2tp: v2 doesn't support IP mode
[  186.109345][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.109743][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.211002][   T89] [drm:udl_init] *ERROR* Selecting channel failed
[  186.262664][   T89] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  186.262694][   T89] [drm] Initialized udl on minor 2
[  186.401823][   T89] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  186.438527][   T89] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  186.440513][ T5916] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  186.440817][ T5916] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  186.444269][   T89] usb 4-1: USB disconnect, device number 22
[  188.351305][ T6466] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  189.367868][   T89] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  189.533396][   T89] usb 4-1: Using ep0 maxpacket: 32
[  189.610979][   T89] usb 4-1: config 0 has an invalid interface number: 80 but max is 0
[  189.619656][   T89] usb 4-1: config 0 has no interface number 0
[  189.630693][   T89] usb 4-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=91.1b
[  189.651412][   T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.667926][   T89] usb 4-1: Product: syz
[  189.678337][   T89] usb 4-1: Manufacturer: syz
[  189.683517][   T89] usb 4-1: SerialNumber: syz
[  189.698302][   T89] usb 4-1: config 0 descriptor??
[  189.719118][   T89] gspca_main: finepix-2.14.0 probing 04cb:0109
[  189.934996][ T6474] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  190.046212][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.057369][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.154007][ T6492] input: syz1 as /devices/virtual/input/input7
[  190.163361][ T5934] usb 4-1: USB disconnect, device number 23
[  190.310531][ T6497] binder: 6495:6497 ioctl c0306201 2000000001c0 returned -22
[  190.342973][ T6500] loop3: detected capacity change from 0 to 2640
[  190.351676][ T6501] binder: 6495:6501 ioctl c0306201 200000000080 returned -22
[  190.359668][  T856] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  190.380045][ T6497] binder: 6495:6497 ioctl c0306201 2000000001c0 returned -22
[  190.382027][ T6500] buffer_io_error: 324 callbacks suppressed
[  190.382048][ T6500] Buffer I/O error on dev loop3, logical block 0, async page read
[  190.415785][ T6500] Buffer I/O error on dev loop3, logical block 0, async page read
[  190.454714][ T6500]  loop3: unable to read partition table
[  190.480559][ T6500] loop_reread_partitions: partition scan of loop3 (3�����) failed (rc=-5)
[  190.558729][ T6304] Buffer I/O error on dev loop3, logical block 0, lost async page write
[  190.571341][  T856] usb 1-1: Using ep0 maxpacket: 16
[  190.597909][ T6304] Buffer I/O error on dev loop3, logical block 1, lost async page write
[  190.606400][ T6304] Buffer I/O error on dev loop3, logical block 2, lost async page write
[  190.637852][ T6304] Buffer I/O error on dev loop3, logical block 3, lost async page write
[  190.646921][  T856] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  190.668444][ T6304] Buffer I/O error on dev loop3, logical block 4, lost async page write
[  190.676919][  T856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  190.698362][ T6304] Buffer I/O error on dev loop3, logical block 5, lost async page write
[  190.719398][  T856] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  190.728777][ T5199] Buffer I/O error on dev loop3, logical block 8, lost async page write
[  190.738099][ T6304] Buffer I/O error on dev loop3, logical block 6, lost async page write
[  190.755918][  T856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.798355][  T856] usb 1-1: Product: syz
[  190.807827][  T856] usb 1-1: Manufacturer: syz
[  190.812474][  T856] usb 1-1: SerialNumber: syz
[  190.855335][ T5199] ldm_validate_partition_table(): Disk read failed.
[  190.881765][  T856] usb 1-1: config 0 descriptor??
[  190.897790][  T856] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  190.918185][ T5199] Dev loop3: unable to read RDB block 0
[  190.924944][ T5199]  loop3: unable to read partition table
[  190.930739][  T856] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  190.998048][ T5916] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  191.217732][ T5916] usb 2-1: Using ep0 maxpacket: 16
[  191.288632][ T6524] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  191.388037][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.434419][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.450453][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.497836][ T5916] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  191.778294][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.779935][  T856] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  191.803947][ T5916] usb 2-1: config 0 descriptor??
[  191.854259][  T856] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  192.314129][  T856] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  192.325100][  T856] em28xx 1-1:0.0: No AC97 audio processor
[  192.738096][  T856] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  192.760020][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.165'.
[  192.776922][ T6534] mmap: syz.3.165 (6534) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  192.959743][  T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  192.973542][  T856] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  192.983637][  T856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.995498][  T856] usb 5-1: config 0 descriptor??
[  193.002552][ T6531] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  193.067838][   T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  193.208001][   T10] usb 3-1: device descriptor read/64, error -71
[  193.297169][ T6544] loop3: detected capacity change from 0 to 2640
[  193.306635][ T6544] ldm_validate_partition_table(): Disk read failed.
[  193.315727][ T6544] Dev loop3: unable to read RDB block 0
[  193.322375][ T6544]  loop3: unable to read partition table
[  193.330027][ T6544] loop_reread_partitions: partition scan of loop3 (3�����) failed (rc=-5)
[  193.380231][ T5821] usb 1-1: USB disconnect, device number 10
[  193.405932][ T5821] em28xx 1-1:0.0: Disconnecting em28xx
[  193.434983][ T5821] em28xx 1-1:0.0: Freeing device
[  193.445745][  T856] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[  193.457851][   T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  193.493370][  T856] monterey 0003:0566:3004.0001: item fetching failed at offset 3/5
[  193.529978][  T856] monterey 0003:0566:3004.0001: probe with driver monterey failed with error -22
[  193.608593][   T10] usb 3-1: device descriptor read/64, error -71
[  193.639047][ T5914] usb 5-1: USB disconnect, device number 12
[  193.720971][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'.
[  193.748810][   T10] usb usb3-port1: attempt power cycle
[  193.871622][ T6562] loop6: detected capacity change from 0 to 524287999
[  193.938715][  T856] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  194.095356][   T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  194.107784][  T856] usb 1-1: Using ep0 maxpacket: 32
[  194.130214][  T856] usb 1-1: unable to get BOS descriptor or descriptor too short
[  194.143602][  T856] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  194.154331][   T10] usb 3-1: device descriptor read/8, error -71
[  194.194381][ T5916] usbhid 2-1:0.0: can't add hid device: -71
[  194.217949][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  194.238873][  T856] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  194.240022][ T5916] usb 2-1: USB disconnect, device number 18
[  194.263316][  T856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.294251][  T856] usb 1-1: Product: syz
[  194.313297][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.319866][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.341920][  T856] usb 1-1: Manufacturer: syz
[  194.347056][  T856] usb 1-1: SerialNumber: syz
[  194.442691][ T6566] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  194.464162][   T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  194.498438][   T10] usb 3-1: device descriptor read/8, error -71
[  194.728356][  T856] usb 1-1: Invalid number of CPorts: 0
[  194.728421][   T10] usb usb3-port1: unable to enumerate USB device
[  194.733915][  T856] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22
[  195.163480][  T856] usb 1-1: USB disconnect, device number 11
[  195.503284][ T6573] loop5: detected capacity change from 0 to 7
[  195.533294][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.542542][    C0] buffer_io_error: 684 callbacks suppressed
[  195.542560][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.557564][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.566786][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.575516][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.584752][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.594705][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.603939][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.613452][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.622853][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.635114][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.644486][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.655646][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.664920][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.672863][ T6573] ldm_validate_partition_table(): Disk read failed.
[  195.696669][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.705890][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.729998][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.739559][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.749667][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.758936][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  195.767799][ T6573] Dev loop5: unable to read RDB block 0
[  195.789978][ T6573]  loop5: unable to read partition table
[  195.805159][ T6573] loop5: partition table beyond EOD, truncated
[  195.832818][ T6573] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  195.965349][ T6581] loop3: detected capacity change from 0 to 2640
[  196.001975][ T6581] ldm_validate_partition_table(): Disk read failed.
[  196.038766][ T6581] Dev loop3: unable to read RDB block 0
[  196.044917][ T6581]  loop3: unable to read partition table
[  196.110947][ T6581] loop_reread_partitions: partition scan of loop3 (3�����) failed (rc=-5)
[  196.387418][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.421321][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.537786][ T5821] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  196.567272][ T6593] netlink: 'syz.1.183': attribute type 10 has an invalid length.
[  196.621049][   T10] usb 3-1: new low-speed USB device number 20 using dummy_hcd
[  196.707123][ T5821] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  196.717127][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.741580][ T5821] usb 4-1: config 0 descriptor??
[  196.756628][ T5821] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  196.812609][   T10] usb 3-1: config 1 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  196.824970][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  196.978458][ T5916] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  197.147795][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  197.172630][ T5916] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  197.180927][ T5916] usb 2-1: config 0 has no interface number 0
[  197.195817][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  197.210692][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.219262][ T5916] usb 2-1: Product: syz
[  197.224768][ T5916] usb 2-1: Manufacturer: syz
[  197.229683][ T5916] usb 2-1: SerialNumber: syz
[  197.245213][ T5916] usb 2-1: config 0 descriptor??
[  197.461622][ T5916] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  197.478113][ T5916] uvcvideo 2-1:0.31: Failed to initialize entity for entity 6
[  197.486032][ T5916] uvcvideo 2-1:0.31: Failed to register entities (-22).
[  197.534656][ T6611] xt_TCPMSS: Only works on TCP SYN packets
[  197.680192][ T5933] usb 2-1: USB disconnect, device number 19
[  197.710772][ T5821] usb 4-1: USB disconnect, device number 24
[  198.669120][ T6633] loop3: detected capacity change from 0 to 2640
[  198.700458][ T6633] ldm_validate_partition_table(): Disk read failed.
[  198.713038][ T6633] Dev loop3: unable to read RDB block 0
[  198.722290][ T6633]  loop3: unable to read partition table
[  198.729195][ T6633] loop_reread_partitions: partition scan of loop3 (3�����) failed (rc=-5)
[  199.065800][ T6640] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  199.473418][   T10] usb 3-1: string descriptor 0 read error: -71
[  199.493655][   T10] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40
[  199.503172][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.650376][   T10] usb 3-1: can't set config #1, error -71
[  199.785224][   T10] usb 3-1: USB disconnect, device number 20
[  200.052156][ T6656] binder: 6647:6656 ioctl c0306201 2000000001c0 returned -14
[  200.277837][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  200.757873][   T10] usb 3-1: device descriptor read/64, error -71
[  201.078281][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  201.227902][   T10] usb 3-1: device descriptor read/64, error -71
[  201.358133][   T10] usb usb3-port1: attempt power cycle
[  201.707928][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  201.738647][   T10] usb 3-1: device descriptor read/8, error -71
[  201.767813][ T5916] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  201.937941][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  201.988546][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  202.010069][ T5916] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  202.027845][ T5916] usb 1-1: config 0 has no interface number 0
[  202.036482][ T5916] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.050544][   T10] usb 3-1: device descriptor read/8, error -71
[  202.087752][ T5916] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  202.127795][ T5916] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  202.158008][ T5916] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  202.181280][   T10] usb usb3-port1: unable to enumerate USB device
[  202.197058][ T5916] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  202.217763][ T5933] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  202.217778][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.228350][ T5916] usb 1-1: config 0 descriptor??
[  202.277480][ T5916] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  202.422642][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.436740][ T5933] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  202.446298][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.468975][ T5933] usb 2-1: config 0 descriptor??
[  202.509299][ T5916] usb 1-1: USB disconnect, device number 12
[  202.528815][ T5916] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  202.919276][ T5933] holtek 0003:1241:5015.0002: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0
[  203.015793][ T5916] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  203.023460][ T5933] holtek 0003:1241:5015.0002: no inputs found
[  203.197739][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  203.199002][ T5934] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  203.226073][ T5916] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  203.266503][ T5916] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  203.275174][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  203.288377][ T5916] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  203.300671][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF
[  203.312774][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 102, changing to 10
[  203.325445][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 24624, setting to 1024
[  203.338676][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  203.355664][ T5916] usb 1-1: string descriptor 0 read error: -22
[  203.363822][ T5916] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  203.374267][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.387713][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  203.395923][ T5934] usb 4-1: config 0 has no interface number 0
[  203.397029][ T5916] usb 1-1: config 0 descriptor??
[  203.407546][ T5934] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 12447, setting to 8
[  203.424927][ T5916] hub 1-1:0.0: bad descriptor, ignoring hub
[  203.485260][ T5916] hub 1-1:0.0: probe with driver hub failed with error -5
[  203.505104][ T5934] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  203.505618][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'.
[  203.514746][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.616949][ T5934] usb 4-1: config 0 descriptor??
[  203.636666][ T6693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  203.652260][ T5934] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  203.859201][ T5895] usb 4-1: USB disconnect, device number 25
[  203.865372][    C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  204.062258][ T6693] netlink: 'syz.3.207': attribute type 5 has an invalid length.
[  204.107806][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  204.267870][   T10] usb 5-1: Using ep0 maxpacket: 8
[  204.275139][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  204.286482][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  204.296225][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  204.306420][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  204.318778][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  204.328928][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  204.338036][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.349279][   T10] usb 5-1: config 0 descriptor??
[  204.355612][ T6706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.407893][ T5895] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  204.539172][ T5895] usb 3-1: device descriptor read/64, error -71
[  204.568993][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.569900][    C0] Bluetooth: hci5: Unexpected continuation: 1 bytes
[  204.576027][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.591173][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.598192][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.605255][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.614564][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.621774][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.629751][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.636637][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.643547][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.651032][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.658885][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.666101][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.673055][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.680179][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.687137][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.694084][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.701373][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.708608][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.717381][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.725277][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.732331][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.739520][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.746384][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.753358][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.761033][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.768102][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.776429][ T5933] usb 5-1: USB disconnect, device number 13
[  204.788186][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.799373][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  204.808510][ T5836] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  204.888752][ T5895] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  204.999682][ T5934] usb 2-1: USB disconnect, device number 20
[  205.033809][ T5895] usb 3-1: device descriptor read/64, error -71
[  205.076016][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.095669][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.158910][ T5895] usb usb3-port1: attempt power cycle
[  205.369930][ T6716] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.214'.
[  205.379493][ T5934] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  205.507804][ T5895] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  205.517855][ T5934] usb 2-1: device descriptor read/64, error -71
[  205.528598][ T5895] usb 3-1: device descriptor read/8, error -71
[  205.629389][ T5933] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  205.711033][ T5932] usb 1-1: USB disconnect, device number 13
[  205.768334][ T5934] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  205.780335][ T5895] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  205.807749][ T5933] usb 5-1: Using ep0 maxpacket: 32
[  205.820483][ T5895] usb 3-1: device descriptor read/8, error -71
[  205.845731][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.887851][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  205.927976][ T5934] usb 2-1: device descriptor read/64, error -71
[  205.935724][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  205.957787][ T5933] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  205.968136][ T5895] usb usb3-port1: unable to enumerate USB device
[  205.977119][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.002622][ T5933] usb 5-1: config 0 descriptor??
[  206.018487][ T6716] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  206.029635][ T5933] hub 5-1:0.0: USB hub found
[  206.059352][ T5934] usb usb2-port1: attempt power cycle
[  206.273168][ T5933] hub 5-1:0.0: 2 ports detected
[  206.299848][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[  206.319941][ T6726] openvswitch: netlink: Flow actions attr not present in new flow.
[  206.398067][ T5934] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  206.420819][ T5934] usb 2-1: device descriptor read/8, error -71
[  206.584449][ T6725] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  206.668351][ T5934] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  206.698512][ T5934] usb 2-1: device descriptor read/8, error -71
[  206.808412][ T5934] usb usb2-port1: unable to enumerate USB device
[  206.847848][ T5916] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  206.977810][ T5916] usb 1-1: device descriptor read/64, error -71
[  207.081161][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'.
[  207.107126][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'.
[  207.122667][ T5933] usb 5-1: USB disconnect, device number 14
[  207.258424][ T5916] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  207.398318][ T5916] usb 1-1: device descriptor read/64, error -71
[  207.489707][ T6739] syz_tun: entered allmulticast mode
[  207.495930][ T6739] syz_tun: left allmulticast mode
[  207.518163][ T5916] usb usb1-port1: attempt power cycle
[  207.647891][   T89] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  207.795549][   T30] audit: type=1326 audit(1762794845.485:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e09f8f6c9 code=0x0
[  207.798785][   T89] usb 4-1: Using ep0 maxpacket: 16
[  207.825247][   T89] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  207.836316][   T89] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  207.844699][   T89] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  207.853016][   T89] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  207.861359][ T5916] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  207.869966][   T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  207.881017][   T89] usb 4-1: config 0 has no interface number 0
[  207.887468][   T89] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  207.899023][   T89] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  207.909768][ T5916] usb 1-1: device descriptor read/8, error -71
[  207.916168][   T89] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  207.928104][   T89] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  207.942416][   T89] usb 4-1: config 0 interface 125 has no altsetting 0
[  207.950246][   T89] usb 4-1: config 0 interface 125 has no altsetting 2
[  207.959388][   T89] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  207.968628][   T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.976661][   T89] usb 4-1: Product: syz
[  207.981695][   T89] usb 4-1: Manufacturer: syz
[  207.986320][   T89] usb 4-1: SerialNumber: syz
[  208.000903][   T89] usb 4-1: config 0 descriptor??
[  208.011318][   T89] usb 4-1: selecting invalid altsetting 2
[  208.157806][ T5916] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  208.179023][ T5916] usb 1-1: device descriptor read/8, error -71
[  208.239664][    C0] usb 4-1: async_complete: urb error -71
[  208.245412][    C0] usb 4-1: async_complete: urb error -71
[  208.251100][    C0] usb 4-1: async_complete: urb error -71
[  208.277783][   T89] get_1284_register: usb error -71
[  208.283071][   T89] uss720 4-1:0.125: probe with driver uss720 failed with error -71
[  208.299463][ T5916] usb usb1-port1: unable to enumerate USB device
[  208.341846][   T89] usb 4-1: USB disconnect, device number 26
[  208.538760][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'.
[  208.862181][   T30] audit: type=1326 audit(1762794846.435:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  208.971283][   T30] audit: type=1326 audit(1762794846.435:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  209.120050][   T30] audit: type=1326 audit(1762794846.435:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  209.225034][   T30] audit: type=1326 audit(1762794846.435:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  209.353717][   T30] audit: type=1326 audit(1762794846.435:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  209.486435][   T30] audit: type=1326 audit(1762794846.435:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  209.654239][   T30] audit: type=1326 audit(1762794846.445:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  209.692563][ T6787] netlink: 96 bytes leftover after parsing attributes in process `syz.2.233'.
[  209.883493][   T30] audit: type=1326 audit(1762794846.445:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  209.988123][ T6790] netlink: 'syz.1.234': attribute type 2 has an invalid length.
[  210.042647][ T6790] : entered promiscuous mode
[  210.211990][   T30] audit: type=1326 audit(1762794846.445:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bdd8f6c9 code=0x7ffc0000
[  210.234110][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.506431][ T6802] program syz.1.236 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  210.521035][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'.
[  210.554012][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'.
[  210.635897][ T6806] netlink: 92 bytes leftover after parsing attributes in process `syz.2.238'.
[  210.708187][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'.
[  210.777825][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'.
[  210.806756][ T6807] netlink: 'syz.1.236': attribute type 10 has an invalid length.
[  210.834186][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.236'.
[  210.861782][ T6807] batman_adv: batadv0: Adding interface: virt_wifi0
[  210.869333][ T6807] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.911898][ T6807] batman_adv: batadv0: Interface activated: virt_wifi0
[  211.021898][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[  211.827841][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[  211.839101][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  211.845182][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  211.851291][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  211.851816][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  212.017777][ T5933] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  212.199649][ T5933] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  212.218001][ T5933] usb 5-1: config 0 has no interface number 0
[  212.224171][ T5933] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  212.260972][ T5933] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  212.277724][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.286265][ T5933] usb 5-1: Product: syz
[  212.294169][ T5933] usb 5-1: Manufacturer: syz
[  212.299145][ T5933] usb 5-1: SerialNumber: syz
[  212.329700][ T5933] usb 5-1: config 0 descriptor??
[  212.354363][ T5933] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  212.489108][ T5916] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  212.544259][    C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  212.654490][ T5933] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.678313][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  212.701129][ T5916] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  212.718090][ T5916] usb 1-1: config 179 has no interface number 0
[  212.729795][ T5916] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  212.748206][ T5916] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  212.757762][ T6826] input: syz0 as /devices/virtual/input/input8
[  212.785147][ T5916] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  212.838377][ T5916] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  212.881237][ T5916] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  212.939394][ T5916] usb 1-1: config 179 interface 65 has no altsetting 0
[  212.949060][ T5934] usb 5-1: USB disconnect, device number 15
[  212.953437][ T5916] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  212.995342][ T5934] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  213.002078][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.053352][ T5916] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9
[  213.113971][ T5933] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  213.178018][ T1118] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  213.238806][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'.
[  213.249675][ T6833] netlink: 'syz.0.245': attribute type 7 has an invalid length.
[  213.279839][ T5933] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[  213.289054][ T5933] usb 2-1: config 0 has no interface number 0
[  213.295446][ T5933] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  213.297812][ T5916] usb 1-1: USB disconnect, device number 18
[  213.317819][ T5895] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  213.327739][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.360923][ T5933] usb 2-1: config 0 descriptor??
[  213.373272][ T5933] cp210x 2-1:0.32: cp210x converter detected
[  213.418997][ T5934] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  213.488956][ T5895] usb 4-1: device descriptor read/64, error -71
[  213.602916][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.618499][ T5934] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  213.657854][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.678098][ T5929] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  213.692690][ T5934] usb 5-1: config 0 descriptor??
[  213.747854][ T5895] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  213.938898][ T5895] usb 4-1: device descriptor read/64, error -71
[  214.108333][ T5895] usb usb4-port1: attempt power cycle
[  214.150343][ T5934] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  214.208631][ T5934] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input10
[  214.228645][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.263104][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.458124][ T5895] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  214.485414][ T5934] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  214.571450][ T5895] usb 4-1: device descriptor read/8, error -71
[  214.693121][ T6866] capability: warning: `syz.0.254' uses 32-bit capabilities (legacy support in use)
[  214.778898][ T5916] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.838778][ T5895] usb 4-1: new low-speed USB device number 30 using dummy_hcd
[  214.941306][ T5895] usb 4-1: device descriptor read/8, error -71
[  215.048337][ T5895] usb usb4-port1: unable to enumerate USB device
[  215.064672][ T5933] cp210x 2-1:0.32: failed to get vendor val 0x370b size 1: -71
[  215.105039][ T5933] cp210x 2-1:0.32: querying part number failed
[  215.163866][ T5933] usb 2-1: cp210x converter now attached to ttyUSB0
[  215.209314][ T5933] usb 2-1: USB disconnect, device number 25
[  215.256802][ T5933] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  215.310839][ T5933] cp210x 2-1:0.32: device disconnected
[  215.637823][ T5934] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  215.747784][ T5916] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  215.917799][ T5916] usb 3-1: Using ep0 maxpacket: 8
[  215.932404][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  215.955593][ T5916] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54
[  215.973632][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.983137][ T5916] usb 3-1: Product: syz
[  215.989831][ T5916] usb 3-1: Manufacturer: syz
[  215.995914][ T6889] =======================================================
[  215.995914][ T6889] WARNING: The mand mount option has been deprecated and
[  215.995914][ T6889]          and is ignored by this kernel. Remove the mand
[  215.995914][ T6889]          option from the mount to silence this warning.
[  215.995914][ T6889] =======================================================
[  215.998474][ T5916] usb 3-1: SerialNumber: syz
[  216.030826][    C0] vkms_vblank_simulate: vblank timer overrun
[  216.045582][ T5929] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  216.117818][ T5914] usb 5-1: USB disconnect, device number 16
[  216.157635][ T5916] usb 3-1: config 0 descriptor??
[  216.185137][ T5916] usb 3-1: invalid MIDI EP
[  216.207787][ T5929] usb 2-1: device descriptor read/64, error -71
[  216.211829][ T5916] usb 3-1: snd-bcd2000: error during probing
[  216.253911][ T5916] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  216.308616][ T5934] usb 1-1: device descriptor read/64, error -71
[  216.312483][ T6896] sctp: [Deprecated]: syz.4.263 (pid 6896) Use of int in max_burst socket option.
[  216.312483][ T6896] Use struct sctp_assoc_value instead
[  216.424261][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.448196][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.480882][ T5929] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  216.491673][ T5895] usb 3-1: USB disconnect, device number 29
[  216.558153][ T5934] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  216.613178][ T6907] syzkaller1: entered promiscuous mode
[  216.620081][ T6907] syzkaller1: entered allmulticast mode
[  216.627872][ T5929] usb 2-1: device descriptor read/64, error -71
[  216.697901][ T5934] usb 1-1: device descriptor read/64, error -71
[  216.741432][ T5929] usb usb2-port1: attempt power cycle
[  216.808183][ T5934] usb usb1-port1: attempt power cycle
[  216.968630][ T5914] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  217.087988][ T5929] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  217.138504][ T5929] usb 2-1: device descriptor read/8, error -71
[  217.147740][ T5914] usb 5-1: Using ep0 maxpacket: 8
[  217.160166][ T5914] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  217.167853][ T5934] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  217.174708][ T5914] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  217.189685][ T5914] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2
[  217.202720][ T5914] usb 5-1: config 127 has no interface number 0
[  217.203989][ T5934] usb 1-1: device descriptor read/8, error -71
[  217.209985][ T5914] usb 5-1: config 127 interface 171 has no altsetting 0
[  217.237999][ T5914] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  217.249584][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.258427][ T5914] usb 5-1: Product: syz
[  217.262711][ T5914] usb 5-1: Manufacturer: syz
[  217.267417][ T5914] usb 5-1: SerialNumber: syz
[  217.402330][ T5929] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  217.428734][ T5929] usb 2-1: device descriptor read/8, error -71
[  217.467760][ T5934] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  217.514259][ T5934] usb 1-1: device descriptor read/8, error -71
[  217.543786][ T5929] usb usb2-port1: unable to enumerate USB device
[  217.628201][ T5934] usb usb1-port1: unable to enumerate USB device
[  217.638752][ T6916] __nla_validate_parse: 1 callbacks suppressed
[  217.638794][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'.
[  218.228158][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  218.647783][   T89] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  218.857805][   T89] usb 3-1: Using ep0 maxpacket: 32
[  218.871836][   T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.883543][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.895422][   T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.920215][   T89] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  218.924964][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.954704][   T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.996235][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.005218][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.020351][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.062656][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.118677][   T89] usb 3-1: config 0 descriptor??
[  219.154639][   T89] hub 3-1:0.0: USB hub found
[  219.341552][   T89] hub 3-1:0.0: 1 port detected
[  219.396044][ T6944] binder: 6943:6944 ioctl c0306201 200000000640 returned -22
[  219.550385][   T89] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  219.559401][   T89] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  219.600958][   T89] usbhid 3-1:0.0: can't add hid device: -71
[  219.610097][   T89] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  219.647998][ T5934] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  219.669541][   T89] usb 3-1: USB disconnect, device number 30
[  219.807778][ T5934] usb 2-1: Using ep0 maxpacket: 8
[  219.834190][ T5934] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  219.859538][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.964569][ T5934] usb 2-1: config 0 descriptor??
[  220.198085][ T5934] usb 2-1: USB disconnect, device number 30
[  221.552135][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[  221.722563][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.283'.
[  222.669424][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.291'.
[  223.397762][ T5929] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  223.532076][ T7014] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma?
[  223.598062][ T5929] usb 4-1: Using ep0 maxpacket: 16
[  223.606229][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.621692][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.631721][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.641765][ T7014] binder: 7013:7014 ioctl c0306201 200000000040 returned -22
[  223.660732][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  223.688155][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.700954][ T5929] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  223.717997][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.734757][ T5149] Bluetooth: hci4: adv larger than maximum supported
[  223.734812][ T5149] Bluetooth: hci4: Malformed LE Event: 0x0d
[  223.769592][ T5929] usb 4-1: config 0 descriptor??
[  223.884820][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.294'.
[  223.937404][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'.
[  224.158223][   T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  225.340973][   T10] usb 3-1: config 0 has no interfaces?
[  225.353534][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  225.362975][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.393240][   T10] usb 3-1: Product: syz
[  225.423804][   T10] usb 3-1: Manufacturer: syz
[  225.441252][   T10] usb 3-1: SerialNumber: syz
[  225.459201][   T10] usb 3-1: config 0 descriptor??
[  225.473458][   T10] usb 5-1: USB disconnect, device number 17
[  225.676393][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.685263][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.724322][   T10] usb 3-1: USB disconnect, device number 31
[  225.758066][ T5914] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  225.918569][ T5914] usb 2-1: Using ep0 maxpacket: 8
[  225.926338][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.946759][ T5914] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  225.973488][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.991756][ T5914] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  226.010009][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.039571][ T5914] usb 2-1: config 0 descriptor??
[  226.308009][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  226.479931][ T7036] netlink: 'syz.0.300': attribute type 3 has an invalid length.
[  226.487754][ T7036] netlink: 160 bytes leftover after parsing attributes in process `syz.0.300'.
[  226.669907][ T5914] usbhid 2-1:0.0: can't add hid device: -71
[  226.701716][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  226.719470][ T5914] usb 2-1: USB disconnect, device number 31
[  226.882773][ T5929] usbhid 4-1:0.0: can't add hid device: -71
[  226.901963][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  226.967745][ T5929] usb 4-1: USB disconnect, device number 31
[  227.168858][ T7049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.305'.
[  227.357899][  T856] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  227.517770][  T856] usb 5-1: device descriptor read/64, error -71
[  227.709371][ T7055] netlink: 104 bytes leftover after parsing attributes in process `syz.2.307'.
[  227.776039][ T7058] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  227.824266][  T856] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  228.016620][  T856] usb 5-1: device descriptor read/64, error -71
[  228.148065][  T856] usb usb5-port1: attempt power cycle
[  228.521165][  T856] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  228.588399][  T856] usb 5-1: device descriptor read/8, error -71
[  228.857803][  T856] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  228.903923][  T856] usb 5-1: device descriptor read/8, error -71
[  228.907798][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  228.907819][   T30] audit: type=1326 audit(1762794866.595:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0
[  229.022273][  T856] usb usb5-port1: unable to enumerate USB device
[  229.257868][  T856] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  229.457327][  T856] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  229.497130][  T856] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.535405][  T856] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  229.553619][  T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.572180][  T856] usb 4-1: Product: ᗗ産㌢명行㡮릧稖ﶌ窄縑㴼⬤⾇桝艈ꄣ널좡ȭꏖᶩᡠ骔㕻焀骤Ꮐ敪ฝ鯯䱄
[  229.638761][  T856] usb 4-1: Manufacturer: Ч
[  229.659364][ T5929] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  229.699688][  T856] usb 4-1: SerialNumber: 䯱亻泯堺毊ଉ滧ះ連㏢ꚷ缆쿢䦋ꐑ⑄縌핤ꠂ䁶ꇡ컽뵀ꒊ<錪婇㷞ᝆﺕ∆检誝ｎ温뤛⪏巴䥢穤徣ඨ牓௄ૐ褈킐稷킥⬨錯⻛
[  229.722127][  T856] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  229.769833][  T856] usb 4-1: no configuration chosen from 1 choice
[  229.847789][ T5929] usb 3-1: device descriptor read/64, error -71
[  229.885147][ T7088] netlink: 25 bytes leftover after parsing attributes in process `syz.0.314'.
[  230.116754][ T5929] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  230.318456][ T7096] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[  230.349397][ T5929] usb 3-1: device descriptor read/64, error -71
[  230.388078][ T7100] netlink: 104 bytes leftover after parsing attributes in process `syz.0.319'.
[  230.498043][ T5929] usb usb3-port1: attempt power cycle
[  230.884211][ T5929] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  230.925895][ T5929] usb 3-1: device descriptor read/8, error -71
[  230.991609][ T5934] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  231.139901][  T856] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  231.167806][ T5934] usb 1-1: Using ep0 maxpacket: 8
[  231.173055][ T5929] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  231.185195][ T5934] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  231.216054][ T5934] usb 1-1: config 179 has no interface number 0
[  231.242076][ T5929] usb 3-1: device descriptor read/8, error -71
[  231.252327][ T5934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  231.264714][ T5934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  231.276675][ T5934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  231.292839][ T5934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  231.305719][ T5934] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  231.323728][  T856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.337897][  T856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.349187][  T856] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  231.382562][ T5929] usb usb3-port1: unable to enumerate USB device
[  231.389079][ T5934] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  231.408913][  T856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.419760][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.436655][  T856] usb 2-1: config 0 descriptor??
[  231.445782][ T7114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  231.520913][ T7121] xt_CT: You must specify a L4 protocol and not use inversions on it
[  231.668625][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.683476][ T5934] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11
[  231.777639][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.884543][ T5914] usb 1-1: USB disconnect, device number 23
[  231.884622][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  231.899392][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  231.924504][   T10] usb 4-1: USB disconnect, device number 32
[  231.953412][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'.
[  232.141129][ T7129] team1: entered promiscuous mode
[  232.147379][ T7129] team1: entered allmulticast mode
[  232.224456][  T856] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  232.249341][  T856] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  232.309373][  T856] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0004/input/input12
[  232.594695][ T7130] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  232.659991][ T7140] loop3: detected capacity change from 0 to 2640
[  232.689704][ T7140] buffer_io_error: 702 callbacks suppressed
[  232.689722][ T7140] Buffer I/O error on dev loop3, logical block 0, async page read
[  232.699361][  T856] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  232.781065][ T7140] Buffer I/O error on dev loop3, logical block 0, async page read
[  232.866490][ T7140] Buffer I/O error on dev loop3, logical block 0, async page read
[  233.073662][ T7140]  loop3: unable to read partition table
[  233.148198][ T5914] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  233.156037][ T7140] loop_reread_partitions: partition scan of loop3 (3�����) failed (rc=-5)
[  233.337776][ T5914] usb 1-1: Using ep0 maxpacket: 8
[  233.368921][ T5914] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  233.648718][ T6310] Buffer I/O error on dev loop3, logical block 0, lost async page write
[  233.657267][ T5914] usb 1-1: config 0 has no interface number 0
[  233.727420][ T5199] Buffer I/O error on dev loop3, logical block 1, lost async page write
[  233.736232][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  233.764281][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  233.766725][ T5199] Buffer I/O error on dev loop3, logical block 2, lost async page write
[  233.790928][ T5914] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  233.826483][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  233.888417][ T5199] Buffer I/O error on dev loop3, logical block 3, lost async page write
[  233.939281][ T5199] Buffer I/O error on dev loop3, logical block 4, lost async page write
[  233.941024][ T5914] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  233.957622][ T7157] netlink: 104 bytes leftover after parsing attributes in process `syz.3.330'.
[  233.968320][  T856] usb 2-1: reset high-speed USB device number 32 using dummy_hcd
[  233.979201][ T5199] Buffer I/O error on dev loop3, logical block 5, lost async page write
[  233.992972][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.099034][ T5199] Buffer I/O error on dev loop3, logical block 6, lost async page write
[  234.123704][ T5914] usb 1-1: config 0 descriptor??
[  234.143169][ T5914] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  234.231017][ T5199] ldm_validate_partition_table(): Disk read failed.
[  234.239951][ T5199] Dev loop3: unable to read RDB block 0
[  234.246868][ T5199]  loop3: unable to read partition table
[  234.381013][ T5934] usb 1-1: USB disconnect, device number 24
[  234.408267][ T5934] ldusb 1-1:0.55: LD USB Device #1 now disconnected
[  234.948047][ T5914] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  235.475150][ T7181] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  235.962912][ T5929] usb 2-1: USB disconnect, device number 32
[  236.348287][ T5934] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  236.469905][ T5929] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  236.667118][ T5934] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  236.708812][ T5929] usb 2-1: Using ep0 maxpacket: 16
[  236.731622][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.769128][ T5929] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.807944][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0
[  236.818184][ T5934] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  236.838144][ T5929] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  236.847213][ T5934] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  236.862076][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.884782][ T5934] usb 3-1: Manufacturer: syz
[  236.908844][ T5934] usb 3-1: config 0 descriptor??
[  236.914626][ T5929] usb 2-1: config 0 descriptor??
[  237.047771][ T5934] rc_core: IR keymap rc-hauppauge not found
[  237.053733][ T5934] Registered IR keymap rc-empty
[  237.135864][ T5934] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  237.154019][ T7195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.338'.
[  237.275004][ T5934] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13
[  237.331194][    C1] igorplugusb 3-1:0.0: Error: urb status = -32
[  237.432155][ T5929] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  237.457815][ T5929] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  237.491411][ T5929] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  237.528383][ T5929] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  237.587743][ T5929] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  237.613773][ T5929] kye 0003:0458:0087.0005: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0
[  237.782932][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.844096][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.973076][ T7193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.337'.
[  237.982270][   T30] audit: type=1326 audit(1762794875.635:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facde78f6c9 code=0x0
[  238.193320][ T7223] kAFS: unparsable volume name
[  238.674092][   T89] usb 2-1: USB disconnect, device number 33
[  239.232302][ T5914] usb 3-1: USB disconnect, device number 36
[  239.402845][ T7256] loop6: detected capacity change from 0 to 524279808
[  239.438583][ T7256] loop6: detected capacity change from 524279808 to 1
[  239.452785][ T7149] Dev loop6: unable to read RDB block 1
[  239.458000][ T5916] usb 4-1: new low-speed USB device number 34 using dummy_hcd
[  239.470115][ T7149]  loop6: unable to read partition table
[  239.486461][ T7149] loop6: partition table beyond EOD, truncated
[  239.505845][ T7256] Dev loop6: unable to read RDB block 1
[  239.515697][ T7256]  loop6: unable to read partition table
[  239.522666][ T7256] loop6: partition table beyond EOD, truncated
[  239.535633][ T7256] loop_reread_partitions: partition scan of loop6 (�u0v��	) failed (rc=-5)
[  239.568061][ T5929] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  239.576857][ T5199] Dev loop6: unable to read RDB block 1
[  239.602070][ T5199]  loop6: unable to read partition table
[  239.612423][ T5199] loop6: partition table beyond EOD, truncated
[  239.630567][ T5916] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  239.647898][ T5916] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  239.662037][ T5916] usb 4-1: config 0 has no interface number 0
[  239.755590][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[  239.799312][ T5916] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  239.810069][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.872182][ T5916] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  239.885419][ T5916] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  239.931765][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.943133][ T5929] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  239.959972][ T5916] usb 4-1: config 0 descriptor??
[  239.970845][ T5929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  239.998486][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.049742][ T5929] usb 5-1: Product: syz
[  240.066404][ T5929] usb 5-1: Manufacturer: syz
[  240.083563][ T5929] usb 5-1: SerialNumber: syz
[  240.343023][ T7252] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  240.929420][ T7291] tipc: Started in network mode
[  240.993708][ T7291] tipc: Node identity ce57e5c2a71d, cluster identity 4711
[  241.030607][ T5916] usb 4-1: USB disconnect, device number 34
[  241.036238][ T7291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.107531][ T7292] syzkaller0: entered promiscuous mode
[  241.148106][ T7292] syzkaller0: entered allmulticast mode
[  241.221891][ T7300] netlink: 'syz.2.356': attribute type 13 has an invalid length.
[  241.240200][ T7300] gretap0: refused to change device tx_queue_len
[  241.298378][ T7252] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  241.349048][ T7300] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  241.508587][ T5934] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  241.754317][ T7291] tipc: Resetting bearer <eth:syzkaller0>
[  241.816367][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short
[  241.825959][ T5934] usb 2-1: unable to read config index 0 descriptor/start: -71
[  241.853608][ T7290] tipc: Resetting bearer <eth:syzkaller0>
[  241.860050][ T5895] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  241.872043][ T5934] usb 2-1: can't read configurations, error -71
[  241.903487][ T7290] tipc: Disabling bearer <eth:syzkaller0>
[  242.028623][ T5914] tipc: Node number set to 1766516162
[  242.108313][ T5895] usb 3-1: Using ep0 maxpacket: 32
[  242.124245][ T5895] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  242.134771][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.146604][ T5895] usb 3-1: Product: syz
[  242.153034][ T5895] usb 3-1: Manufacturer: syz
[  242.163210][ T5895] usb 3-1: SerialNumber: syz
[  242.184179][ T5895] usb 3-1: config 0 descriptor??
[  242.217399][ T5895] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  242.857553][ T5929] cdc_ncm 5-1:1.0: failed to get mac address
[  242.876049][ T5929] cdc_ncm 5-1:1.0: bind() failure
[  242.881361][ T7319] lo: entered allmulticast mode
[  242.885302][ T7319] tunl0: entered allmulticast mode
[  242.947461][ T5929] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  242.956247][ T7319] gre0: entered allmulticast mode
[  242.969739][ T5929] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  242.993954][ T5929] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  243.010764][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'.
[  243.039682][ T5929] usb 5-1: USB disconnect, device number 22
[  243.047825][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  243.119512][ T7319] gretap0: entered allmulticast mode
[  243.159425][ T7319] erspan0: entered allmulticast mode
[  243.211694][ T7319] ip_vti0: entered allmulticast mode
[  243.227824][ T5914] usb 4-1: Using ep0 maxpacket: 32
[  243.239452][ T7319] ip6_vti0: entered allmulticast mode
[  243.247611][ T5914] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  243.252357][ T7319] sit0: entered allmulticast mode
[  243.318723][ T5914] usb 4-1: config 0 has no interface number 0
[  243.324906][ T5914] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  243.353981][ T5914] usb 4-1: config 0 interface 89 has no altsetting 0
[  243.376979][ T5914] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  243.392071][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.393351][ T7319] ip6tnl0: entered allmulticast mode
[  243.407407][ T5914] usb 4-1: Product: syz
[  243.411925][ T5914] usb 4-1: Manufacturer: syz
[  243.416567][ T5914] usb 4-1: SerialNumber: syz
[  243.428761][ T5914] usb 4-1: config 0 descriptor??
[  243.479849][ T7319] ip6gre0: entered allmulticast mode
[  243.587883][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  243.885024][ T5895] gspca_ov534_9: reg_r err -71
[  243.915507][ T7319] syz_tun: entered allmulticast mode
[  243.997807][ T7319] ip6gretap0: entered allmulticast mode
[  244.010616][ T5914] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  244.011325][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.029166][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.051824][ T5914] em28xx 4-1:0.89: Video interface 89 found:
[  244.075435][ T7319] bridge0: entered allmulticast mode
[  244.085081][ T7319] vcan0: entered allmulticast mode
[  244.095139][ T7319] bond0: entered allmulticast mode
[  244.101547][ T7319] bond_slave_0: entered allmulticast mode
[  244.107535][ T7319] bond_slave_1: entered allmulticast mode
[  244.159128][ T7319] team0: entered allmulticast mode
[  244.174549][ T7319] team_slave_0: entered allmulticast mode
[  244.183539][ T7319] team_slave_1: entered allmulticast mode
[  244.207876][ T5895] gspca_ov534_9: Unknown sensor 0000
[  244.207981][ T5895] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  244.230467][ T7319] dummy0: entered allmulticast mode
[  244.235306][ T5895] usb 3-1: USB disconnect, device number 37
[  244.317842][ T7319] nlmon0: entered allmulticast mode
[  244.339248][ T7319] caif0: entered allmulticast mode
[  244.345291][ T7319] batadv0: entered allmulticast mode
[  244.363512][ T7319] vxcan0: entered allmulticast mode
[  244.373368][ T7319] vxcan1: entered allmulticast mode
[  244.386863][ T7319] veth0: entered allmulticast mode
[  244.423921][ T7319] wg0: entered allmulticast mode
[  244.503878][ T7319] wg1: entered allmulticast mode
[  244.519113][ T7319] wg2: entered allmulticast mode
[  244.526513][ T7319] veth0_to_bridge: entered allmulticast mode
[  244.566972][ T7319] veth1_to_bridge: entered allmulticast mode
[  244.598759][ T7319] veth0_to_bond: entered allmulticast mode
[  244.631490][ T5914] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  244.649834][ T7319] veth1_to_bond: entered allmulticast mode
[  244.680761][ T7319] veth0_to_team: entered allmulticast mode
[  244.710415][ T7319] veth1_to_team: entered allmulticast mode
[  244.738175][ T7319] veth0_to_batadv: entered allmulticast mode
[  244.762761][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.773085][ T7319] batadv_slave_0: entered allmulticast mode
[  244.786202][ T7319] xfrm0: entered allmulticast mode
[  244.821690][ T7319] veth0_to_hsr: entered allmulticast mode
[  244.880410][ T7319] hsr_slave_0: entered allmulticast mode
[  244.899715][ T7319] veth1_to_hsr: entered allmulticast mode
[  244.920219][ T7319] hsr_slave_1: entered allmulticast mode
[  244.962278][ T7319] hsr0: entered allmulticast mode
[  244.984385][ T7319] veth1_virt_wifi: entered allmulticast mode
[  244.994830][ T7319] veth0_virt_wifi: entered allmulticast mode
[  245.007139][ T7319] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  245.015575][ T7319] veth1_macvtap: entered allmulticast mode
[  245.030215][ T7319] veth0_macvtap: entered allmulticast mode
[  245.084664][ T7319] macvtap0: entered allmulticast mode
[  245.130944][ T7319] macsec0: entered allmulticast mode
[  245.174281][ T7319] geneve0: entered allmulticast mode
[  245.201351][ T7319] geneve1: entered allmulticast mode
[  245.229291][ T7319] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  245.277579][ T7319] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  245.304684][ T7319] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  245.307119][ T7316] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  245.354697][ T7319] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  245.388527][ T7319] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  245.415259][ T7319] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  245.458445][ T7319] vxlan0: entered allmulticast mode
[  245.475213][ T7319] ip6gre1: entered allmulticast mode
[  245.531605][ T6825] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.567818][ T6825] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.611622][ T6825] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.664781][ T6825] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.688127][ T5934] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  245.879697][ T5934] usb 2-1: config 0 has an invalid interface number: 224 but max is 0
[  245.917902][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.958670][ T5934] usb 2-1: config 0 has no interface number 0
[  245.971791][ T5934] usb 2-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  245.987342][ T5934] usb 2-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  246.020346][ T5934] usb 2-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14
[  246.036699][ T5934] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc
[  246.061742][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.082577][ T5934] usb 2-1: Product: syz
[  246.082630][ T5914] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  246.115782][ T5934] usb 2-1: Manufacturer: syz
[  246.120732][ T5914] em28xx 4-1:0.89: board has no eeprom
[  246.146537][ T5934] usb 2-1: SerialNumber: syz
[  246.195805][ T5934] usb 2-1: config 0 descriptor??
[  246.208491][ T5914] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  246.238717][ T5914] em28xx 4-1:0.89: analog set to bulk mode.
[  246.239808][ T5934] ldusb 2-1:0.224: Interrupt in endpoint not found
[  246.256786][ T5916] em28xx 4-1:0.89: Registering V4L2 extension
[  246.444034][ T7387] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  246.490432][ T5916] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  246.526977][ T5916] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  246.544469][ T5916] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  246.576142][ T5916] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  246.599339][ T5934] usb 4-1: USB disconnect, device number 35
[  246.602974][ T5916] em28xx 4-1:0.89: Config register raw data: 0xfffffffb
[  246.630962][ T5916] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  246.721244][ T5934] em28xx 4-1:0.89: Disconnecting em28xx
[  246.750683][ T5916] em28xx 4-1:0.89: No AC97 audio processor
[  246.799315][   T89] usb 2-1: USB disconnect, device number 36
[  246.861032][ T5916] usb 4-1: Decoder not found
[  246.865661][ T5916] em28xx 4-1:0.89: failed to create media graph
[  246.993779][ T5916] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  247.088167][ T5914] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  247.130491][ T5916] em28xx 4-1:0.89: Registering snapshot button...
[  247.137030][ T7392] ==================================================================
[  247.145208][ T7392] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  247.152612][ T7392] Read of size 8 at addr ffff888022778740 by task v4l_id/7392
[  247.160083][ T7392] 
[  247.162422][ T7392] CPU: 1 UID: 0 PID: 7392 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  247.162439][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  247.162454][ T7392] Call Trace:
[  247.162460][ T7392]  <TASK>
[  247.162466][ T7392]  dump_stack_lvl+0x189/0x250
[  247.162494][ T7392]  ? __virt_addr_valid+0x1c8/0x5c0
[  247.162514][ T7392]  ? rcu_is_watching+0x15/0xb0
[  247.162531][ T7392]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.162549][ T7392]  ? rcu_is_watching+0x15/0xb0
[  247.162565][ T7392]  ? lock_release+0x4b/0x3e0
[  247.162578][ T7392]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  247.162598][ T7392]  ? __virt_addr_valid+0x1c8/0x5c0
[  247.162617][ T7392]  ? __virt_addr_valid+0x4a5/0x5c0
[  247.162637][ T7392]  print_report+0xca/0x240
[  247.162655][ T7392]  ? v4l2_fh_open+0xac/0x420
[  247.162668][ T7392]  kasan_report+0x118/0x150
[  247.162682][ T7392]  ? v4l2_fh_open+0xac/0x420
[  247.162699][ T7392]  v4l2_fh_open+0xac/0x420
[  247.162713][ T7392]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  247.162736][ T7392]  em28xx_v4l2_open+0x157/0x9a0
[  247.162763][ T7392]  v4l2_open+0x1bf/0x3a0
[  247.162780][ T7392]  chrdev_open+0x4cc/0x5e0
[  247.162794][ T7392]  ? __pfx_chrdev_open+0x10/0x10
[  247.162808][ T7392]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  247.162825][ T7392]  ? __pfx_chrdev_open+0x10/0x10
[  247.162837][ T7392]  do_dentry_open+0x953/0x13f0
[  247.162858][ T7392]  vfs_open+0x3b/0x340
[  247.162872][ T7392]  ? path_openat+0x2ecd/0x3830
[  247.162891][ T7392]  path_openat+0x2ee5/0x3830
[  247.162921][ T7392]  ? __pfx_path_openat+0x10/0x10
[  247.162946][ T7392]  do_filp_open+0x1fa/0x410
[  247.162963][ T7392]  ? __lock_acquire+0xab9/0xd20
[  247.162978][ T7392]  ? __pfx_do_filp_open+0x10/0x10
[  247.163004][ T7392]  ? _raw_spin_unlock+0x28/0x50
[  247.163021][ T7392]  ? alloc_fd+0x64c/0x6c0
[  247.163046][ T7392]  do_sys_openat2+0x121/0x1c0
[  247.163064][ T7392]  ? __pfx_do_sys_openat2+0x10/0x10
[  247.163081][ T7392]  ? exc_page_fault+0x82/0x100
[  247.163112][ T7392]  ? do_user_addr_fault+0xc85/0x1380
[  247.163134][ T7392]  __x64_sys_openat+0x138/0x170
[  247.163160][ T7392]  do_syscall_64+0xfa/0xfa0
[  247.163187][ T7392]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.163213][ T7392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.163230][ T7392]  ? clear_bhb_loop+0x60/0xb0
[  247.163250][ T7392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.163268][ T7392] RIP: 0033:0x7f243d8a7407
[  247.163294][ T7392] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  247.163315][ T7392] RSP: 002b:00007ffcfb61bd00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  247.163334][ T7392] RAX: ffffffffffffffda RBX: 00007f243df45880 RCX: 00007f243d8a7407
[  247.163348][ T7392] RDX: 0000000000000000 RSI: 00007ffcfb61df1c RDI: ffffffffffffff9c
[  247.163360][ T7392] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  247.163371][ T7392] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  247.163381][ T7392] R13: 00007ffcfb61bf50 R14: 00007f243e04a000 R15: 0000558ae54184d8
[  247.163402][ T7392]  </TASK>
[  247.163408][ T7392] 
[  247.466892][ T7392] Allocated by task 5916:
[  247.471229][ T7392]  kasan_save_track+0x3e/0x80
[  247.475932][ T7392]  __kasan_kmalloc+0x93/0xb0
[  247.480537][ T7392]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  247.485919][ T7392]  em28xx_v4l2_init+0x10b/0x2e70
[  247.490867][ T7392]  em28xx_init_extension+0x120/0x1c0
[  247.496160][ T7392]  process_scheduled_works+0xae1/0x17b0
[  247.501711][ T7392]  worker_thread+0x8a0/0xda0
[  247.506304][ T7392]  kthread+0x711/0x8a0
[  247.510379][ T7392]  ret_from_fork+0x4bc/0x870
[  247.514972][ T7392]  ret_from_fork_asm+0x1a/0x30
[  247.519738][ T7392] 
[  247.522059][ T7392] Freed by task 5916:
[  247.526036][ T7392]  kasan_save_track+0x3e/0x80
[  247.530739][ T7392]  __kasan_save_free_info+0x46/0x50
[  247.535955][ T7392]  __kasan_slab_free+0x5c/0x80
[  247.540750][ T7392]  kfree+0x19a/0x6d0
[  247.544663][ T7392]  em28xx_v4l2_init+0x1683/0x2e70
[  247.549705][ T7392]  em28xx_init_extension+0x120/0x1c0
[  247.555015][ T7392]  process_scheduled_works+0xae1/0x17b0
[  247.560574][ T7392]  worker_thread+0x8a0/0xda0
[  247.565171][ T7392]  kthread+0x711/0x8a0
[  247.569249][ T7392]  ret_from_fork+0x4bc/0x870
[  247.573844][ T7392]  ret_from_fork_asm+0x1a/0x30
[  247.578609][ T7392] 
[  247.580931][ T7392] The buggy address belongs to the object at ffff888022778000
[  247.580931][ T7392]  which belongs to the cache kmalloc-8k of size 8192
[  247.594984][ T7392] The buggy address is located 1856 bytes inside of
[  247.594984][ T7392]  freed 8192-byte region [ffff888022778000, ffff88802277a000)
[  247.608958][ T7392] 
[  247.611284][ T7392] The buggy address belongs to the physical page:
[  247.617707][ T7392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22778
[  247.626479][ T7392] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  247.634990][ T7392] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  247.642985][ T7392] page_type: f5(slab)
[  247.646970][ T7392] raw: 00fff00000000040 ffff88801a027280 ffffea0001f6b000 0000000000000005
[  247.655565][ T7392] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  247.664168][ T7392] head: 00fff00000000040 ffff88801a027280 ffffea0001f6b000 0000000000000005
[  247.672850][ T7392] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  247.681525][ T7392] head: 00fff00000000003 ffffea000089de01 00000000ffffffff 00000000ffffffff
[  247.690223][ T7392] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  247.698907][ T7392] page dumped because: kasan: bad access detected
[  247.705326][ T7392] page_owner tracks the page as allocated
[  247.711038][ T7392] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5581, tgid 5581 (S50sshd), ts 58903995020, free_ts 58841168198
[  247.731190][ T7392]  post_alloc_hook+0x240/0x2a0
[  247.735977][ T7392]  get_page_from_freelist+0x2365/0x2440
[  247.741523][ T7392]  __alloc_frozen_pages_noprof+0x181/0x370
[  247.747336][ T7392]  alloc_pages_mpol+0x232/0x4a0
[  247.752191][ T7392]  allocate_slab+0x96/0x350
[  247.756702][ T7392]  ___slab_alloc+0xf56/0x1990
[  247.761393][ T7392]  __slab_alloc+0x65/0x100
[  247.765824][ T7392]  __kmalloc_cache_noprof+0x411/0x6f0
[  247.771214][ T7392]  tomoyo_init_log+0x111f/0x1f70
[  247.776171][ T7392]  tomoyo_supervisor+0x340/0x1480
[  247.781204][ T7392]  tomoyo_env_perm+0x149/0x1e0
[  247.785989][ T7392]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  247.791640][ T7392]  tomoyo_bprm_check_security+0x11c/0x180
[  247.797396][ T7392]  security_bprm_check+0x89/0x270
[  247.802435][ T7392]  bprm_execve+0x8ee/0x1450
[  247.806951][ T7392]  do_execveat_common+0x510/0x6a0
[  247.811988][ T7392] page last free pid 5579 tgid 5579 stack trace:
[  247.818319][ T7392]  __free_frozen_pages+0xbc4/0xd30
[  247.823447][ T7392]  __put_partials+0x146/0x170
[  247.828137][ T7392]  put_cpu_partial+0x1f2/0x2e0
[  247.832914][ T7392]  __slab_free+0x2b9/0x390
[  247.837360][ T7392]  qlist_free_all+0x97/0x140
[  247.841980][ T7392]  kasan_quarantine_reduce+0x148/0x160
[  247.847459][ T7392]  __kasan_slab_alloc+0x22/0x80
[  247.852327][ T7392]  kmem_cache_alloc_noprof+0x367/0x6e0
[  247.857804][ T7392]  vm_area_alloc+0x24/0x140
[  247.862323][ T7392]  do_brk_flags+0x33c/0xbb0
[  247.866844][ T7392]  __se_sys_brk+0x9ab/0xb80
[  247.871357][ T7392]  do_syscall_64+0xfa/0xfa0
[  247.875884][ T7392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.881782][ T7392] 
[  247.884107][ T7392] Memory state around the buggy address:
[  247.889733][ T7392]  ffff888022778600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.897797][ T7392]  ffff888022778680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.905875][ T7392] >ffff888022778700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.913956][ T7392]                                            ^
[  247.920109][ T7392]  ffff888022778780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.928260][ T7392]  ffff888022778800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.936319][ T7392] ==================================================================
[  247.944484][    C1] vkms_vblank_simulate: vblank timer overrun
[  247.954072][ T5916] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input15
[  247.995593][ T5916] em28xx 4-1:0.89: Remote control support is not available for this card.
[  248.078795][ T5914] usb 5-1: config 150 has an invalid interface number: 204 but max is 2
[  248.090826][ T5914] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  248.225548][ T5914] usb 5-1: config 150 has no interface number 0
[  248.249472][ T5914] usb 5-1: config 150 interface 204 has no altsetting 0
[  248.285578][ T5914] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  248.292197][ T5934] em28xx 4-1:0.89: Closing input extension
[  248.295522][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.301651][ T5934] em28xx 4-1:0.89: Deregistering snapshot button
[  248.317305][ T7392] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  248.325007][ T7392] CPU: 1 UID: 0 PID: 7392 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  248.334067][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  248.344221][ T7392] Call Trace:
[  248.347514][ T7392]  <TASK>
[  248.350450][ T7392]  dump_stack_lvl+0x99/0x250
[  248.355054][ T7392]  ? __asan_memcpy+0x40/0x70
[  248.359651][ T7392]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.364863][ T7392]  ? __pfx__printk+0x10/0x10
[  248.369469][ T7392]  vpanic+0x237/0x6d0
[  248.373482][ T7392]  ? __pfx_vpanic+0x10/0x10
[  248.377996][ T7392]  ? preempt_schedule+0xae/0xc0
[  248.382863][ T7392]  ? __pfx_preempt_schedule+0x10/0x10
[  248.388262][ T7392]  panic+0xb9/0xc0
[  248.391993][ T7392]  ? __pfx_panic+0x10/0x10
[  248.396415][ T7392]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  248.402315][ T7392]  ? is_module_address+0x17/0xf0
[  248.407259][ T7392]  ? v4l2_fh_open+0xac/0x420
[  248.411860][ T7392]  check_panic_on_warn+0x89/0xb0
[  248.416817][ T7392]  ? v4l2_fh_open+0xac/0x420
[  248.421416][ T7392]  end_report+0x78/0x160
[  248.425667][ T7392]  kasan_report+0x129/0x150
[  248.430180][ T7392]  ? v4l2_fh_open+0xac/0x420
[  248.434777][ T7392]  v4l2_fh_open+0xac/0x420
[  248.439196][ T7392]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  248.445213][ T7392]  em28xx_v4l2_open+0x157/0x9a0
[  248.450079][ T7392]  v4l2_open+0x1bf/0x3a0
[  248.454328][ T7392]  chrdev_open+0x4cc/0x5e0
[  248.458749][ T7392]  ? __pfx_chrdev_open+0x10/0x10
[  248.463690][ T7392]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  248.470029][ T7392]  ? __pfx_chrdev_open+0x10/0x10
[  248.474969][ T7392]  do_dentry_open+0x953/0x13f0
[  248.479745][ T7392]  vfs_open+0x3b/0x340
[  248.483819][ T7392]  ? path_openat+0x2ecd/0x3830
[  248.488684][ T7392]  path_openat+0x2ee5/0x3830
[  248.493293][ T7392]  ? __pfx_path_openat+0x10/0x10
[  248.498244][ T7392]  do_filp_open+0x1fa/0x410
[  248.502775][ T7392]  ? __lock_acquire+0xab9/0xd20
[  248.507722][ T7392]  ? __pfx_do_filp_open+0x10/0x10
[  248.512764][ T7392]  ? _raw_spin_unlock+0x28/0x50
[  248.517620][ T7392]  ? alloc_fd+0x64c/0x6c0
[  248.521975][ T7392]  do_sys_openat2+0x121/0x1c0
[  248.526673][ T7392]  ? __pfx_do_sys_openat2+0x10/0x10
[  248.531978][ T7392]  ? exc_page_fault+0x82/0x100
[  248.536752][ T7392]  ? do_user_addr_fault+0xc85/0x1380
[  248.542045][ T7392]  __x64_sys_openat+0x138/0x170
[  248.546908][ T7392]  do_syscall_64+0xfa/0xfa0
[  248.551424][ T7392]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.556631][ T7392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.562707][ T7392]  ? clear_bhb_loop+0x60/0xb0
[  248.567391][ T7392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.573290][ T7392] RIP: 0033:0x7f243d8a7407
[  248.577709][ T7392] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  248.597325][ T7392] RSP: 002b:00007ffcfb61bd00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  248.605764][ T7392] RAX: ffffffffffffffda RBX: 00007f243df45880 RCX: 00007f243d8a7407
[  248.613737][ T7392] RDX: 0000000000000000 RSI: 00007ffcfb61df1c RDI: ffffffffffffff9c
[  248.621710][ T7392] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  248.629681][ T7392] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  248.637664][ T7392] R13: 00007ffcfb61bf50 R14: 00007f243e04a000 R15: 0000558ae54184d8
[  248.645649][ T7392]  </TASK>
[  248.649086][ T7392] Kernel Offset: disabled
[  248.653436][ T7392] Rebooting in 86400 seconds..