last executing test programs:

21.529580325s ago: executing program 3 (id=1612):
set_mempolicy(0x2, 0x0, 0xf5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xfefffffffffffffe, 0xfffffffc}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006c617374000000000c00028008000140000000060900010073797a30000000000900020073797a320000000014000000110001c98c8254a599c1000000000000"], 0x74}}, 0x0)
recvmmsg(r0, &(0x7f00000195c0), 0x0, 0x2062, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r8 = io_uring_setup(0xaae, &(0x7f0000019080)={0x0, 0xdf4, 0x80, 0x7, 0x10000002})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
writev(r7, &(0x7f0000000000), 0x0)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0)
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)

21.244127845s ago: executing program 2 (id=1613):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0)
mlockall(0x2)
r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r1, 0xc)
unshare(0x20000400)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
r5 = socket(0x28, 0x1, 0x0)
connect$packet(r5, &(0x7f0000000100)={0x28, 0xf5, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000000c0)={0x33, 0x1a, 0xe, 0x1, 0x3, 0x2, 0x2, 0x70})
r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000)
r7 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0)
syz_usb_control_io(r7, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "6be1b7c3ed3ff5358e866c9a8a2df4f1d84f3c3c938c2f7b"}}, 0x0, 0x0, 0x0}, 0x0)
unshare(0x40000000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@any, 0xc25}, @my=0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffd})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

21.175302095s ago: executing program 0 (id=1614):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000280)}})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x800000000008, 0x0, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
syz_open_dev$usbfs(0x0, 0x75, 0x40082)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000480))
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={<r4=>0x0, 0x2, 0x2, 0x40, 0x4, 0x4}, &(0x7f0000000500)=0x14)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={r4, 0x9}, 0x8)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'})
r6 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0)
ftruncate(r6, 0x51a9497)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)

19.519060981s ago: executing program 3 (id=1616):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x2400c890)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4041)
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
io_setup(0x10000, &(0x7f0000000800))
io_setup(0x9, &(0x7f0000002e40))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff11, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18.857768502s ago: executing program 0 (id=1618):
socket(0x2, 0x2, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0)
unlink(0x0)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000003c0)={0xc0000080, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16.982523401s ago: executing program 4 (id=1620):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x5422)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100})
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15.988281021s ago: executing program 2 (id=1621):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0)
getdents64(r2, &(0x7f0000000080)=""/105, 0x69)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
getsockopt$sock_int(r5, 0x1, 0x2c, 0x0, &(0x7f00000001c0))
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
r6 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x10}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24040084)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x3e})

15.390352017s ago: executing program 1 (id=1622):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000005c0)={'ip6tnl0\x00', 0x53})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2)
pipe2(0x0, 0x80)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r4=>0x0})
sched_setattr(r4, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x7, 0xe0a, 0x0, 0x1}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x4, 0xfffffffffffffffd)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000001c0)="430fc73f0f2390b9800000c00f32420f01c20f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e0046a0f8000000000000002d1aa80000460f1c460041ae", 0x4e}], 0x1, 0x74, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
execve(0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)

14.478743888s ago: executing program 3 (id=1623):
pipe(&(0x7f0000000080))
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0})
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4)
io_uring_setup(0x1379, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x121})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x2000005, 0xd, 0x3, 0x0, 0x8, 0x1, 0x5}})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

13.951197772s ago: executing program 4 (id=1624):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r4 = dup3(r2, r3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xc8}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="301b000000000000", @ANYRES32=0x0, @ANYBLOB="000000001900000008001c00", @ANYRES32, @ANYBLOB='\b\x00.\x00\x00\x00\x00\x00'], 0x30}}, 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f00000001c0))

13.385566669s ago: executing program 0 (id=1625):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3)
creat(0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
write$binfmt_elf32(r4, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1)
write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

13.243715907s ago: executing program 2 (id=1626):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001044104d7a0000000000010902240001000000000904000001030000000921070000002204000905810300"], 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
r5 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48)
fcntl$addseals(r5, 0x409, 0xa)
read$FUSE(r3, &(0x7f0000002680)={0x2020}, 0x2020)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000ff2505a8a44000010203017a8a24000101b4000909f1ff0b010701010509050102000426f9010905820208007105a7b6f6d38f2b474afdf46e767008f68f8caf4db1a49ac4b6feb52f719d3081da71e4a6d8fe73b5215daacc5800e057f13df712379d29aa80b3e172185c792b44c5e89ea67ddacbbd92c1dea8246a7647f94fbc6407f6ac8fb9e1"], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x5, 0x9, 0x2, 0x20, 0x2}, 0x149, &(0x7f00000000c0)={0x5, 0xf, 0x149, 0x6, [@generic={0x14, 0x10, 0x4, "7e6651344f0c39e15e6b965b362bcd5de6"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xa, 0xf0f, 0x0, [0xc0cf, 0xc017, 0x3f, 0xf, 0x0]}, @generic={0xce, 0x10, 0xa, "635e04424874326ebacf1968928feffb9a2119d406c8393b8bea459a452b1bcf997116f6748b677c37e28fdb29d9dfd853bb14412643dcbcca32275694d4d89061d072b9c2cfd754375d3be3baa73f1dc32082f55811ed98a83439317fa002dc70a351e0ff769694a111f3ca0a87c395182ec8276f518a6f09a96e0f8b678eb827bf10266287babe9f564c3105445b8fc4e1ee3780c8568a36becb5e2765355f4564f64ef29afafd1a8cbab73dfcb36b1104ddf9acb73807ed1d0aa811a9911d2653229f42c54588d8d156"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x9, 0x3, 0x1, 0xef}, @generic={0x27, 0x10, 0x2, "f19bef7a6a6f4fe07446fa558070e7b70eaf1cdaa9b66075bd1f315b719f99887387e12e"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7, 0x1e88f, 0x800, [0x3f0f]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3409}}]})

13.014015242s ago: executing program 1 (id=1627):
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, 0x0}])
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x2000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2990070900be0083000f020057a90da1f60b0000040004e12b6ad93346d1b78b8b3ce7cd6c391f111166405ae63701648d887f4a736f0c6dc089567356d29751eb0d8552e494b1aeb81804253714185be5150f84782cfded5d0ac3a5d5893b95513c93bab3fdd1fd497eb3000000005963a20dc50dfbc14c5f57dbb346bbaba25d62ce23cc3d036e2c9c945fd943b1b61788b5a663bd1e1eaf5c3bbb4c2c8d78f0eb13f907aaac9f3fb98a4552093076436c7693e3a50332de7aa3dce243ce75b9ec304ffdc9236879b25e7e330af237a309a8acf7c7d3fc419b80d243ea49"], 0x0}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8})
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000100)=""/95)
creat(0x0, 0x25)
ioprio_get$pid(0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000180)={0xf4, <r5=>r0})
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

10.077904689s ago: executing program 1 (id=1628):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="99742bbd7000fbdbdf2515"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x0, 0x0, 0x0, 0xdf, 0xa, 0x4, 0x0, 0x3}, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x282)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r5, &(0x7f0000001500), 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008085)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000880)="340000001a005f0400f9f407000904018000000000000004000000000800020040000000839935e7dfc4a6df20655e90819c0bb7", 0x34)
r6 = syz_io_uring_setup(0x2e7f, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x21, 0x2f3}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x8, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffd55, 0x0})
io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/msg\x00', 0x0, 0x0)
read$char_usb(r9, &(0x7f0000001840)=""/4090, 0xffa)

9.517984759s ago: executing program 0 (id=1629):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ptrace(0x10, 0x1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

9.515799553s ago: executing program 4 (id=1630):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltclass={0x60, 0x29, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {0x6, 0xa}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x96}}, @TCA_RATE={0x6, 0x5, {0x57, 0x7a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4800000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10001}, @TCA_QFQ_LMAX={0x8, 0x2, 0x554}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x41)
r7 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
fallocate(r7, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0)
r8 = fanotify_init(0x202, 0x0)
fanotify_mark(r8, 0x1, 0x4800003e, r3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00')
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000)

9.042455749s ago: executing program 3 (id=1631):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="728fdf83c184f59a9b2d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x48)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=<r3=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
unshare(0x2a020400)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da)
unshare(0x2000400)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1, 0x3}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108)
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020)
close(r5)
setsockopt$sock_attach_bpf(r4, 0x84, 0x17, &(0x7f0000000000), 0x10)
membarrier(0x10, 0x0)

7.900085821s ago: executing program 2 (id=1632):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @private=0xa010101, 0x0, 0x5, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, 0x24)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, 0x0, 0x26004090)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804202004c00128008000100736974004000028008000200ac1414aa14000b00200100000000", @ANYRES32, @ANYBLOB="060008001500000006000d000200"], 0x6c}}, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='l', 0x1}], 0x1)

7.123673169s ago: executing program 4 (id=1633):
r0 = socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
brk(0x400000ffc000)
syz_io_uring_setup(0x62ce, 0x0, 0x0, &(0x7f00000003c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0})
writev(0xffffffffffffffff, &(0x7f0000001800), 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
ioctl$EVIOCGKEY(r6, 0x8040453f, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000025, &(0x7f0000000200)=0x1, 0x4)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x0, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e}})
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8002, 0x10, 0x0, 0xb, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x78, 0xfffc, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local}}}})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)

6.965825179s ago: executing program 1 (id=1634):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x5422)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

6.173326991s ago: executing program 3 (id=1635):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
fcntl$addseals(r5, 0x409, 0x1)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r4, r3, 0x0, 0x20000023893)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000"], 0xe8}}, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)

5.765193248s ago: executing program 0 (id=1636):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @private2, 0x4}, @in={0x2, 0x4e22, @local}], 0x3c)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket(0x2, 0x80805, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
pipe2$watch_queue(0x0, 0x80)
add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

4.630510135s ago: executing program 2 (id=1637):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
landlock_restrict_self(r4, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000)
syz_open_procfs(0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, r5, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
r8 = signalfd(0xffffffffffffffff, 0x0, 0x0)
r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905)
close(r9)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})
fcntl$setstatus(r8, 0x4, 0x2c00)
r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r9], 0x0)
syz_usb_control_io(r10, 0x0, 0x0)

4.628712665s ago: executing program 4 (id=1638):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000"], 0xe8}}, 0x0)

3.738748891s ago: executing program 1 (id=1639):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x740, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ<bJ[9\x19\xb1zWMLo\v\x84\xa6\x1d~\xa5\x9a\x8dn\xf2\xf0*\xe0MYva\xa6\x0f\xcb{\xcb\x9e\xab\x91\x9b\xb3`%\x11Q6\x8a\xc7\xca\f\xb0<\x01wLM\xc8\xea\xa7!\xf1\xdb9K\xed?\xda\x17\xba\xcfc,\x8f\xf6\xa6a0')
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f000003b000/0xf000)=nil, 0xf000, 0x1000006, 0x38011, r7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)

2.502252484s ago: executing program 3 (id=1640):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3)
creat(0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0})
capset(&(0x7f0000000080)={0x20071026}, 0x0)
write$binfmt_elf32(r4, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1)
write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

1.247415676s ago: executing program 0 (id=1641):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001044104d7a0000000000010902240001000000000904000001030000000921070000002204000905810300"], 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
r5 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r5, 0x0)
fcntl$addseals(r5, 0x409, 0xa)
read$FUSE(r3, &(0x7f0000002680)={0x2020}, 0x2020)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000ff2505a8a44000010203017a8a24000101b4000909f1ff0b010701010509050102000426f9010905820208007105a7b6f6d38f2b474afdf46e767008f68f8caf4db1a49ac4b6feb52f719d3081da71e4a6d8fe73b5215daacc5800e057f13df712379d29aa80b3e172185c792b44c5e89ea67ddacbbd92c1dea8246a7647f94fbc6407f6ac8fb9e1"], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x5, 0x9, 0x2, 0x20, 0x2}, 0x149, &(0x7f00000000c0)={0x5, 0xf, 0x149, 0x6, [@generic={0x14, 0x10, 0x4, "7e6651344f0c39e15e6b965b362bcd5de6"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xa, 0xf0f, 0x0, [0xc0cf, 0xc017, 0x3f, 0xf, 0x0]}, @generic={0xce, 0x10, 0xa, "635e04424874326ebacf1968928feffb9a2119d406c8393b8bea459a452b1bcf997116f6748b677c37e28fdb29d9dfd853bb14412643dcbcca32275694d4d89061d072b9c2cfd754375d3be3baa73f1dc32082f55811ed98a83439317fa002dc70a351e0ff769694a111f3ca0a87c395182ec8276f518a6f09a96e0f8b678eb827bf10266287babe9f564c3105445b8fc4e1ee3780c8568a36becb5e2765355f4564f64ef29afafd1a8cbab73dfcb36b1104ddf9acb73807ed1d0aa811a9911d2653229f42c54588d8d156"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x9, 0x3, 0x1, 0xef}, @generic={0x27, 0x10, 0x2, "f19bef7a6a6f4fe07446fa558070e7b70eaf1cdaa9b66075bd1f315b719f99887387e12e"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7, 0x1e88f, 0x800, [0x3f0f]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3409}}]})

330.60426ms ago: executing program 1 (id=1642):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'tunl0\x00', 0x800})
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
r1 = socket(0x1f, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x1)
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c00001000"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6)
socket$nl_sock_diag(0x10, 0x3, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x4}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

234.875085ms ago: executing program 2 (id=1643):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x4, 0x14e}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x197302, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0)
fcntl$getown(r1, 0x9)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r5)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x201cb605ce81a557}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, 0x0, 0x20401, 0x30)
writev(r6, &(0x7f00000003c0)=[{&(0x7f00000004c0)='V', 0x1}, {&(0x7f0000000180)="fc", 0x1}], 0x20)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

0s ago: executing program 4 (id=1644):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000100000000000000140020"], 0x64}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x19cce99f87779c7, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x92, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0x8, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x82, 0x5, 0x6}}}}}}}]}}, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_clone(0x800000, &(0x7f0000000280), 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)="3230257fba12322ed5573507928e6f91d7a7b7142217cd771c90e685d7cdbcb9cdc61c3e02315a3616788e8e7b759d11d93a02c816bee155a648ccb0a063cd7c7fddb8c536d5")
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0)

kernel console output (not intermixed with test programs):

[ T5921] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  758.729894][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.762946][ T5921] usb 4-1: config 0 descriptor??
[  758.791219][ T5921] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  759.436519][ T5941] usb 1-1: USB disconnect, device number 49
[  759.650323][ T5921] gspca_stv06xx: I2C: Read error writing address: -71
[  759.709820][T12012] input: syz0 as /devices/virtual/input/input27
[  759.867175][ T5921] usb 4-1: USB disconnect, device number 51
[  760.974595][T12031] ip6t_srh: unknown srh invflags 7D00
[  762.269491][T12044] kvm: kvm [12043]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1c
[  762.278332][T12044] kvm: kvm [12043]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x401c
[  763.326368][ T5903] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  763.568272][ T5903] usb 5-1: Using ep0 maxpacket: 16
[  763.596527][ T5903] usb 5-1: config 0 has no interfaces?
[  763.603590][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  763.633889][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.780783][ T5903] usb 5-1: config 0 descriptor??
[  764.048583][T12073] input: syz0 as /devices/virtual/input/input28
[  764.172006][ T5903] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  764.447933][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  764.470560][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  764.486578][ T5903] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  764.617402][ T5903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  764.627324][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.635412][ T5903] usb 2-1: Product: syz
[  764.640249][ T5903] usb 2-1: Manufacturer: syz
[  764.644998][ T5903] usb 2-1: SerialNumber: syz
[  764.684819][ T5903] cdc_ncm 2-1:1.0: skipping garbage
[  764.690439][ T5903] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  764.699568][ T5903] cdc_ncm 2-1:1.0: bind() failure
[  765.255818][ T5903] usb 2-1: USB disconnect, device number 39
[  766.031722][ T5903] usb 5-1: USB disconnect, device number 49
[  766.461345][ T5941] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  766.838088][T12092] macsec0: entered promiscuous mode
[  766.848050][T12092] macsec0: left promiscuous mode
[  766.910598][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  766.930009][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  766.955084][ T5941] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  767.016321][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.052828][ T5941] usb 3-1: config 0 descriptor??
[  767.491378][ T5941] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  767.511347][ T5941] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  767.661728][ T5951] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  767.688253][ T5941] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE
[  767.701661][T12108] program syz.1.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  767.879045][ T5951] usb 1-1: Using ep0 maxpacket: 32
[  767.895792][ T5951] usb 1-1: config 0 has no interfaces?
[  767.922406][ T5951] usb 1-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00
[  767.932318][ T5924] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  767.944634][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.973870][ T5951] usb 1-1: Product: syz
[  767.986313][ T5951] usb 1-1: Manufacturer: syz
[  767.990935][ T5951] usb 1-1: SerialNumber: syz
[  768.007612][T12108] netlink: 'syz.1.1254': attribute type 10 has an invalid length.
[  768.158995][ T5924] usb 4-1: config 0 has no interfaces?
[  768.176898][ T5951] usb 1-1: config 0 descriptor??
[  768.355979][ T5924] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  768.554814][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.695555][ T5924] usb 4-1: Product: syz
[  768.712064][ T5924] usb 4-1: Manufacturer: syz
[  768.717094][ T5924] usb 4-1: SerialNumber: syz
[  768.722125][T12112] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0
[  768.735916][ T5924] usb 4-1: config 0 descriptor??
[  768.832240][T12081] cp2112 0003:10C4:EA90.0009: Error starting transaction: -38
[  768.840061][ T5951] usb 3-1: reset high-speed USB device number 47 using dummy_hcd
[  769.880599][ T5924] usb 3-1: USB disconnect, device number 47
[  770.419079][T12135] kvm: kvm [12134]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1c
[  770.427788][T12135] kvm: kvm [12134]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x401c
[  771.026395][ T5924] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  771.123433][ T5903] usb 1-1: USB disconnect, device number 50
[  771.291072][ T5924] usb 5-1: config 0 has no interfaces?
[  771.479299][T12138] ALSA: mixer_oss: invalid OSS volume '?HO'
[  771.845201][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  771.860222][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.872778][ T5924] usb 5-1: Product: syz
[  771.879230][ T5924] usb 5-1: Manufacturer: syz
[  771.886469][ T5924] usb 5-1: SerialNumber: syz
[  771.901635][ T5924] usb 5-1: config 0 descriptor??
[  772.005475][T12155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1262'.
[  772.393151][ T5924] usb 4-1: USB disconnect, device number 52
[  773.597991][ T5924] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  773.789623][ T5924] usb 3-1: config 0 has no interfaces?
[  773.802507][ T5924] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  773.818857][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.837726][ T5924] usb 3-1: Product: syz
[  773.847173][ T5924] usb 3-1: Manufacturer: syz
[  773.856349][ T5924] usb 3-1: SerialNumber: syz
[  773.960385][ T5924] usb 3-1: config 0 descriptor??
[  774.017005][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  774.017024][   T30] audit: type=1326 audit(1750935367.608:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.108646][ T5941] usb 5-1: USB disconnect, device number 50
[  774.269601][   T30] audit: type=1326 audit(1750935367.618:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.318225][   T30] audit: type=1326 audit(1750935367.648:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.318266][   T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  774.376486][   T30] audit: type=1326 audit(1750935367.648:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.407889][ T5921] usb 3-1: USB disconnect, device number 48
[  774.436381][ T5903] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  774.475018][   T30] audit: type=1326 audit(1750935367.648:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.507903][   T30] audit: type=1326 audit(1750935367.648:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.533104][   T10] usb 2-1: Using ep0 maxpacket: 8
[  774.539517][   T30] audit: type=1326 audit(1750935367.648:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.563262][   T30] audit: type=1326 audit(1750935367.668:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.597867][   T30] audit: type=1326 audit(1750935367.668:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.621002][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  774.630358][ T5903] usb 1-1: Using ep0 maxpacket: 16
[  774.635549][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.708302][   T10] usb 2-1: Product: syz
[  774.712607][   T10] usb 2-1: Manufacturer: syz
[  774.718557][   T10] usb 2-1: SerialNumber: syz
[  774.725563][   T30] audit: type=1326 audit(1750935367.668:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b6638e929 code=0x7ffc0000
[  774.749581][   T10] usb 2-1: config 0 descriptor??
[  775.001968][   T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  775.600952][T12195] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  776.972695][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short
[  776.981921][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -71
[  777.026749][ T5903] usb 1-1: can't read configurations, error -71
[  777.435073][T12204] kvm: kvm [12202]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1c
[  777.461034][T12204] kvm: kvm [12202]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x401c
[  778.080923][T12215] fuse: Invalid rootmode
[  778.228961][   T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  778.254580][   T10] usb 2-1: USB disconnect, device number 40
[  778.341482][ T5903] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  778.867144][ T5903] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  778.917764][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.034617][ T5903] usb 3-1: config 0 descriptor??
[  779.050852][ T5903] gspca_main: spca508-2.14.0 probing 8086:0110
[  779.340624][ T5903] gspca_spca508: reg_read err -32
[  779.419715][ T5903] gspca_spca508: reg_read err -32
[  779.426720][ T5941] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  779.517226][ T5903] gspca_spca508: reg_read err -32
[  779.526478][ T5951] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  779.757340][ T5951] usb 2-1: config 0 has no interfaces?
[  779.763937][ T5941] usb 1-1: config 0 has no interfaces?
[  779.827784][ T5941] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  779.849682][ T5951] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  779.914420][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.924775][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.955694][ T5941] usb 1-1: Product: syz
[  779.967563][ T5951] usb 2-1: Product: syz
[  779.976269][ T5941] usb 1-1: Manufacturer: syz
[  779.989566][ T5951] usb 2-1: Manufacturer: syz
[  780.001630][ T5941] usb 1-1: SerialNumber: syz
[  780.012883][ T5951] usb 2-1: SerialNumber: syz
[  780.045277][ T5941] usb 1-1: config 0 descriptor??
[  780.054632][ T5951] usb 2-1: config 0 descriptor??
[  780.081001][ T5903] gspca_spca508: reg_read err -110
[  780.284710][ T5903] gspca_spca508: reg write: error -32
[  780.317844][ T5903] spca508 3-1:0.0: probe with driver spca508 failed with error -32
[  780.574801][ T5903] usb 3-1: USB disconnect, device number 49
[  781.406425][ T5903] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  781.571993][ T5903] usb 5-1: config 0 has no interfaces?
[  781.582175][ T5903] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  781.622306][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.692646][ T5903] usb 5-1: Product: syz
[  781.732086][ T5903] usb 5-1: Manufacturer: syz
[  781.751766][ T5903] usb 5-1: SerialNumber: syz
[  781.776155][ T5903] usb 5-1: config 0 descriptor??
[  781.829078][T12251] xt_CT: You must specify a L4 protocol and not use inversions on it
[  781.995996][ T5903] usb 5-1: USB disconnect, device number 51
[  782.577671][ T5951] usb 2-1: USB disconnect, device number 41
[  782.878552][ T5951] usb 1-1: USB disconnect, device number 53
[  784.168017][T12277] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  785.216371][   T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  785.496677][   T10] usb 3-1: config 0 has no interfaces?
[  785.511237][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  785.520448][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.561692][   T10] usb 3-1: Product: syz
[  785.581737][   T10] usb 3-1: Manufacturer: syz
[  785.615609][   T10] usb 3-1: SerialNumber: syz
[  785.639096][   T10] usb 3-1: config 0 descriptor??
[  787.642656][T12302] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[12302]
[  788.856413][ T5903] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  788.990987][ T5951] usb 3-1: USB disconnect, device number 50
[  789.120362][ T5903] usb 1-1: config 0 has no interfaces?
[  789.128487][ T5903] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  789.158639][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.200336][ T5903] usb 1-1: Product: syz
[  789.209279][ T5903] usb 1-1: Manufacturer: syz
[  789.218291][ T5903] usb 1-1: SerialNumber: syz
[  789.240219][ T5903] usb 1-1: config 0 descriptor??
[  789.780034][ T5951] usb 1-1: USB disconnect, device number 54
[  790.716303][   T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  790.948640][   T10] usb 2-1: config 0 has no interfaces?
[  790.981676][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  790.990858][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.076331][   T10] usb 2-1: Product: syz
[  791.086329][   T10] usb 2-1: Manufacturer: syz
[  791.091040][   T10] usb 2-1: SerialNumber: syz
[  791.117057][   T10] usb 2-1: config 0 descriptor??
[  791.578178][T12353] netlink: 'syz.0.1301': attribute type 1 has an invalid length.
[  791.697042][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'.
[  792.066403][   T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  792.136409][ T5903] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  792.175562][T12353] 8021q: adding VLAN 0 to HW filter on device bond1
[  792.227931][   T10] usb 4-1: Using ep0 maxpacket: 32
[  792.313159][ T5903] usb 1-1: config 1 has an invalid interface number: 128 but max is 1
[  792.406691][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  792.525569][   T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  792.551804][   T10] usb 4-1: config 0 has no interface number 0
[  792.558796][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  792.569309][ T5903] usb 1-1: config 1 has no interface number 0
[  792.575679][ T5903] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  792.935906][T12362] vivid-007: =================  START STATUS  =================
[  792.943872][T12362] vivid-007: Enable Output Cropping: true
[  792.950174][T12362] vivid-007: Enable Output Composing: true
[  792.956119][T12362] vivid-007: Enable Output Scaler: true
[  792.961889][T12362] vivid-007: Tx RGB Quantization Range: Automatic
[  792.968544][T12362] vivid-007: Transmit Mode: HDMI
[  792.973597][T12362] vivid-007: Hotplug Present: 0x00000000
[  792.979415][T12362] vivid-007: RxSense Present: 0x00000000
[  792.985337][T12362] vivid-007: EDID Present: 0x00000000
[  792.990920][T12362] vivid-007: ==================  END STATUS  ==================
[  793.042991][   T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  793.080532][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.133154][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  793.162676][   T10] usb 4-1: Product: syz
[  793.199772][   T10] usb 4-1: Manufacturer: syz
[  793.289411][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.505836][   T10] usb 4-1: SerialNumber: syz
[  793.513007][ T5903] usb 1-1: Product: syz
[  793.517348][ T5903] usb 1-1: Manufacturer: syz
[  793.551421][   T10] usb 4-1: config 0 descriptor??
[  793.556716][ T5903] usb 1-1: SerialNumber: syz
[  793.914886][   T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  794.002593][ T5903] cdc_wdm 1-1:1.128: skipping garbage
[  794.008542][ T5903] cdc_wdm 1-1:1.128: probe with driver cdc_wdm failed with error -22
[  794.233407][T12356] bond1 (unregistering): Released all slaves
[  794.909686][ T5903] usb 2-1: USB disconnect, device number 42
[  795.441372][ T5951] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  795.881579][ T5903] usb 1-1: USB disconnect, device number 55
[  796.166088][ T5951] usb 5-1: config 0 has no interfaces?
[  796.183914][ T5951] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  796.261273][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.404718][ T5951] usb 5-1: Product: syz
[  796.636297][ T5941] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  796.733806][ T5951] usb 5-1: Manufacturer: syz
[  796.760634][ T5951] usb 5-1: SerialNumber: syz
[  796.786465][ T5951] usb 5-1: config 0 descriptor??
[  796.940540][ T5941] usb 3-1: config 0 has no interfaces?
[  796.963170][ T5941] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  796.986764][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.061952][ T5941] usb 3-1: Product: syz
[  797.117473][ T5941] usb 3-1: Manufacturer: syz
[  797.122142][ T5941] usb 3-1: SerialNumber: syz
[  797.164661][ T5941] usb 3-1: config 0 descriptor??
[  797.349498][T12383] netlink: 'syz.4.1304': attribute type 12 has an invalid length.
[  797.439026][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  797.448014][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  797.522198][   T10] usb 4-1: qt2_attach - failed to power on unit: -71
[  797.566409][   T10] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  797.581202][T12383] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1304'.
[  797.658495][   T10] usb 4-1: USB disconnect, device number 53
[  799.245774][ T5951] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  799.431365][ T5951] usb 2-1: config 0 has no interfaces?
[  799.445293][ T5951] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  799.454467][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.464767][ T5951] usb 2-1: Product: syz
[  799.481179][ T5951] usb 2-1: Manufacturer: syz
[  799.662666][ T5941] usb 3-1: USB disconnect, device number 51
[  799.689804][ T5951] usb 2-1: SerialNumber: syz
[  799.797666][ T5951] usb 2-1: config 0 descriptor??
[  800.222925][ T5903] usb 5-1: USB disconnect, device number 52
[  800.602084][T12413] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  801.022223][ T5951] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  801.083769][T12420] loop6: detected capacity change from 0 to 524287999
[  801.094001][T12420] buffer_io_error: 42 callbacks suppressed
[  801.094054][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.196966][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.205554][ T5951] usb 5-1: Using ep0 maxpacket: 16
[  801.211404][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.228585][ T5951] usb 5-1: config index 0 descriptor too short (expected 1828, got 36)
[  801.248727][ T5951] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  801.275118][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  801.305843][T12423] Invalid logical block size (7)
[  801.316332][ T5951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  801.325414][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  801.340520][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.368812][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  801.387717][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.522405][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.543563][ T5951] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  801.552976][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.561287][ T5951] usb 5-1: Product: syz
[  801.573299][ T5951] usb 5-1: Manufacturer: syz
[  801.581221][ T5951] usb 5-1: SerialNumber: syz
[  801.600957][ T5951] usb 5-1: config 0 descriptor??
[  801.707857][ T5941] usb 2-1: USB disconnect, device number 43
[  801.722552][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.774105][ T5951] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected
[  801.963151][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87
[  801.976610][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  801.998612][T12411] tipc: Enabled bearer <eth:gre0>, priority 22
[  802.010840][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  802.057123][T12420] ldm_validate_partition_table(): Disk read failed.
[  802.064106][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  802.316264][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  802.326426][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  802.366371][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  802.374257][T12420] Buffer I/O error on dev loop6, logical block 0, async page read
[  802.415792][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85
[  802.437019][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5
[  802.447769][ T5951] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  802.532750][T12420] Dev loop6: unable to read RDB block 0
[  802.545351][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'.
[  802.559530][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83
[  802.616299][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3
[  802.706472][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  802.747529][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86
[  802.815258][T12420]  loop6: unable to read partition table
[  802.826355][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  802.826669][T12420] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  803.012359][ T5951] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  803.156702][ T5903] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  803.302259][   T10] usb 5-1: USB disconnect, device number 53
[  803.347970][ T5903] usb 4-1: config 0 has no interfaces?
[  803.354889][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  803.386654][ T5903] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  803.412340][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.427306][ T5903] usb 4-1: Product: syz
[  803.440142][ T5903] usb 4-1: Manufacturer: syz
[  803.449594][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  803.466407][ T5903] usb 4-1: SerialNumber: syz
[  803.484030][   T10] keyspan 5-1:0.0: device disconnected
[  803.520107][ T5903] usb 4-1: config 0 descriptor??
[  803.802276][T12439] macsec0: entered promiscuous mode
[  803.808788][T12439] macsec0: left promiscuous mode
[  804.383830][T12447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1320'.
[  804.872878][T12460] bridge0: entered promiscuous mode
[  805.815419][   T10] usb 4-1: USB disconnect, device number 54
[  806.080652][T12471] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[12471]
[  807.456477][ T5951] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  807.566275][   T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  807.679951][ T5951] usb 1-1: config 0 has no interfaces?
[  807.692638][ T5951] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  807.709456][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.826767][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  807.856324][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  807.861888][ T5951] usb 1-1: Product: syz
[  807.875007][   T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  807.884554][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  807.895653][   T10] usb 3-1: SerialNumber: syz
[  807.908752][T12464] block device autoloading is deprecated and will be removed.
[  807.926396][ T5951] usb 1-1: Manufacturer: syz
[  807.961726][T12464] syz.1.1323: attempt to access beyond end of device
[  807.961726][T12464] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  807.977636][ T5951] usb 1-1: SerialNumber: syz
[  808.067375][ T5951] usb 1-1: config 0 descriptor??
[  808.746366][ T5951] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  808.919929][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  808.927334][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  809.176544][ T5951] usb 4-1: Using ep0 maxpacket: 16
[  809.475497][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  809.486778][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  809.504470][ T5951] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  809.517507][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.534009][ T5951] usb 4-1: config 0 descriptor??
[  809.556006][ T5951] usbhid 4-1:0.0: can't add hid device: -22
[  809.645157][ T5951] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  809.982789][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.993760][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.104830][ T5951] usb 1-1: USB disconnect, device number 56
[  811.691957][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1330'.
[  811.710003][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1330'.
[  811.800277][ T5903] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  811.952624][   T10] usb 3-1: cannot find UAC_HEADER
[  812.051238][ T5903] usb 1-1: config 0 has no interfaces?
[  812.080452][ T5903] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  812.091379][   T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  812.104508][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.146618][   T10] usb 3-1: USB disconnect, device number 52
[  812.171688][ T5903] usb 1-1: Product: syz
[  812.175431][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  812.179939][ T5903] usb 1-1: Manufacturer: syz
[  812.280034][ T5903] usb 1-1: SerialNumber: syz
[  812.444512][ T5903] usb 1-1: config 0 descriptor??
[  812.907830][T12512] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  813.226388][ T5903] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  813.250119][   T10] usb 4-1: USB disconnect, device number 55
[  813.747964][ T5903] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  813.756367][ T5903] usb 5-1: config 0 has no interface number 0
[  813.762466][ T5903] usb 5-1: config 0 interface 29 has no altsetting 0
[  813.888298][ T5903] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  813.898217][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.352741][ T5941] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  814.766348][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  814.814289][ T5941] usb 2-1: config 0 has no interfaces?
[  814.820193][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  814.836311][ T5903] usb 5-1: Product: syz
[  814.840526][ T5903] usb 5-1: Manufacturer: syz
[  814.845148][ T5903] usb 5-1: SerialNumber: syz
[  814.859979][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.899787][ T5941] usb 2-1: config 0 descriptor??
[  814.996428][ T5941] usb 1-1: USB disconnect, device number 57
[  815.047033][ T5903] usb 5-1: config 0 descriptor??
[  815.269463][ T5903] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v213 fw v7.0.0 (2 channels)
[  815.907060][T12538] macsec0: entered promiscuous mode
[  816.097969][T12540] macsec0: left promiscuous mode
[  816.863835][ T5941] usb 2-1: USB disconnect, device number 44
[  817.426388][ T5941] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  817.566127][ T5903] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  817.575573][ T5903] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  817.767421][ T5903] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71
[  817.777175][   T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  817.837413][ T5903] usb 5-1: USB disconnect, device number 54
[  817.846895][ T5941] usb 2-1: Using ep0 maxpacket: 32
[  818.158533][ T5941] usb 2-1: config 0 has no interfaces?
[  818.206750][   T10] usb 4-1: config 0 has no interfaces?
[  818.228712][ T5941] usb 2-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00
[  818.235948][   T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  818.289331][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.336920][   T10] usb 4-1: Product: syz
[  818.359754][   T10] usb 4-1: Manufacturer: syz
[  818.375080][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.379159][   T10] usb 4-1: SerialNumber: syz
[  818.627365][   T10] usb 4-1: config 0 descriptor??
[  818.715903][ T5941] usb 2-1: Product: syz
[  818.805040][ T5941] usb 2-1: Manufacturer: syz
[  818.812510][ T5941] usb 2-1: SerialNumber: syz
[  818.890990][ T5941] usb 2-1: config 0 descriptor??
[  819.385939][T12569] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0
[  821.851787][   T10] usb 4-1: USB disconnect, device number 56
[  822.215484][   T10] usb 2-1: USB disconnect, device number 45
[  825.046350][ T5941] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  825.306992][ T5941] usb 5-1: Using ep0 maxpacket: 8
[  825.374644][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11
[  825.398566][ T5941] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  825.543307][ T5941] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40
[  825.569972][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.636397][T12620] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  825.655156][ T5941] usb 5-1: Product: syz
[  825.670653][ T5941] usb 5-1: Manufacturer: syz
[  825.726780][ T5941] usb 5-1: SerialNumber: syz
[  826.683670][T12624] netlink: 'syz.4.1349': attribute type 27 has an invalid length.
[  826.797393][T12624] tipc: Resetting bearer <eth:gre0>
[  827.543364][T12624] bond0: left promiscuous mode
[  827.548404][T12624] bond_slave_0: left promiscuous mode
[  827.554641][T12624] bond_slave_1: left promiscuous mode
[  827.627040][T12624] bridge0: left promiscuous mode
[  827.732113][T12626] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.742572][T12626] 8021q: adding VLAN 0 to HW filter on device team0
[  827.968432][T12626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  828.067089][T12629] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  828.073282][T12629] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  828.382261][T12629] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  828.408608][T12629] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  828.700210][T12629] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  828.722767][T12643] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  828.729356][T12643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  828.868757][T12643] vhci_hcd vhci_hcd.0: Device attached
[  828.949252][T12649] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11)
[  828.955892][T12649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  829.031042][T12643] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15)
[  829.037702][T12643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  829.052904][T12649] vhci_hcd vhci_hcd.0: Device attached
[  829.100666][T12643] vhci_hcd vhci_hcd.0: Device attached
[  829.106316][ T5923] usb 33-1: new low-speed USB device number 4 using vhci_hcd
[  829.138755][T12649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  829.191175][T12643] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17)
[  829.197831][T12643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  829.230909][T12643] vhci_hcd vhci_hcd.0: Device attached
[  829.278294][T12649] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21)
[  829.284932][T12649] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  829.330451][T12649] vhci_hcd vhci_hcd.0: Device attached
[  829.383149][T12643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  829.425940][T12643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  829.441954][T12643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  829.557999][T12656] vhci_hcd: connection closed
[  829.558731][T12654] vhci_hcd: connection closed
[  829.565195][ T8171] vhci_hcd: stop threads
[  829.568245][T12647] vhci_hcd: connection reset by peer
[  829.570053][T12650] vhci_hcd: connection closed
[  829.579611][T12652] vhci_hcd: connection closed
[  829.623655][ T8171] vhci_hcd: release socket
[  829.656370][ T8171] vhci_hcd: disconnect device
[  829.680290][ T8171] vhci_hcd: stop threads
[  829.794976][ T8171] vhci_hcd: release socket
[  829.806602][   T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  829.835813][ T5941] usbhid 5-1:1.0: can't add hid device: -71
[  829.845219][ T8171] vhci_hcd: disconnect device
[  829.850764][ T5941] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  829.865542][ T8171] vhci_hcd: stop threads
[  829.870156][ T8171] vhci_hcd: release socket
[  829.896783][ T8171] vhci_hcd: disconnect device
[  829.901714][ T5941] usb 5-1: USB disconnect, device number 55
[  829.917305][ T8171] vhci_hcd: stop threads
[  829.926310][ T8171] vhci_hcd: release socket
[  829.936802][ T8171] vhci_hcd: disconnect device
[  829.970154][ T8171] vhci_hcd: stop threads
[  830.001683][ T8171] vhci_hcd: release socket
[  830.007102][   T10] usb 3-1: config 0 has no interfaces?
[  830.026683][ T8171] vhci_hcd: disconnect device
[  830.035452][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  830.052143][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.065117][   T10] usb 3-1: Product: syz
[  830.071464][   T10] usb 3-1: Manufacturer: syz
[  830.076086][   T10] usb 3-1: SerialNumber: syz
[  830.090830][   T10] usb 3-1: config 0 descriptor??
[  830.116529][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  830.122665][ T5151] Bluetooth: hci0: command 0x0406 tx timeout
[  830.438369][ T5151] Bluetooth: hci2: command 0x0406 tx timeout
[  830.444623][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  830.559517][T12675] program syz.1.1359 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  830.798556][ T5151] Bluetooth: hci4: command 0x0406 tx timeout
[  830.922256][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'.
[  832.416949][ T5941] usb 3-1: USB disconnect, device number 53
[  833.423262][T12700] usb usb8: usbfs: process 12700 (syz.4.1364) did not claim interface 0 before use
[  833.995457][T12709] trusted_key: syz.3.1366 sent an empty control message without MSG_MORE.
[  834.046989][T12709] sctp: [Deprecated]: syz.3.1366 (pid 12709) Use of int in maxseg socket option.
[  834.046989][T12709] Use struct sctp_assoc_value instead
[  834.376349][ T5923] vhci_hcd: vhci_device speed not set
[  835.683795][T12720] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  835.692001][T12720] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  835.700744][T12720] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  835.707657][T12720] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  835.768792][T12720] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  835.869644][ T5903] usb usb34-port1: attempt power cycle
[  836.487652][ T5903] usb usb34-port1: unable to enumerate USB device
[  836.692426][   T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  837.042715][   T10] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  837.095164][   T10] usb 4-1: config 0 has no interface number 0
[  837.236348][   T10] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[  837.301118][   T10] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  837.346248][   T10] usb 4-1: config 0 interface 113 has no altsetting 0
[  837.396462][   T10] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  837.489929][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.566373][   T10] usb 4-1: Product: syz
[  837.718922][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[  837.725011][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  837.731145][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  837.737194][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  837.767467][   T10] usb 4-1: Manufacturer: syz
[  837.796312][ T5151] Bluetooth: hci4: command 0x0406 tx timeout
[  837.876255][   T10] usb 4-1: SerialNumber: syz
[  837.921355][   T10] usb 4-1: config 0 descriptor??
[  837.946941][    C0] usb 4-1: NFC: Urb failure (status -71)
[  837.972593][   T10] usb 4-1: NFC: Unable to get FW version
[  837.986992][   T10] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90
[  838.387811][T12743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.412783][T12743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.435314][ T5923] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  838.636299][ T5941] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  838.869318][ T5923] usb 1-1: config 0 has no interfaces?
[  838.877589][ T5923] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  838.887004][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.899587][ T5941] usb 2-1: config 0 has no interfaces?
[  838.913767][ T5923] usb 1-1: Product: syz
[  838.992592][ T5923] usb 1-1: Manufacturer: syz
[  838.997675][ T5941] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  839.015051][ T5923] usb 1-1: SerialNumber: syz
[  839.020028][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.045168][ T5923] usb 1-1: config 0 descriptor??
[  839.054722][ T5941] usb 2-1: Product: syz
[  839.063591][ T5941] usb 2-1: Manufacturer: syz
[  839.124613][ T5941] usb 2-1: SerialNumber: syz
[  839.248121][ T5941] usb 2-1: config 0 descriptor??
[  839.533850][T12742] netlink: 'syz.1.1374': attribute type 12 has an invalid length.
[  839.542112][T12742] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1374'.
[  840.322517][ T5903] usb 4-1: USB disconnect, device number 57
[  840.893653][ T5941] usb 1-1: USB disconnect, device number 58
[  840.922314][T12756] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  841.427430][T12753] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  842.612278][   T10] usb 2-1: USB disconnect, device number 46
[  842.945407][T12777] netlink: 'syz.4.1380': attribute type 1 has an invalid length.
[  844.363329][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'.
[  845.633967][T12809] bridge2: entered promiscuous mode
[  845.732163][ T5941] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  846.076228][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  846.116320][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'.
[  846.366441][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  846.430687][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.506299][ T5903] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  846.856546][ T5903] usb 1-1: Using ep0 maxpacket: 16
[  847.285189][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0
[  847.310605][ T5903] usb 1-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49
[  847.333049][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.374711][ T5941] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  847.448763][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.468080][ T5941] usb 2-1: config 0 descriptor??
[  847.476383][ T5903] usb 1-1: Product: syz
[  847.483785][ T5941] usbhid 2-1:0.0: can't add hid device: -22
[  847.490093][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  847.606689][ T5903] usb 1-1: Manufacturer: syz
[  847.642394][ T5903] usb 1-1: SerialNumber: syz
[  847.755982][ T5903] usb 1-1: config 0 descriptor??
[  847.770551][ T5903] ipheth 1-1:0.0: Unable to find endpoints
[  849.178013][T12829] macsec0: entered promiscuous mode
[  849.186940][T12829] macsec0: left promiscuous mode
[  849.264375][ T5941] usb 2-1: USB disconnect, device number 47
[  849.541097][ T5903] usb 1-1: USB disconnect, device number 59
[  850.056290][   T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  850.071041][T12839] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[12839]
[  850.608450][   T10] usb 2-1: Using ep0 maxpacket: 16
[  851.046464][T12835] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  851.055295][T12835] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  851.073798][T12835] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  851.091480][T12835] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  851.141203][T12835] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  852.116607][ T5941] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  852.336224][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  852.349493][ T5941] usb 1-1: config 0 has no interfaces?
[  852.361364][ T5941] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  852.414853][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.536874][ T5941] usb 1-1: config 0 descriptor??
[  853.077059][ T5151] Bluetooth: hci3: command 0x0406 tx timeout
[  853.083330][ T5151] Bluetooth: hci1: command 0x0406 tx timeout
[  853.089738][ T5151] Bluetooth: hci0: command 0x0406 tx timeout
[  853.134224][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  853.156416][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  853.162563][ T5151] Bluetooth: hci2: command 0x0406 tx timeout
[  853.227799][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[  853.235448][   T10] usb 2-1: can't read configurations, error -71
[  853.774018][T12863] usb usb8: usbfs: process 12863 (syz.1.1400) did not claim interface 0 before use
[  854.239245][T12871] netlink: 'syz.2.1402': attribute type 27 has an invalid length.
[  854.305415][T12871] macvtap1: left promiscuous mode
[  854.310960][T12871] macvtap1: left allmulticast mode
[  854.317649][T12871] bridge2: left promiscuous mode
[  854.323715][T12871] bridge3: left promiscuous mode
[  854.476494][T12868] 8021q: adding VLAN 0 to HW filter on device bond0
[  854.504232][T12868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  854.695006][ T5903] usb 1-1: USB disconnect, device number 60
[  856.498229][ T5941] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  856.876549][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  856.883707][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.895041][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.906484][ T5941] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  856.915580][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.956826][ T5941] usb 2-1: config 0 descriptor??
[  856.983129][ T5941] usbhid 2-1:0.0: can't add hid device: -22
[  856.990562][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  857.666484][ T5951] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  857.798412][T12902] macsec0: entered promiscuous mode
[  857.828456][ T5951] usb 5-1: Using ep0 maxpacket: 16
[  857.836864][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  857.848502][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  857.865380][ T5951] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  857.882411][T12903] macsec0: left promiscuous mode
[  857.930545][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.970774][ T5951] usb 5-1: config 0 descriptor??
[  857.992013][ T5951] usbhid 5-1:0.0: can't add hid device: -22
[  858.000903][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  859.379588][T12906] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  859.395463][ T5903] usb 2-1: USB disconnect, device number 50
[  859.420933][T12906] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  859.444187][T12906] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  859.457334][   T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  859.468350][T12906] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  859.485794][T12906] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  859.641637][   T10] usb 1-1: Using ep0 maxpacket: 8
[  859.657251][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  859.691990][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.705301][T12918] sch_fq: defrate 6 ignored.
[  859.779152][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  859.817593][   T10] pvrusb2: **********
[  859.825850][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  859.841886][   T10] pvrusb2: Important functionality might not be entirely working.
[  859.868452][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  859.910196][ T5903] usb 5-1: USB disconnect, device number 56
[  859.973685][T12926] netlink: 'syz.1.1410': attribute type 6 has an invalid length.
[  859.985059][T12926] netlink: 'syz.1.1410': attribute type 1 has an invalid length.
[  859.994177][T12926] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1410'.
[  860.072162][   T10] pvrusb2: **********
[  860.115630][ T2343] pvrusb2: Invalid write control endpoint
[  860.662709][ T2343] pvrusb2: Invalid write control endpoint
[  860.672813][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  860.683954][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  860.939474][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  861.057901][ T2343] pvrusb2: Device being rendered inoperable
[  861.098735][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  861.404056][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  861.476786][ T5151] Bluetooth: hci2: command 0x0406 tx timeout
[  861.484063][ T5151] Bluetooth: hci3: command 0x0406 tx timeout
[  861.490454][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  861.556284][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  861.692010][ T2343] pvrusb2: Attached sub-driver cx25840
[  861.698106][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  861.710594][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  861.876315][T12940] Bluetooth: hci0: command 0x0406 tx timeout
[  861.892227][T12920] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  862.075218][   T10] usb 1-1: USB disconnect, device number 61
[  862.501774][T12920] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  862.509912][T12920] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  862.551214][T12920] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  862.557971][T12920] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  862.946332][   T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  862.957034][ T5951] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  863.106392][   T10] usb 1-1: Using ep0 maxpacket: 16
[  863.266237][ T5951] usb 5-1: Using ep0 maxpacket: 8
[  863.302527][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  863.314301][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  863.450793][   T10] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  863.456287][ T5951] usb 5-1: device descriptor read/all, error -71
[  863.500409][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.542388][   T10] usb 1-1: config 0 descriptor??
[  863.819988][   T10] usbhid 1-1:0.0: can't add hid device: -22
[  863.826248][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  864.038815][T12940] Bluetooth: hci1: command 0x0406 tx timeout
[  864.496512][T12966] netlink: 'syz.1.1418': attribute type 4 has an invalid length.
[  864.698775][T12940] Bluetooth: hci4: command 0x0406 tx timeout
[  864.701131][ T5829] Bluetooth: hci2: command 0x0406 tx timeout
[  864.704844][T12940] Bluetooth: hci3: command 0x0406 tx timeout
[  864.891809][T12954] netlink: 368 bytes leftover after parsing attributes in process `syz.4.1417'.
[  865.024046][T12955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  865.024129][T12955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  865.024161][T12955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  865.024279][T12955] geneve2: entered promiscuous mode
[  865.024297][T12955] geneve2: entered allmulticast mode
[  865.190100][T12968] Timeout policy `syz1' can only be used by L3 protocol number 24581
[  865.496638][   T10] usb 1-1: USB disconnect, device number 62
[  865.499530][T12955] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.558014][T12964] sctp: [Deprecated]: syz.3.1419 (pid 12964) Use of int in maxseg socket option.
[  865.558014][T12964] Use struct sctp_assoc_value instead
[  865.665946][T12955] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.679519][T12955] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  866.526317][   T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  866.696519][   T10] usb 1-1: Using ep0 maxpacket: 16
[  866.759908][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.858946][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.955153][   T10] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  867.478144][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.593717][   T10] usb 1-1: config 0 descriptor??
[  867.653544][   T10] usbhid 1-1:0.0: can't add hid device: -22
[  867.671245][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  867.697438][ T5951] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  868.228070][ T5951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  868.329903][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  868.457290][ T5951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  868.475523][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  868.502436][ T5951] usb 3-1: SerialNumber: syz
[  868.586450][ T5923] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  868.767294][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  868.779578][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.791585][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  868.803266][ T5923] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  868.829638][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.176683][ T5923] usb 5-1: config 0 descriptor??
[  869.371769][ T5923] usbhid 5-1:0.0: can't add hid device: -22
[  869.400732][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  870.282384][   T10] usb 1-1: USB disconnect, device number 63
[  870.367370][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  870.376425][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  871.837840][ T5951] usb 3-1: cannot find UAC_HEADER
[  871.883974][T13006] block device autoloading is deprecated and will be removed.
[  871.969480][ T5951] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  872.020395][ T5951] usb 3-1: USB disconnect, device number 54
[  872.048614][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  872.377499][   T10] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  872.413166][ T5921] usb 5-1: USB disconnect, device number 59
[  872.540616][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  872.551823][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  872.575869][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  872.832634][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  872.872970][   T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  872.882419][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  872.906198][   T10] usb 2-1: Product: syz
[  872.910510][   T10] usb 2-1: Manufacturer: syz
[  872.940065][   T10] usb 2-1: SerialNumber: syz
[  873.350502][   T10] usb 2-1: config 0 descriptor??
[  873.479025][   T10] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[  873.524123][   T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  873.580314][   T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  873.776716][T13005] syz.3.1425: attempt to access beyond end of device
[  873.776716][T13005] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  874.119508][T13028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1438'.
[  876.546904][ T5951] usb 2-1: USB disconnect, device number 51
[  876.741038][T13012] delete_channel: no stack
[  876.787533][   T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  876.925979][T13041] bridge0: entered promiscuous mode
[  878.051616][   T10] usb 3-1: config 0 has no interfaces?
[  878.077180][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  878.086538][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.094653][   T10] usb 3-1: Product: syz
[  878.151019][   T10] usb 3-1: Manufacturer: syz
[  878.616407][   T10] usb 3-1: SerialNumber: syz
[  878.668180][   T10] usb 3-1: config 0 descriptor??
[  879.910784][T13033] netlink: 'syz.2.1429': attribute type 12 has an invalid length.
[  879.926333][T13033] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1429'.
[  880.755459][T13060] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[13060]
[  880.811510][T13060] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1433'.
[  880.834986][T13064] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1435'.
[  880.991951][T13064] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  881.002050][T13064] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  881.010863][T13064] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  881.126406][ T5951] usb 3-1: USB disconnect, device number 55
[  882.254114][T13089] netlink: 'syz.2.1443': attribute type 27 has an invalid length.
[  882.568265][T13090] 8021q: adding VLAN 0 to HW filter on device bond0
[  882.592151][T13090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  882.774781][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'.
[  882.784014][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'.
[  884.900483][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'.
[  884.914241][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  884.926197][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  885.299224][   T10] usb 2-1: config 0 has no interfaces?
[  885.396550][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  885.439228][ T5951] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  885.451757][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.475321][   T10] usb 2-1: Product: syz
[  885.497628][   T10] usb 2-1: Manufacturer: syz
[  885.502285][   T10] usb 2-1: SerialNumber: syz
[  885.743273][ T5951] usb 3-1: config 0 has no interfaces?
[  885.774297][   T10] usb 2-1: config 0 descriptor??
[  885.854019][ T5951] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  885.910095][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.990735][ T5951] usb 3-1: Product: syz
[  886.000645][ T5951] usb 3-1: Manufacturer: syz
[  886.056448][ T5951] usb 3-1: SerialNumber: syz
[  886.090885][ T5951] usb 3-1: config 0 descriptor??
[  886.103614][ T5923] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  886.493810][ T5923] usb 4-1: config 0 has no interfaces?
[  886.531897][ T5923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  886.555367][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.583359][ T5923] usb 4-1: Product: syz
[  886.603277][ T5923] usb 4-1: Manufacturer: syz
[  886.644780][ T5923] usb 4-1: SerialNumber: syz
[  886.690459][ T5923] usb 4-1: config 0 descriptor??
[  887.126359][ T5923] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  887.721776][ T5923] usb 1-1: config 0 has no interfaces?
[  887.750018][   T10] usb 3-1: USB disconnect, device number 56
[  888.055973][   T10] usb 2-1: USB disconnect, device number 52
[  888.062942][ T5923] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  888.092139][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.160466][T13135] bridge4: entered promiscuous mode
[  888.361614][ T5923] usb 1-1: Product: syz
[  888.366280][ T5923] usb 1-1: Manufacturer: syz
[  888.380374][ T5923] usb 1-1: SerialNumber: syz
[  888.416853][ T5923] usb 1-1: config 0 descriptor??
[  888.796917][T13128] netlink: 'syz.0.1450': attribute type 12 has an invalid length.
[  888.805298][T13128] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1450'.
[  888.840409][   T10] usb 4-1: USB disconnect, device number 58
[  890.656265][ T5923] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  890.814748][T13154] veth1_macvtap: left promiscuous mode
[  890.838542][T13154] macsec0: entered promiscuous mode
[  890.893535][T13155] veth1_macvtap: entered promiscuous mode
[  890.900338][T13155] macsec0: left promiscuous mode
[  891.001110][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  891.259346][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.286363][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.296337][ T5923] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  891.305540][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.325316][ T5923] usb 5-1: config 0 descriptor??
[  891.339453][ T5923] usbhid 5-1:0.0: can't add hid device: -22
[  891.363969][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  891.816968][   T10] usb 1-1: USB disconnect, device number 64
[  892.266354][ T5923] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x7
[  892.275997][ T5923] hid-generic 00A0:0008:0003.000A: item fetching failed at offset 14/15
[  892.288327][ T5923] hid-generic 00A0:0008:0003.000A: probe with driver hid-generic failed with error -22
[  892.664329][T13169] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1457'.
[  892.828811][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  892.828833][   T30] audit: type=1326 audit(1750935486.378:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.1457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa334b8e929 code=0x0
[  893.152265][ T5923] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  893.727210][ T5923] usb 4-1: config 0 has an invalid interface number: 29 but max is 0
[  893.735366][ T5923] usb 4-1: config 0 has no interface number 0
[  893.741747][ T5923] usb 4-1: config 0 interface 29 has no altsetting 0
[  893.842766][ T5923] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  893.874335][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.925875][   T30] audit: type=1800 audit(1750935487.498:305): pid=13180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1459" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=23155 res=0 errno=0
[  893.993355][ T5923] usb 4-1: Product: syz
[  894.006362][ T5923] usb 4-1: Manufacturer: syz
[  894.034296][ T5923] usb 4-1: SerialNumber: syz
[  894.070335][ T5923] usb 4-1: config 0 descriptor??
[  894.200161][   T10] usb 5-1: USB disconnect, device number 60
[  894.399918][ T5923] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels)
[  895.499745][T13196] random: crng reseeded on system resumption
[  896.897313][T13187] syz.4.1461: attempt to access beyond end of device
[  896.897313][T13187] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  896.910457][ T5923] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  896.960788][ T5923] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  897.127800][ T5923] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71
[  897.243925][ T5923] usb 4-1: USB disconnect, device number 59
[  897.547435][T13215] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  897.928005][ T5923] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  898.136247][ T5923] usb 4-1: Using ep0 maxpacket: 16
[  898.181175][ T5923] usb 4-1: config index 0 descriptor too short (expected 1828, got 36)
[  898.226472][ T5923] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  898.383433][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.476850][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  898.489800][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  898.509711][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  898.533237][ T5923] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  898.551619][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.623355][ T5923] usb 4-1: Product: syz
[  898.646020][ T5923] usb 4-1: Manufacturer: syz
[  898.650912][ T5951] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  898.681101][ T5923] usb 4-1: SerialNumber: syz
[  898.737432][ T5923] usb 4-1: config 0 descriptor??
[  898.892623][T13236] macsec0: entered promiscuous mode
[  898.915297][ T5923] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[  898.968641][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  899.146329][T13238] macsec0: left promiscuous mode
[  899.174789][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  899.184478][T13215] tipc: Enabled bearer <eth:gre0>, priority 22
[  899.192675][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  899.206097][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  899.214138][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  899.221932][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  899.229814][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  899.239376][ T5923] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  899.258799][ T5951] usb 2-1: config 0 has no interfaces?
[  899.265650][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  899.275920][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[  899.285657][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  899.293857][ T5951] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  899.303281][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.327434][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[  899.503115][ T5951] usb 2-1: Product: syz
[  899.533670][ T5951] usb 2-1: Manufacturer: syz
[  899.550817][ T5923] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  899.573324][ T5951] usb 2-1: SerialNumber: syz
[  899.614660][ T5923] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  899.628051][ T5951] usb 2-1: config 0 descriptor??
[  900.214210][ T5951] usb 4-1: USB disconnect, device number 60
[  900.227936][ T5951] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  900.279244][ T5951] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  900.303683][ T5951] keyspan 4-1:0.0: device disconnected
[  900.386334][ T5923] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  900.546358][ T5923] usb 1-1: Using ep0 maxpacket: 16
[  900.616506][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  900.627864][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.931178][ T5923] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  901.006053][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.134811][ T5923] usb 1-1: config 0 descriptor??
[  901.153097][ T5923] usbhid 1-1:0.0: can't add hid device: -22
[  901.163169][ T5923] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  901.441466][T13247] pim6reg: entered allmulticast mode
[  901.452505][T13247] pim6reg: left allmulticast mode
[  901.808458][T13254] netlink: 'syz.3.1473': attribute type 10 has an invalid length.
[  901.827853][T13254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1473'.
[  901.852253][T13254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  902.697146][   T10] usb 2-1: USB disconnect, device number 53
[  903.147608][T13265] veth1_macvtap: left promiscuous mode
[  903.155392][T13265] macsec0: entered promiscuous mode
[  903.240889][T13268] veth1_macvtap: entered promiscuous mode
[  903.270243][T13268] macsec0: left promiscuous mode
[  903.296425][   T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  903.546359][ T5903] usb 1-1: USB disconnect, device number 65
[  903.695556][   T10] usb 3-1: config 0 has no interfaces?
[  903.737402][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  903.748154][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.850504][   T10] usb 3-1: Product: syz
[  903.863542][   T10] usb 3-1: Manufacturer: syz
[  903.878150][   T10] usb 3-1: SerialNumber: syz
[  903.915998][   T10] usb 3-1: config 0 descriptor??
[  904.340423][ T5923] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  904.377603][T13264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  904.526679][T13264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  904.541741][ T5923] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  904.573163][ T5923] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  904.622544][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  904.955354][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.049382][T13278] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  905.203856][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  906.773600][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'.
[  907.466381][ T5923] usb 3-1: USB disconnect, device number 57
[  908.672064][   T10] usb 4-1: USB disconnect, device number 61
[  910.246492][ T5951] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  910.459660][ T5951] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  910.472263][ T5951] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  910.485661][ T5951] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  910.583716][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.666305][   T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  911.196225][   T10] usb 3-1: Using ep0 maxpacket: 16
[  911.207828][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.222481][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.255452][   T10] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  911.425142][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.492546][   T10] usb 3-1: config 0 descriptor??
[  911.688995][   T10] usbhid 3-1:0.0: can't add hid device: -22
[  911.715039][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  911.836341][ T5951] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  912.450678][ T5951] usb 1-1: config 0 has no interfaces?
[  912.622831][ T5951] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  912.642169][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.664443][ T5951] usb 1-1: Product: syz
[  912.694456][ T5951] usb 1-1: Manufacturer: syz
[  912.704617][ T5951] usb 1-1: SerialNumber: syz
[  912.883355][T13335] syz.3.1489 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  912.983327][ T5951] usb 1-1: config 0 descriptor??
[  913.538502][   T10] usb 3-1: USB disconnect, device number 58
[  913.639241][T13337] pimreg: left allmulticast mode
[  913.799358][ T5951] usb 5-1: USB disconnect, device number 61
[  914.359727][T13348] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  914.376267][T13348] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  916.273122][T13364] netlink: 'syz.4.1493': attribute type 27 has an invalid length.
[  916.390115][T13364] tipc: Resetting bearer <eth:gre0>
[  916.958702][T13370] xt_CT: You must specify a L4 protocol and not use inversions on it
[  917.436950][ T5951] usb 1-1: USB disconnect, device number 66
[  917.566485][   T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  917.677972][T13364] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  917.685332][T13364] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  917.699191][T13364] bridge2: left promiscuous mode
[  917.714088][T13364] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  917.723862][T13364] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  917.733018][T13364] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  917.747422][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  917.759601][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  917.769653][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  917.788603][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  917.801021][   T10] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  917.810113][   T10] usb 3-1: Manufacturer: syz
[  917.925523][   T10] usb 3-1: config 0 descriptor??
[  917.947175][   T10] smsusb:smsusb_probe: board id=9, interface number 0
[  917.961095][T13366] vlan0: entered promiscuous mode
[  917.985531][   T10] smsusb:smsusb_probe: Device initialized with return code -19
[  918.048671][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'.
[  918.162439][T13375] vivid-000: =================  START STATUS  =================
[  918.174759][T13375] vivid-000: Test Pattern: 75% Colorbar
[  918.182854][T13375] vivid-000: Fill Percentage of Frame: 100
[  918.325727][T13367] 8021q: adding VLAN 0 to HW filter on device bond0
[  918.365785][T13367] 8021q: adding VLAN 0 to HW filter on device team0
[  918.446557][T13375] vivid-000: Horizontal Movement: No Movement
[  918.452718][T13375] vivid-000: Vertical Movement: No Movement
[  918.493207][T13375] vivid-000: OSD Text Mode: All
[  918.499784][T13367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  918.653087][T13375] vivid-000: Show Border: false
[  918.658140][T13375] vivid-000: Show Square: false
[  918.736608][T13375] vivid-000: Sensor Flipped Horizontally: false
[  918.745325][T13375] vivid-000: Sensor Flipped Vertically: false
[  918.782729][T13375] vivid-000: Insert SAV Code in Image: false
[  918.932222][T13375] vivid-000: Insert EAV Code in Image: false
[  919.026916][T13375] vivid-000: Insert Video Guard Band: false
[  919.178403][T13375] vivid-000: Reduced Framerate: false
[  919.215354][T13375] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  919.278176][T13375] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  919.325114][T13375] vivid-000: Enable Capture Cropping: true grabbed
[  919.371603][T13375] vivid-000: Enable Capture Composing: true grabbed
[  919.420302][T13375] vivid-000: Enable Capture Scaler: true grabbed
[  919.474156][T13375] vivid-000: Timestamp Source: End of Frame
[  919.533602][T13375] vivid-000: Colorspace: sRGB
[  919.564037][T13375] vivid-000: Transfer Function: Default
[  919.611862][T13375] vivid-000: Y'CbCr Encoding: Default
[  919.661444][T13375] vivid-000: HSV Encoding: Hue 0-179
[  919.714420][T13375] vivid-000: Quantization: Default
[  919.763584][T13375] vivid-000: Apply Alpha To Red Only: false
[  919.814591][T13375] vivid-000: Standard Aspect Ratio: 4x3
[  919.836239][T13375] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  919.876004][T13375] vivid-000: DV Timings: 640x480p59 inactive
[  919.920493][T13375] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  919.960628][T13375] vivid-000: Maximum EDID Blocks: 2
[  919.965916][T13375] vivid-000: Limited RGB Range (16-235): false
[  920.029135][T13375] vivid-000: Rx RGB Quantization Range: Automatic
[  920.066875][T13375] vivid-000: Power Present: 0x00000001
[  920.089514][T13375] tpg source WxH: 320x240 (R'G'B)
[  920.121298][T13375] tpg field: 1
[  920.125912][T13375] tpg crop: (0,0)/320x240
[  920.152278][T13375] tpg compose: (0,0)/320x240
[  920.167230][T13375] tpg colorspace: 8
[  920.171090][T13375] tpg transfer function: 0/2
[  920.175710][T13375] tpg quantization: 0/1
[  920.256888][T13375] tpg RGB range: 0/2
[  920.270601][T13375] vivid-000: ==================  END STATUS  ==================
[  920.401250][T13402] i2c i2c-0: Invalid block write size 34
[  920.537036][ T5951] usb 3-1: USB disconnect, device number 59
[  921.696441][ T5951] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  922.075630][ T5951] usb 3-1: config 0 has no interfaces?
[  922.094601][ T5951] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  922.254548][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.340738][ T5951] usb 3-1: Product: syz
[  922.361350][ T5951] usb 3-1: Manufacturer: syz
[  922.418183][ T5951] usb 3-1: SerialNumber: syz
[  922.439925][ T5951] usb 3-1: config 0 descriptor??
[  922.910546][T13430] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  923.079486][ T5951] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  923.614624][ T5951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.667504][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  923.708739][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  923.769454][ T5951] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[  923.805563][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.870848][ T5951] usb 2-1: config 0 descriptor??
[  924.063320][ T5951] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  924.099381][ T5951] usb 2-1: MIDIStreaming interface descriptor not found
[  924.640206][ T5903] usb 3-1: USB disconnect, device number 60
[  925.619893][ T5903] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  925.799317][ T5903] usb 5-1: Using ep0 maxpacket: 8
[  925.842577][ T5903] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  925.936708][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3253, setting to 1024
[  925.949232][ T5903] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  925.986251][ T5903] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  926.292517][ T5903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  926.303804][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.336281][ T5951] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  926.340903][ T5903] usb 5-1: Product: syz
[  926.368310][ T5903] usb 5-1: Manufacturer: syz
[  926.378123][ T5903] usb 5-1: SerialNumber: syz
[  926.427336][T13444] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  926.435014][T13444] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  926.661436][T13444] loop2: detected capacity change from 0 to 7
[  926.674584][ T5903] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  926.715903][ T5903] usbtest 5-1:1.0: Linux user mode ISO test driver
[  926.750759][ T5903] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  926.778495][   T10] usb 2-1: USB disconnect, device number 54
[  926.868618][ T5903] usb 5-1: USB disconnect, device number 62
[  927.856293][ T5903] usb 1-1: new full-speed USB device number 67 using dummy_hcd
[  928.007136][ T5951] usb 4-1: config 0 has no interfaces?
[  928.031068][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  928.075951][ T5903] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  928.122887][ T5903] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  928.165810][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.352246][ T5903] usb 1-1: config 0 descriptor??
[  928.390264][ T5903] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  928.418431][ T5903] dvb-usb: bulk message failed: -22 (3/0)
[  928.445577][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  928.482313][ T5903] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  928.499492][ T5903] usb 1-1: media controller created
[  928.519237][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  928.575864][ T5903] dvb-usb: bulk message failed: -22 (6/0)
[  928.746612][ T5903] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  928.760790][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30
[  928.783874][ T5903] dvb-usb: schedule remote query interval to 150 msecs.
[  928.792476][ T5903] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  928.986346][ T5903] dvb-usb: bulk message failed: -22 (1/0)
[  929.009885][ T5903] dvb-usb: error while querying for an remote control event.
[  929.038099][T13454] dvb-usb: bulk message failed: -22 (2/0)
[  929.280926][ T5903] dvb-usb: bulk message failed: -22 (1/0)
[  929.448543][ T5903] dvb-usb: error while querying for an remote control event.
[  929.618104][ T5903] dvb-usb: bulk message failed: -22 (1/0)
[  929.635236][ T5903] dvb-usb: error while querying for an remote control event.
[  929.836365][ T5903] dvb-usb: bulk message failed: -22 (1/0)
[  929.842151][ T5903] dvb-usb: error while querying for an remote control event.
[  929.847827][T13456] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[13456]
[  929.988873][ T5951] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  929.998297][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.056397][ T5903] dvb-usb: bulk message failed: -22 (1/0)
[  930.066283][ T5903] dvb-usb: error while querying for an remote control event.
[  930.109962][ T5951] usb 4-1: Product: syz
[  930.183308][ T5951] usb 4-1: config 0 descriptor??
[  930.202737][ T5951] usb 4-1: can't set config #0, error -71
[  930.221837][ T5951] usb 4-1: USB disconnect, device number 62
[  930.236361][ T5903] dvb-usb: bulk message failed: -22 (1/0)
[  930.252749][ T5903] dvb-usb: error while querying for an remote control event.
[  930.483790][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  930.491806][   T10] dvb-usb: error while querying for an remote control event.
[  930.747037][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  930.756338][   T10] dvb-usb: error while querying for an remote control event.
[  930.806207][ T5903] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  930.826220][ T5951] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  930.927404][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  930.934971][   T10] dvb-usb: error while querying for an remote control event.
[  930.947682][ T5921] usb 1-1: USB disconnect, device number 67
[  930.962816][ T5903] usb 5-1: config 0 has no interfaces?
[  930.980096][ T5903] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  930.989314][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.063570][ T5903] usb 5-1: Product: syz
[  931.188607][ T5921] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  931.197166][ T5903] usb 5-1: Manufacturer: syz
[  931.211586][ T5903] usb 5-1: SerialNumber: syz
[  931.224419][ T5951] usb 2-1: config 0 has no interfaces?
[  931.362449][ T5903] usb 5-1: config 0 descriptor??
[  931.601129][T13479] pimreg: entered allmulticast mode
[  931.608226][T13479] pimreg: left allmulticast mode
[  931.817782][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  931.831581][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  931.971440][T13487] sctp: [Deprecated]: syz.0.1516 (pid 13487) Use of int in maxseg socket option.
[  931.971440][T13487] Use struct sctp_assoc_value instead
[  932.008882][ T5951] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  932.044300][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.075835][ T5951] usb 2-1: Product: syz
[  932.456862][ T5951] usb 2-1: Manufacturer: syz
[  932.481876][ T5951] usb 2-1: SerialNumber: syz
[  932.513075][ T5951] usb 2-1: config 0 descriptor??
[  933.453236][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'.
[  933.602818][ T5951] usb 5-1: USB disconnect, device number 63
[  935.681390][ T5951] usb 2-1: USB disconnect, device number 55
[  936.317036][ T5921] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  936.488542][ T5921] usb 2-1: Using ep0 maxpacket: 16
[  936.734587][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  936.793030][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  936.860174][ T5921] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  937.045422][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.256076][ T5921] usb 2-1: config 0 descriptor??
[  937.435414][ T5921] usbhid 2-1:0.0: can't add hid device: -22
[  937.461054][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  938.275864][T13530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.295471][T13530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  939.176393][ T5951] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  939.660280][ T5951] usb 5-1: config 0 has no interfaces?
[  939.669762][ T5951] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  939.679277][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.783559][ T5951] usb 5-1: Product: syz
[  939.988606][ T5951] usb 5-1: Manufacturer: syz
[  939.999852][ T5951] usb 5-1: SerialNumber: syz
[  940.187170][ T5951] usb 5-1: config 0 descriptor??
[  940.429429][ T5951] usb 2-1: USB disconnect, device number 56
[  940.539831][T13538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.568097][T13538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.837667][ T5951] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  942.017201][T13560] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  942.066439][ T5951] usb 2-1: device descriptor read/64, error -71
[  942.201517][T13564] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[13564]
[  942.334072][ T5951] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  942.516308][ T5951] usb 2-1: device descriptor read/64, error -71
[  942.697523][ T5951] usb usb2-port1: attempt power cycle
[  943.046461][ T5951] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  943.097377][ T5951] usb 2-1: device descriptor read/8, error -71
[  943.336603][ T5951] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  943.351334][ T5903] usb 5-1: USB disconnect, device number 64
[  943.357036][ T5951] usb 2-1: device descriptor read/8, error -71
[  943.486943][ T5951] usb usb2-port1: unable to enumerate USB device
[  943.983221][T13587] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  944.086422][ T5941] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  944.246427][ T5941] usb 5-1: Using ep0 maxpacket: 16
[  944.606405][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  944.776210][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  944.786297][ T5903] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  944.936449][ T5941] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  944.961169][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.063731][ T5941] usb 5-1: config 0 descriptor??
[  945.117838][ T5941] usbhid 5-1:0.0: can't add hid device: -22
[  945.132772][ T5941] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  945.256810][ T5903] usb 1-1: config 0 has no interfaces?
[  945.360481][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  945.371639][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  945.744102][T13594] netlink: 'syz.1.1537': attribute type 11 has an invalid length.
[  945.772581][ T5903] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  945.781794][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.801510][ T5903] usb 1-1: Product: syz
[  945.814990][ T5903] usb 1-1: Manufacturer: syz
[  945.856342][ T5903] usb 1-1: SerialNumber: syz
[  945.919127][ T5903] usb 1-1: config 0 descriptor??
[  946.446436][T13590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'.
[  946.517186][T13596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.526915][T13596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.197525][ T5921] usb 5-1: USB disconnect, device number 65
[  947.576287][ T5903] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  947.893882][ T5903] usb 3-1: config 0 has no interfaces?
[  947.905331][ T5903] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  947.914691][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.965128][ T5903] usb 3-1: Product: syz
[  948.079957][ T5941] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  948.080058][ T5903] usb 3-1: Manufacturer: syz
[  948.266540][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  948.396385][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  948.409713][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  948.421674][ T5941] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  948.435071][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.662413][   T10] usb 1-1: USB disconnect, device number 68
[  948.675157][ T5941] usb 2-1: config 0 descriptor??
[  948.692282][ T5941] usbhid 2-1:0.0: can't add hid device: -22
[  948.704386][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  948.726251][ T5903] usb 3-1: SerialNumber: syz
[  948.791617][ T5903] usb 3-1: config 0 descriptor??
[  948.796736][ T5921] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  948.932894][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  948.943276][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  949.281177][T13601] netlink: 'syz.2.1538': attribute type 12 has an invalid length.
[  949.289807][T13601] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1538'.
[  949.306262][ T5921] usb 4-1: Using ep0 maxpacket: 8
[  949.358605][ T5921] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  949.628754][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3253, setting to 1024
[  949.641330][ T5921] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  949.651508][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  949.718041][ T5903] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  949.794480][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  949.805178][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.816037][ T5921] usb 4-1: Product: syz
[  949.870161][ T5921] usb 4-1: Manufacturer: syz
[  949.883616][ T5921] usb 4-1: SerialNumber: syz
[  949.896256][ T5903] usb 1-1: Using ep0 maxpacket: 16
[  949.906818][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  949.918893][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.940878][ T5903] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  950.100886][T13614] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  950.110495][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.136731][T13614] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  950.233214][ T5903] usb 1-1: config 0 descriptor??
[  950.272683][ T5903] usbhid 1-1:0.0: can't add hid device: -22
[  950.326562][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  950.508984][T13619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  950.518698][T13619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  950.598571][ T5921] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  950.609411][ T5921] usbtest 4-1:1.0: Linux user mode ISO test driver
[  950.751782][ T5921] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  950.819251][ T5921] usb 4-1: USB disconnect, device number 63
[  951.214614][ T5923] usb 3-1: USB disconnect, device number 61
[  951.389454][T13625] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[13625]
[  952.442760][ T5923] usb 2-1: USB disconnect, device number 61
[  952.591160][ T5951] usb 1-1: USB disconnect, device number 69
[  953.005407][T13644] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[13644]
[  953.256263][ T5951] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  953.549359][ T5951] usb 1-1: config 0 has no interfaces?
[  953.675551][ T5951] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  953.694545][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.710036][ T5951] usb 1-1: Product: syz
[  953.725905][ T5951] usb 1-1: Manufacturer: syz
[  953.790310][ T5951] usb 1-1: SerialNumber: syz
[  953.847968][ T5951] usb 1-1: config 0 descriptor??
[  954.328820][ T5921] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  954.795038][ T5921] usb 2-1: Using ep0 maxpacket: 16
[  955.042157][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  955.137688][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  955.174761][ T5921] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  955.204341][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.275169][ T5921] usb 2-1: config 0 descriptor??
[  955.374560][ T5921] usbhid 2-1:0.0: can't add hid device: -22
[  955.400505][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  955.534028][T13667] netlink: 'syz.3.1551': attribute type 11 has an invalid length.
[  955.737695][T13660] pim6reg: entered allmulticast mode
[  955.743582][T13662] pim6reg: left allmulticast mode
[  955.843271][T13653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.852314][T13653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.373098][ T5903] usb 1-1: USB disconnect, device number 70
[  958.616474][T13680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1554'.
[  958.925053][ T5903] usb 2-1: USB disconnect, device number 62
[  959.166758][ T5951] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  959.374210][ T5951] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  959.390285][ T5951] usb 3-1: config 0 has no interface number 0
[  959.415908][T13694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  959.595470][ T5951] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[  959.610873][ T5951] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  959.621412][ T5951] usb 3-1: config 0 interface 113 has no altsetting 0
[  959.650518][ T5951] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  959.660266][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.675479][ T5951] usb 3-1: Product: syz
[  959.682305][ T5951] usb 3-1: Manufacturer: syz
[  959.687710][ T5951] usb 3-1: SerialNumber: syz
[  959.910923][T13694] syz.3.1556 (13694) used greatest stack depth: 18648 bytes left
[  959.929871][ T5951] usb 3-1: config 0 descriptor??
[  959.943157][    C1] usb 3-1: NFC: Urb failure (status -71)
[  959.950643][ T5951] usb 3-1: NFC: Unable to get FW version
[  959.962190][ T5951] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90
[  960.372834][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.383550][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.166942][T13713] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  961.686568][ T5951] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  961.867183][ T5951] usb 4-1: config 0 has no interfaces?
[  961.892962][ T5951] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  961.902240][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.917568][ T5951] usb 4-1: Product: syz
[  961.921737][ T5951] usb 4-1: Manufacturer: syz
[  961.957790][ T5951] usb 4-1: SerialNumber: syz
[  961.978596][ T5951] usb 4-1: config 0 descriptor??
[  961.984524][ T5923] usb 3-1: USB disconnect, device number 62
[  962.542574][T13722] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[13722]
[  962.728422][T13722] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1561'.
[  964.296247][ T5903] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  964.512832][ T5903] usb 5-1: Using ep0 maxpacket: 8
[  964.728568][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  964.767612][ T5903] usb 5-1: config 0 has no interfaces?
[  964.827461][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  964.848859][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.049506][ T5903] usb 5-1: config 0 descriptor??
[  965.186484][ T5923] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  965.663298][ T5903] usb 4-1: USB disconnect, device number 64
[  965.822138][ T5923] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  965.832928][ T5923] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  965.845717][ T5923] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  965.861286][ T5923] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  965.871960][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.981352][ T5923] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  966.028364][ T5923] usb 1-1: invalid MIDI out EP 0
[  966.202477][T13743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.242347][T13743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.269271][T13743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.289696][T13743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.572908][ T5951] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  966.633469][ T5923] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  966.766229][ T5951] usb 4-1: Using ep0 maxpacket: 16
[  966.795881][ T5923] usb 1-1: USB disconnect, device number 71
[  967.033801][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  967.097942][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  967.130740][ T5951] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  967.152081][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.180256][ T5951] usb 4-1: config 0 descriptor??
[  967.336844][ T5951] usbhid 4-1:0.0: can't add hid device: -22
[  967.422695][ T5951] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  967.453472][ T5903] usb 5-1: USB disconnect, device number 66
[  967.660454][T13764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  967.671283][T13764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  967.836499][   T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  968.028373][   T10] usb 3-1: Using ep0 maxpacket: 8
[  968.035551][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  968.050810][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  968.081316][ T5951] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  968.212939][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  968.253627][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  968.422757][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  968.439781][T13769] vivid-000: disconnect
[  968.793503][ T5951] usb 2-1: config 0 has no interfaces?
[  968.813231][ T5951] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  968.824676][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.847895][ T5951] usb 2-1: Product: syz
[  968.852089][ T5951] usb 2-1: Manufacturer: syz
[  968.909849][ T5951] usb 2-1: SerialNumber: syz
[  968.938705][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  968.956191][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.985375][   T10] usb 3-1: config 0 descriptor??
[  969.041370][T12940] Bluetooth: hci5: urb ffff888028ba6f00 submission failed (90)
[  969.109617][ T5951] usb 2-1: config 0 descriptor??
[  969.260510][T13758] vivid-000: reconnect
[  969.266682][ T5923] usb 3-1: USB disconnect, device number 63
[  969.540122][T13766] input: syz1 as /devices/virtual/input/input31
[  969.587798][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.599239][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.905801][   T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  970.933956][ T5903] usb 4-1: USB disconnect, device number 65
[  971.080164][   T10] usb 5-1: config 0 has no interfaces?
[  971.091693][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  971.141531][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.186163][   T10] usb 5-1: Product: syz
[  971.206476][   T10] usb 5-1: Manufacturer: syz
[  971.226191][   T10] usb 5-1: SerialNumber: syz
[  971.270865][   T10] usb 5-1: config 0 descriptor??
[  971.533314][ T5923] usb 5-1: USB disconnect, device number 67
[  971.575721][ T5951] usb 2-1: USB disconnect, device number 63
[  972.051714][T13793] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[13793]
[  972.157713][T13793] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1577'.
[  972.727396][T13802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1581'.
[  973.013216][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'.
[  973.022439][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'.
[  973.177715][T13810] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[13810]
[  975.066412][   T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  975.268769][ T5903] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  975.316393][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  975.353233][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  975.421222][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  975.433758][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  975.441976][ T5903] usb 3-1: Using ep0 maxpacket: 8
[  975.457320][ T5903] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  975.475560][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.483785][   T10] usb 4-1: SerialNumber: syz
[  975.576058][ T5903] usb 3-1: Product: syz
[  975.606192][ T5921] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  975.706500][ T5903] usb 3-1: Manufacturer: syz
[  975.753562][ T5903] usb 3-1: SerialNumber: syz
[  975.795938][ T5903] usb 3-1: config 0 descriptor??
[  975.986406][ T5951] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  976.021307][ T5921] usb 2-1: Using ep0 maxpacket: 16
[  976.195337][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  976.207393][ T5903] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  976.240173][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  976.267049][ T5921] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  976.284376][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.426184][ T5951] usb 5-1: Using ep0 maxpacket: 8
[  976.432349][ T5921] usb 2-1: config 0 descriptor??
[  976.470615][ T5951] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  976.490580][ T5951] usb 5-1: config 0 has no interface number 0
[  976.512674][ T5921] usbhid 2-1:0.0: can't add hid device: -22
[  976.523148][ T5951] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  976.553261][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  976.574791][ T5951] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  976.628022][ T5951] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  976.672167][ T5951] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  976.725534][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.735656][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.959035][ T5951] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=b8.c5
[  976.972979][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.986000][ T5951] usb 5-1: Product: syz
[  976.994959][ T5951] usb 5-1: Manufacturer: syz
[  977.008533][ T5951] usb 5-1: SerialNumber: syz
[  977.074543][ T5951] usb 5-1: config 0 descriptor??
[  977.332290][ T5951] iowarrior 5-1:0.186: IOWarrior product=0x1501, serial=42424242 interface=186 now attached to iowarrior0
[  978.972391][ T5903] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  978.985312][ T5903] usb 3-1: USB disconnect, device number 64
[  979.121737][   T10] usb 4-1: cannot find UAC_HEADER
[  979.172916][ T5951] usb 5-1: USB disconnect, device number 68
[  979.339220][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  979.926080][   T10] usb 4-1: USB disconnect, device number 66
[  980.190375][T13845] netlink: 'syz.4.1591': attribute type 12 has an invalid length.
[  980.211631][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  980.262214][ T5903] usb 2-1: USB disconnect, device number 64
[  981.503959][T13866] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  981.716378][ T5951] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  981.907320][ T5951] usb 3-1: config index 0 descriptor too short (expected 126, got 72)
[  981.917757][ T5951] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  981.927316][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.935506][ T5951] usb 3-1: Product: syz
[  981.947815][T13875] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[13875]
[  982.045846][ T5951] usb 3-1: Manufacturer: syz
[  982.051118][ T5951] usb 3-1: SerialNumber: syz
[  982.082492][ T5951] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  982.107289][ T5923] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  982.120719][T13878] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1594'.
[  982.189723][T13874] pim6reg: entered allmulticast mode
[  982.198475][T13874] pim6reg: left allmulticast mode
[  983.420077][T13864] sctp: [Deprecated]: syz.2.1595 (pid 13864) Use of int in maxseg socket option.
[  983.420077][T13864] Use struct sctp_assoc_value instead
[  983.636279][ T5923] usb 3-1: Service connection timeout for: 257
[  983.642958][ T5923] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  983.694103][T13889] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  983.734800][ T5923] ath9k_htc: Failed to initialize the device
[  983.779702][ T5923] usb 3-1: ath9k_htc: USB layer deinitialized
[  983.834321][ T5951] usb 3-1: USB disconnect, device number 65
[  984.676561][ T5903] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  984.772264][   T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  984.792485][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'.
[  984.801951][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'.
[  985.157246][   T10] usb 5-1: Using ep0 maxpacket: 8
[  985.255048][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  985.285544][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  985.314045][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.345707][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  985.396662][   T10] usb 5-1: Product: syz
[  985.400906][   T10] usb 5-1: Manufacturer: syz
[  985.405542][   T10] usb 5-1: SerialNumber: syz
[  985.434005][ T5903] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  985.495707][   T10] usb 5-1: config 0 descriptor??
[  985.552802][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  985.637761][ T5903] usb 4-1: SerialNumber: syz
[  985.646379][ T5951] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  986.085978][   T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  986.328642][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  986.803266][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  986.842103][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  986.842193][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  987.128070][ T5951] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00
[  987.161514][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.210717][ T5951] usb 3-1: config 0 descriptor??
[  987.378671][T13922] veth1_macvtap: left promiscuous mode
[  987.384360][T13922] macsec0: entered promiscuous mode
[  987.410934][T13922] veth1_macvtap: entered promiscuous mode
[  987.417308][T13922] macsec0: left promiscuous mode
[  988.146307][ T5923] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  988.318303][ T5923] usb 1-1: config 0 has no interfaces?
[  988.333775][ T5923] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  988.343068][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.384576][ T5923] usb 1-1: Product: syz
[  988.457889][ T5923] usb 1-1: Manufacturer: syz
[  988.525321][ T5923] usb 1-1: SerialNumber: syz
[  988.651220][ T5923] usb 1-1: config 0 descriptor??
[  988.673766][ T5903] usb 4-1: cannot find UAC_HEADER
[  988.825563][ T5903] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  988.885828][ T5903] usb 4-1: USB disconnect, device number 67
[  988.920735][   T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  988.941719][   T10] usb 5-1: USB disconnect, device number 69
[  989.062750][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  990.230908][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1610'.
[  991.162382][ T5951] usbhid 3-1:0.0: can't add hid device: -71
[  991.174458][ T5951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  991.197253][ T5951] usb 3-1: USB disconnect, device number 66
[  991.271681][ T5923] usb 1-1: USB disconnect, device number 72
[  991.650482][ T5951] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[  991.860867][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  991.979118][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  992.704636][ T5951] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  992.726224][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.739475][ T5951] usb 3-1: Product: syz
[  992.745995][ T5951] usb 3-1: Manufacturer: syz
[  992.751148][ T5951] usb 3-1: SerialNumber: syz
[  992.759861][ T5951] usb 3-1: config 0 descriptor??
[  992.765698][T13949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  992.774494][ T5951] usb 3-1: ucan: probing device on interface #0
[  992.783387][ T5951] usb 3-1: ucan: invalid EP count (1)
[  992.795431][ T5951] usb 3-1: ucan: probe failed; try to update the device firmware
[  992.843743][T13961] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[13961]
[  993.309999][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  993.361613][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'.
[  993.371419][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  993.491089][T13967] 8021q: adding VLAN 0 to HW filter on device team0
[  993.743646][T13949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  993.755803][T13949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  996.439334][T13986] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  996.448827][ T5951] usb 3-1: USB disconnect, device number 67
[  996.876247][T13991] macsec0: entered promiscuous mode
[  996.882747][T13992] macsec0: left promiscuous mode
[  999.286229][ T5903] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  999.497156][ T5903] usb 4-1: Using ep0 maxpacket: 16
[  999.828652][ T5903] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  999.863327][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.896992][ T5903] usb 4-1: Product: syz
[  999.914355][ T5903] usb 4-1: Manufacturer: syz
[  999.919866][ T5903] usb 4-1: SerialNumber: syz
[ 1000.136204][ T5923] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1000.306230][ T5951] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1000.354432][ T5923] usb 2-1: Using ep0 maxpacket: 32
[ 1000.432580][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1000.460862][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1000.495693][ T5903] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1000.512152][ T5903] r8152-cfgselector 4-1: config 0 descriptor??
[ 1000.652520][ T5923] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1000.661827][ T5951] usb 3-1: Using ep0 maxpacket: 16
[ 1000.672176][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1000.714644][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1000.725748][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1000.794058][ T5923] usb 2-1: Product: syz
[ 1000.924807][ T5923] usb 2-1: Manufacturer: syz
[ 1000.945409][ T5951] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1000.954968][ T5923] usb 2-1: SerialNumber: syz
[ 1000.976363][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.993958][ T5923] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input33
[ 1001.007504][ T5951] usb 3-1: config 0 descriptor??
[ 1001.031271][ T5951] usbhid 3-1:0.0: can't add hid device: -22
[ 1001.051468][ T5951] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[ 1001.266336][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1001.280285][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1001.577867][T14027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1001.609182][T14027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1001.780152][   T10] usb 2-1: USB disconnect, device number 65
[ 1001.834834][   T10] appletouch 2-1:1.0: input: appletouch disconnected
[ 1003.018776][ T5903] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1003.050553][ T5903] r8152-cfgselector 4-1: bad CDC descriptors
[ 1003.104812][ T5903] r8152-cfgselector 4-1: USB disconnect, device number 68
[ 1004.530472][ T5951] usb 3-1: USB disconnect, device number 68
[ 1004.763118][T14054] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[14054]
[ 1005.004253][T14056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1632'.
[ 1005.745845][T14064] TCP: TCP_TX_DELAY enabled
[ 1006.948986][ T5903] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1006.959677][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1007.276353][ T5903] usb 4-1: device descriptor read/64, error -32
[ 1007.436229][ T5951] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1007.548185][ T5903] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1007.679580][ T5951] usb 1-1: config 0 has no interfaces?
[ 1007.689547][ T5951] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1007.706611][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.715435][ T5951] usb 1-1: Product: syz
[ 1007.736262][ T5951] usb 1-1: Manufacturer: syz
[ 1007.776421][ T5903] usb 4-1: config 0 has no interfaces?
[ 1007.785787][ T5951] usb 1-1: SerialNumber: syz
[ 1007.852453][ T5951] usb 1-1: config 0 descriptor??
[ 1007.888089][ T5903] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1007.926274][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.979739][ T5903] usb 4-1: Product: syz
[ 1007.983978][ T5903] usb 4-1: Manufacturer: syz
[ 1008.063484][ T5903] usb 4-1: SerialNumber: syz
[ 1008.304367][T14089] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1637'.
[ 1008.338510][T14089] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1008.405347][ T5903] usb 4-1: config 0 descriptor??
[ 1008.496368][ T5951] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1008.597427][ T5923] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1008.657924][ T5951] usb 5-1: no configurations
[ 1008.662642][ T5951] usb 5-1: can't read configurations, error -22
[ 1008.756189][ T5923] usb 3-1: Using ep0 maxpacket: 32
[ 1008.765483][ T5923] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 1008.774352][ T5923] usb 3-1: config 0 has no interface number 0
[ 1008.796497][ T5951] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1008.818574][ T5923] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1008.901521][ T5923] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1008.979358][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.038189][ T5951] usb 5-1: no configurations
[ 1009.089022][ T5951] usb 5-1: can't read configurations, error -22
[ 1009.261010][ T5923] usb 3-1: Product: syz
[ 1009.276387][ T5951] usb usb5-port1: attempt power cycle
[ 1009.284593][ T5923] usb 3-1: Manufacturer: syz
[ 1009.300534][ T5923] usb 3-1: SerialNumber: syz
[ 1009.586893][ T5923] usb 3-1: config 0 descriptor??
[ 1009.772957][ T5923] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1009.802210][ T5923] em28xx 3-1:0.132: Video interface 132 found: isoc
[ 1009.809090][ T5951] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1009.984761][ T5951] usb 5-1: no configurations
[ 1009.989560][ T5951] usb 5-1: can't read configurations, error -22
[ 1010.018672][ T5903] usb 4-1: USB disconnect, device number 70
[ 1010.177992][ T5951] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1010.345447][ T5951] usb 5-1: no configurations
[ 1010.360356][ T5951] usb 5-1: can't read configurations, error -22
[ 1010.379817][ T5951] usb usb5-port1: unable to enumerate USB device
[ 1011.123191][ T5903] usb 1-1: USB disconnect, device number 73
[ 1011.168234][ T5923] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 1011.293630][ T5923] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1011.335057][ T5923] em28xx 3-1:0.132: board has no eeprom
[ 1011.476195][ T5923] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1011.484079][ T5923] em28xx 3-1:0.132: analog set to isoc mode.
[ 1011.490621][ T5951] em28xx 3-1:0.132: Registering V4L2 extension
[ 1011.910737][ T5951] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[ 1012.043241][ T5951] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[ 1012.056324][ T5903] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1012.137928][ T5951] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[ 1012.204339][   T10] usb 3-1: USB disconnect, device number 69
[ 1012.213371][   T10] em28xx 3-1:0.132: Disconnecting em28xx
[ 1012.236455][ T5903] usb 1-1: Using ep0 maxpacket: 16
[ 1012.246487][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1012.307104][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1012.350961][ T5903] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1012.391868][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.523213][ T5903] usb 1-1: config 0 descriptor??
[ 1012.602927][ T5903] usbhid 1-1:0.0: can't add hid device: -22
[ 1012.621461][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[ 1012.641204][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1642'.
[ 1012.654387][T14119] openvswitch: netlink: Flow key attr not present in new flow.
[ 1012.667199][T14119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1642'.
[ 1012.752321][T14117] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1012.839843][T14104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.982588][T14104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.050460][ T5951] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 1013.128606][ T5951] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 1013.146215][ T5951] em28xx 3-1:0.132: No AC97 audio processor
[ 1013.332485][ T5951] usb 3-1: Decoder not found
[ 1013.515014][ T5951] em28xx 3-1:0.132: failed to create media graph
[ 1013.525590][ T5951] em28xx 3-1:0.132: V4L2 device video103 deregistered
[ 1013.580347][T14125] ==================================================================
[ 1013.586305][ T5951] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 1013.588436][T14125] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430
[ 1013.604448][T14125] Read of size 8 at addr ffff888032f58738 by task v4l_id/14125
[ 1013.612004][T14125] 
[ 1013.614326][T14125] CPU: 0 UID: 0 PID: 14125 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) 
[ 1013.614342][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1013.614349][T14125] Call Trace:
[ 1013.614355][T14125]  <TASK>
[ 1013.614360][T14125]  dump_stack_lvl+0x189/0x250
[ 1013.614381][T14125]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1013.614392][T14125]  ? rcu_is_watching+0x15/0xb0
[ 1013.614410][T14125]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1013.614427][T14125]  ? rcu_is_watching+0x15/0xb0
[ 1013.614444][T14125]  ? lock_release+0x4b/0x3e0
[ 1013.614460][T14125]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1013.614471][T14125]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1013.614482][T14125]  print_report+0xd2/0x2b0
[ 1013.614496][T14125]  ? v4l2_fh_open+0xc7/0x430
[ 1013.614513][T14125]  kasan_report+0x118/0x150
[ 1013.614525][T14125]  ? v4l2_fh_open+0xc7/0x430
[ 1013.614544][T14125]  v4l2_fh_open+0xc7/0x430
[ 1013.614560][T14125]  ? __pfx___mutex_lock+0x10/0x10
[ 1013.614579][T14125]  em28xx_v4l2_open+0x157/0x9a0
[ 1013.614599][T14125]  v4l2_open+0x20f/0x360
[ 1013.614611][T14125]  chrdev_open+0x4c9/0x5e0
[ 1013.614624][T14125]  ? __pfx_chrdev_open+0x10/0x10
[ 1013.614637][T14125]  ? __pfx_chrdev_open+0x10/0x10
[ 1013.614649][T14125]  do_dentry_open+0xdf0/0x1970
[ 1013.614666][T14125]  vfs_open+0x3b/0x340
[ 1013.614678][T14125]  ? path_openat+0x2ecd/0x3830
[ 1013.614695][T14125]  path_openat+0x2ee5/0x3830
[ 1013.614710][T14125]  ? arch_stack_walk+0xfc/0x150
[ 1013.614736][T14125]  ? __pfx_path_openat+0x10/0x10
[ 1013.614751][T14125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.614767][T14125]  do_filp_open+0x1fa/0x410
[ 1013.614782][T14125]  ? __lock_acquire+0xab9/0xd20
[ 1013.614798][T14125]  ? __pfx_do_filp_open+0x10/0x10
[ 1013.614818][T14125]  ? _raw_spin_unlock+0x28/0x50
[ 1013.614832][T14125]  ? alloc_fd+0x64c/0x6c0
[ 1013.614846][T14125]  do_sys_openat2+0x121/0x1c0
[ 1013.614860][T14125]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1013.614874][T14125]  ? exc_page_fault+0x76/0xf0
[ 1013.614890][T14125]  ? do_user_addr_fault+0xc8a/0x1390
[ 1013.614905][T14125]  __x64_sys_openat+0x138/0x170
[ 1013.614921][T14125]  do_syscall_64+0xfa/0x3b0
[ 1013.614937][T14125]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1013.614953][T14125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.614964][T14125]  ? clear_bhb_loop+0x60/0xb0
[ 1013.614976][T14125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.614987][T14125] RIP: 0033:0x7f1eeb6a7407
[ 1013.614999][T14125] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1013.615010][T14125] RSP: 002b:00007ffcc6cfef20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1013.615024][T14125] RAX: ffffffffffffffda RBX: 00007f1eebdfe880 RCX: 00007f1eeb6a7407
[ 1013.615033][T14125] RDX: 0000000000000000 RSI: 00007ffcc6cfff1a RDI: ffffffffffffff9c
[ 1013.615041][T14125] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1013.615047][T14125] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1013.615055][T14125] R13: 00007ffcc6cff170 R14: 00007f1eebf65000 R15: 0000562215d734d8
[ 1013.615067][T14125]  </TASK>
[ 1013.615071][T14125] 
[ 1013.918885][T14125] Allocated by task 5951:
[ 1013.923385][T14125]  kasan_save_track+0x3e/0x80
[ 1013.928084][T14125]  __kasan_kmalloc+0x93/0xb0
[ 1013.932668][T14125]  __kmalloc_cache_noprof+0x230/0x3d0
[ 1013.938030][T14125]  em28xx_v4l2_init+0x10b/0x2e70
[ 1013.942961][T14125]  em28xx_init_extension+0x11d/0x1c0
[ 1013.948239][T14125]  process_scheduled_works+0xae1/0x17b0
[ 1013.953781][T14125]  worker_thread+0x8a0/0xda0
[ 1013.958368][T14125]  kthread+0x70e/0x8a0
[ 1013.962445][T14125]  ret_from_fork+0x3fc/0x770
[ 1013.967030][T14125]  ret_from_fork_asm+0x1a/0x30
[ 1013.971784][T14125] 
[ 1013.974099][T14125] Freed by task 5951:
[ 1013.978069][T14125]  kasan_save_track+0x3e/0x80
[ 1013.982740][T14125]  kasan_save_free_info+0x46/0x50
[ 1013.987758][T14125]  __kasan_slab_free+0x62/0x70
[ 1013.992511][T14125]  kfree+0x18e/0x440
[ 1013.996405][T14125]  em28xx_v4l2_init+0x1683/0x2e70
[ 1014.001422][T14125]  em28xx_init_extension+0x11d/0x1c0
[ 1014.006702][T14125]  process_scheduled_works+0xae1/0x17b0
[ 1014.012254][T14125]  worker_thread+0x8a0/0xda0
[ 1014.016843][T14125]  kthread+0x70e/0x8a0
[ 1014.020941][T14125]  ret_from_fork+0x3fc/0x770
[ 1014.025528][T14125]  ret_from_fork_asm+0x1a/0x30
[ 1014.030292][T14125] 
[ 1014.032616][T14125] The buggy address belongs to the object at ffff888032f58000
[ 1014.032616][T14125]  which belongs to the cache kmalloc-8k of size 8192
[ 1014.046671][T14125] The buggy address is located 1848 bytes inside of
[ 1014.046671][T14125]  freed 8192-byte region [ffff888032f58000, ffff888032f5a000)
[ 1014.060634][T14125] 
[ 1014.062950][T14125] The buggy address belongs to the physical page:
[ 1014.069349][T14125] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32f58
[ 1014.078102][T14125] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1014.086590][T14125] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1014.094558][T14125] page_type: f5(slab)
[ 1014.098531][T14125] raw: 00fff00000000040 ffff88801a442280 ffffea0000c94000 dead000000000005
[ 1014.107105][T14125] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1014.115690][T14125] head: 00fff00000000040 ffff88801a442280 ffffea0000c94000 dead000000000005
[ 1014.124347][T14125] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1014.133011][T14125] head: 00fff00000000003 ffffea0000cbd601 00000000ffffffff 00000000ffffffff
[ 1014.141758][T14125] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1014.150413][T14125] page dumped because: kasan: bad access detected
[ 1014.156816][T14125] page_owner tracks the page as allocated
[ 1014.162517][T14125] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12285, tgid 12280 (syz.2.1287), ts 785901124821, free_ts 762995188215
[ 1014.184037][T14125]  post_alloc_hook+0x240/0x2a0
[ 1014.188810][T14125]  get_page_from_freelist+0x21e4/0x22c0
[ 1014.194346][T14125]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1014.200153][T14125]  alloc_pages_mpol+0x232/0x4a0
[ 1014.204992][T14125]  allocate_slab+0x8a/0x3b0
[ 1014.209501][T14125]  ___slab_alloc+0xbfc/0x1480
[ 1014.214168][T14125]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[ 1014.220572][T14125]  krealloc_noprof+0x124/0x340
[ 1014.225343][T14125]  copy_array+0x63/0xf0
[ 1014.229501][T14125]  copy_verifier_state+0x848/0xed0
[ 1014.234628][T14125]  do_check+0x4c44/0xd450
[ 1014.238953][T14125]  do_check_common+0x168d/0x20b0
[ 1014.243898][T14125]  bpf_check+0x13664/0x19c60
[ 1014.248479][T14125]  bpf_prog_load+0x1318/0x1930
[ 1014.253241][T14125]  __sys_bpf+0x5f1/0x860
[ 1014.257479][T14125]  __x64_sys_bpf+0x7c/0x90
[ 1014.261892][T14125] page last free pid 5883 tgid 5883 stack trace:
[ 1014.268203][T14125]  __free_frozen_pages+0xc71/0xe70
[ 1014.273302][T14125]  __put_partials+0x161/0x1c0
[ 1014.278004][T14125]  put_cpu_partial+0x17c/0x250
[ 1014.282800][T14125]  __slab_free+0x2f7/0x400
[ 1014.287221][T14125]  qlist_free_all+0x97/0x140
[ 1014.291810][T14125]  kasan_quarantine_reduce+0x148/0x160
[ 1014.297265][T14125]  __kasan_slab_alloc+0x22/0x80
[ 1014.302103][T14125]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1014.307559][T14125]  getname_flags+0xb8/0x540
[ 1014.312053][T14125]  do_sys_openat2+0xbc/0x1c0
[ 1014.316636][T14125]  __x64_sys_openat+0x138/0x170
[ 1014.321477][T14125]  do_syscall_64+0xfa/0x3b0
[ 1014.325979][T14125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.331865][T14125] 
[ 1014.334179][T14125] Memory state around the buggy address:
[ 1014.339799][T14125]  ffff888032f58600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1014.347854][T14125]  ffff888032f58680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1014.355904][T14125] >ffff888032f58700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1014.363953][T14125]                                         ^
[ 1014.369834][T14125]  ffff888032f58780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1014.377902][T14125]  ffff888032f58800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1014.385958][T14125] ==================================================================
[ 1014.395767][   T10] em28xx 3-1:0.132: Closing input extension
[ 1014.416523][T14125] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1014.423780][T14125] CPU: 1 UID: 0 PID: 14125 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) 
[ 1014.435529][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1014.445619][T14125] Call Trace:
[ 1014.448930][T14125]  <TASK>
[ 1014.451884][T14125]  dump_stack_lvl+0x99/0x250
[ 1014.456507][T14125]  ? __asan_memcpy+0x40/0x70
[ 1014.461112][T14125]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1014.466326][T14125]  ? __pfx__printk+0x10/0x10
[ 1014.470925][T14125]  panic+0x2db/0x790
[ 1014.474831][T14125]  ? __pfx_panic+0x10/0x10
[ 1014.479261][T14125]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1014.485174][T14125]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1014.491515][T14125]  ? print_memory_metadata+0x314/0x400
[ 1014.496988][T14125]  ? v4l2_fh_open+0xc7/0x430
[ 1014.501590][T14125]  check_panic_on_warn+0x89/0xb0
[ 1014.506539][T14125]  ? v4l2_fh_open+0xc7/0x430
[ 1014.511138][T14125]  end_report+0x78/0x160
[ 1014.515383][T14125]  kasan_report+0x129/0x150
[ 1014.519896][T14125]  ? v4l2_fh_open+0xc7/0x430
[ 1014.524526][T14125]  v4l2_fh_open+0xc7/0x430
[ 1014.528953][T14125]  ? __pfx___mutex_lock+0x10/0x10
[ 1014.534008][T14125]  em28xx_v4l2_open+0x157/0x9a0
[ 1014.538893][T14125]  v4l2_open+0x20f/0x360
[ 1014.543166][T14125]  chrdev_open+0x4c9/0x5e0
[ 1014.547607][T14125]  ? __pfx_chrdev_open+0x10/0x10
[ 1014.552557][T14125]  ? __pfx_chrdev_open+0x10/0x10
[ 1014.557508][T14125]  do_dentry_open+0xdf0/0x1970
[ 1014.562293][T14125]  vfs_open+0x3b/0x340
[ 1014.566375][T14125]  ? path_openat+0x2ecd/0x3830
[ 1014.571154][T14125]  path_openat+0x2ee5/0x3830
[ 1014.575756][T14125]  ? arch_stack_walk+0xfc/0x150
[ 1014.580709][T14125]  ? __pfx_path_openat+0x10/0x10
[ 1014.585654][T14125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.591733][T14125]  do_filp_open+0x1fa/0x410
[ 1014.596247][T14125]  ? __lock_acquire+0xab9/0xd20
[ 1014.601125][T14125]  ? __pfx_do_filp_open+0x10/0x10
[ 1014.606199][T14125]  ? _raw_spin_unlock+0x28/0x50
[ 1014.611069][T14125]  ? alloc_fd+0x64c/0x6c0
[ 1014.615413][T14125]  do_sys_openat2+0x121/0x1c0
[ 1014.620110][T14125]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1014.625324][T14125]  ? exc_page_fault+0x76/0xf0
[ 1014.630019][T14125]  ? do_user_addr_fault+0xc8a/0x1390
[ 1014.635315][T14125]  __x64_sys_openat+0x138/0x170
[ 1014.640181][T14125]  do_syscall_64+0xfa/0x3b0
[ 1014.644700][T14125]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1014.649912][T14125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.655982][T14125]  ? clear_bhb_loop+0x60/0xb0
[ 1014.660670][T14125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.666568][T14125] RIP: 0033:0x7f1eeb6a7407
[ 1014.670990][T14125] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1014.690601][T14125] RSP: 002b:00007ffcc6cfef20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1014.699028][T14125] RAX: ffffffffffffffda RBX: 00007f1eebdfe880 RCX: 00007f1eeb6a7407
[ 1014.707005][T14125] RDX: 0000000000000000 RSI: 00007ffcc6cfff1a RDI: ffffffffffffff9c
[ 1014.714977][T14125] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1014.722951][T14125] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1014.730930][T14125] R13: 00007ffcc6cff170 R14: 00007f1eebf65000 R15: 0000562215d734d8
[ 1014.738946][T14125]  </TASK>
[ 1014.742110][T14125] Kernel Offset: disabled
[ 1014.746471][T14125] Rebooting in 86400 seconds..