last executing test programs:

2m50.809240638s ago: executing program 3 (id=1006):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x110003, 0x0, [0x7, 0x8001, 0x7, 0x2d5, 0x1, 0x3, 0x7, 0x8]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
unshare(0x400)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080), 0x4)
listen(r3, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x609002, 0x0)
fcntl$getflags(r4, 0x401)
r5 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
wait4(r5, 0x0, 0x40000000, 0x0)
r7 = dup(r6)
setns(r7, 0x20000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f80f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000fa001fed9fed9c965470f0102410f79d226450f01cb660f013b", 0x52}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m48.842519653s ago: executing program 3 (id=1019):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000240)="ba2100b80700efea0040b50066b802e9bc8266efbafc0cec0f01c40f0ff28e650f4e3b6584093ef30f0966b87e686e8c66ef6465670fc77c732fb80000ef0f320f01caea00808b000fae44ce", 0x4c}], 0x1, 0x24, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m48.418360168s ago: executing program 3 (id=1020):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x20, r3, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x3, 0x0, &(0x7f0000000140)=[{0xfff, 0x1}, {0x5}, {0x2, 0x410000000800000}]})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000280)={0x18, r3}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000280)={0x18, r3})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) (async)
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000003c0)={0x18, r3})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLL', 0x15, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000500)={0x18, r4, 0x3, 0x1c})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x40000001, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r3, 0xf73}) (async)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r3, 0xf73})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r3, 0x0, 0x1000, 0x2000}) (async)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r3, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x9, 0x2, r3})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x22, 0x7, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1004000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x22, 0x7, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1004000})

2m47.140487572s ago: executing program 3 (id=1024):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_io_uring_setup(0x186a, &(0x7f0000000140)={0x0, 0x3cfa, 0x80, 0x3, 0x21}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x1c422}, 0x1})
io_uring_enter(r2, 0x47f5, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m45.000596069s ago: executing program 3 (id=1033):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x6, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

2m42.57124656s ago: executing program 3 (id=1041):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
sendmsg$alg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="23e10401000000000100", 0xa}], 0x1, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}, 0x4801)
syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x67, 0xc6, 0xb0, 0x10, 0xeb1a, 0x2875, 0x6f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x160, 0x54, [{{0x9, 0x4, 0x73, 0x0, 0x3, 0x80, 0x25, 0x14, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0xa, 0xa9}}, {{0x9, 0x5, 0x8e, 0x0, 0x8, 0xb, 0x6, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xc, 0x3, 0x97}}]}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x830824, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94)
r6 = syz_io_uring_setup(0x754f, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000240))

2m27.478642168s ago: executing program 32 (id=1041):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
sendmsg$alg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="23e10401000000000100", 0xa}], 0x1, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}, 0x4801)
syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x67, 0xc6, 0xb0, 0x10, 0xeb1a, 0x2875, 0x6f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x160, 0x54, [{{0x9, 0x4, 0x73, 0x0, 0x3, 0x80, 0x25, 0x14, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0xa, 0xa9}}, {{0x9, 0x5, 0x8e, 0x0, 0x8, 0xb, 0x6, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xc, 0x3, 0x97}}]}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x830824, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94)
r6 = syz_io_uring_setup(0x754f, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000240))

11.540433485s ago: executing program 5 (id=1522):
r0 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x43)
fcntl$notify(r0, 0x402, 0xf)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x70b201, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r1, r2, 0x0, 0x6) (async)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r4, 0x8, 0x2)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

11.126963205s ago: executing program 5 (id=1527):
syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = dup(r4)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="0f7f4b030f01c836656466f2efba430066ed0f080f00d80f01c366b97003000066b85cb321a666ba728daa6f0f30610fc7a8b834", 0x86}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0xb, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r9, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "72cdb9e5d2d6cc53", "b398a91fc6bdb914cbb6ac1de99a5aafad3546cb0e1a279a0377aaa88854c527", "b3ae7917", "e1c2a6dc40f4a4bc"}, 0x38)
syz_usb_control_io(r9, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r9, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="a0101d000000fee509f042a0acf1e53e0f51534bea"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.126009606s ago: executing program 4 (id=1528):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"47282f832bdcd00c1144ec5d27411fe8", 0x0, <r1=>0x0, {0x5, 0x6}, {0x1, 0xfffffff7}, 0x4, [0x4, 0xfac, 0x3, 0x2643, 0x101, 0x100000000, 0xffffffffffffffff, 0x7, 0x1, 0x5, 0x8, 0x401, 0xff, 0x7fff, 0x4, 0x101]})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000001c0)={0x1a, 0x2, {0x9, @struct={0x1, 0xff}, 0x0, 0x4, 0xf1, 0x8, 0x3, 0xf, 0x11, @struct={0x1a00000, 0xfff}, 0x0, 0x1000, [0x800, 0x6, 0x7, 0x4, 0x200]}, {0x3, @struct={0x40, 0xffffff01}, <r2=>0x0, 0x8, 0x101, 0x4, 0x7fffffffffffffff, 0x7, 0x2a, @usage=0x5, 0x3ff, 0x5, [0x1, 0x40, 0xfffffffffffffca2, 0x8, 0x6de964c9, 0x6]}, {0x3, @usage=0x2b2b095a, 0x0, 0x7, 0x100000001, 0x7fffffffffffffff, 0x8, 0x4, 0x64230b44c6c4ed04, @usage=0xd, 0x6, 0x4, [0x4, 0x7ff, 0xb1b, 0x1ef5, 0x4, 0x80000000]}, {0x8, 0x9, 0x8}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000005c0)={{r0}, r1, 0x2, @inherit={0x70, &(0x7f0000000140)={0x1, 0x5, 0xe, 0xf, {0x2, 0xfea7, 0x4, 0x2, 0x6}, [0x1439, 0x0, 0x4, 0xb86a, 0x5]}}, @devid=r2})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000001600), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001680)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001840)={&(0x7f00000015c0), 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x128, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4020015)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001880)={<r6=>0x0, 0x3ff, 0x20, 0x9, 0x9}, &(0x7f00000018c0)=0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001900)={0x7, 0x90, 0x8207, 0x9, 0xa0, 0x19, 0x4, 0x4, <r7=>r6}, &(0x7f0000001940)=0x20)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001980)={0x3, [0x3587, 0xff, 0x3]}, &(0x7f00000019c0)=0xa)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001a40), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x34, r8, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xdf}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x34}}, 0x4000054)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001d80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x148, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x817ef69b52919e87}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x805929895f202316}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x44423da3f1412554}, 0x40001)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001dc0)=@ccm_128={{0x303}, "5d683ee839c00245", "a18e4f1177b2eb35600b51eb919db76c", "f19f69c6", "a12cb18962ef0dd0"}, 0x28)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4028010}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x20, 0xa, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x6, 0x1a, '[\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, r8, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x8081)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000002040), &(0x7f0000002080)=0x4)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000020c0)={r7, 0x5}, 0x8)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000002100)={@remote, @loopback, 0x1, "7b5d374c4d612c31e146016158a30946d1f0516d14022a0b022f9c03a4fa470f", 0x1aa7b7b5, 0x5, 0xff}, 0x3c)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000002140)={0x1, 0x1, @start={0x7, 0x1}})
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000021c0)=@assoc_value={0x0, 0xfff}, 0x8)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000002200))
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000002280), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x48, r10, 0x804, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x40044)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002400), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x24, r11, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20048000)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002500)={r7, 0x8}, &(0x7f0000002540)=0x8)

11.085554165s ago: executing program 4 (id=1529):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010ac05620200000000000109022400080000500309040002010300000009210000500122f8040905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000180)={0x14, &(0x7f0000000580)={0x0, 0x11, 0xd5, {0xd5, 0x11, "ea7b9435cf49de8609debfbbb3a323a8b5a747a0199372bef239a220c24596d1916b86d7b929b53afbfeeab7690dacab73b30f4435e122eabf3331d4b57feb52cc0cdba16267c16cd2643642a9690ed58edbb2d1dff59777d5083c0aa380e4bb3800f635efa5a7aa22f11869a31499b5edd5d0214cc9dd2952bef457fafaa8c45ba541922b121c97f573b60922a1c096851694824fd750cd3c6c17a6f2cf38c7b9d05ba09502e8247f169fc8ae60acfe7d29a763e12d36b9566c24d1ef030cc300a96477ba1ce15414fbc41fa24e28f2b23bcb"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0xfffffffffffffef0, 0x3, 0x412}}}, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x0, 0x14, 0xd4, "2787d8a2789031aff3d970261a1571c5f0dfc000d58de396e1475cea2eefb0cf71293d06eeeba0a3aa810a7034b341cc38a75e53bd51c77e83ae9152d8518f99fd63d3f35a616cb969429bd88907b8d003d954ba657111bfbcb31e6fd8ac8dbcc75d7c92dddddbdce898e8007db7d893762e3139752f9b443baa4f479332f87d1cdb3fc14a1b8421d80a241a71f93e8200984db3ad267bad265f73996c52994fd47195d189215ad5da11e551cadc92366ee733f3eaa6685891e57aab4c1e09c751846a10fedc6943d72359d2fe2a8578df965a20"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xc0}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x1ff}, &(0x7f00000004c0)={0x40, 0xa0, 0xffffffffffffffe4, 0x2}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "cea6496d86fd00e2404f9d79ce2ae89b5c26c0e800b749b6595308f7f78f340451353383152ca076e4d5fc5be54e46"}})
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200000, 0x0, 0x1}, 0x18)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
madvise(&(0x7f00004b4000/0x3000)=nil, 0x3000, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'team_slave_0\x00', {'wlan1\x00'}, 0x4})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r6, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000140), 0x4)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
syz_usb_connect$uac1(0x5, 0xf3, &(0x7f00000016c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x9e, 0x70, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x4, 0x7, "36d8c522"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x5, 0x1, "192674"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x5, 0x3, [0x0, 0x3, 0x5], 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1, 0x3, 0x5, 0x0, 0x8, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9c, 0x1, 0x22, 0x82, 'I', "94"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x5, 0x81, "5afb57a7e7a8"}, @as_header={0x7, 0x24, 0x1, 0x33, 0x7, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x1, 0x40, {0x7, 0x25, 0x1, 0x2, 0x7, 0xb4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xe66, 0x9, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x3, 0xfa, 'Y'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfa, 0xff, 0xff, 0xd, "b0"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xa, 0x2}, @as_header={0x7, 0x24, 0x1, 0xf, 0x84, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x706, 0x5, 0x3, "bcce"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x1, 0x4d, {0x7, 0x25, 0x1, 0x1, 0x5, 0x89}}}}}}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0xf, 0x0, 0xff, 0x8}, 0x43, &(0x7f0000001e80)=ANY=[@ANYRES8=r9], 0x2, [{0x92, &(0x7f00000017c0)=@string={0x92, 0x3, "4eb95a3afc312effc11a964475d16d06c1088ffbfe6ee649abbb87d0d0b7d02a6a46eb2d3b6f38117d6f8f5abadb564f656c0a5ee2cc4c061de8e53e83779f87a87208f2676bd0998c94c9531f0b221df191c1825b470f0a8aad06abbe2ae092d86cf4407125d9768f063cd1631423e48cadc65b74b37a400d261ecf33a732bf84816dc8ea610c0ce703de448e2726d7"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}]})
write$UHID_INPUT(r2, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

8.560229597s ago: executing program 0 (id=1539):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) (async)
socket$key(0xf, 0x3, 0x2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040000803228163ce814190c0001800600f4ff800a0000100002700c00178002000180ed000000"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setgroups(0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) (async)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
io_setup(0x0, &(0x7f0000000000)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) (async)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x3, 0x9, 0x7e14, 0xa, 0x3ff, 0x1, 0x1, {0x0, @in6={{0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}, 0x80000001, 0xc, 0x5, 0x9}}, &(0x7f0000000400)=0xb0) (async)
r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') (async)
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef980009050602ff751403000000"], 0x0) (async)
fcntl$notify(r8, 0x402, 0x20)
getdents64(r7, 0xffffffffffffffff, 0x43)

8.278081262s ago: executing program 2 (id=1540):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x20044085)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0x7, 0x8, 0x1, 0x10, 0x1, 0x8}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000000040)=0x3)

8.135565533s ago: executing program 2 (id=1541):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000200000001000000000000000b000000070000b29ba2"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1e0508b10", 0x10, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r3, 0xfffff000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x5, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x6}, {0x0, 0x589, 0x1, 0x6}}}, 0xb8}}, 0x0)

7.876274982s ago: executing program 4 (id=1542):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = dup3(r0, 0xffffffffffffffff, 0x80000)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
capget(0x0, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5, 0xe737}}, 0x10)
unshare(0x20000)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x12)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = dup(r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x8000004}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c)

7.838184759s ago: executing program 5 (id=1543):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'gretap0\x00', 0x100}) (async, rerun: 32)
r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5eb5713b6b68eaa81ed4fbca1804b19f8db992a8dc062a1ffa6403d5fbe635df74e952ddef97a0e158eeb81dec51"], 0x86) (rerun: 32)

6.944377356s ago: executing program 5 (id=1545):
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a}, 0x94)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0d5, 0x80, 0x80, 0x12}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d})
fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0xa, 0x2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="3cffff00140009052cbd70000000000002180000", @ANYRES32=r6, @ANYBLOB="140003000000000000000000000000000000000008000400ac1414aa08000200ffffffff"], 0x3c}}, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FICLONE(r7, 0x40049409, r7)
r8 = syz_open_dev$vcsu(0x0, 0x6, 0x140403)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e00080000a2ff028006000500810000000a000100aaaaaaaaaa000000"], 0x48}}, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
unshare(0x22020400)
r11 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r11, 0x0, 0x0)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_TIOCINQ(r12, 0x541b, &(0x7f0000000140))
accept4$inet(r8, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x80000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x109, 0x0, 0x0, {0x0, r10}})

6.942933225s ago: executing program 0 (id=1546):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

6.824033424s ago: executing program 0 (id=1547):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={<r2=>r0, 0x1, 0xffffffffffffff03, 0x9})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffd, 0x97, 0x4, @buffer={0x0, 0xea, &(0x7f0000000440)=""/234}, &(0x7f0000000600)="5b7fac064e42bf65e7cb693458cc6c8fd335cd482805e24e0c68166f89d379184d0e6d0722dbccd0d18ec83b9a27deb0b242a12f1598317d82cf547262703faa6e09024cd0f4830d59e2154ae4490297619c521b4d22d47e76b5a9d7aaedb07d92d6339eb3be6fca0b2dfccd5c3e2a5eb61bfe431e6aa6a9d9004e9f88aa45fa7517951bfd9756c9ccb28612d3e3f259fcd5b3e622076b", &(0x7f0000000380)=""/54, 0x1, 0x10025, 0xffffffffffffffff, &(0x7f00000003c0)})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xf)
recvmmsg(r0, &(0x7f00000000c0), 0x43e7, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x5}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @remote, 0x5}, 0x1c)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080)=0xfffffbfe, 0x4)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x300})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r10 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f00000000c0)={0x6, 0x5, 0xd})
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x800)

5.811079646s ago: executing program 0 (id=1548):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, &(0x7f0000000400))
r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x56)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, &(0x7f0000000280))
r8 = epoll_create1(0x0)
r9 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000080)=<r10=>0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000040)={0x2})
epoll_pwait(r8, &(0x7f0000000200)=[{}], 0x1, 0x6, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r11 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x39d, 0x0, r1}, &(0x7f0000000180)=<r12=>0x0, &(0x7f00000001c0)=<r13=>0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra={0x5, 0x2, 0x4}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x6610}, 0x1})
io_uring_enter(r11, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r14 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80)
ioctl$CEC_RECEIVE(r14, 0xc0386106, &(0x7f0000000000)={0x9, 0x0, 0x8, 0x7, 0x1, 0x9, "260000001000", 0x4, 0x0, 0x81, 0x0, 0x5, 0x9, 0x7f})

5.535482544s ago: executing program 4 (id=1549):
syz_usb_connect(0x4, 0x90, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x13, 0x8d, 0x8b, 0x20, 0x1908, 0x1320, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0xe, 0x5, 0x19, 0x66, 0x85, 0x8f, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3a6af75c8282"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x4, 0xfffd, 0x6}, {0x6, 0x24, 0x1a, 0x8d, 0x8}}], [{{0x9, 0x5, 0x3, 0x8, 0x400, 0x2, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xa9, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x34}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x8, 0x1, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xe6f}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xf, 0xab, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x1, 0x2}}]}}]}}]}}, 0x0)
r0 = semget$private(0x0, 0x4000000009, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x1, 0x1800}, {0x2, 0xfff4}], 0x2, &(0x7f0000000040))
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000002"], 0x48}, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e0", 0x13}], 0x3}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x2, 0x0, [0x8, 0x4, 0x3, 0x9]})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4)
sendto$inet6(r8, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
close_range(r7, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)

4.608815458s ago: executing program 5 (id=1550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2f, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="9589b7a47d9b085ad045919c6b6ef86b91d37891cae818b69728342a9a37a6a78fcd73ea877c9e897d66f0eed78326b6f2b65a94d4d12a74313b2600fdaf06ba2810fee485fe8852aecd01c23007a04f7a0f92b508a57b3b95a1435d88630e2a11c74817e5284a0e7d4758b609bf6e9c3b0f10ee78932c2a91fe640be8dd0e29c58109db2d87785ea341a6848fa4cabab1", @ANYRESDEC=r2, @ANYRES16, @ANYBLOB="ea9d51a6fd6aef910239630fb7de85f94cdaf6935a6dd9cbaa9bbc81be998f98bd38ae654ab727debc9c11cf2790696d16d7c5738561ec3919a57e4a58e974839d1daa51259bac3d3536b0b62539eb030de8ece887813bb63556319cc28fdd99d20967c87b324ff7df5e82a0c4d951818459f541271d6300b8f1f83a", @ANYBLOB="8d2b2be0f1615c0bcd574fdc67f1a9ab414c40e195abb7b4cb15069ef383694e7a5fc1ab03675eb48bf192513a83ddc8fec943dcf749e7b681bfdddd4bd74669d6383b79310f19e2d9f082e89286c3ea36096f617cb6de6b78b05868702b65cb14f1a019cdfc7960ecca9af4e2140079bf0c5eaf1b213b495e2c0f3c2429702b632c4aa9151422f858be3327f569fc78577843277730f2f7a205fb97f4a441952976e7e250639ffe75371993281392112063a55064fd72eb5279f443b85ff50453f592754ff1eb", @ANYRES16], 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000040, 0x9, 0x1, 0xb49, 0x7, 0x4, 0x2000000, 0x14}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xffffffb7, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x9, 0x20000009, 0x40, {0x200000000006, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x410180)
dup3(r3, r4, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0)
r7 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040))
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x6a}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94)
close_range(r8, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000380012800b0001006272696467650000280002800c002300076b0000000000000600060037070000080005000000000005002a"], 0x58}}, 0x0)

4.410856715s ago: executing program 2 (id=1551):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="95d6998ccc700e5295"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00')
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="50b573ea", 0x4}], 0x1}}], 0x2, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b96000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, &(0x7f0000000040)=0x40)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x90a'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4888}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044044)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x15)
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x0, 0xfffffffffffffffe})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x18, 0x34, @random="2adeb85a5f3dcc599b7d5abce275c8743a80819b"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x54}}, 0x4000)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0)

4.248405059s ago: executing program 1 (id=1552):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500230800003c12800b00010069703667726500002c00028014000700ff000000000000011400060000000000000003000000000000000201080004000500000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

4.224608905s ago: executing program 0 (id=1553):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4}}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) (async)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xba23, 0x0, 0x2000, 0xfffffffc}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}})
io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r6, 0x4, 0x42000) (async)
read$FUSE(r6, &(0x7f0000001440)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_STATFS(r6, &(0x7f0000000200)={0x60, 0x0, r7, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) (async, rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64)

3.819290966s ago: executing program 1 (id=1554):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4)

3.494778063s ago: executing program 1 (id=1555):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
r6 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0x5192, 0x1040, 0x0, 0x1000001}, 0x0, 0x0)
r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x5, 0x80, 0x1, 0x34f, 0x0, r6}, &(0x7f0000000140), &(0x7f0000000100))
io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$FITHAW(r7, 0xc0045878)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f40000000500020002000000080003000aac0f"], 0x58}}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x4}, &(0x7f0000000000)=0x90)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r8, &(0x7f0000000180)={0x2, 0x0, @multicast1, 0x4}, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r4)
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20004081)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040)=0x10001)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

3.276308042s ago: executing program 1 (id=1556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{0x0, 0x7, 0xd, 0x10000001, 0x40, 0x0, 0xfffffffffffffff5, 0x5, 0x8, 0xb5e, 0x3, 0x65, 0x7, 0x7f, 0x2aa8d42f}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x6a040000) (async)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = gettid()
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0xc, 0x31324d59, 0x7, 0x9, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x0, 0x8}, {}, {0x0, 0x9}, {0xaa}], 0x0, 0x0, 0x1, 0x2, 0x2}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

3.183782713s ago: executing program 0 (id=1557):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x1, 0xb47, 0x9, 0x8, 0x7, 0x7c}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140))
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000060a01040000000000000000010000001400000011"], 0x3c}}, 0x40000)
removexattr(0x0, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsmount(r6, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000210a0101"], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804)
fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x1, 0x3, 0x8000000000008, 0x6})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r9 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000406d0432c50000000000010902240001be4f9f3a8263ad34d3ce"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', 0x0})
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

2.987676896s ago: executing program 1 (id=1558):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75d, 0x10b382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
setpriority(0x2, 0x0, 0xd2f4)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="e84a97d7e3d21ee3e037d597a03a0bf61387d865f33b5bde8f104d3f0f77fd27f9795d744a2e92469d8b46b01f80e477c6e9438de49a7662a8cd55ee2fe81bf09bd9fbc69fc08bdcd320679b40899774a54a22713ab9041dc0e2e8a2cb364906530b7dc1eb15ee8137c465f61f882e6363f6def545234751962c84ffd9a6ce405eca5e74717091436d3709417e7d9a9ec67649b41687ef5e1ef5f8db0f1c50a17d3feb603acf155971d6c2b0cffd1e0bed0191662f622d43966f7694cbaaef82221ccbde7af946a970559e37032ca24161000000000000", 0xd7}], 0x1, 0x800004, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="c4610a8b69dfe2dcad7bf4e8c80a2e00fd35d58d73579fe113a3e5c87b3f067f9fcb5639750f9e6a5ae61387e3da20a0c12746b2edb33da1dcd3b54a57013f2068e414124c5b443115a8afb19c5af11f4e8d130e8551c828b7bd18902fff3f82fd958af010f77070da7b2ca71ea0e02a7fe0b47354034ec042bdf9f593234dfe1b09d315549fbdb752b5d833900a3b8d2e6a12547d6cb804b64df4f457fa3db8", 0xa0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0)
pwritev2(r1, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x2, 0x1, 0x10)
sendfile(r0, r0, 0x0, 0x24002de8)

2.640347594s ago: executing program 1 (id=1559):
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x48004}, 0x44)
r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES8=r3, @ANYBLOB="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"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'})
r5 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$pppoe(0x18, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24)
connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000002c0)=""/132, &(0x7f00000000c0)=0x84)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000c00018008000600ffff00000800028004007210000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

2.399181984s ago: executing program 5 (id=1560):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, [@generic={0x81, 0x1, 0x1, 0x6d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x1a})
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0)
openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0)
mkdirat$cgroup(r6, &(0x7f0000000000)='syz1\x00', 0x1ff)
r7 = getpid()
sched_setattr(r7, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000fffffee00"/20, @ANYRES64=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x200)

1.980339882s ago: executing program 4 (id=1561):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="201107"], 0x0, 0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000900", "90be8b1c551265406c7f306003d8a0f4bd00"}})

1.088344091s ago: executing program 2 (id=1562):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

960.619738ms ago: executing program 2 (id=1563):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000080)=0x400, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
lseek(r2, 0x4, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e00000028000380040001"], 0xb4}}, 0x0)
getdents(r2, 0x0, 0x48)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000000)=[{0x9, 0x4011, 0xad, &(0x7f00000000c0)="cc0d25c40be26a9bbb8ee56ef43c2e1c112184ca96220340c24a72e3037cd3db23544b7d073aa3de832093946fed643fc459392844b1b59c5e455dc7acf8f4f8b61112e1658cc8b694bf1bb99a621cebd6fc65348e23288566cf286812c1d094eed3815fa4997cca748266af90d64022c5130ff541bd9c139bb15c481ad0ec023e045462b0f9708ff1d2239d4fa825380e526e8657b02326ebd12b65e83cf7c1c4de00c1dc94834c1143dbe212"}, {0xe8e, 0x200, 0x71, &(0x7f0000000180)="1254cbdc13d212e757fa7e101494ee5e8e4edbbd82353fbc89ba1453d8208d96db44acef786488facd8e8e0fb0c8f868cfad9c96af8567103182623615c3fdb3eb9b92025a8c5dd5d3ff342659709df17f8ba822ece244c80b19beb1b32308f8feb84f0708e41906c1a25f6a61f872b551"}], 0x2})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x19}})

715.680768ms ago: executing program 2 (id=1564):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x20008045)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r8=>0x0})
r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040))
r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r11 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0884113, &(0x7f0000000240)={0x1, 0x3, 0x204, 0x7, 0xffffffffffffffff, 0x200000000000008, 0x8, 0x200, 0x7, 0x2c, 0x80000006, 0x2})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050001000000fddbdf2509490000000000008901c23f1a615b66a9a49aba5185c1055c5763e5e866b1b8169c79804e256c703d75eabe98c07b8d9b52cce98bc996f37de98fb1d438dcbda04f2bdf46b33d9af57d90772e030f5e108de21820dc82dcc449623f6428281645f0fff174a52bb7800e8e71fe22be03997d645f6946f42b6cfa2dc3420f5344ef5d9af0ae35962b36af826f0c2a0f99", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="6b880f30dddfc2787186d70190eb5c91d6e377afe525c78fea6b1ce485e562c764083c1141ab3704ef6fda5f51afbbfe35e32733e66e37d7a03975d513bba4b521618d2637349c0508f7d8ea24bbc2326e8625f438b60054b993e01491387b18dbe828ca02f5985010291800de900d7f29df7c215a78"], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109021b00010200100309041f0201e917f300090582020002000086"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, &(0x7f0000000240)})

0s ago: executing program 4 (id=1565):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4)

kernel console output (not intermixed with test programs):

different from the interface descriptor's value: 100
[  450.045247][   T10] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  450.063152][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.071311][ T1780] usb 5-1: config 168 interface 0 has no altsetting 0
[  450.081520][   T10] usb 2-1: Product: syz
[  450.091629][   T10] usb 2-1: Manufacturer: syz
[  450.098163][ T1780] usb 5-1: string descriptor 0 read error: -22
[  450.113183][   T10] usb 2-1: SerialNumber: syz
[  450.118044][ T1780] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  450.137441][   T10] usb 2-1: config 0 descriptor??
[  450.162624][ T1780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.174768][    T9] usb 3-1: device descriptor read/64, error -71
[  450.252156][ T1780] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  450.284499][    T9] usb usb3-port1: attempt power cycle
[  450.367229][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.377509][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.390892][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.399979][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.593292][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  450.613498][ T5954] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  450.629451][ T5946] usb 5-1: USB disconnect, device number 81
[  450.674246][    T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  450.702581][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[  450.874295][    T9] usb 3-1: device descriptor read/8, error -71
[  451.004039][   T10] usb 2-1: USB disconnect, device number 77
[  451.113476][    T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  451.178555][ T7678] udevd[7678]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  451.234731][    T9] usb 3-1: device descriptor read/8, error -71
[  451.343739][    T9] usb usb3-port1: unable to enumerate USB device
[  451.561679][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'.
[  452.014551][T10668] syz.4.1163: vmalloc error: size 33583104, failed to allocated page array size 65592, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  452.065209][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.4.1163 Not tainted syzkaller #0 PREEMPT(full) 
[  452.065239][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  452.065249][T10668] Call Trace:
[  452.065257][T10668]  <TASK>
[  452.065265][T10668]  dump_stack_lvl+0x189/0x250
[  452.065297][T10668]  ? __pfx_dump_stack_lvl+0x10/0x10
[  452.065320][T10668]  ? __pfx__printk+0x10/0x10
[  452.065345][T10668]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  452.065369][T10668]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  452.065393][T10668]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  452.065428][T10668]  warn_alloc+0x214/0x310
[  452.065464][T10668]  ? __pfx_warn_alloc+0x10/0x10
[  452.065503][T10668]  ? __get_vm_area_node+0x28f/0x300
[  452.065529][T10668]  ? drm_property_create_blob+0x65/0x300
[  452.065555][T10668]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  452.065579][T10668]  ? __kasan_slab_free+0x5b/0x80
[  452.065635][T10668]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  452.065669][T10668]  ? rcu_is_watching+0x15/0xb0
[  452.065689][T10668]  ? drm_property_create_blob+0x65/0x300
[  452.065710][T10668]  ? drm_property_create_blob+0x65/0x300
[  452.065730][T10668]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  452.065756][T10668]  ? drm_property_create_blob+0x65/0x300
[  452.065776][T10668]  ? drm_dev_enter+0x49/0x150
[  452.065792][T10668]  ? shmem_add_to_page_cache+0xbb/0xba0
[  452.065816][T10668]  drm_property_create_blob+0x65/0x300
[  452.065844][T10668]  drm_mode_createblob_ioctl+0xbf/0x400
[  452.065872][T10668]  drm_ioctl_kernel+0x2cf/0x390
[  452.065897][T10668]  ? __pfx_drm_mode_createblob_ioctl+0x10/0x10
[  452.065920][T10668]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  452.065957][T10668]  drm_ioctl+0x67f/0xb10
[  452.065988][T10668]  ? __pfx_drm_mode_createblob_ioctl+0x10/0x10
[  452.066017][T10668]  ? __pfx_drm_ioctl+0x10/0x10
[  452.066058][T10668]  ? __fget_files+0x2a/0x420
[  452.066079][T10668]  ? bpf_lsm_file_ioctl+0x9/0x20
[  452.066103][T10668]  ? __pfx_drm_ioctl+0x10/0x10
[  452.066128][T10668]  __se_sys_ioctl+0xf9/0x170
[  452.066154][T10668]  do_syscall_64+0xfa/0x3b0
[  452.066170][T10668]  ? lockdep_hardirqs_on+0x9c/0x150
[  452.066197][T10668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.066215][T10668]  ? clear_bhb_loop+0x60/0xb0
[  452.066239][T10668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.066257][T10668] RIP: 0033:0x7f7fe638ebe9
[  452.066276][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.066292][T10668] RSP: 002b:00007f7fe7298038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  452.066313][T10668] RAX: ffffffffffffffda RBX: 00007f7fe65c5fa0 RCX: 00007f7fe638ebe9
[  452.066327][T10668] RDX: 0000200000000040 RSI: 00000000c01064bd RDI: 0000000000000004
[  452.066340][T10668] RBP: 00007f7fe6411e19 R08: 0000000000000000 R09: 0000000000000000
[  452.066352][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.066362][T10668] R13: 00007f7fe65c6038 R14: 00007f7fe65c5fa0 R15: 00007f7fe66efa28
[  452.066393][T10668]  </TASK>
[  452.066401][T10668] Mem-Info:
[  452.375576][T10668] active_anon:7258 inactive_anon:0 isolated_anon:0
[  452.375576][T10668]  active_file:18750 inactive_file:40139 isolated_file:0
[  452.375576][T10668]  unevictable:768 dirty:222 writeback:13
[  452.375576][T10668]  slab_reclaimable:11526 slab_unreclaimable:117756
[  452.375576][T10668]  mapped:38463 shmem:1360 pagetables:1491
[  452.375576][T10668]  sec_pagetables:0 bounce:0
[  452.375576][T10668]  kernel_misc_reclaimable:0
[  452.375576][T10668]  free:1265989 free_pcp:17282 free_cma:0
[  452.421916][T10668] Node 0 active_anon:29032kB inactive_anon:0kB active_file:74868kB inactive_file:160144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152848kB dirty:1120kB writeback:52kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13956kB pagetables:5820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.455257][T10668] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.486483][T10668] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  452.516254][T10668] lowmem_reserve[]: 0 2497 2499 2499 2499
[  452.522069][T10668] Node 0 DMA32 free:1177988kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29080kB inactive_anon:0kB active_file:74460kB inactive_file:158492kB unevictable:1536kB writepending:1120kB present:3129332kB managed:2557440kB mlocked:0kB bounce:0kB free_pcp:36380kB local_pcp:21268kB free_cma:0kB
[  452.555128][T10668] lowmem_reserve[]: 0 0 1 1 1
[  452.559898][T10668] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1552kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  452.589543][T10668] lowmem_reserve[]: 0 0 0 0 0
[  452.594349][T10668] Node 1 Normal free:3870284kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:33996kB local_pcp:21188kB free_cma:0kB
[  452.639689][T10668] lowmem_reserve[]: 0 0 0 0 0
[  452.644699][T10668] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  452.657446][T10668] Node 0 DMA32: 177*4kB (UE) 173*8kB (UME) 382*16kB (UM) 295*32kB (UM) 184*64kB (UME) 151*128kB (UM) 37*256kB (UM) 26*512kB (UME) 29*1024kB (UM) 9*2048kB (UME) 258*4096kB (M) = 1176428kB
[  452.676498][T10668] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  452.689052][T10668] Node 1 Normal: 5*4kB (UM) 13*8kB (UME) 33*16kB (UME) 126*32kB (UME) 44*64kB (UME) 8*128kB (UE) 5*256kB (ME) 6*512kB (ME) 1*1024kB (E) 1*2048kB (M) 941*4096kB (UM) = 3870284kB
[  452.706964][T10668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  452.717118][T10668] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  452.726684][T10668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  452.741579][T10668] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  452.753175][T10668] 60569 total pagecache pages
[  452.757892][T10668] 0 pages in swap cache
[  452.762068][T10668] Free swap  = 124996kB
[  452.766327][T10668] Total swap = 124996kB
[  452.781127][T10668] 2097051 pages RAM
[  452.801525][T10668] 0 pages HighMem/MovableOnly
[  453.459019][T10668] 425665 pages reserved
[  453.530086][T10668] 0 pages cma reserved
[  454.044796][T10691] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  454.167383][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'.
[  454.253287][   T43] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  454.310495][T10711] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0
[  454.614535][   T43] usb 2-1: Using ep0 maxpacket: 32
[  455.063316][   T10] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  455.335550][   T10] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  455.351594][   T10] usb 1-1: config 0 has no interface number 0
[  455.384708][   T10] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  455.396288][   T10] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  455.448474][   T43] usb 2-1: config 4 has an invalid interface number: 167 but max is 3
[  455.458022][   T43] usb 2-1: config 4 has an invalid interface number: 125 but max is 3
[  455.468456][   T43] usb 2-1: config 4 has an invalid interface number: 216 but max is 3
[  455.490208][   T10] usb 1-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03
[  455.508801][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.528057][   T10] usb 1-1: Product: syz
[  455.536434][   T10] usb 1-1: Manufacturer: syz
[  455.549408][   T10] usb 1-1: SerialNumber: syz
[  455.570198][   T10] usb 1-1: config 0 descriptor??
[  455.583847][T10725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  455.651232][   T43] usb 2-1: config 4 has an invalid interface number: 201 but max is 3
[  455.673398][   T43] usb 2-1: config 4 has an invalid interface number: 43 but max is 3
[  455.681535][   T43] usb 2-1: config 4 has 5 interfaces, different from the descriptor's value: 4
[  455.742483][   T43] usb 2-1: config 4 has no interface number 0
[  455.769209][   T43] usb 2-1: config 4 has no interface number 1
[  455.801350][   T43] usb 2-1: config 4 has no interface number 2
[  455.822037][   T43] usb 2-1: config 4 has no interface number 3
[  455.850309][   T43] usb 2-1: config 4 has no interface number 4
[  455.872053][   T43] usb 2-1: config 4 interface 167 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64
[  455.895955][   T43] usb 2-1: config 4 interface 167 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  455.948879][   T43] usb 2-1: config 4 interface 167 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  455.978119][   T43] usb 2-1: config 4 interface 167 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  456.051726][   T43] usb 2-1: config 4 interface 167 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  456.078030][   T43] usb 2-1: config 4 interface 125 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  456.111803][   T43] usb 2-1: config 4 interface 125 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0
[  456.167391][   T43] usb 2-1: config 4 interface 125 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  456.209102][   T43] usb 2-1: too many endpoints for config 4 interface 216 altsetting 95: 170, using maximum allowed: 30
[  456.274927][   T43] usb 2-1: config 4 interface 216 altsetting 95 has an invalid descriptor for endpoint zero, skipping
[  456.321711][   T43] usb 2-1: config 4 interface 216 altsetting 95 endpoint 0x6 has an invalid bInterval 217, changing to 11
[  456.356311][   T43] usb 2-1: config 4 interface 216 altsetting 95 has 2 endpoint descriptors, different from the interface descriptor's value: 170
[  456.462090][   T43] usb 2-1: config 4 interface 201 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 16
[  456.504908][   T43] usb 2-1: config 4 interface 201 altsetting 1 has a duplicate endpoint with address 0xD, skipping
[  456.541698][   T43] usb 2-1: config 4 interface 201 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  456.592559][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  456.637645][T10737] loop6: detected capacity change from 0 to 7
[  456.642588][   T43] usb 2-1: config 4 interface 43 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  456.675279][T10737] Dev loop6: unable to read RDB block 7
[  456.678816][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  456.697783][T10737]  loop6: AHDI p3 p4
[  456.707634][   T43] usb 2-1: config 4 interface 43 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  456.716751][T10737] loop6: partition table partially beyond EOD, truncated
[  456.752258][T10737] loop6: p3 start 1886353253 is beyond EOD, truncated
[  456.786050][T10743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1179'.
[  456.864176][T10742] loop6: detected capacity change from 0 to 7
[  456.875105][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  456.900053][ T5863] Dev loop6: unable to read RDB block 7
[  456.912249][ T5863]  loop6: unable to read partition table
[  456.924848][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  456.943566][ T5863] loop6: partition table beyond EOD, truncated
[  456.956177][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  456.988188][T10742] Dev loop6: unable to read RDB block 7
[  456.994333][T10742]  loop6: unable to read partition table
[  457.001513][T10742] loop6: partition table beyond EOD, truncated
[  457.051983][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  457.087071][T10742] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  457.153609][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  457.234961][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  457.344515][   T43] usb 2-1: config 4 interface 43 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  457.433457][   T43] usb 2-1: config 4 interface 167 has no altsetting 0
[  457.561886][   T43] usb 2-1: config 4 interface 125 has no altsetting 0
[  457.630088][   T43] usb 2-1: config 4 interface 216 has no altsetting 0
[  457.674826][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  457.728140][   T43] usb 2-1: config 4 interface 201 has no altsetting 0
[  457.741102][   T10] usb 1-1: MIDIStreaming interface descriptor not found
[  457.826354][   T43] usb 2-1: string descriptor 0 read error: -71
[  457.873538][   T43] usb 2-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=b0.df
[  457.916791][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.955663][   T10] usb 1-1: USB disconnect, device number 75
[  458.106616][   T43] usb 2-1: can't set config #4, error -71
[  458.151935][   T43] usb 2-1: USB disconnect, device number 78
[  458.202489][T10758] misc userio: Invalid payload size
[  458.403401][ T6883] psmouse serio3: Failed to reset mouse on : -5
[  459.548792][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'.
[  459.815391][ T5954] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  459.841799][T10786] loop6: detected capacity change from 0 to 7
[  459.862206][T10786] Dev loop6: unable to read RDB block 7
[  459.881596][T10786]  loop6: AHDI p3 p4
[  460.025885][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.050322][ T5954] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  460.069095][ T5954] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  460.100799][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.143856][ T5954] usb 6-1: config 0 descriptor??
[  460.222710][T10786] loop6: partition table partially beyond EOD, truncated
[  460.259345][T10786] loop6: p3 start 1886353253 is beyond EOD, truncated
[  460.453871][   T10] usb 6-1: USB disconnect, device number 5
[  460.989291][T10797] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  461.173320][ T5954] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  461.318052][ T5954] usb 5-1: device descriptor read/64, error -71
[  461.363328][ T6892] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  461.586037][ T6892] usb 2-1: Using ep0 maxpacket: 16
[  461.594239][ T5954] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  461.610913][ T6892] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.626675][ T6892] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  461.642738][ T6892] usb 2-1: config 0 interface 0 has no altsetting 0
[  461.649470][ T6892] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  461.661161][ T6892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.678664][ T6892] usb 2-1: config 0 descriptor??
[  461.733343][ T5954] usb 5-1: device descriptor read/64, error -71
[  461.847704][ T5954] usb usb5-port1: attempt power cycle
[  462.293278][ T5954] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  462.314404][ T5954] usb 5-1: device descriptor read/8, error -71
[  462.443757][ T6883] misc userio: Buffer overflowed, userio client isn't keeping up
[  462.553297][ T5954] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  462.586024][ T5954] usb 5-1: device descriptor read/8, error -71
[  462.720882][T10817] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1200'.
[  462.750058][ T5954] usb usb5-port1: unable to enumerate USB device
[  463.516486][ T6883] input: PS/2 Generic Mouse as /devices/serio3/input/input43
[  463.823385][ T6883] psmouse serio3: Failed to enable mouse on 
[  464.029763][T10818] sch_tbf: peakrate 12 is lower than or equals to rate 8510595847871051103 !
[  464.089620][ T6892] usbhid 2-1:0.0: can't add hid device: -71
[  464.095979][ T6892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  464.112136][ T6892] usb 2-1: USB disconnect, device number 79
[  465.322772][T10829] kvm: pic: non byte write
[  465.695569][T10833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.720953][T10833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.777407][T10836] loop6: detected capacity change from 0 to 7
[  465.795334][T10836] Dev loop6: unable to read RDB block 7
[  465.830302][T10836]  loop6: unable to read partition table
[  465.966495][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'.
[  466.323594][T10836] loop6: partition table beyond EOD, truncated
[  466.340005][T10836] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  466.375027][T10845] usb usb8: usbfs: process 10845 (syz.2.1207) did not claim interface 0 before use
[  466.379774][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  467.603342][ T6892] usb 3-1: new full-speed USB device number 85 using dummy_hcd
[  467.775460][ T6892] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  467.803491][ T6892] usb 3-1: config 0 interface 0 has no altsetting 0
[  467.810149][ T6892] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  467.825078][ T6892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.836452][ T6892] usb 3-1: config 0 descriptor??
[  467.904950][T10853] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  468.274441][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  468.283779][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  468.440252][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.573883][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.634749][ T6892] konepure 0003:1E7D:2DBE.0019: item fetching failed at offset 0/2
[  468.669040][ T6892] konepure 0003:1E7D:2DBE.0019: parse failed
[  468.675779][ T6892] konepure 0003:1E7D:2DBE.0019: probe with driver konepure failed with error -22
[  468.697880][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1216'.
[  468.837810][   T10] usb 3-1: USB disconnect, device number 85
[  469.154190][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.191696][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.385073][   T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  469.553286][   T10] usb 5-1: Using ep0 maxpacket: 8
[  469.594471][   T10] usb 5-1: no configurations
[  469.636979][   T10] usb 5-1: can't read configurations, error -22
[  469.723233][ T6892] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  469.794726][   T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  469.805718][ T5276] hid_parser_main: 50 callbacks suppressed
[  469.805754][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.822959][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.831676][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.839392][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.849029][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.856844][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.867432][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.875572][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.883251][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.890878][ T5276] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0
[  469.902826][ T5276] hid-generic 00A0:0006:0003.001A: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  469.936292][ T6892] usb 3-1: Using ep0 maxpacket: 32
[  469.958843][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  469.973204][ T6892] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  469.983224][   T10] usb 5-1: Using ep0 maxpacket: 8
[  469.994432][ T6892] usb 3-1: config 0 has no interface number 0
[  470.000610][ T6892] usb 3-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  470.003245][   T10] usb 5-1: no configurations
[  470.019198][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'.
[  470.049449][ T6892] usb 3-1: config 0 interface 188 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  470.061792][ T6892] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 129, changing to 11
[  470.063675][ T1780] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  470.084204][   T10] usb 5-1: can't read configurations, error -22
[  470.126414][   T10] usb usb5-port1: attempt power cycle
[  470.130575][ T6892] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 10062, setting to 1024
[  470.205513][    T9] usb 6-1: Using ep0 maxpacket: 32
[  470.237313][ T6892] usb 3-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  470.263305][    T9] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  470.271450][    T9] usb 6-1: config 0 has no interface number 0
[  470.273810][ T6892] usb 3-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b
[  470.294777][ T6892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.313827][ T6892] usb 3-1: Product: syz
[  470.318642][ T6892] usb 3-1: Manufacturer: syz
[  470.335482][ T6892] usb 3-1: SerialNumber: syz
[  470.380511][ T1780] usb 2-1: config 0 has no interfaces?
[  470.392577][ T6892] usb 3-1: config 0 descriptor??
[  470.396059][    T9] usb 6-1: config 0 interface 89 has no altsetting 0
[  470.407647][ T1780] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  470.412098][T10899] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  470.420829][ T1780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.436056][ T6892] option 3-1:0.188: GSM modem (1-port) converter detected
[  470.445466][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  470.476525][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.491317][ T1780] usb 2-1: config 0 descriptor??
[  470.496518][   T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  470.508440][    T9] usb 6-1: Product: syz
[  470.518579][    T9] usb 6-1: Manufacturer: syz
[  470.523671][    T9] usb 6-1: SerialNumber: syz
[  470.544360][   T10] usb 5-1: Using ep0 maxpacket: 8
[  470.550779][   T10] usb 5-1: no configurations
[  470.555889][   T10] usb 5-1: can't read configurations, error -22
[  470.675439][    T9] usb 6-1: config 0 descriptor??
[  470.691162][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.698965][    T9] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  470.707616][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.709476][   T10] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  470.735246][    T9] em28xx 6-1:0.89: Video interface 89 found: bulk
[  470.754568][   T10] usb 5-1: Using ep0 maxpacket: 8
[  470.760513][   T10] usb 5-1: no configurations
[  470.765489][   T10] usb 5-1: can't read configurations, error -22
[  470.773472][   T10] usb usb5-port1: unable to enumerate USB device
[  470.796185][   T10] usb 3-1: USB disconnect, device number 86
[  470.810271][   T10] option 3-1:0.188: device disconnected
[  470.993283][ T5867] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  471.123534][ T5867] usb 1-1: device descriptor read/64, error -71
[  471.341455][    T9] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  471.363219][ T5867] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[  471.503216][ T5867] usb 1-1: device descriptor read/64, error -71
[  471.617053][ T5867] usb usb1-port1: attempt power cycle
[  471.914174][ T6892] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  472.046507][    T9] em28xx 6-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  472.058671][ T5867] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  472.082083][    T9] em28xx 6-1:0.89: board has no eeprom
[  472.098475][ T5867] usb 1-1: device descriptor read/8, error -71
[  472.119002][ T6892] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  472.151594][ T6892] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  472.236435][ T6892] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  472.247330][ T6892] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  472.314960][ T6892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.343284][ T5867] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  472.349036][ T6892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  472.363254][    T9] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  472.370514][    T9] em28xx 6-1:0.89: analog set to bulk mode.
[  472.473535][ T1780] em28xx 6-1:0.89: Registering V4L2 extension
[  472.494844][ T5867] usb 1-1: device descriptor read/8, error -71
[  472.526134][    T9] usb 6-1: USB disconnect, device number 6
[  472.539271][ T1780] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-19)
[  472.555896][    T9] em28xx 6-1:0.89: Disconnecting em28xx
[  472.561721][ T1780] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  472.569528][ T1780] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  472.576776][ T1780] em28xx 6-1:0.89: No AC97 audio processor
[  472.615605][ T5867] usb usb1-port1: unable to enumerate USB device
[  472.638351][ T1780] usb 6-1: Decoder not found
[  472.651776][ T1780] em28xx 6-1:0.89: failed to create media graph
[  472.659764][ T1780] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  472.709071][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  472.757591][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.768765][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.780635][ T6892] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[  472.784223][ T1780] em28xx 6-1:0.89: Registering snapshot button...
[  473.034844][ T1780] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input45
[  473.083958][T10928] tipc: Started in network mode
[  473.097981][T10928] tipc: Node identity 12f92cc5a05c, cluster identity 4711
[  473.129973][T10928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.132979][ T1780] em28xx 6-1:0.89: Remote control support is not available for this card.
[  473.154639][    T9] em28xx 6-1:0.89: Closing input extension
[  473.170227][    T9] em28xx 6-1:0.89: Deregistering snapshot button
[  473.171557][T10929] syzkaller0: entered promiscuous mode
[  473.183337][T10929] syzkaller0: entered allmulticast mode
[  473.251980][T10928] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  473.454934][    T9] em28xx 6-1:0.89: Freeing device
[  473.508425][ T6892] usb 2-1: USB disconnect, device number 80
[  473.699559][T10941] netlink: 'syz.0.1233': attribute type 1 has an invalid length.
[  473.759200][T10930] tipc: Resetting bearer <eth:syzkaller0>
[  473.966618][ T5954] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  474.005917][T10927] tipc: Resetting bearer <eth:syzkaller0>
[  474.112084][T10927] tipc: Disabling bearer <eth:syzkaller0>
[  474.163450][ T5954] usb 5-1: Using ep0 maxpacket: 32
[  474.170068][    T9] tipc: Node number set to 2997169349
[  474.171921][ T5954] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  474.193212][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.213075][ T5954] usb 5-1: config 0 descriptor??
[  474.231000][ T5954] as10x_usb: device has been detected
[  474.244209][ T5954] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  474.296398][ T5954] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  474.319750][ T5954] as10x_usb: error during firmware upload part1
[  474.335404][ T5954] Registered device nBox DVB-T Dongle
[  474.362567][T10945] bond3: (slave bridge4): making interface the new active one
[  474.385299][T10945] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  474.463458][ T6883] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  474.630266][    T9] usb 3-1: USB disconnect, device number 87
[  474.647005][ T6883] usb 2-1: Using ep0 maxpacket: 16
[  474.681146][ T6883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  474.762718][ T6883] usb 2-1: config 0 has no interface number 0
[  474.776615][ T6883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.798270][ T6883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.798878][T10955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1239'.
[  474.810686][ T6883] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  474.840099][T10960] input: syz1 as /devices/virtual/input/input46
[  474.971889][ T6883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.992710][ T6883] usb 2-1: config 0 descriptor??
[  475.073560][ T5954] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  475.103226][    T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  475.226512][ T6883] usbhid 2-1:0.1: can't add hid device: -71
[  475.240391][T10963] pim6reg: entered allmulticast mode
[  475.246003][ T6883] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  475.255591][ T5954] usb 6-1: Using ep0 maxpacket: 16
[  475.266085][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  475.273268][    T9] usb 3-1: Using ep0 maxpacket: 8
[  475.290991][    T9] usb 3-1: config 0 has an invalid interface number: 240 but max is 0
[  475.298088][ T6883] usb 2-1: USB disconnect, device number 81
[  475.299948][    T9] usb 3-1: config 0 has no interface number 0
[  475.336642][ T1780] usb 5-1: USB disconnect, device number 90
[  475.341157][ T5954] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  475.360762][ T5954] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  475.362407][    T9] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a50, bcdDevice=9f.13
[  475.388779][ T5954] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  475.398280][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.409049][ T5954] usb 6-1: Product: syz
[  475.413522][ T5954] usb 6-1: Manufacturer: syz
[  475.418116][ T5954] usb 6-1: SerialNumber: syz
[  475.431778][ T5954] usb 6-1: config 0 descriptor??
[  475.440862][T10959] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  475.470724][ T5954] mcba_usb 6-1:0.0 can0: failed tx_urb -90
[  475.477845][ T5954] mcba_usb 6-1:0.0 can0: Failed to send cmd (169)
[  475.486803][ T5954] mcba_usb 6-1:0.0 can0: failed tx_urb -90
[  475.492640][ T5954] mcba_usb 6-1:0.0 can0: Failed to send cmd (169)
[  475.513423][ T5954] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected
[  475.550497][ T1780] Unregistered device nBox DVB-T Dongle
[  475.561140][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.578952][ T1780] as10x_usb: device has been disconnected
[  475.633673][   T10] usb 1-1: new low-speed USB device number 80 using dummy_hcd
[  475.677246][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1237'.
[  475.689149][    T9] usb 3-1: config 0 descriptor??
[  475.783860][   T10] usb 1-1: device descriptor read/64, error -71
[  475.831471][ T6883] usb 2-1: new low-speed USB device number 82 using dummy_hcd
[  475.941198][ T1780] usb 3-1: USB disconnect, device number 88
[  475.984681][ T6883] usb 2-1: Invalid ep0 maxpacket: 16
[  476.024128][   T10] usb 1-1: new low-speed USB device number 81 using dummy_hcd
[  476.139922][ T6883] usb 2-1: new low-speed USB device number 83 using dummy_hcd
[  476.323763][ T6883] usb 2-1: Invalid ep0 maxpacket: 16
[  476.329523][ T6883] usb usb2-port1: attempt power cycle
[  476.403231][   T10] usb 1-1: device descriptor read/64, error -71
[  476.713449][ T6883] usb 2-1: new low-speed USB device number 84 using dummy_hcd
[  476.734251][ T6883] usb 2-1: Invalid ep0 maxpacket: 16
[  476.760429][   T10] usb usb1-port1: attempt power cycle
[  476.943352][ T6883] usb 2-1: new low-speed USB device number 85 using dummy_hcd
[  477.122187][ T6883] usb 2-1: Invalid ep0 maxpacket: 16
[  477.130483][ T6883] usb usb2-port1: unable to enumerate USB device
[  477.213442][   T10] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[  477.237032][   T10] usb 1-1: device descriptor read/8, error -71
[  477.438473][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1246'.
[  477.763325][ T1780] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  477.771207][   T10] usb 1-1: new low-speed USB device number 83 using dummy_hcd
[  477.817885][   T10] usb 1-1: device descriptor read/8, error -71
[  477.896795][ T5529] mcba_usb 6-1:0.0 can0: bit-timing not yet defined
[  477.950144][ T1780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.984307][   T10] usb usb1-port1: unable to enumerate USB device
[  478.006645][ T1780] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  478.026890][ T1780] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  478.037894][ T1780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  478.062786][ T1780] usb 3-1: SerialNumber: syz
[  478.291530][ T5954] usb 6-1: USB disconnect, device number 7
[  478.307972][ T1780] usb 3-1: 0:2 : does not exist
[  478.310539][ T5954] mcba_usb 6-1:0.0 can0: device disconnected
[  478.330312][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.402645][ T1780] usb 3-1: USB disconnect, device number 89
[  478.452329][T11006] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1250'.
[  478.462937][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.677891][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.733559][   T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  478.902248][T11017] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1253'.
[  478.911865][T11017] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1253'.
[  478.959532][   T10] usb 1-1: Using ep0 maxpacket: 32
[  478.975311][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  479.008757][   T10] usb 1-1: config 0 has no interface number 0
[  479.010360][ T6883] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  479.063351][ T5954] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  479.065811][   T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  479.137264][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.153679][   T10] usb 1-1: Product: syz
[  479.166538][   T10] usb 1-1: Manufacturer: syz
[  479.173272][ T6883] usb 5-1: Using ep0 maxpacket: 8
[  479.178491][   T10] usb 1-1: SerialNumber: syz
[  479.202779][   T10] usb 1-1: config 0 descriptor??
[  479.229136][ T6883] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  479.230297][   T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  479.243277][ T5954] usb 6-1: Using ep0 maxpacket: 32
[  479.272004][   T10] usb 1-1: selecting invalid altsetting 1
[  479.283368][   T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  479.322018][ T6883] usb 5-1: config 0 has no interface number 0
[  479.339505][ T6883] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  479.355078][   T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  479.363367][ T5954] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[  479.383204][ T6883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.403613][   T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  479.418595][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  479.422362][   T10] usb 1-1: media controller created
[  479.426938][ T6883] usb 5-1: Product: syz
[  479.426959][ T6883] usb 5-1: Manufacturer: syz
[  479.426974][ T6883] usb 5-1: SerialNumber: syz
[  479.434138][ T6883] usb 5-1: config 0 descriptor??
[  479.445186][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.461545][ T5954] usb 6-1: Product: syz
[  479.465937][ T5954] usb 6-1: Manufacturer: syz
[  479.476321][ T5954] usb 6-1: SerialNumber: syz
[  479.491647][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.528543][ T5954] usb 6-1: config 0 descriptor??
[  479.543487][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  479.544832][ T5954] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[  479.576789][ T5954] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  479.704509][ T6883] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  479.711018][ T6883] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[  479.765969][ T6883] usb 5-1: Failed to create links for entity 5
[  479.819363][ T6883] usb 5-1: Failed to register entities (-22).
[  479.891198][ T6883] usb 5-1: USB disconnect, device number 91
[  480.123357][T11032] could not allocate digest TFM handle poly1305-neon
[  480.671498][ T5867] usb 1-1: USB disconnect, device number 84
[  480.974556][T11051] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  480.982597][ T5867] IPVS: starting estimator thread 0...
[  481.103250][T11062] IPVS: using max 49 ests per chain, 117600 per kthread
[  481.677411][ T5954] usb 6-1: USB disconnect, device number 8
[  482.033225][ T5867] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  482.343418][ T5867] usb 1-1: Using ep0 maxpacket: 16
[  482.411258][ T5867] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  482.450011][ T5867] usb 1-1: config 0 has no interface number 0
[  482.498291][ T5867] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  482.614313][ T6892] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  482.671647][ T5867] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  482.700527][ T5867] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  482.722881][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  482.850805][ T6892] usb 5-1: Using ep0 maxpacket: 16
[  482.891972][ T5867] usb 1-1: Product: syz
[  482.907559][ T5867] usb 1-1: SerialNumber: syz
[  482.932268][ T5867] usb 1-1: config 0 descriptor??
[  482.962313][ T5867] cm109 1-1:0.8: invalid payload size 0, expected 4
[  483.079855][ T6892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.103614][ T6892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  483.145157][ T6892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  483.194666][ T5867] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input47
[  483.199297][ T6892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  483.259675][ T6892] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  483.322999][ T6892] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  483.348779][ T6892] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  483.420674][ T6892] usb 5-1: Manufacturer: syz
[  483.514780][ T6892] usb 5-1: config 0 descriptor??
[  484.163502][ T6892] rc_core: IR keymap rc-hauppauge not found
[  484.236528][ T6892] Registered IR keymap rc-empty
[  484.269052][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  484.399134][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  484.684586][ T6892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  484.857418][T11111] usb 1-1: USB disconnect, device number 85
[  484.863481][   T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  485.000533][ T6892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input48
[  485.053338][   T10] usb 2-1: Using ep0 maxpacket: 32
[  485.073450][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  485.119933][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.132401][   T10] usb 2-1: config 0 descriptor??
[  485.147683][    C0] cm109_urb_ctl_callback: 71 callbacks suppressed
[  485.147711][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  485.161130][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  485.197295][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  485.281051][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1273'.
[  485.282163][T11111] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  485.376368][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.416747][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.453490][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.473279][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.533726][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.570091][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.693459][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.713391][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.753458][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.903373][ T6892] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  485.903616][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.944141][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.987301][ T6892] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  486.020185][ T6892] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  486.090880][ T6892] usb 5-1: USB disconnect, device number 92
[  486.534001][ T5954] usb 2-1: USB disconnect, device number 86
[  487.212420][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'.
[  487.222201][T11147] ptrace attach of "./syz-executor exec"[5885] was attempted by "./syz-executor exec"[11147]
[  487.251169][T11157] ptrace attach of "./syz-executor exec"[5885] was attempted by "./syz-executor exec"[11157]
[  487.265615][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'.
[  487.853440][   T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  488.026303][   T10] usb 3-1: Using ep0 maxpacket: 8
[  488.040048][   T10] usb 3-1: config index 0 descriptor too short (expected 30768, got 18)
[  488.069763][   T10] usb 3-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  488.121424][   T10] usb 3-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  488.271520][   T10] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  488.293204][   T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  488.313041][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.518856][T11182] netlink: 'syz.1.1290': attribute type 5 has an invalid length.
[  488.550592][T11165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.568209][T11165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.584224][T11165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.597655][T11165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.756377][   T10] usb 3-1: string descriptor 0 read error: -71
[  488.778225][   T10] usb 3-1: USB disconnect, device number 90
[  489.923545][   T30] audit: type=1326 audit(1757005703.033:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.5.1295" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddaef8ebe9 code=0x0
[  490.112389][T11207] syz.1.1296 (11207): /proc/11201/oom_adj is deprecated, please use /proc/11201/oom_score_adj instead.
[  490.378539][T11211] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma?
[  490.752246][ T1780] usb 4-1: USB disconnect, device number 63
[  491.913827][ T5954] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  491.993735][T11237] vim2m vim2m.0: vidioc_s_fmt queue busy
[  492.213542][ T5954] usb 3-1: Using ep0 maxpacket: 32
[  492.267722][ T5954] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  492.289442][ T5954] usb 3-1: config 0 has no interface number 0
[  492.302076][ T5954] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  492.337886][T11230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  492.377349][ T5954] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  492.386605][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.431923][ T5954] usb 3-1: Product: syz
[  492.431921][T11227] pim6reg1: entered promiscuous mode
[  492.431950][ T5954] usb 3-1: Manufacturer: syz
[  492.436716][T11227] pim6reg1: entered allmulticast mode
[  492.616926][ T5954] usb 3-1: SerialNumber: syz
[  492.727879][ T5954] usb 3-1: config 0 descriptor??
[  492.768665][ T5954] radio-si470x 3-1:0.35: could not find interrupt in endpoint
[  492.822941][ T5954] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5
[  492.894931][ T6892] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  493.052462][ T5954] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  493.073340][ T6892] usb 2-1: Using ep0 maxpacket: 32
[  493.102784][ T6892] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  493.118304][ T6892] usb 2-1: can't read configurations, error -22
[  493.220705][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'.
[  493.265215][ T5954] radio-raremono 3-1:0.35: V4L2 device registered as radio48
[  493.323226][ T6892] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  493.472159][ T5954] usb 3-1: USB disconnect, device number 91
[  493.482562][ T5954] radio-raremono 3-1:0.35: Thanko's Raremono disconnected
[  493.495584][ T6892] usb 2-1: Using ep0 maxpacket: 32
[  493.510860][ T6892] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  493.546384][ T6892] usb 2-1: can't read configurations, error -22
[  493.608530][ T6892] usb usb2-port1: attempt power cycle
[  493.995697][ T6892] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  494.131645][ T6892] usb 2-1: Using ep0 maxpacket: 32
[  494.177679][ T6892] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  494.211969][ T6892] usb 2-1: can't read configurations, error -22
[  494.231484][ T5993] bridge_slave_1: left promiscuous mode
[  494.281958][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.322873][   T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  494.393530][ T6892] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  494.401457][ T5993] bridge_slave_0: left allmulticast mode
[  494.417239][ T5993] bridge_slave_0: left promiscuous mode
[  494.434086][ T6892] usb 2-1: Using ep0 maxpacket: 32
[  494.454544][ T6892] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  494.483254][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.505309][ T6892] usb 2-1: can't read configurations, error -22
[  494.546587][ T6892] usb usb2-port1: unable to enumerate USB device
[  494.596771][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  494.606267][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.804407][   T10] usb 5-1: config 0 descriptor??
[  494.939976][   T10] cp210x 5-1:0.0: cp210x converter detected
[  495.148839][   T10] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  495.190871][   T10] cp210x 5-1:0.0: querying part number failed
[  495.290269][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[  495.367935][   T10] usb 5-1: USB disconnect, device number 93
[  495.435106][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  495.488176][   T10] cp210x 5-1:0.0: device disconnected
[  495.751672][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1312'.
[  496.206620][ T1780] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  496.433540][ T1780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  496.444081][ T1780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  496.471052][ T1780] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  496.490744][ T1780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  496.513423][ T1780] usb 2-1: SerialNumber: syz
[  496.762809][ T1780] usb 2-1: 0:2 : does not exist
[  496.887176][ T1780] usb 2-1: USB disconnect, device number 91
[  497.155187][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  497.456830][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  497.469896][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  497.486521][ T5993] bond0 (unregistering): Released all slaves
[  497.783364][ T5993] IPVS: stopping backup sync thread 9484 ...
[  498.174111][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'.
[  498.233640][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'.
[  498.279145][T11322] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1319'.
[  498.293310][T11321] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1319'.
[  498.345279][T11315] pim6reg1: entered promiscuous mode
[  498.350638][T11315] pim6reg1: entered allmulticast mode
[  498.983332][ T1780] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  499.833920][ T5867] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  499.927227][ T5993] hsr_slave_0: left promiscuous mode
[  499.944749][ T5993] hsr_slave_1: left promiscuous mode
[  499.951758][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.968742][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.988022][ T1780] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  499.998233][ T1780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.011768][ T5867] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  500.020725][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.110282][ T1780] usb 6-1: Product: syz
[  500.114914][ T1780] usb 6-1: Manufacturer: syz
[  500.119589][ T5867] usb 5-1: config 0 has no interface number 0
[  500.126167][ T1780] usb 6-1: SerialNumber: syz
[  500.130862][ T5867] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  500.325469][ T5867] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  500.361785][ T5867] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  500.434245][ T5867] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  500.443063][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'.
[  500.502989][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.581507][ T5867] usb 5-1: config 0 descriptor??
[  500.590540][T11358] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  500.602982][ T1780] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  500.656366][ T1780] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  500.668605][ T5867] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  500.708483][ T1780] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  500.809569][T11358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.844400][T11358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.856042][   T43] usb 5-1: USB disconnect, device number 94
[  500.865684][ T1166] usb 5-1: Failed to submit usb control message: -71
[  500.872824][ T1166] usb 5-1: unable to send the bmi data to the device: -71
[  500.891414][ T1166] usb 5-1: unable to get target info from device
[  500.904444][ T1166] usb 5-1: could not get target info (-71)
[  500.911675][ T1166] usb 5-1: could not probe fw (-71)
[  500.911895][ T1780] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  500.983670][ T1780] usb 6-1: USB disconnect, device number 9
[  501.683810][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.690198][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  502.424031][T11398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1332'.
[  502.660157][ T5993] team0 (unregistering): Port device team_slave_1 removed
[  502.818897][ T5993] team0 (unregistering): Port device team_slave_0 removed
[  503.965285][T11406] 8021q: VLANs not supported on ipvlan1
[  503.976571][   T43] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  504.022583][T11413] pim6reg1: entered promiscuous mode
[  504.034794][T11413] pim6reg1: entered allmulticast mode
[  504.147733][   T43] usb 3-1: Using ep0 maxpacket: 32
[  504.171205][   T43] usb 3-1: config 0 has an invalid interface number: 167 but max is 0
[  504.194788][   T43] usb 3-1: config 0 has no interface number 0
[  504.201087][   T43] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024
[  504.217358][   T43] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32
[  504.260104][   T43] usb 3-1: config 0 interface 167 has no altsetting 0
[  504.287899][   T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63
[  504.304278][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.322403][   T43] usb 3-1: Product: syz
[  504.356524][   T43] usb 3-1: Manufacturer: syz
[  504.366649][   T43] usb 3-1: SerialNumber: syz
[  504.374437][   T30] audit: type=1326 audit(1757005717.483:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.396825][    C0] vkms_vblank_simulate: vblank timer overrun
[  504.427577][   T43] usb 3-1: config 0 descriptor??
[  504.437250][T11409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  504.466978][    T9] usb 5-1: new full-speed USB device number 95 using dummy_hcd
[  504.469531][T11409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  504.484734][   T30] audit: type=1326 audit(1757005717.493:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.542231][   T30] audit: type=1326 audit(1757005717.493:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.632783][T11425] kvm: pic: non byte write
[  504.656447][    T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  504.657158][   T30] audit: type=1326 audit(1757005717.493:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.673158][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.698409][   T30] audit: type=1326 audit(1757005717.493:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.731332][    T9] usb 5-1: config 0 descriptor??
[  504.755905][   T30] audit: type=1326 audit(1757005717.513:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.780757][   T43] usbtest 3-1:0.167: couldn't get endpoints, -22
[  504.805544][   T43] usbtest 3-1:0.167: probe with driver usbtest failed with error -22
[  504.839407][   T43] usb 3-1: USB disconnect, device number 92
[  504.871995][   T30] audit: type=1326 audit(1757005717.513:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.913610][   T30] audit: type=1326 audit(1757005717.523:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.937615][   T30] audit: type=1326 audit(1757005717.563:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  504.968445][   T30] audit: type=1326 audit(1757005717.563:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  505.123287][ T1780] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  505.288786][ T1780] usb 6-1: Using ep0 maxpacket: 8
[  505.309085][ T1780] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  505.328119][ T1780] usb 6-1: config 6 has no interface number 0
[  505.344931][ T1780] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  505.374139][ T1780] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  505.401538][ T1780] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  505.429763][ T1780] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  505.448975][ T1780] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  505.473258][ T1780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.491865][ T1780] usb 6-1: Product: syz
[  505.503285][ T1780] usb 6-1: Manufacturer: syz
[  505.508409][ T1780] usb 6-1: SerialNumber: syz
[  505.555006][ T1780] hso 6-1:6.2: Failed to find BULK IN ep
[  505.776195][T11435] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  505.814722][T11435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.922109][T11435] program syz.5.1340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  505.974861][    T9] pegasus 5-1:0.0: can't reset MAC
[  505.982475][T11460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.984806][    T9] pegasus 5-1:0.0: probe with driver pegasus failed with error -5
[  506.004691][T11460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.067395][    T9] usb 5-1: USB disconnect, device number 95
[  506.322359][ T1780] usb 6-1: USB disconnect, device number 10
[  507.243219][    T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  507.483232][    T9] usb 5-1: Using ep0 maxpacket: 8
[  507.513281][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  507.522379][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.612107][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  507.628223][    T9] pvrusb2: **********
[  507.648302][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  507.690097][    T9] pvrusb2: Important functionality might not be entirely working.
[  507.712753][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  507.752117][    T9] pvrusb2: **********
[  507.791341][ T2345] pvrusb2: Invalid write control endpoint
[  508.397889][ T2345] pvrusb2: Invalid write control endpoint
[  508.417303][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  508.432454][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  508.460920][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  508.724792][ T2345] pvrusb2: Device being rendered inoperable
[  508.730850][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  508.738539][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  508.754936][ T2345] pvrusb2: Attached sub-driver cx25840
[  508.760530][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  508.813057][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  509.303487][ T6872] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  509.439377][T11507] pim6reg1: entered promiscuous mode
[  509.449505][T11507] pim6reg1: entered allmulticast mode
[  509.488056][ T6872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.499727][ T6872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  509.538987][ T6872] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  509.567915][ T6872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.637032][ T6872] usb 6-1: config 0 descriptor??
[  509.720972][   T43] usb 5-1: USB disconnect, device number 96
[  509.874409][ T6872] hid_mf 0003:0079:1846.001B: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0
[  509.895799][ T6872] hid_mf 0003:0079:1846.001B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  510.055345][T11524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1349'.
[  510.078932][ T6872] usb 6-1: USB disconnect, device number 11
[  510.233849][   T43] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  510.342322][T11526] fido_id[11526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  510.453256][   T43] usb 5-1: Using ep0 maxpacket: 32
[  510.482318][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.566688][   T43] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  510.618944][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.723300][   T43] usb 5-1: Product: syz
[  510.743797][   T43] usb 5-1: Manufacturer: syz
[  510.761236][   T43] usb 5-1: SerialNumber: syz
[  510.797057][   T43] usb 5-1: config 0 descriptor??
[  510.810223][   T43] usb 5-1: bad CDC descriptors
[  510.823818][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1356'.
[  510.843961][   T43] usb 5-1: unsupported MDLM descriptors
[  510.861734][T11532] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1356'.
[  510.883241][    T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  511.036669][T11525] fuse: Bad value for 'fd'
[  511.079447][    T9] usb 2-1: Using ep0 maxpacket: 32
[  511.086909][    T9] usb 2-1: too many configurations: 97, using maximum allowed: 8
[  511.102063][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  511.129242][    T9] usb 2-1: can't read configurations, error -61
[  511.258066][T11540] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  511.284684][    T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  511.509750][T11547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1359'.
[  511.573363][    T9] usb 2-1: Using ep0 maxpacket: 32
[  511.579339][    T9] usb 2-1: too many configurations: 97, using maximum allowed: 8
[  511.592879][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  511.608499][    T9] usb 2-1: can't read configurations, error -61
[  511.618844][T11549] binder: 11548:11549 ioctl c0306201 200000000080 returned -14
[  511.648931][    T9] usb usb2-port1: attempt power cycle
[  511.783308][ T6892] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  511.953189][ T6892] usb 3-1: Using ep0 maxpacket: 16
[  511.970335][ T6892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.003475][    T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  512.013442][ T6892] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  512.044299][    T9] usb 2-1: Using ep0 maxpacket: 32
[  512.050270][    T9] usb 2-1: too many configurations: 97, using maximum allowed: 8
[  512.060920][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  512.078124][    T9] usb 2-1: can't read configurations, error -61
[  512.344837][ T6892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.382148][T11559] pim6reg: entered allmulticast mode
[  512.481603][ T6892] usb 3-1: config 0 descriptor??
[  512.633910][    T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  512.656434][    T9] usb 2-1: Using ep0 maxpacket: 32
[  512.662823][    T9] usb 2-1: too many configurations: 97, using maximum allowed: 8
[  512.673839][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  512.692279][    T9] usb 2-1: can't read configurations, error -61
[  512.844010][    T9] usb usb2-port1: unable to enumerate USB device
[  512.931050][    T9] usb 5-1: USB disconnect, device number 97
[  512.939736][T11565] random: crng reseeded on system resumption
[  513.258255][T11569] netlink: 'syz.0.1364': attribute type 1 has an invalid length.
[  513.343404][T11569] netlink: 612 bytes leftover after parsing attributes in process `syz.0.1364'.
[  513.411783][T11569] netlink: 'syz.0.1364': attribute type 1 has an invalid length.
[  513.565231][T11570] netlink: 'syz.0.1364': attribute type 5 has an invalid length.
[  513.851189][T11578] netlink: 'syz.1.1366': attribute type 4 has an invalid length.
[  513.970615][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  514.145416][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.205612][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.350187][    T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  514.443466][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.461126][    T9] usb 6-1: config 0 descriptor??
[  514.842315][ T6892] usbhid 3-1:0.0: can't add hid device: -71
[  514.857019][ T6892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  514.927014][ T6892] usb 3-1: USB disconnect, device number 93
[  515.023326][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  515.034193][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  515.086530][    T9] usb 6-1: USB disconnect, device number 12
[  515.396889][T11586] netlink: 'syz.1.1368': attribute type 1 has an invalid length.
[  515.619663][T11595] nvme_fabrics: unknown parameter or missing value '��@4Y!aG9��Ώ����i#>_\Ot�I?v���7{J7��B$P��������F~�' in ctrl creation request
[  516.373276][T11605] program syz.2.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  516.513198][ T6892] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  516.733202][ T6892] usb 6-1: Using ep0 maxpacket: 8
[  516.733239][    T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  516.758190][ T6892] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  516.783146][ T6892] usb 6-1: config 0 has no interface number 0
[  516.808953][ T6892] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  516.849781][ T6892] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  516.893260][ T6892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.030011][T11619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1376'.
[  517.099068][ T6892] usb 6-1: config 0 descriptor??
[  517.179278][ T6892] iowarrior 6-1:0.1: no interrupt-in endpoint found
[  518.123841][ T6872] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  518.297370][ T6872] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  518.319206][ T6872] usb 3-1: config 0 has no interface number 0
[  518.360579][ T6872] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  518.420387][ T6872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.475391][ T6872] usb 3-1: config 0 descriptor??
[  518.517789][ T6872] cp210x 3-1:0.1: cp210x converter detected
[  518.912880][T11633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.923402][ T6872] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32
[  518.943728][T11633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.190076][ T6872] usb 3-1: cp210x converter now attached to ttyUSB0
[  519.298037][ T6872] usb 6-1: USB disconnect, device number 13
[  519.449590][   T43] usb 3-1: USB disconnect, device number 95
[  519.516659][   T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  519.663460][   T43] cp210x 3-1:0.1: device disconnected
[  520.191127][T11670] netlink: 'syz.5.1384': attribute type 12 has an invalid length.
[  520.263289][ T5867] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  520.652898][ T5867] usb 2-1: Using ep0 maxpacket: 32
[  520.965714][ T5867] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  521.003922][ T5867] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 182, changing to 11
[  521.015219][    T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  521.031717][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0
[  521.068561][ T5867] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40
[  521.108186][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.149197][ T5867] usb 2-1: Product: syz
[  521.166357][ T5867] usb 2-1: Manufacturer: 뱘ꕝ罢툱鼵旕ᕟ螰ȑ᩿끪漜⫪㍀៣엳熸䓋
[  521.190337][ T5867] usb 2-1: SerialNumber: syz
[  521.195195][    T9] usb 3-1: Using ep0 maxpacket: 32
[  521.225950][    T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  521.271496][    T9] usb 3-1: config 0 has no interface number 0
[  521.296172][    T9] usb 3-1: config 0 interface 12 has no altsetting 0
[  521.337917][    T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  521.377249][    T9] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  521.447214][    T9] usb 3-1: Product: syz
[  521.483233][    T9] usb 3-1: Manufacturer: syz
[  521.487936][    T9] usb 3-1: SerialNumber: syz
[  521.571889][    T9] usb 3-1: config 0 descriptor??
[  521.905233][ T6872] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[  522.059889][T11695] loop2: detected capacity change from 0 to 7
[  522.072375][T11695] Dev loop2: unable to read RDB block 7
[  522.103276][T11695]  loop2: unable to read partition table
[  522.121344][ T6872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  522.142581][T11695] loop2: partition table beyond EOD, truncated
[  522.151233][ T6872] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  522.173152][T11695] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  522.213368][ T6872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  522.235027][ T6872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  522.264635][ T6872] usb 5-1: SerialNumber: syz
[  522.294992][ T6872] cdc_ether 5-1:1.0: skipping garbage
[  522.324268][ T6872] usb 5-1: bad CDC descriptors
[  522.344727][ T6872] usb-storage 5-1:1.0: USB Mass Storage device detected
[  522.402950][ T6872] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  522.524693][T11687] syzkaller1: entered promiscuous mode
[  522.533719][T11687] syzkaller1: entered allmulticast mode
[  522.730689][   T10] usb 5-1: USB disconnect, device number 98
[  522.979092][ T5867] usbhid 2-1:1.0: can't add hid device: -71
[  523.010245][ T5867] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  523.093633][ T5867] usb 2-1: USB disconnect, device number 96
[  523.637998][    T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  523.649265][    T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  523.667045][    T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  523.683862][    T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  523.736481][    T9] usb 3-1: USB disconnect, device number 96
[  523.926082][T11736] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.934165][T11736] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.264018][T11736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.281396][T11736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.320777][T11757] netlink: 'syz.1.1402': attribute type 1 has an invalid length.
[  524.389988][T11736] veth1_macvtap: left allmulticast mode
[  524.400863][T11759] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1403'.
[  524.412251][T11760] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1402'.
[  524.441989][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'.
[  524.461953][T11762] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1403'.
[  524.473720][T11764] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1402'.
[  524.499044][T11759] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1403'.
[  524.843366][T11757] bond3: entered promiscuous mode
[  524.848477][T11757] bond3: entered allmulticast mode
[  524.904365][ T6176] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.952927][ T6176] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.989845][ T6176] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.021401][ T6176] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.373544][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  525.536889][   T10] usb 6-1: device descriptor read/64, error -71
[  525.803192][   T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  526.042157][   T10] usb 6-1: device descriptor read/64, error -71
[  526.187568][   T10] usb usb6-port1: attempt power cycle
[  526.458823][ T5867] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  526.535065][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  526.577404][   T10] usb 6-1: device descriptor read/8, error -71
[  526.704070][ T5867] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  526.717359][ T5867] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  526.783291][ T5867] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  526.805796][ T5867] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  526.825408][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  526.834020][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.864935][   T10] usb 6-1: device descriptor read/8, error -71
[  526.927205][ T5867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  526.963207][ T6872] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  527.061865][   T10] usb usb6-port1: unable to enumerate USB device
[  527.193373][ T6872] usb 5-1: Using ep0 maxpacket: 32
[  527.254405][ T6872] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 255
[  527.283386][ T6872] usb 5-1: can't read configurations, error -22
[  527.301151][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.312459][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.517677][ T6872] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  527.549171][ T5867] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[  527.726501][ T6872] usb 5-1: Using ep0 maxpacket: 32
[  527.737086][ T6872] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 255
[  527.748407][ T6872] usb 5-1: can't read configurations, error -22
[  527.759239][ T6872] usb usb5-port1: attempt power cycle
[  527.786766][T11782] syz.1.1407 (11782): drop_caches: 2
[  528.133556][ T6872] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  528.168565][ T6872] usb 5-1: Using ep0 maxpacket: 32
[  528.176460][ T6872] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 255
[  528.189158][ T6872] usb 5-1: can't read configurations, error -22
[  528.393606][ T6872] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  528.413976][ T6872] usb 5-1: Using ep0 maxpacket: 32
[  528.423933][ T6872] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 255
[  528.432626][ T6872] usb 5-1: can't read configurations, error -22
[  528.439966][ T6872] usb usb5-port1: unable to enumerate USB device
[  529.043208][ T5867] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  529.193319][ T5867] usb 6-1: Invalid ep0 maxpacket: 64
[  529.323377][ T5867] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  529.473239][ T5867] usb 6-1: Invalid ep0 maxpacket: 64
[  529.479113][ T5867] usb usb6-port1: attempt power cycle
[  529.828370][ T5867] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  529.853777][ T5867] usb 6-1: Invalid ep0 maxpacket: 64
[  529.904984][ T6872] usb 3-1: USB disconnect, device number 97
[  529.995048][ T5867] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  530.023965][ T5867] usb 6-1: Invalid ep0 maxpacket: 64
[  530.032200][ T5867] usb usb6-port1: unable to enumerate USB device
[  530.219497][T11842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1422'.
[  530.393364][ T6872] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[  530.583246][ T6872] usb 3-1: device descriptor read/64, error -71
[  530.823252][ T6872] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[  530.963487][ T6872] usb 3-1: device descriptor read/64, error -71
[  531.087797][ T6872] usb usb3-port1: attempt power cycle
[  531.615120][ T6872] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[  531.674071][ T6872] usb 3-1: device descriptor read/8, error -71
[  531.801380][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1427'.
[  531.813624][T11858] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1427'.
[  531.914110][ T6872] usb 3-1: new full-speed USB device number 101 using dummy_hcd
[  531.957233][ T6872] usb 3-1: device descriptor read/8, error -71
[  532.093061][ T6872] usb usb3-port1: unable to enumerate USB device
[  532.223232][ T5867] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  532.373425][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  532.383247][ T5867] usb 5-1: Using ep0 maxpacket: 8
[  532.389863][ T5867] usb 5-1: too many configurations: 142, using maximum allowed: 8
[  532.409380][ T5867] usb 5-1: unable to read config index 0 descriptor/start: -61
[  532.420982][ T5867] usb 5-1: can't read configurations, error -61
[  532.533163][   T10] usb 6-1: Using ep0 maxpacket: 8
[  532.542328][   T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  532.550339][   T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  532.562290][ T5867] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  532.570137][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  532.583286][   T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  532.619098][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  532.635136][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  532.647882][   T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  532.662608][   T10] usb 6-1: config 168 interface 0 has no altsetting 0
[  532.671983][   T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  532.680944][   T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  532.693152][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  532.706200][   T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  532.719056][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  532.731393][ T5867] usb 5-1: Using ep0 maxpacket: 8
[  532.737691][ T5867] usb 5-1: too many configurations: 142, using maximum allowed: 8
[  532.745749][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  532.759512][   T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  532.773206][ T5867] usb 5-1: unable to read config index 0 descriptor/start: -61
[  532.780937][ T5867] usb 5-1: can't read configurations, error -61
[  532.787736][ T5867] usb usb5-port1: attempt power cycle
[  532.794560][   T10] usb 6-1: config 168 interface 0 has no altsetting 0
[  532.803186][   T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  532.816596][   T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  532.829060][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  532.844491][   T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  532.857909][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  532.871437][   T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  532.891693][   T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  532.911452][   T10] usb 6-1: config 168 interface 0 has no altsetting 0
[  532.938832][   T10] usb 6-1: string descriptor 0 read error: -22
[  532.950448][   T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  532.988771][T11875] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  533.008709][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.069496][   T10] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  533.133297][ T5867] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  533.171856][ T5867] usb 5-1: Using ep0 maxpacket: 8
[  533.202681][ T5867] usb 5-1: too many configurations: 142, using maximum allowed: 8
[  533.213761][ T5867] usb 5-1: unable to read config index 0 descriptor/start: -61
[  533.229392][ T5867] usb 5-1: can't read configurations, error -61
[  533.393984][ T5867] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  533.445496][ T5867] usb 5-1: Using ep0 maxpacket: 8
[  533.457045][ T5867] usb 5-1: too many configurations: 142, using maximum allowed: 8
[  533.478408][ T5867] usb 5-1: unable to read config index 0 descriptor/start: -61
[  533.493510][   T10] usb 6-1: USB disconnect, device number 22
[  533.499951][ T5867] usb 5-1: can't read configurations, error -61
[  533.507402][ T5867] usb usb5-port1: unable to enumerate USB device
[  534.033193][   T43] usb 6-1: new low-speed USB device number 23 using dummy_hcd
[  534.778836][T11907] lo: entered promiscuous mode
[  534.811606][T11907] tunl0: entered promiscuous mode
[  534.828207][T11907] gre0: entered promiscuous mode
[  534.847130][T11907] gretap0: entered promiscuous mode
[  534.864375][T11907] erspan0: entered promiscuous mode
[  534.880230][T11907] ip_vti0: entered promiscuous mode
[  534.896387][T11907] ip6_vti0: entered promiscuous mode
[  534.913652][T11907] sit0: entered promiscuous mode
[  534.941174][T11907] ip6tnl0: entered promiscuous mode
[  534.970979][T11907] ip6gre0: entered promiscuous mode
[  534.985773][T11907] syz_tun: entered promiscuous mode
[  534.993391][T11907] ip6gretap0: entered promiscuous mode
[  535.023462][T11907] bridge0: entered promiscuous mode
[  535.030129][T11907] vcan0: entered promiscuous mode
[  535.080683][   T43] usb 6-1: device descriptor read/all, error -71
[  535.231715][T11907] bond0: entered promiscuous mode
[  535.373233][T11907] bond_slave_0: entered promiscuous mode
[  535.379181][T11907] bond_slave_1: entered promiscuous mode
[  535.407387][T11907] team0: entered promiscuous mode
[  535.436768][T11907] team_slave_0: entered promiscuous mode
[  535.462336][T11907] team_slave_1: entered promiscuous mode
[  535.486285][T11907] 8021q: adding VLAN 0 to HW filter on device team0
[  535.494269][T11907] dummy0: entered promiscuous mode
[  535.502729][T11907] nlmon0: entered promiscuous mode
[  535.851610][T11907] caif0: entered promiscuous mode
[  535.861356][T11907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  536.815604][ T5867] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  536.910283][T11935] =======================================================
[  536.910283][T11935] WARNING: The mand mount option has been deprecated and
[  536.910283][T11935]          and is ignored by this kernel. Remove the mand
[  536.910283][T11935]          option from the mount to silence this warning.
[  536.910283][T11935] =======================================================
[  536.949631][T11935] fuse: Unknown parameter ''
[  536.983378][ T5867] usb 6-1: Using ep0 maxpacket: 16
[  536.992115][ T5867] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  537.016285][ T5867] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  537.045667][ T5867] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  537.061259][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.103261][ T5867] usb 6-1: Product: syz
[  537.107567][ T5867] usb 6-1: Manufacturer: syz
[  537.112523][ T5867] usb 6-1: SerialNumber: syz
[  537.345405][T11915] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1440'.
[  537.368261][ T5867] usb 6-1: 0:2 : does not exist
[  537.409325][ T5867] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  537.479798][ T5867] usb 6-1: USB disconnect, device number 25
[  537.552342][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.889681][T11954] tipc: Started in network mode
[  537.899322][T11954] tipc: Node identity fe9c19004b77, cluster identity 4711
[  537.907970][T11954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  538.063176][ T5867] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  538.106467][T11956] tipc: Disabling bearer <eth:syzkaller0>
[  538.213419][ T5867] usb 2-1: device descriptor read/64, error -71
[  538.390900][T11965] sctp: [Deprecated]: syz.5.1451 (pid 11965) Use of int in maxseg socket option.
[  538.390900][T11965] Use struct sctp_assoc_value instead
[  538.493782][ T5867] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  538.643338][ T5867] usb 2-1: device descriptor read/64, error -71
[  538.761163][ T5867] usb usb2-port1: attempt power cycle
[  539.123579][ T5867] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  539.145648][ T5867] usb 2-1: device descriptor read/8, error -71
[  539.313265][   T10] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  539.413217][ T5867] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  539.434270][ T5867] usb 2-1: device descriptor read/8, error -71
[  539.463195][   T10] usb 3-1: Using ep0 maxpacket: 16
[  539.470501][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  539.479505][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  539.489825][   T43] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  539.490317][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  539.518297][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  539.527634][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.543233][   T10] usb 3-1: Product: syz
[  539.547443][   T10] usb 3-1: Manufacturer: syz
[  539.552067][   T10] usb 3-1: SerialNumber: syz
[  539.557099][ T5867] usb usb2-port1: unable to enumerate USB device
[  539.665375][   T43] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  539.693364][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.724106][   T43] usb 6-1: config 0 descriptor??
[  540.025047][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.034529][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.049106][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.058564][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.070416][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'.
[  540.758869][   T43] ath6kl: Failed to read usb control message: -71
[  540.773216][   T43] ath6kl: Unable to read the bmi data from the device: -71
[  540.803518][   T43] ath6kl: Unable to recv target info: -71
[  540.876743][   T43] ath6kl: Failed to init ath6kl core: -71
[  540.918455][   T43] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[  541.010996][   T43] usb 6-1: USB disconnect, device number 26
[  541.233309][ T5867] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  541.413264][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  541.421856][ T5867] usb 2-1: config 166 has an invalid interface number: 177 but max is 1
[  541.434409][ T5867] usb 2-1: config 166 has an invalid interface number: 34 but max is 1
[  541.452236][ T5867] usb 2-1: config 166 has no interface number 0
[  541.471858][ T5867] usb 2-1: config 166 has no interface number 1
[  541.490874][ T5867] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  541.529855][ T5867] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  541.558803][ T5867] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  541.590227][ T5867] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  541.622952][ T5867] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  541.661541][ T5867] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  541.693260][    T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  541.712807][ T5867] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  541.756247][ T5867] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  541.791818][ T5867] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  541.848976][ T5867] usb 2-1: config 166 interface 177 has no altsetting 0
[  541.876292][ T5867] usb 2-1: config 166 interface 34 has no altsetting 0
[  541.883599][    T9] usb 6-1: Using ep0 maxpacket: 8
[  541.894838][    T9] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  541.927632][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.967189][ T5867] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  541.980116][    T9] usb 6-1: config 0 has no interface number 0
[  542.005243][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.013763][    T9] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.037968][ T5867] usb 2-1: Product: syz
[  542.050313][    T9] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  542.066208][ T5867] usb 2-1: Manufacturer: syz
[  542.104439][ T5867] usb 2-1: SerialNumber: syz
[  542.140047][    T9] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  542.186719][   T10] usb 3-1: 0:2 : does not exist
[  542.200882][    T9] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  542.256182][   T10] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[  542.273276][    T9] usb 6-1: config 0 interface 52 has no altsetting 0
[  542.322903][    T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  542.371147][ T5867] ums-realtek 2-1:166.177: USB Mass Storage device detected
[  542.391644][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.429901][   T10] usb 3-1: USB disconnect, device number 102
[  542.524940][    T9] usb 6-1: config 0 descriptor??
[  542.621222][ T5867] ums-realtek 2-1:166.34: USB Mass Storage device detected
[  542.686993][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1465'.
[  542.751936][    T9] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input52
[  542.973428][   T43] usb 6-1: USB disconnect, device number 27
[  542.982284][   T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  542.990471][ T5218] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19
[  543.019385][ T5867] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5
[  543.260389][ T5867] usb 2-1: Found UVC 0.00 device syz (0bda:0138)
[  543.378497][   T10] usb 3-1: Using ep0 maxpacket: 32
[  543.383790][ T5867] usb 2-1: No valid video chain found.
[  543.407620][ T5867] usb 2-1: USB disconnect, device number 101
[  543.413855][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  543.458665][   T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  543.469747][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.523587][   T10] usb 3-1: Product: syz
[  543.527826][   T10] usb 3-1: Manufacturer: syz
[  543.532449][   T10] usb 3-1: SerialNumber: syz
[  543.581031][   T10] usb 3-1: config 0 descriptor??
[  544.098858][   T10] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  544.159403][ T5867] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  544.327568][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  544.342382][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  544.474931][ T5867] usb 2-1: config 1 has no interface number 0
[  544.503320][ T5867] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  544.518411][   T10] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO)
[  544.560938][   T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121
[  544.569339][ T5867] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  544.634475][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  544.691802][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.739077][   T10] usb 3-1: USB disconnect, device number 103
[  544.747048][ T5867] usb 2-1: Product: syz
[  544.751707][ T5867] usb 2-1: Manufacturer: syz
[  544.773169][ T5867] usb 2-1: SerialNumber: syz
[  545.743314][    T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  545.885689][ T5867] cdc_ncm 2-1:1.1: bind() failure
[  545.910549][ T5867] usb 2-1: USB disconnect, device number 102
[  545.913428][   T43] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  545.933645][    T9] usb 3-1: Using ep0 maxpacket: 16
[  545.952037][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  545.964664][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  545.992971][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  546.007742][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.020694][    T9] usb 3-1: Product: Г
[  546.030844][    T9] usb 3-1: Manufacturer: 犅畯降冹섛큍장婿㜯읞箔쯰㮱鮷┞爉᳏냾
[  546.051131][    T9] usb 3-1: SerialNumber: ѕ
[  546.073517][   T43] usb 6-1: Using ep0 maxpacket: 16
[  546.108988][   T43] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  546.119921][   T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  546.159783][   T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  546.214192][   T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  546.233326][ T6872] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  546.251683][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.276928][   T43] usb 6-1: Product: syz
[  546.281199][   T43] usb 6-1: Manufacturer: syz
[  546.298060][   T43] usb 6-1: SerialNumber: syz
[  546.383364][ T6872] usb 5-1: Using ep0 maxpacket: 8
[  546.422317][ T6872] usb 5-1: config 162 has an invalid interface number: 197 but max is 0
[  546.433205][ T6872] usb 5-1: config 162 has no interface number 0
[  546.439538][ T6872] usb 5-1: config 162 interface 197 has no altsetting 0
[  546.468029][ T6872] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7
[  546.484743][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.495813][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.515139][ T6872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.538809][ T6872] usb 5-1: Product: syz
[  546.547230][ T6872] usb 5-1: Manufacturer: syz
[  546.557661][   T43] usb 6-1: 0:2 : does not exist
[  546.573769][ T6872] usb 5-1: SerialNumber: syz
[  546.630745][   T43] usb 6-1: USB disconnect, device number 28
[  546.729189][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  547.355887][ T6872] usb 5-1: USB disconnect, device number 107
[  548.263876][T12085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1481'.
[  548.295804][   T43] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  548.515999][   T43] usb 6-1: Using ep0 maxpacket: 16
[  548.630246][   T43] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52
[  548.668463][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.689753][   T43] usb 6-1: Product: syz
[  548.695329][   T43] usb 6-1: Manufacturer: syz
[  548.731240][   T43] usb 6-1: SerialNumber: syz
[  548.813834][   T43] usb 6-1: config 0 descriptor??
[  549.034446][ T5867] usb 6-1: USB disconnect, device number 29
[  549.340968][    T9] cdc_ncm 3-1:1.0: bind() failure
[  549.350078][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  549.382075][    T9] cdc_ncm 3-1:1.1: bind() failure
[  549.471209][    T9] usb 3-1: USB disconnect, device number 104
[  549.835459][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  551.360085][T12138] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1496'.
[  551.397276][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'.
[  551.406901][T12140] netlink: ct family unspecified
[  551.412133][T12140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.448208][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'.
[  551.478409][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'.
[  551.585619][   T43] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  551.815380][   T43] usb 5-1: Using ep0 maxpacket: 16
[  551.876008][ T5993] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  551.888630][   T43] usb 5-1: config 0 has an invalid interface number: 11 but max is 0
[  551.900261][   T43] usb 5-1: config 0 has no interface number 0
[  552.021427][ T5993] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  552.256237][   T43] usb 5-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30
[  552.256263][ T5993] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  552.276521][   T43] usb 5-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  552.293531][   T43] usb 5-1: config 0 interface 11 has no altsetting 0
[  552.312862][   T43] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b
[  552.324024][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.332123][ T5993] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  552.341776][   T43] usb 5-1: Product: syz
[  552.351371][   T43] usb 5-1: Manufacturer: syz
[  552.356497][   T43] usb 5-1: SerialNumber: syz
[  552.367002][   T43] usb 5-1: config 0 descriptor??
[  552.619759][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1498'.
[  552.630411][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1498'.
[  553.380872][   T43] usb 5-1: Expected 3 endpoints, found: 0
[  553.393530][   T43] usb 5-1: USB disconnect, device number 108
[  554.643239][   T43] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  554.815595][   T43] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  554.866258][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.872444][T12181] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1507'.
[  555.005990][   T43] usb 5-1: config 0 descriptor??
[  555.232031][T12186] loop9: detected capacity change from 0 to 8
[  555.262775][T12186] Dev loop9: unable to read RDB block 8
[  555.289296][T12186]  loop9: unable to read partition table
[  555.311881][T12186] loop9: partition table beyond EOD, truncated
[  555.393270][T12186] loop_reread_partitions: partition scan of loop9 (�被x�������� ) failed (rc=-5)
[  555.952250][T12195] IPv6: Can't replace route, no match found
[  556.125498][   T43] pegasus 5-1:0.0: probe with driver pegasus failed with error -121
[  557.743246][    T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  557.784071][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1517'.
[  557.866213][T12223] FAULT_INJECTION: forcing a failure.
[  557.866213][T12223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  557.901550][T12223] CPU: 0 UID: 0 PID: 12223 Comm: syz.2.1520 Not tainted syzkaller #0 PREEMPT(full) 
[  557.901579][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  557.901591][T12223] Call Trace:
[  557.901599][T12223]  <TASK>
[  557.901608][T12223]  dump_stack_lvl+0x189/0x250
[  557.901638][T12223]  ? __pfx____ratelimit+0x10/0x10
[  557.901676][T12223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  557.901700][T12223]  ? __pfx__printk+0x10/0x10
[  557.901726][T12223]  ? __might_fault+0xb0/0x130
[  557.901764][T12223]  should_fail_ex+0x414/0x560
[  557.901797][T12223]  _copy_from_iter+0x1de/0x1790
[  557.901825][T12223]  ? rcu_is_watching+0x15/0xb0
[  557.901848][T12223]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  557.901875][T12223]  ? __pfx__copy_from_iter+0x10/0x10
[  557.901897][T12223]  ? __build_skb_around+0x257/0x3e0
[  557.901922][T12223]  ? netlink_sendmsg+0x642/0xb30
[  557.901939][T12223]  ? skb_put+0x11b/0x210
[  557.901963][T12223]  netlink_sendmsg+0x6b2/0xb30
[  557.901992][T12223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  557.902015][T12223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  557.902037][T12223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  557.902058][T12223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  557.902078][T12223]  __sock_sendmsg+0x21c/0x270
[  557.902109][T12223]  ____sys_sendmsg+0x505/0x830
[  557.902138][T12223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  557.902169][T12223]  ? import_iovec+0x74/0xa0
[  557.902196][T12223]  ___sys_sendmsg+0x21f/0x2a0
[  557.902220][T12223]  ? __pfx____sys_sendmsg+0x10/0x10
[  557.902283][T12223]  ? __fget_files+0x2a/0x420
[  557.902300][T12223]  ? __fget_files+0x3a0/0x420
[  557.902329][T12223]  __x64_sys_sendmsg+0x19b/0x260
[  557.902354][T12223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  557.902387][T12223]  ? __pfx_ksys_write+0x10/0x10
[  557.902410][T12223]  ? rcu_is_watching+0x15/0xb0
[  557.902434][T12223]  ? do_syscall_64+0xbe/0x3b0
[  557.902457][T12223]  do_syscall_64+0xfa/0x3b0
[  557.902473][T12223]  ? lockdep_hardirqs_on+0x9c/0x150
[  557.902500][T12223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.902525][T12223]  ? clear_bhb_loop+0x60/0xb0
[  557.902549][T12223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.902568][T12223] RIP: 0033:0x7f33fed8ebe9
[  557.902585][T12223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  557.902602][T12223] RSP: 002b:00007f33ffc3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  557.902623][T12223] RAX: ffffffffffffffda RBX: 00007f33fefc5fa0 RCX: 00007f33fed8ebe9
[  557.902637][T12223] RDX: 0000000000008024 RSI: 0000200000000140 RDI: 0000000000000003
[  557.902650][T12223] RBP: 00007f33ffc3f090 R08: 0000000000000000 R09: 0000000000000000
[  557.902662][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.902686][T12223] R13: 00007f33fefc6038 R14: 00007f33fefc5fa0 R15: 00007f33ff0efa28
[  557.902719][T12223]  </TASK>
[  558.193311][    T9] usb 2-1: device descriptor read/64, error -71
[  558.603397][    T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  558.736456][   T43] usb 5-1: USB disconnect, device number 109
[  558.793546][    T9] usb 2-1: device descriptor read/64, error -71
[  558.923666][    T9] usb usb2-port1: attempt power cycle
[  559.120057][ T5954] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  559.353197][    T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  559.375709][    T9] usb 2-1: device descriptor read/8, error -71
[  559.423173][ T5867] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  559.445050][ T5954] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  559.458286][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.476751][ T5954] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  559.491157][ T5954] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  559.504948][ T5954] usb 3-1: Manufacturer: syz
[  559.520179][ T5954] usb 3-1: config 0 descriptor??
[  559.533325][   T10] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[  559.578328][ T5867] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  559.602191][ T5867] usb 6-1: config 0 has no interface number 0
[  559.609390][ T5867] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  559.620431][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.628613][    T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  559.645328][ T5867] usb 6-1: config 0 descriptor??
[  559.655711][ T5867] cp210x 6-1:0.1: cp210x converter detected
[  559.666713][    T9] usb 2-1: device descriptor read/8, error -71
[  559.685981][ T5954] rc_core: IR keymap rc-hauppauge not found
[  559.692285][ T5954] Registered IR keymap rc-empty
[  559.700147][ T5954] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  559.719520][ T5954] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53
[  559.737065][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  559.759268][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  559.788383][ T1780] usb 3-1: USB disconnect, device number 105
[  559.796585][    T9] usb usb2-port1: unable to enumerate USB device
[  559.821155][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.861131][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  559.869118][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  559.894081][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.960947][   T10] usb 5-1: config 0 descriptor??
[  559.972233][T12262] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1025)
[  559.982294][T12262] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  560.059461][ T5867] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32
[  560.078737][ T5867] cp210x 6-1:0.1: failed to get vendor val 0x3711 size 2: -121
[  560.092026][ T5867] cp210x 6-1:0.1: GPIO initialisation failed: -121
[  560.110696][ T5867] usb 6-1: cp210x converter now attached to ttyUSB0
[  560.414244][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.424776][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.659707][T12273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1533'.
[  560.948754][T12279] netlink: 'syz.2.1536': attribute type 1 has an invalid length.
[  561.023231][ T5954] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  561.183292][ T5954] usb 2-1: Using ep0 maxpacket: 16
[  561.191289][ T5954] usb 2-1: config 254 has an invalid interface number: 235 but max is 0
[  561.201035][ T5954] usb 2-1: config 254 has no interface number 0
[  561.208033][ T5954] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  561.220937][ T5954] usb 2-1: config 254 interface 235 has no altsetting 0
[  561.231541][ T5954] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  561.241449][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.250033][ T5954] usb 2-1: Product: syz
[  561.254788][ T5954] usb 2-1: Manufacturer: syz
[  561.259561][ T5954] usb 2-1: SerialNumber: syz
[  561.275460][T12275] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  561.487992][T12275] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  561.499319][ T5954] usbtest 2-1:254.235: Linux gadget zero
[  561.513184][ T5954] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt)
[  561.539612][ T5993] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.549060][ T5993] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.562899][ T5993] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.577366][ T5993] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.702279][T12275] support for the xor transformation has been removed.
[  561.716621][ T5954] usb 2-1: USB disconnect, device number 107
[  562.155113][ T5954] usb 6-1: USB disconnect, device number 30
[  562.228574][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  562.256236][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  562.262315][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  562.263946][ T5954] cp210x 6-1:0.1: device disconnected
[  562.331659][   T10] usb 5-1: USB disconnect, device number 110
[  563.119000][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.145870][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.223423][   T10] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  563.423472][   T10] usb 2-1: Using ep0 maxpacket: 16
[  563.434857][T12309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1544'.
[  563.503493][ T5954] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  563.664952][ T5954] usb 6-1: Using ep0 maxpacket: 16
[  563.798969][ T5954] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  563.854660][ T5954] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  563.893406][ T5954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  563.915380][ T5954] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  563.924734][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.937079][ T5954] usb 6-1: Product: syz
[  563.947365][ T5954] usb 6-1: Manufacturer: syz
[  563.952018][ T5954] usb 6-1: SerialNumber: syz
[  565.233385][ T5867] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  565.433283][ T5867] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  565.466692][ T5867] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config
[  565.544242][ T5867] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  565.577721][ T5954] usb 6-1: 0:2 : does not exist
[  565.584035][ T5867] usb 5-1: config 1 has no interface number 1
[  565.615967][ T5867] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  565.661544][ T5867] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  565.707642][ T5954] usb 6-1: USB disconnect, device number 31
[  565.758506][ T5867] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  565.796886][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.815639][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  565.844568][ T5867] usb 5-1: Product: syz
[  565.848942][ T5867] usb 5-1: Manufacturer: syz
[  565.866809][ T5867] usb 5-1: SerialNumber: syz
[  565.894451][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  565.907014][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[  565.933168][   T10] usb 2-1: can't read configurations, error -71
[  566.169817][T12344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1552'.
[  566.383623][ T1780] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  566.547489][ T1780] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  566.603027][ T1780] usb 3-1: config 0 has no interface number 0
[  566.665419][ T1780] usb 3-1: config 0 interface 98 has no altsetting 0
[  566.694979][ T1780] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  566.707811][ T1780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.725916][ T1780] usb 3-1: Product: syz
[  566.730410][ T1780] usb 3-1: Manufacturer: syz
[  566.737595][ T1780] usb 3-1: SerialNumber: syz
[  566.757935][ T1780] usb 3-1: config 0 descriptor??
[  567.059104][ T1780] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  567.385986][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  567.386960][   T30] audit: type=1326 audit(1757005780.503:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  567.442612][   T30] audit: type=1326 audit(1757005780.533:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  567.468071][   T30] audit: type=1326 audit(1757005780.533:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  567.534442][   T30] audit: type=1326 audit(1757005780.533:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  567.585510][ T1780] usb 3-1: reset high-speed USB device number 106 using dummy_hcd
[  567.733205][ T1780] usb 3-1: device descriptor read/64, error -71
[  567.833369][   T30] audit: type=1326 audit(1757005780.533:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  567.864156][   T30] audit: type=1326 audit(1757005780.533:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  567.887023][   T30] audit: type=1326 audit(1757005780.533:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  567.923726][ T5867] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  567.931431][ T6872] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  568.032818][   T30] audit: type=1326 audit(1757005780.533:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  568.055511][ T5867] usb 5-1: MIDIStreaming interface descriptor not found
[  568.064264][ T1780] usb 3-1: reset high-speed USB device number 106 using dummy_hcd
[  568.070555][   T30] audit: type=1326 audit(1757005780.533:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  568.096264][   T30] audit: type=1326 audit(1757005780.533:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe3f9f8ebe9 code=0x7ffc0000
[  568.193793][ T6872] usb 2-1: config 0 has no interfaces?
[  568.223620][ T1780] usb 3-1: device descriptor read/64, error -71
[  568.401435][ T5867] usb 5-1: USB disconnect, device number 111
[  568.411403][ T6872] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  568.421295][ T6872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.461472][ T6872] usb 2-1: Product: syz
[  568.625379][T12381] loop6: detected capacity change from 0 to 7
[  568.743588][ T1780] usb 3-1: reset high-speed USB device number 106 using dummy_hcd
[  568.882907][T12381] Dev loop6: unable to read RDB block 7
[  568.889670][ T1780] usb 3-1: device descriptor read/8, error -71
[  568.897263][ T6872] usb 2-1: Manufacturer: syz
[  568.905105][T12381]  loop6: AHDI p3 p4
[  568.912173][ T6872] usb 2-1: SerialNumber: syz
[  568.932490][T12381] loop6: partition table partially beyond EOD, truncated
[  569.012613][T12381] loop6: p3 start 1886353253 is beyond EOD, truncated
[  569.073826][ T6872] usb 2-1: config 0 descriptor??
[  569.161959][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  569.409755][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1563'.
[  569.419084][T12385] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1563'.
[  569.998006][ T1780] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware
[  570.159404][ T1780] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  570.174237][ T5867] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  570.190855][ T5867] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  570.211869][ T1780] usb 3-1: USB disconnect, device number 106
[  570.287270][ T5867] ------------[ cut here ]------------
[  570.293725][ T5867] WARNING: CPU: 0 PID: 5867 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90
[  570.302095][ T5867] Modules linked in:
[  570.306670][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  570.314583][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1564'.
[  570.316204][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  570.335288][ T5867] Workqueue: events request_firmware_work_func
[  570.341799][ T5867] RIP: 0010:kernfs_get+0x72/0x90
[  570.346960][ T5867] Code: e8 83 58 62 ff 48 89 df be 04 00 00 00 e8 66 cc c5 ff f0 ff 03 eb 05 e8 6c 58 62 ff 5b 5d c3 cc cc cc cc cc e8 5f 58 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65
[  570.366692][ T5867] RSP: 0018:ffffc900041bf5e0 EFLAGS: 00010293
[  570.372789][ T5867] RAX: ffffffff825d55f1 RBX: ffff888057f37780 RCX: ffff888027a8da00
[  570.380983][ T5867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  570.389229][ T5867] RBP: 0000000000000000 R08: ffff888057f37783 R09: 1ffff1100afe6ef0
[  570.397405][ T5867] R10: dffffc0000000000 R11: ffffed100afe6ef1 R12: ffff8880413c48a8
[  570.405444][ T5867] R13: 1ffff11008278916 R14: ffff8880413c48b0 R15: 1ffff11008278915
[  570.413464][ T5867] FS:  0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000
[  570.422421][ T5867] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  570.429084][ T5867] CR2: 000000110c38f48b CR3: 000000007df3e000 CR4: 00000000003526f0
[  570.437119][ T5867] Call Trace:
[  570.440403][ T5867]  <TASK>
[  570.443396][ T5867]  kobject_add_internal+0x632/0xb40
[  570.449039][ T5867]  kobject_add+0x155/0x220
[  570.453508][ T5867]  ? __pfx_kobject_add+0x10/0x10
[  570.458463][ T5867]  ? kobject_init+0x83/0x1e0
[  570.463203][ T5867]  get_device_parent+0x316/0x3a0
[  570.468175][ T5867]  device_add+0x2e1/0xb50
[  570.472552][ T5867]  firmware_fallback_sysfs+0x2e4/0x9b0
[  570.478281][ T5867]  _request_firmware+0xf83/0x15b0
[  570.483530][ T5867]  ? __pfx__request_firmware+0x10/0x10
[  570.489037][ T5867]  ? process_scheduled_works+0x9ef/0x17b0
[  570.494822][ T5867]  request_firmware_work_func+0xaf/0x1c0
[  570.500461][ T5867]  ? process_scheduled_works+0x9ef/0x17b0
[  570.506228][ T5867]  process_scheduled_works+0xae1/0x17b0
[  570.511791][ T5867]  ? __pfx_process_scheduled_works+0x10/0x10
[  570.517817][ T5867]  worker_thread+0x8a0/0xda0
[  570.522717][ T5867]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  570.529202][ T5867]  ? __kthread_parkme+0x7b/0x200
[  570.534200][ T5867]  kthread+0x70e/0x8a0
[  570.538294][ T5867]  ? __pfx_worker_thread+0x10/0x10
[  570.543466][ T5867]  ? __pfx_kthread+0x10/0x10
[  570.548072][ T5867]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.553407][ T5867]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.558640][ T5867]  ? __pfx_kthread+0x10/0x10
[  570.563341][ T5867]  ret_from_fork+0x3fc/0x770
[  570.567972][ T5867]  ? __pfx_ret_from_fork+0x10/0x10
[  570.573196][ T5867]  ? __switch_to_asm+0x39/0x70
[  570.577983][ T5867]  ? __switch_to_asm+0x33/0x70
[  570.582938][ T5867]  ? __pfx_kthread+0x10/0x10
[  570.587587][ T5867]  ret_from_fork_asm+0x1a/0x30
[  570.592384][ T5867]  </TASK>
[  570.595442][ T5867] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  570.602715][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  570.612076][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  570.622145][ T5867] Workqueue: events request_firmware_work_func
[  570.628330][ T5867] Call Trace:
[  570.631601][ T5867]  <TASK>
[  570.634539][ T5867]  dump_stack_lvl+0x99/0x250
[  570.639135][ T5867]  ? __asan_memcpy+0x40/0x70
[  570.643733][ T5867]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.648928][ T5867]  ? __pfx__printk+0x10/0x10
[  570.653540][ T5867]  vpanic+0x281/0x750
[  570.657542][ T5867]  ? __pfx__printk+0x10/0x10
[  570.662146][ T5867]  ? __pfx_vpanic+0x10/0x10
[  570.666667][ T5867]  ? is_bpf_text_address+0x26/0x2b0
[  570.671880][ T5867]  panic+0xb9/0xc0
[  570.675600][ T5867]  ? __pfx_panic+0x10/0x10
[  570.680022][ T5867]  __warn+0x31b/0x4b0
[  570.684019][ T5867]  ? kernfs_get+0x72/0x90
[  570.688345][ T5867]  ? kernfs_get+0x72/0x90
[  570.692675][ T5867]  report_bug+0x2be/0x4f0
[  570.697005][ T5867]  ? kernfs_get+0x72/0x90
[  570.701374][ T5867]  ? kernfs_get+0x72/0x90
[  570.705710][ T5867]  ? kernfs_get+0x74/0x90
[  570.710070][ T5867]  handle_bug+0x84/0x160
[  570.714403][ T5867]  exc_invalid_op+0x1a/0x50
[  570.718900][ T5867]  asm_exc_invalid_op+0x1a/0x20
[  570.723779][ T5867] RIP: 0010:kernfs_get+0x72/0x90
[  570.728713][ T5867] Code: e8 83 58 62 ff 48 89 df be 04 00 00 00 e8 66 cc c5 ff f0 ff 03 eb 05 e8 6c 58 62 ff 5b 5d c3 cc cc cc cc cc e8 5f 58 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65
[  570.748316][ T5867] RSP: 0018:ffffc900041bf5e0 EFLAGS: 00010293
[  570.754389][ T5867] RAX: ffffffff825d55f1 RBX: ffff888057f37780 RCX: ffff888027a8da00
[  570.762360][ T5867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  570.770339][ T5867] RBP: 0000000000000000 R08: ffff888057f37783 R09: 1ffff1100afe6ef0
[  570.778310][ T5867] R10: dffffc0000000000 R11: ffffed100afe6ef1 R12: ffff8880413c48a8
[  570.786274][ T5867] R13: 1ffff11008278916 R14: ffff8880413c48b0 R15: 1ffff11008278915
[  570.794247][ T5867]  ? kernfs_get+0x71/0x90
[  570.798578][ T5867]  kobject_add_internal+0x632/0xb40
[  570.803778][ T5867]  kobject_add+0x155/0x220
[  570.808219][ T5867]  ? __pfx_kobject_add+0x10/0x10
[  570.813205][ T5867]  ? kobject_init+0x83/0x1e0
[  570.817803][ T5867]  get_device_parent+0x316/0x3a0
[  570.822749][ T5867]  device_add+0x2e1/0xb50
[  570.827171][ T5867]  firmware_fallback_sysfs+0x2e4/0x9b0
[  570.832683][ T5867]  _request_firmware+0xf83/0x15b0
[  570.837764][ T5867]  ? __pfx__request_firmware+0x10/0x10
[  570.843256][ T5867]  ? process_scheduled_works+0x9ef/0x17b0
[  570.848994][ T5867]  request_firmware_work_func+0xaf/0x1c0
[  570.854640][ T5867]  ? process_scheduled_works+0x9ef/0x17b0
[  570.860377][ T5867]  process_scheduled_works+0xae1/0x17b0
[  570.865950][ T5867]  ? __pfx_process_scheduled_works+0x10/0x10
[  570.871952][ T5867]  worker_thread+0x8a0/0xda0
[  570.876571][ T5867]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  570.882901][ T5867]  ? __kthread_parkme+0x7b/0x200
[  570.887842][ T5867]  kthread+0x70e/0x8a0
[  570.891924][ T5867]  ? __pfx_worker_thread+0x10/0x10
[  570.897069][ T5867]  ? __pfx_kthread+0x10/0x10
[  570.901686][ T5867]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.906891][ T5867]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.912109][ T5867]  ? __pfx_kthread+0x10/0x10
[  570.916712][ T5867]  ret_from_fork+0x3fc/0x770
[  570.921359][ T5867]  ? __pfx_ret_from_fork+0x10/0x10
[  570.926477][ T5867]  ? __switch_to_asm+0x39/0x70
[  570.931260][ T5867]  ? __switch_to_asm+0x33/0x70
[  570.936023][ T5867]  ? __pfx_kthread+0x10/0x10
[  570.940625][ T5867]  ret_from_fork_asm+0x1a/0x30
[  570.945409][ T5867]  </TASK>
[  570.948700][ T5867] Kernel Offset: disabled
[  570.953021][ T5867] Rebooting in 86400 seconds..