last executing test programs:

23m31.205257409s ago: executing program 3 (id=285):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000d00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030307a"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2e25fdfd11e7338646a677e2dcdb9345bbdf6195d8cf40d4c2d1363e3b99ee6750d62d46b0ea941e64b7258462f5ceada117ee3d15c8dfc4a720118c7b6fb32e9642b3c6612941177c9d1ad186b106617696b9d7633c9a04cd074b02d9caf4a226bac5ac7b81fe73248166d9f60f001ee7397b6a83d1bb84d858b792f767e3a413f287584c52a83af7ff243887bc53a98979f77ca43153"])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$UHID_INPUT(r3, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="652a051a907e21", 0x7}], 0x1}, 0x804)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)

23m30.076874047s ago: executing program 3 (id=288):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = getpid()
syz_open_procfs(r3, &(0x7f00000001c0)='net/psched\x00')
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x1, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x4, 0xb, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8090)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012", 0x29}], 0x1}, 0x80)
r6 = landlock_create_ruleset(&(0x7f0000000000)={0x5000}, 0x18, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x1)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000200))

23m27.454271702s ago: executing program 3 (id=290):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
recvfrom$llc(r0, 0x0, 0x0, 0x2100, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x48)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, 0xffffffffffffffff, 0x83cff000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000004c0)={0x6, 0x3, 0x0, 0x6}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x2, 0x922000000001, 0x106)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvfrom$packet(r6, &(0x7f00000005c0)=""/145, 0x91, 0x40002120, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x1, 0x7, 0x6, @random="86e5e1ef59c8"}, 0x14)
setsockopt$inet6_opts(r9, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d00000000000000000000ef60fc4bd8ecc4e3200000"], 0xd0060)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x48050}, 0x40)

23m25.536959976s ago: executing program 3 (id=295):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000000)='./file0\x00', 0x1)

23m23.883614732s ago: executing program 3 (id=300):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = getpid()
syz_open_procfs(r3, &(0x7f00000001c0)='net/psched\x00')
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x1, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x4, 0xb, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8090)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed6", 0x27}], 0x1}, 0x80)
r6 = landlock_create_ruleset(&(0x7f0000000000)={0x5000}, 0x18, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x1)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000200))

23m20.802048491s ago: executing program 3 (id=303):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)

23m5.716849055s ago: executing program 32 (id=303):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)

21m27.465884451s ago: executing program 2 (id=489):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0)
mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5})
r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x40)
write$cgroup_int(r3, &(0x7f00000003c0)=0xd9d, 0x12)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="0111"], 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)

21m25.679008421s ago: executing program 2 (id=493):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x40012140, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
semget$private(0x0, 0x4, 0x24)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c000200"], 0x20}}, 0x800)
recvmmsg(r3, &(0x7f0000000780)=[{{&(0x7f0000000380)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}], 0x1}, 0x3}], 0x1, 0x40012100, 0x0)

21m22.955798073s ago: executing program 2 (id=496):
r0 = io_uring_setup(0x2ba7, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
unshare(0x8000000)
unshare(0x2c040000)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x700}, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xc50df59af6355517)

21m18.714859687s ago: executing program 2 (id=503):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x1, &(0x7f0000001480)={0x77359400})
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

21m15.247261635s ago: executing program 2 (id=510):
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

21m12.975500468s ago: executing program 2 (id=513):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r5, 0x0, 0x64004000)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x100000a, 0x4)
keyctl$invalidate(0x15, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x66, 0x32, 0x64, 0x61, 0x39, 0x65, 0x66, 0x38, 0x63, 0x33, 0x33, 0x37, 0x63, 0x38, 0x66]}, &(0x7f0000000440)={0x0, "ed1b75eeecb5e8a7524a4218a556552f85b62e85e00bd2efe074dc6dbc88c1bd7df7688b1ac5774e926ff8d71c7febfce772e4eab517cf4482f6fd94101a1142", 0x13}, 0x48, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1304000}, 0x20)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000400)={'wg2\x00', <r8=>0x0})
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x3, {0xbe, 0x1ff, 0x22d0, 0x9}})

20m57.94120336s ago: executing program 33 (id=513):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r5, 0x0, 0x64004000)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x100000a, 0x4)
keyctl$invalidate(0x15, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x66, 0x32, 0x64, 0x61, 0x39, 0x65, 0x66, 0x38, 0x63, 0x33, 0x33, 0x37, 0x63, 0x38, 0x66]}, &(0x7f0000000440)={0x0, "ed1b75eeecb5e8a7524a4218a556552f85b62e85e00bd2efe074dc6dbc88c1bd7df7688b1ac5774e926ff8d71c7febfce772e4eab517cf4482f6fd94101a1142", 0x13}, 0x48, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1304000}, 0x20)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000400)={'wg2\x00', <r8=>0x0})
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x3, {0xbe, 0x1ff, 0x22d0, 0x9}})

34.625529914s ago: executing program 1 (id=2963):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x200000d4)

34.353237453s ago: executing program 1 (id=2964):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0})
io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xdddd0000})

30.98818316s ago: executing program 1 (id=2969):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x7, 0x1, 0x4})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc04c5609, &(0x7f0000000400)=@userptr={0x6, 0x1, 0x4, 0x40, 0xf1, {}, {0x3, 0xc, 0x80, 0x4, 0x6, 0x2, "ab438f99"}, 0x3, 0x2, {0x0}, 0x800})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40080d0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [{}]}, 0x2c, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c0, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x2ac, 0x1, [@m_gact={0x278, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x24b, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x2c0}}, 0x20040800)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10)
close(r5)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x10000, 0x6, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @local}}}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1)

30.360989565s ago: executing program 1 (id=2973):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x200000d4)

30.077448361s ago: executing program 1 (id=2975):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="0100000000000000000044000000080003", @ANYRES32], 0x4c}}, 0x4000804)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

29.873275974s ago: executing program 1 (id=2976):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

12.469114484s ago: executing program 4 (id=3020):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x1c0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x14c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x88, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x2, 0x3, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

12.122123023s ago: executing program 4 (id=3022):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

11.127411025s ago: executing program 0 (id=3026):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB])
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x2, 0x3}}, 0x0}, &(0x7f0000000500)={0x24, &(0x7f0000000180)={0x0, 0x0, 0xd9, "866050ecb4a6286926229c4bf2aed7d3638cf25847e43f89becd0e103efd65881e9e133a5fab444d348e2519e7d5f8cadd2bea90857c02982f93608182964bad23171b9116804bdcb73658e6c9f2cf0580962872479af5b3a262eb66eb0b81958d1d143e8cbea5f1f1ee696116d5b4afc25a49f2953219036d84fd85461b98dc2bd746d9a6053aab4e888b138c78d597c07af6f76037505cf0d8d98964ebc824551a2ec509c3ad4d19b338035c2f303132cb0d0112a499a9b0b840f47c7801f9f2bca791f988fae6c63fc0beb2bdd88167fdecd3844094cde6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x8, 0x8001, 0x5, 0x6, 0x0, 0x3, 0x0, 0x8, 0x7, 0x8, 0x40, 0x1000}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0xfffffffa}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x200}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}})
read$char_usb(r2, &(0x7f0000000380)=""/69, 0x45)

10.769524625s ago: executing program 6 (id=3027):
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0)

9.519928604s ago: executing program 6 (id=3028):
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_setup(0x246d, 0x0)
io_uring_setup(0x2a5a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="81102000000000000000d800000000008d3054e1438e9c814ae05150f0e2a2cec83c11a7c222cabf6d76d40dbadf1b54ec516ec93b3c772fc4ac64ac66bae7a3fbacc2e5417219e01a856132e17bb386c3f62841225a8a8b425c740ec396c42622b9fec5177cee4a5c1877566029f25400bb74fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.457037949s ago: executing program 4 (id=3029):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x600, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0))
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}, {r5, 0x80}, {}], 0x35, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
iopl(0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
iopl(0x4)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xe0, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x641f, @mcast2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0xe0}}, 0x20008801)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502000000000009058b"], 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x6}, 0x1, 0x20000000, 0x6, r8, 0x0, 0x4, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, &(0x7f0000000ac0)={0x6, 0x1, 0x9, 0x10, '\x00', 0x35})
getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000040)={@dev, @private, @multicast2}, &(0x7f00000000c0)=0xc)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=@newlink={0x48, 0x10, 0x40b, 0x70bd2b, 0x500, {0x0, 0x0, 0x0, 0x0, 0x24f2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x48}}, 0x0)

7.82037731s ago: executing program 0 (id=3031):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x1c0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x14c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x88, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x2, 0x3, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

5.301379785s ago: executing program 0 (id=3033):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff)
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000006)
vmsplice(r0, 0x0, 0x0, 0x6)

5.122298432s ago: executing program 0 (id=3035):
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0)

4.997436655s ago: executing program 5 (id=3036):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sched_getscheduler(0x0)

4.260684136s ago: executing program 5 (id=3037):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.228758013s ago: executing program 0 (id=3038):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

4.097118988s ago: executing program 4 (id=3039):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
r3 = socket(0x15, 0x5, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, 0x0)
recvfrom$ax25(r3, 0x0, 0x0, 0x105, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
r7 = socket(0x2b, 0x1, 0x1)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)}, {&(0x7f0000002c80)="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", 0xb70}, {&(0x7f0000000540)="0074660afccf2ba33d121dd0279ded4fd3f1c04560af78768c155f99e05cdffaff864f9f2f34c6ea9af2d4a8be93f0ac2fa79276fcd18bbf2dc106576ae479c31e2d544ab3cb23f8afdadcdea150af148e1d243f3dfa53c7354635", 0x5b}], 0x3}}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback}, 0x2, 0x2, 0x1, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="a3c004b17973d99ccc049783230f23d3e816f55e03d40bad8c05a1ce17d467dc70b64ba1cbee1caa5e7390e2", 0x2c}], 0x1}}], 0x3, 0x2c000011)

3.848148308s ago: executing program 6 (id=3040):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(0xffffffffffffffff, 0xfffffffc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004011, 0x0, 0x0)

2.995454847s ago: executing program 5 (id=3041):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0)

2.599891578s ago: executing program 6 (id=3042):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0)

2.598635687s ago: executing program 4 (id=3043):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x3, &(0x7f0000006680))
pipe(&(0x7f0000000000))
socket(0x28, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

2.473367827s ago: executing program 5 (id=3044):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r0, 0x2)

2.389462216s ago: executing program 6 (id=3045):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000001140)={@val={0x800e, 0x6002}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x11, 0x0, @void}}}}}}}}, 0x32)

1.034827539s ago: executing program 5 (id=3046):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sched_getscheduler(0x0)

700.609614ms ago: executing program 0 (id=3047):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef)
connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x2, @local, 0x3, 0x4}, 0x20)
read$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

699.703208ms ago: executing program 4 (id=3048):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000300)={0x41, 0x2, 0x0, "444900d730faa901000000000000000000f789981008d7b15b5700e46b8be100", 0x50424752})
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbde25040000000c0016800800bf00ffffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x80000000, 0x20000000, 0x440, 0x821, 0x0, 0x1, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x887a], 0x0, 0x200306})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r6], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCSDEBUG(r8, 0x40047440, 0x0)
write$ppp(r8, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8000, 0x4, 0x80000000}, &(0x7f00000000c0)=0x10)

609.311738ms ago: executing program 5 (id=3049):
creat(&(0x7f0000000300)='./file0\x00', 0xc3)
r0 = inotify_init()
flistxattr(r0, &(0x7f0000002500)=""/191, 0xbf)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb6", 0x41}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d65", 0xc8}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274ef", 0x20}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001"], 0x0)

0s ago: executing program 6 (id=3050):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket(0x11, 0x1, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0xd67e3000)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r6, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)

kernel console output (not intermixed with test programs):

xpacket 59391, setting to 1024
[ 1523.081201][ T5877] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1523.088790][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1523.100553][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1523.112339][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1523.124316][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1523.140115][ T5877] usb 5-1: string descriptor 0 read error: -22
[ 1523.147237][ T5877] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1523.156431][ T5934] usb 2-1: Using ep0 maxpacket: 32
[ 1523.161675][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.174647][ T9011] usb 7-1: 0:2 : does not exist
[ 1523.184048][ T5934] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[ 1523.199891][T14211] usb 6-1: Using ep0 maxpacket: 32
[ 1523.210499][ T5934] usb 2-1: config 0 has no interface number 0
[ 1523.224072][ T5877] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1523.237069][T14211] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[ 1523.248489][ T9011] usb 7-1: USB disconnect, device number 47
[ 1523.256347][ T5934] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 1523.265439][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.274046][T14211] usb 6-1: config 0 has no interface number 0
[ 1523.280801][ T5934] usb 2-1: Product: syz
[ 1523.292143][T14211] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 1523.306343][ T5934] usb 2-1: Manufacturer: syz
[ 1523.311260][ T5934] usb 2-1: SerialNumber: syz
[ 1523.316177][T14211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.325676][T14211] usb 6-1: Product: syz
[ 1523.334431][ T5934] usb 2-1: config 0 descriptor??
[ 1523.353041][T14211] usb 6-1: Manufacturer: syz
[ 1523.353674][T16122] udevd[16122]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1523.361308][T14211] usb 6-1: SerialNumber: syz
[ 1523.385445][ T5934] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[ 1523.395516][ T5934] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[ 1523.412896][T14211] usb 6-1: config 0 descriptor??
[ 1523.438296][T14211] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[ 1523.446455][T14211] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[ 1523.467121][ T9071] usb 5-1: USB disconnect, device number 67
[ 1523.585785][ T5934] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[ 1523.593761][ T5934] usbhid 2-1:0.35: couldn't find an input interrupt endpoint
[ 1523.625098][T14211] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[ 1523.633066][T14211] usbhid 6-1:0.35: couldn't find an input interrupt endpoint
[ 1523.644199][T14211] usb 6-1: USB disconnect, device number 45
[ 1524.091449][ T9071] usb 2-1: USB disconnect, device number 74
[ 1525.482988][ T5934] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1525.523553][T16640] Process accounting resumed
[ 1525.644304][T16644] afs: Unknown parameter ''
[ 1526.376183][ T5934] usb 6-1: Using ep0 maxpacket: 8
[ 1526.386737][ T5934] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1526.405256][ T5934] usb 6-1: config 179 has no interface number 0
[ 1526.419712][ T5934] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[ 1526.535015][ T5934] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[ 1526.662740][T16651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2633'.
[ 1526.713738][T16651] syz.1.2633: attempt to access beyond end of device
[ 1526.713738][T16651] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1526.727478][T16651] hpfs: hpfs_map_sector(): read error
[ 1526.756620][ T5934] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1526.861202][ T5934] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1526.969502][ T5934] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1527.100711][ T5934] usb 6-1: config 179 interface 65 has no altsetting 0
[ 1527.116370][ T5934] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1527.166178][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.223752][T16635] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1527.306530][ T5934] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14
[ 1527.492767][ T5934] usb 6-1: USB disconnect, device number 46
[ 1527.498951][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1527.548858][ T5934] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1527.731778][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1527.731799][   T30] audit: type=1804 audit(1749174773.073:61): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2638" name="/newroot/352/file1" dev="fuse" ino=1 res=1 errno=0
[ 1527.804095][   T30] audit: type=1800 audit(1749174773.073:62): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2638" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1527.891547][   T30] audit: type=1800 audit(1749174773.073:63): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2638" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1528.901264][T16700] overlayfs: missing 'lowerdir'
[ 1528.966332][T14211] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1529.139854][T14211] usb 7-1: Using ep0 maxpacket: 32
[ 1529.162139][T14211] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[ 1529.180673][T14211] usb 7-1: config 0 has no interface number 0
[ 1529.202668][T14211] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 1529.216170][T14211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.241465][T14211] usb 7-1: Product: syz
[ 1529.260539][T14211] usb 7-1: Manufacturer: syz
[ 1529.265204][T14211] usb 7-1: SerialNumber: syz
[ 1529.281533][T14211] usb 7-1: config 0 descriptor??
[ 1529.303055][T14211] radio-si470x 7-1:0.35: could not find interrupt in endpoint
[ 1529.321030][T14211] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5
[ 1529.503675][T14211] radio-raremono 7-1:0.35: this is not Thanko's Raremono.
[ 1529.523935][T14211] usbhid 7-1:0.35: couldn't find an input interrupt endpoint
[ 1529.546411][T14211] usb 7-1: USB disconnect, device number 48
[ 1529.823515][T16706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1531.109813][T16723] Process accounting resumed
[ 1532.266380][ T5831] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1532.463325][ T5831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1532.487391][T16740] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1532.497264][ T5831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1532.553912][ T5831] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1533.057620][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1533.065736][ T5831] usb 5-1: SerialNumber: syz
[ 1533.544616][ T5831] usb 5-1: 0:2 : does not exist
[ 1534.027566][ T5831] usb 5-1: USB disconnect, device number 68
[ 1534.163962][T16122] udevd[16122]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1536.385240][T16781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1536.392948][T16781] IPv6: NLM_F_CREATE should be set when creating new route
[ 1536.498294][ T5831] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1536.531443][T16786] binder: 16785:16786 ioctl c0306201 200000000540 returned -22
[ 1536.598903][T16790] binder: 16785:16790 ioctl c0306201 200000000640 returned -22
[ 1536.603524][T16791] netlink: 'syz.0.2682': attribute type 1 has an invalid length.
[ 1536.646115][T12034] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1536.666099][ T5831] usb 5-1: Using ep0 maxpacket: 16
[ 1536.673074][T16791] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1536.675710][ T5831] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1536.684070][T16791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2682'.
[ 1536.703738][ T5831] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1536.729586][ T5831] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1536.753031][ T5831] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1536.762545][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1536.793833][ T5831] usb 5-1: config 0 has no interface number 0
[ 1536.814478][T12034] usb 7-1: Using ep0 maxpacket: 8
[ 1536.824985][ T5831] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1536.851489][T12034] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 1536.861023][T12034] usb 7-1: config 179 has no interface number 0
[ 1536.877109][ T5831] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1536.890715][T12034] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[ 1536.902272][ T5831] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1536.914245][T12034] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[ 1536.925717][ T5831] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1536.939222][T12034] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1536.950649][ T5831] usb 5-1: config 0 interface 125 has no altsetting 0
[ 1536.957540][T12034] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1536.967719][ T5831] usb 5-1: config 0 interface 125 has no altsetting 2
[ 1536.974670][T12034] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1537.054926][ T5831] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1537.065540][T12034] usb 7-1: config 179 interface 65 has no altsetting 0
[ 1537.073556][T12034] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1537.083514][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.092112][ T5831] usb 5-1: Product: syz
[ 1537.097420][T12034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1537.105655][ T5831] usb 5-1: Manufacturer: syz
[ 1537.114556][ T5831] usb 5-1: SerialNumber: syz
[ 1537.136674][T16783] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1537.185261][ T5831] usb 5-1: config 0 descriptor??
[ 1537.211167][T12034] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input15
[ 1537.249922][ T5831] usb 5-1: selecting invalid altsetting 2
[ 1537.456697][T12034] usb 7-1: USB disconnect, device number 49
[ 1537.462912][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1537.469669][   T30] audit: type=1326 audit(1749174782.803:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16774 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1537.564117][T12034] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1537.568134][   T30] audit: type=1326 audit(1749174782.833:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16774 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1537.598060][    C1] usb 5-1: async_complete: urb error -71
[ 1537.603930][    C1] usb 5-1: async_complete: urb error -71
[ 1537.609745][    C1] usb 5-1: async_complete: urb error -71
[ 1537.613839][   T30] audit: type=1326 audit(1749174782.833:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16774 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1537.615509][    C1] usb 5-1: async_complete: urb error -71
[ 1537.637980][   T30] audit: type=1326 audit(1749174782.833:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16774 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1537.678540][   T30] audit: type=1326 audit(1749174782.903:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16774 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1537.697642][ T5831] get_1284_register: usb error -71
[ 1537.707320][ T5831] uss720 5-1:0.125: probe with driver uss720 failed with error -71
[ 1537.726971][ T5831] usb 5-1: USB disconnect, device number 69
[ 1537.744032][T16791] bond6 (unregistering): Released all slaves
[ 1538.496234][   T30] audit: type=1326 audit(1749174782.903:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16774 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1539.029948][T16810] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2688'.
[ 1539.838557][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'.
[ 1539.896349][ T5831] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[ 1539.942163][T16810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1539.952197][T16810] bond_slave_0: left allmulticast mode
[ 1539.972404][T16810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1539.988880][T16810] bond_slave_1: left allmulticast mode
[ 1539.997056][T16810] bond0 (unregistering): Released all slaves
[ 1540.086301][T12034] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1540.094974][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1540.123979][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1540.142619][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[ 1540.156814][ T5831] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1540.165911][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1540.176346][ T5831] usb 5-1: Product: syz
[ 1540.180937][ T5831] usb 5-1: Manufacturer: syz
[ 1540.192947][ T5831] usb 5-1: SerialNumber: syz
[ 1540.202672][ T5831] usb 5-1: config 0 descriptor??
[ 1540.214901][T16816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1540.226323][T16816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1540.237243][ T5831] usb 5-1: ucan: probing device on interface #0
[ 1540.266777][T12034] usb 6-1: Using ep0 maxpacket: 8
[ 1540.274233][T12034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1540.286335][T12034] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1540.299292][T12034] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1540.308506][T12034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1540.317264][T12034] usb 6-1: Product: syz
[ 1540.321512][T12034] usb 6-1: Manufacturer: syz
[ 1540.326255][ T9011] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[ 1540.326910][T12034] usb 6-1: SerialNumber: syz
[ 1540.343060][T12034] usb 6-1: config 0 descriptor??
[ 1540.511045][ T9011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1540.522396][ T9011] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1540.545867][ T9011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[ 1540.559985][ T9011] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1540.569484][ T9011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1540.576492][T12034] usb 6-1: USB disconnect, device number 47
[ 1540.577931][ T9011] usb 2-1: Product: syz
[ 1540.590014][ T9011] usb 2-1: Manufacturer: syz
[ 1540.594780][ T9011] usb 2-1: SerialNumber: syz
[ 1541.439334][ T9011] usb 2-1: config 0 descriptor??
[ 1541.445191][ T5831] ucan 5-1:0.0 can0: registered device
[ 1541.457180][T16828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1541.464594][T16828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1541.471651][ T5831] ucan 5-1:0.0 can0: firmware string: ��>��Vi�RGߵ:�j��5��<��M_K*ӴSn���t!���)��Ow���`�kVo���������k��h�H�.�Q�;
[ 1541.528682][ T9011] usb 2-1: ucan: probing device on interface #0
[ 1541.691181][ T5934] usb 5-1: USB disconnect, device number 70
[ 1541.918245][T14211] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1542.076711][T14211] usb 1-1: Using ep0 maxpacket: 8
[ 1542.084926][T14211] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1542.099507][T14211] usb 1-1: config 179 has no interface number 0
[ 1542.115260][T14211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[ 1542.127638][T14211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[ 1542.165546][ T9011] ucan 2-1:0.0 can0: registered device
[ 1542.171186][T14211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1542.185358][T14211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1542.196464][T14211] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1542.210704][T14211] usb 1-1: config 179 interface 65 has no altsetting 0
[ 1542.218835][T14211] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1542.228629][T14211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.266271][T12034] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1542.266362][T16840] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1542.331161][T14211] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16
[ 1542.342988][ T9011] ucan 2-1:0.0 can0: firmware string: ��>��Vi�RGߵ:�j��5��<��M_K*ӴSn���t!���)��Ow���`�kVo���������k��h�H�.�Q�;
[ 1542.617060][T12034] usb 6-1: Using ep0 maxpacket: 16
[ 1542.631118][T12034] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1542.650253][T12034] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1542.670595][ T5831] usb 2-1: USB disconnect, device number 75
[ 1542.678095][T12034] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1542.695446][T12034] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1542.713623][  T917] usb 1-1: USB disconnect, device number 82
[ 1542.713629][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1543.054924][T12034] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1543.169788][  T917] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1543.627166][T12034] usb 6-1: config 0 has no interface number 0
[ 1543.633463][T12034] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1543.662541][T16863] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2701'.
[ 1543.662868][T12034] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1543.685715][T12034] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1543.696184][T12034] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1543.709771][T12034] usb 6-1: config 0 interface 125 has no altsetting 0
[ 1543.716949][T12034] usb 6-1: config 0 interface 125 has no altsetting 2
[ 1543.729420][T12034] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1543.765894][T12034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1543.794740][T12034] usb 6-1: Product: syz
[ 1543.808889][T12034] usb 6-1: Manufacturer: syz
[ 1543.813554][T12034] usb 6-1: SerialNumber: syz
[ 1543.845331][T12034] usb 6-1: config 0 descriptor??
[ 1543.877366][T12034] usb 6-1: selecting invalid altsetting 2
[ 1544.196113][   T30] audit: type=1326 audit(1749174789.513:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1544.441285][   T30] audit: type=1326 audit(1749174789.513:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1544.464511][   T30] audit: type=1326 audit(1749174789.513:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1544.499227][   T30] audit: type=1326 audit(1749174789.513:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1545.569180][T12034] get_1284_register timeout
[ 1545.573845][T12034] uss720 6-1:0.125: probe with driver uss720 failed with error -5
[ 1545.573905][    C1] usb 6-1: async_complete: urb error -104
[ 1545.587678][    C1] usb 6-1: async_complete: urb error -104
[ 1545.593620][    C1] usb 6-1: async_complete: urb error -104
[ 1545.599511][    C1] usb 6-1: async_complete: urb error -104
[ 1545.872365][   T30] audit: type=1326 audit(1749174789.573:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1545.894849][   T30] audit: type=1326 audit(1749174789.573:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1545.916536][   T30] audit: type=1326 audit(1749174790.983:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1545.938259][   T30] audit: type=1326 audit(1749174790.983:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1545.959984][   T30] audit: type=1326 audit(1749174790.983:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.5.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f78e929 code=0x7ffc0000
[ 1546.025785][T12034] usb 6-1: USB disconnect, device number 48
[ 1546.143959][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.183992][T16894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1546.191813][T16894] IPv6: NLM_F_CREATE should be set when creating new route
[ 1549.866092][T14211] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1549.956590][  T917] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[ 1550.230889][  T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1550.331570][  T917] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1550.351781][T14211] usb 5-1: Using ep0 maxpacket: 16
[ 1550.433667][  T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[ 1550.522555][T14211] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1550.531127][T14211] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1550.541815][T14211] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1550.541823][  T917] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1550.541850][  T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.550205][T14211] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1550.550232][T14211] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1550.550253][T14211] usb 5-1: config 0 has no interface number 0
[ 1550.550304][T14211] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1550.550331][T14211] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1550.550352][T14211] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1550.550386][T14211] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1550.550412][T14211] usb 5-1: config 0 interface 125 has no altsetting 0
[ 1550.642527][  T917] usb 6-1: Product: syz
[ 1550.657321][  T917] usb 6-1: Manufacturer: syz
[ 1550.662172][  T917] usb 6-1: SerialNumber: syz
[ 1550.754939][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'.
[ 1550.945721][T14211] usb 5-1: config 0 interface 125 has no altsetting 2
[ 1551.046097][  T917] usb 6-1: config 0 descriptor??
[ 1551.052160][T14211] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1551.138692][T14211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.242136][T14211] usb 5-1: Product: syz
[ 1551.301976][T14211] usb 5-1: Manufacturer: syz
[ 1551.360000][T14211] usb 5-1: SerialNumber: syz
[ 1551.543046][T14211] usb 5-1: config 0 descriptor??
[ 1551.603297][T16931] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1551.611085][T16931] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1551.659235][  T917] usb 6-1: ucan: probing device on interface #0
[ 1551.719226][T14211] usb 5-1: selecting invalid altsetting 2
[ 1551.866304][   T30] audit: type=1326 audit(1749174797.203:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1551.935685][   T30] audit: type=1326 audit(1749174797.243:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.014630][   T30] audit: type=1326 audit(1749174797.243:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.046305][ T9011] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1552.078619][   T30] audit: type=1326 audit(1749174797.243:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.106723][   T30] audit: type=1326 audit(1749174797.303:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.129033][   T30] audit: type=1326 audit(1749174797.303:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.162786][   T30] audit: type=1326 audit(1749174797.333:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.226252][   T30] audit: type=1326 audit(1749174797.333:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.248833][   T30] audit: type=1326 audit(1749174797.333:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.281113][ T9011] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.296144][ T9011] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1552.314097][   T30] audit: type=1326 audit(1749174797.333:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16927 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1552.436058][ T9011] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1552.551546][ T9011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1552.556911][  T917] ucan 6-1:0.0 can0: registered device
[ 1552.565456][ T9011] usb 7-1: SerialNumber: syz
[ 1552.777265][T14211] get_1284_register timeout
[ 1552.781505][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1552.785687][T14211] uss720 5-1:0.125: probe with driver uss720 failed with error -5
[ 1552.789679][    C0] usb 5-1: async_complete: urb error -104
[ 1552.789838][    C0] usb 5-1: async_complete: urb error -104
[ 1552.789980][    C0] usb 5-1: async_complete: urb error -104
[ 1552.801130][  T917] ucan 6-1:0.0 can0: firmware string: ��>��Vi�RGߵ:�j��5��<��M_K*ӴSn���t!���)��Ow���`�kVo���������k��h�H�.�Q�;
[ 1552.995829][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.010392][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x2
[ 1553.019922][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.070321][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.094552][  T917] usb 6-1: USB disconnect, device number 49
[ 1553.109893][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x3
[ 1553.135726][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.149342][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.159461][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.179648][ T9011] usb 7-1: 0:2 : does not exist
[ 1553.207783][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.247730][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.255204][ T5831] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[ 1553.286196][ T9011] usb 7-1: USB disconnect, device number 50
[ 1553.317140][ T5831] hid-generic 00A0:0008:0003.0016: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[ 1553.383463][T14211] usb 5-1: USB disconnect, device number 71
[ 1553.453783][T16102] udevd[16102]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1553.550979][T16959] fido_id[16959]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1553.626200][ T5831] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1553.655891][T16967] fuse: Unknown parameter '0x0000000000000003'
[ 1553.831330][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1553.864724][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1553.877520][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1553.891590][ T5831] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1553.951102][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1554.183004][ T5831] usb 1-1: config 0 descriptor??
[ 1554.959040][ T5831] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[ 1555.029109][ T5831] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[ 1555.123008][ T5831] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[ 1555.275190][ T5831] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[ 1555.444017][ T5831] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[ 1556.206144][ T5831] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[ 1556.226701][ T5831] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[ 1556.291514][T16985] veth41: entered promiscuous mode
[ 1556.364582][ T5831] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1556.567800][ T5831] usb 1-1: USB disconnect, device number 83
[ 1557.058190][T16991] fido_id[16991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1557.336052][ T9011] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1557.736052][T14211] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1557.916088][ T9011] usb 7-1: Using ep0 maxpacket: 8
[ 1557.979382][ T9011] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1558.506854][ T9011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.545770][ T9011] usb 7-1: Product: syz
[ 1558.566682][T14211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.586182][ T9011] usb 7-1: Manufacturer: syz
[ 1558.612495][ T9011] usb 7-1: SerialNumber: syz
[ 1558.625560][T14211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1558.663454][ T9011] usb 7-1: config 0 descriptor??
[ 1558.687685][T14211] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1558.750541][T14211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1558.802494][T14211] usb 5-1: SerialNumber: syz
[ 1558.914315][ T9011] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1559.074568][T14211] usb 5-1: 0:2 : does not exist
[ 1559.211597][T14211] usb 5-1: USB disconnect, device number 72
[ 1559.824625][T16102] udevd[16102]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1560.242493][ T5831] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1562.042981][ T5831] usb 6-1: Using ep0 maxpacket: 8
[ 1562.739199][ T9011] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1562.860003][ T5831] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1562.876036][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.896029][ T5831] usb 6-1: Product: syz
[ 1562.900983][ T5831] usb 6-1: Manufacturer: syz
[ 1562.905622][ T5831] usb 6-1: SerialNumber: syz
[ 1562.947863][  T917] usb 7-1: USB disconnect, device number 51
[ 1562.962725][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'.
[ 1563.001104][ T5831] usb 6-1: config 0 descriptor??
[ 1563.343715][ T5831] usb 6-1: can't set config #0, error -71
[ 1563.375234][ T5831] usb 6-1: USB disconnect, device number 50
[ 1563.496332][ T5876] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1563.706343][ T5876] usb 1-1: Using ep0 maxpacket: 32
[ 1563.942273][T17045] binder_alloc: 17044: binder_alloc_buf, no vma
[ 1563.959874][T17045] binder: 17044:17045 ioctl c0306201 200000001a80 returned -11
[ 1563.976877][ T5876] usb 1-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=86.5d
[ 1564.005396][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.021813][ T5876] usb 1-1: Product: syz
[ 1564.043728][ T5876] usb 1-1: Manufacturer: syz
[ 1564.057585][ T5876] usb 1-1: SerialNumber: syz
[ 1564.076582][ T5876] usb 1-1: config 0 descriptor??
[ 1564.255667][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2762'.
[ 1564.301459][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'.
[ 1564.325839][T17060] batadv0: entered promiscuous mode
[ 1564.348634][T17066] netlink: 'syz.6.2765': attribute type 1 has an invalid length.
[ 1564.372018][T17060] macsec1: entered allmulticast mode
[ 1564.379387][T17060] batadv0: entered allmulticast mode
[ 1564.475718][T17066] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2765'.
[ 1564.765868][T17066] bond0 (unregistering): Released all slaves
[ 1566.342360][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2770'.
[ 1566.633786][T14211] usb 1-1: USB disconnect, device number 84
[ 1567.803751][   T30] kauditd_printk_skb: 53 callbacks suppressed
[ 1567.805830][   T30] audit: type=1800 audit(1749174813.133:142): pid=17108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2777" name="file1" dev="tmpfs" ino=3033 res=0 errno=0
[ 1568.513503][T17089] team0 (unregistering): Port device team_slave_0 removed
[ 1568.562079][T17089] team0 (unregistering): Port device team_slave_1 removed
[ 1568.652346][T17116] netlink: 'syz.4.2779': attribute type 1 has an invalid length.
[ 1568.814488][T17116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2779'.
[ 1568.838407][T17116] bond3 (unregistering): Released all slaves
[ 1569.332759][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'.
[ 1569.422808][T14211] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1569.586208][T14211] usb 5-1: Using ep0 maxpacket: 16
[ 1569.953354][T14211] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1570.060915][T14211] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1570.152426][T14211] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1570.176640][T14211] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1570.184976][T14211] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1570.218918][T14211] usb 5-1: config 0 has no interface number 0
[ 1570.239636][T14211] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1570.269169][T14211] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1570.289828][T14211] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1570.316082][T14211] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1570.338282][T14211] usb 5-1: config 0 interface 125 has no altsetting 0
[ 1570.345160][T14211] usb 5-1: config 0 interface 125 has no altsetting 2
[ 1570.368920][T14211] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1570.386003][T14211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.394184][T14211] usb 5-1: Product: syz
[ 1570.398540][ T1213] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1570.416099][T14211] usb 5-1: Manufacturer: syz
[ 1570.420861][T14211] usb 5-1: SerialNumber: syz
[ 1570.432182][T14211] usb 5-1: config 0 descriptor??
[ 1570.451999][T14211] usb 5-1: selecting invalid altsetting 2
[ 1570.558796][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1570.581017][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1570.591300][ T1213] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[ 1570.602940][ T1213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1570.655093][ T1213] usb 6-1: config 0 descriptor??
[ 1570.668363][   T30] audit: type=1326 audit(1749174816.013:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1570.690045][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1570.702097][T17145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1570.753186][    C0] usb 5-1: async_complete: urb error -71
[ 1570.759277][    C0] usb 5-1: async_complete: urb error -71
[ 1570.765059][    C0] usb 5-1: async_complete: urb error -71
[ 1570.768063][   T30] audit: type=1326 audit(1749174816.013:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1570.770832][    C0] usb 5-1: async_complete: urb error -71
[ 1570.798389][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1570.798716][   T30] audit: type=1326 audit(1749174816.013:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1570.835116][   T30] audit: type=1326 audit(1749174816.013:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1570.857899][T14211] get_1284_register: usb error -71
[ 1570.863360][T14211] uss720 5-1:0.125: probe with driver uss720 failed with error -71
[ 1570.896218][ T5876] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1570.930224][   T30] audit: type=1326 audit(1749174816.013:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1570.972167][T14211] usb 5-1: USB disconnect, device number 73
[ 1570.997374][   T30] audit: type=1326 audit(1749174816.013:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1571.052216][   T30] audit: type=1326 audit(1749174816.013:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1571.091465][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1571.112036][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1571.121842][   T30] audit: type=1326 audit(1749174816.013:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1571.154562][   T30] audit: type=1326 audit(1749174816.013:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17125 comm="syz.4.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8eb4d8e929 code=0x7ffc0000
[ 1571.177319][ T5876] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1571.187539][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1571.195846][ T5876] usb 1-1: SerialNumber: syz
[ 1571.422411][T17151] syz_tun: entered allmulticast mode
[ 1571.459891][ T5876] usb 1-1: 0:2 : does not exist
[ 1571.570570][ T5876] usb 1-1: USB disconnect, device number 85
[ 1571.597750][T17150] syz_tun: left allmulticast mode
[ 1571.697457][T16122] udevd[16122]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1572.108679][ T1213] usbhid 6-1:0.0: can't add hid device: -71
[ 1572.114736][ T1213] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1572.151915][ T1213] usb 6-1: USB disconnect, device number 51
[ 1572.730092][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2797'.
[ 1572.747890][T17175] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2797'.
[ 1572.823688][ T5876] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[ 1573.706075][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1573.736817][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1573.769891][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[ 1573.793785][T17181] syz_tun: entered allmulticast mode
[ 1573.808982][ T5876] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1573.826030][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.830218][T17180] syz_tun: left allmulticast mode
[ 1573.834154][ T5876] usb 2-1: Product: syz
[ 1573.834174][ T5876] usb 2-1: Manufacturer: syz
[ 1573.834190][ T5876] usb 2-1: SerialNumber: syz
[ 1573.876702][ T5876] usb 2-1: config 0 descriptor??
[ 1573.882641][T17173] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1573.916173][T17173] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1573.935423][ T5876] usb 2-1: ucan: probing device on interface #0
[ 1573.966267][ T5831] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1574.155804][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2805'.
[ 1574.166272][ T5831] usb 1-1: Using ep0 maxpacket: 32
[ 1574.169975][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2805'.
[ 1574.198275][ T5831] usb 1-1: config 0 has no interfaces?
[ 1574.212442][ T5831] usb 1-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04
[ 1574.213801][T17187] batadv0: entered promiscuous mode
[ 1574.241780][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.259841][ T5831] usb 1-1: Product: syz
[ 1574.262584][T17187] macsec1: entered allmulticast mode
[ 1574.264100][ T5831] usb 1-1: Manufacturer: syz
[ 1574.274040][T17187] batadv0: entered allmulticast mode
[ 1574.290721][ T5831] usb 1-1: SerialNumber: syz
[ 1574.332505][ T5831] usb 1-1: config 0 descriptor??
[ 1574.410122][T17189] lo speed is unknown, defaulting to 1000
[ 1574.630030][ T5876] ucan 2-1:0.0 can0: registered device
[ 1574.768169][ T9011] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1574.917457][ T5876] ucan 2-1:0.0 can0: firmware string: ��>��Vi�RGߵ:�j��5��<��M_K*ӴSn���t!���)��Ow���`�kVo���������k��h�H
[ 1575.178706][ T5876] usb 2-1: USB disconnect, device number 76
[ 1575.297486][ T9011] usb 7-1: Using ep0 maxpacket: 8
[ 1575.391658][ T9011] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 1575.442427][ T9011] usb 7-1: config 179 has no interface number 0
[ 1575.468218][ T9011] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[ 1575.494399][  T917] usb 1-1: USB disconnect, device number 86
[ 1575.507148][ T9011] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[ 1575.543154][ T9011] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1575.575039][ T9011] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1575.597473][ T9011] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1575.616475][ T9011] usb 7-1: config 179 interface 65 has no altsetting 0
[ 1575.626254][ T9011] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1575.655450][ T9011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1575.675763][T17194] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1575.710716][ T9011] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input17
[ 1575.894155][ T9011] usb 7-1: USB disconnect, device number 52
[ 1575.900242][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1575.920318][ T9011] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1576.626145][ T1213] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1576.975098][ T1213] usb 1-1: Using ep0 maxpacket: 8
[ 1577.045133][ T1213] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1577.101006][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1577.200736][ T1213] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1577.422165][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1577.514325][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1577.847928][T17223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2814'.
[ 1577.870329][T17223] syz.5.2814: attempt to access beyond end of device
[ 1577.870329][T17223] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1577.883750][T17223] hpfs: hpfs_map_sector(): read error
[ 1577.999348][ T1213] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1578.136320][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1578.354940][ T1213] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1578.369091][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1578.384603][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1578.455433][ T1213] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1578.479710][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1578.546106][ T1213] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1578.584529][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1578.611720][ T1213] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1578.646148][ T1213] usb 1-1: string descriptor 0 read error: -22
[ 1578.652745][ T1213] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1578.691820][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1579.741418][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'.
[ 1579.880835][ T1213] usb 1-1: can't set config #168, error -71
[ 1580.309587][ T1213] usb 1-1: USB disconnect, device number 87
[ 1582.519300][T17264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2830'.
[ 1582.567562][T17264] syz.4.2830: attempt to access beyond end of device
[ 1582.567562][T17264] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1582.583151][T17264] hpfs: hpfs_map_sector(): read error
[ 1582.676592][T16619] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1583.186784][T16619] usb 2-1: Using ep0 maxpacket: 8
[ 1583.199029][T16619] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1583.216112][T16619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1583.224260][T16619] usb 2-1: Product: syz
[ 1583.240877][T16619] usb 2-1: Manufacturer: syz
[ 1583.251386][T16619] usb 2-1: SerialNumber: syz
[ 1583.272619][T16619] usb 2-1: config 0 descriptor??
[ 1583.320325][T17273] lo speed is unknown, defaulting to 1000
[ 1583.346992][ T5831] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1583.463376][T17279] overlay: Unknown parameter '/owerdir'
[ 1583.528962][ T5831] usb 1-1: Using ep0 maxpacket: 8
[ 1583.536913][ T5876] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1583.723138][ T5831] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1583.792383][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1583.838182][ T5876] usb 5-1: Using ep0 maxpacket: 8
[ 1583.871668][ T5831] usb 1-1: Product: syz
[ 1583.899050][ T5876] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1583.921502][ T5831] usb 1-1: Manufacturer: syz
[ 1583.956264][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1583.979643][ T5831] usb 1-1: SerialNumber: syz
[ 1583.992935][T16619] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1584.064376][ T5876] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1584.084844][ T5831] usb 1-1: config 0 descriptor??
[ 1584.215488][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1584.330240][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1584.502895][ T5831] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1584.511828][ T5876] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1584.520849][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1584.532886][ T5876] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1584.546003][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1584.557695][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1584.571345][ T5876] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1584.578877][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1584.590992][ T5876] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1584.603211][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1584.618107][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1584.640758][ T5876] usb 5-1: string descriptor 0 read error: -22
[ 1584.670092][ T5876] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1584.728259][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.752998][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2839'.
[ 1584.807332][ T5876] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1584.839322][T17285] batadv0: entered promiscuous mode
[ 1584.868022][T17285] macsec1: entered allmulticast mode
[ 1584.874059][T17285] batadv0: entered allmulticast mode
[ 1585.188504][ T5876] usb 5-1: USB disconnect, device number 74
[ 1586.136285][T16619] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1586.154510][T16619] usb 2-1: USB disconnect, device number 77
[ 1586.676148][ T5876] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1586.772838][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2852'.
[ 1586.806556][T12034] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1586.832525][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1586.859130][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1586.878879][ T5876] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1586.896916][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1586.905263][ T5876] usb 5-1: SerialNumber: syz
[ 1586.976362][T12034] usb 7-1: Using ep0 maxpacket: 8
[ 1586.985151][ T5831] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1586.999760][T12034] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1587.017698][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1587.029461][ T5831] usb 1-1: USB disconnect, device number 88
[ 1587.056421][T12034] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1587.081533][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1587.093169][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1587.118594][T12034] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1587.132223][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1587.148287][ T5876] usb 5-1: 0:2 : does not exist
[ 1587.169787][T12034] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1587.187726][ T5876] usb 5-1: USB disconnect, device number 75
[ 1587.197533][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1587.224573][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1587.267295][T16122] udevd[16122]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1587.286695][T12034] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1587.294376][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1587.311602][T12034] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1587.325601][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1587.337029][T12034] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1587.426947][T12034] usb 7-1: string descriptor 0 read error: -22
[ 1587.433516][T12034] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1587.444788][T12034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.498748][T12034] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1587.746143][T16619] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1587.936245][T16619] usb 6-1: Using ep0 maxpacket: 16
[ 1587.950072][T16619] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1587.968986][T16619] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1587.990059][T16619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1588.087245][T16619] usb 6-1: SerialNumber: syz
[ 1588.137927][T16619] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[ 1588.169629][T16619] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[ 1588.189366][T16619] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[ 1588.986432][T12034] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1589.074515][ T5916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1589.110531][ T5916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1589.226326][T12034] usb 2-1: Using ep0 maxpacket: 8
[ 1589.239411][T12034] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1589.249310][T12034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.265214][T12034] usb 2-1: Product: syz
[ 1589.282954][T12034] usb 2-1: Manufacturer: syz
[ 1589.295018][T12034] usb 2-1: SerialNumber: syz
[ 1589.325685][T12034] usb 2-1: config 0 descriptor??
[ 1589.430322][ T5916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1589.448182][ T5916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1589.554425][T15035] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1589.583420][T15035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1589.592951][T15035] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1589.617991][T16619] usb 7-1: USB disconnect, device number 53
[ 1589.619971][T12034] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1589.634379][T15035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1589.642769][T15035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1589.652294][ T5916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1589.667000][ T5916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1589.692323][T11545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1589.702033][T11545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1589.709718][T11545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1589.742426][T11545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1589.757151][T11545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1589.858932][ T5916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1589.935037][ T5916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1590.298822][T17351] lo speed is unknown, defaulting to 1000
[ 1591.123446][T16619] usb 6-1: USB disconnect, device number 52
[ 1591.235745][ T5916] bridge_slave_1: left allmulticast mode
[ 1591.244442][ T5916] bridge_slave_1: left promiscuous mode
[ 1591.253120][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1591.277193][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'.
[ 1591.287037][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'.
[ 1591.321414][ T5916] bridge_slave_0: left allmulticast mode
[ 1591.330903][ T5916] bridge_slave_0: left promiscuous mode
[ 1591.339031][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1591.351121][T12034] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1591.367078][T12034] usb 2-1: USB disconnect, device number 78
[ 1591.463896][ T5916] ip6gretap1: left allmulticast mode
[ 1591.469562][ T5916] ip6gretap1: left promiscuous mode
[ 1591.475500][ T5916] bridge2: port 1(ip6gretap1) entered disabled state
[ 1591.816619][T11545] Bluetooth: hci3: command tx timeout
[ 1592.989248][ T5916] bond5 (unregistering): (slave gretap1): Releasing active interface
[ 1593.050994][ T5916] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1593.307557][T17381] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2872'.
[ 1593.471174][ T1213] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1593.535236][T17379] overlayfs: missing 'lowerdir'
[ 1593.699121][ T1213] usb 2-1: device descriptor read/64, error -71
[ 1593.896239][T11545] Bluetooth: hci3: command tx timeout
[ 1593.990868][ T1213] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1594.226888][ T1213] usb 2-1: device descriptor read/64, error -71
[ 1594.336543][ T1213] usb usb2-port1: attempt power cycle
[ 1594.436141][ T9011] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1594.452218][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1594.461524][ T5916] bond_slave_0: left promiscuous mode
[ 1594.469735][ T5916] bond_slave_0: left allmulticast mode
[ 1594.476109][T16619] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1594.484454][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1594.493651][ T5916] bond_slave_1: left promiscuous mode
[ 1594.499590][ T5916] bond_slave_1: left allmulticast mode
[ 1594.506809][ T5916] bond0 (unregistering): Released all slaves
[ 1594.523051][ T5916] bond1 (unregistering): Released all slaves
[ 1594.538885][ T5916] bond2 (unregistering): Released all slaves
[ 1594.557935][ T5916] bond3 (unregistering): Released all slaves
[ 1594.577102][ T5916] bond4 (unregistering): Released all slaves
[ 1594.586144][ T9011] usb 7-1: Using ep0 maxpacket: 32
[ 1594.608637][ T9011] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1594.615311][ T5916] bond5 (unregistering): Released all slaves
[ 1594.623973][ T9011] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1594.633201][T16619] usb 6-1: Using ep0 maxpacket: 8
[ 1594.639985][ T9011] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1594.649809][ T9011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1594.660925][ T9011] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1594.696896][ T1213] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1594.705110][T16619] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1594.717503][ T9011] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1594.739140][T16619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.749267][T16619] usb 6-1: Product: syz
[ 1594.753498][T16619] usb 6-1: Manufacturer: syz
[ 1594.761107][ T1213] usb 2-1: device descriptor read/8, error -71
[ 1594.768853][ T9011] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1594.795977][T16619] usb 6-1: SerialNumber: syz
[ 1594.803913][ T9011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.812163][ T5916] tipc: Left network mode
[ 1594.821145][T16619] usb 6-1: config 0 descriptor??
[ 1594.881827][ T9011] usb 7-1: config 0 descriptor??
[ 1595.016542][ T1213] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1595.034909][T16619] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1595.075280][ T1213] usb 2-1: device descriptor read/8, error -71
[ 1595.191837][ T9011] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1595.220473][ T1213] usb usb2-port1: unable to enumerate USB device
[ 1595.270291][ T9011] usb 7-1: USB disconnect, device number 54
[ 1595.358037][T17351] chnl_net:caif_netlink_parms(): no params data found
[ 1595.358668][ T9011] usblp0: removed
[ 1595.976297][T11545] Bluetooth: hci3: command tx timeout
[ 1595.996406][ T9011] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1596.090750][T17351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1596.124678][T17351] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1596.156563][ T9011] usb 7-1: Using ep0 maxpacket: 32
[ 1596.161158][T17351] bridge_slave_0: entered allmulticast mode
[ 1596.174425][ T9011] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1596.192714][ T9011] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1596.207072][T17351] bridge_slave_0: entered promiscuous mode
[ 1596.212121][ T9011] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1596.248899][ T9011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1596.324317][T17351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1596.335203][T17351] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1596.352874][T17351] bridge_slave_1: entered allmulticast mode
[ 1596.357216][ T9011] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1596.400700][T17351] bridge_slave_1: entered promiscuous mode
[ 1596.402791][ T9011] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1596.418874][T17405] lo speed is unknown, defaulting to 1000
[ 1596.456449][ T9011] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1596.501261][ T9011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.540263][ T9011] usb 7-1: config 0 descriptor??
[ 1596.877826][T17351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1596.939611][T16619] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1596.971859][T16619] usb 6-1: USB disconnect, device number 53
[ 1596.989080][T17351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1597.119683][ T9011] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1597.238574][T17351] team0: Port device team_slave_0 added
[ 1597.302414][T17351] team0: Port device team_slave_1 added
[ 1597.376078][T12034] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1597.405144][T17351] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1597.412328][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1597.439282][T17351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1597.457285][T17351] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1597.466758][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1597.493852][T17351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1597.541387][T12034] usb 5-1: Using ep0 maxpacket: 8
[ 1597.552196][T12034] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1597.571406][T12034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.605053][T12034] usb 5-1: Product: syz
[ 1597.615215][T12034] usb 5-1: Manufacturer: syz
[ 1597.624972][T12034] usb 5-1: SerialNumber: syz
[ 1597.640891][T12034] usb 5-1: config 0 descriptor??
[ 1597.705523][T17351] hsr_slave_0: entered promiscuous mode
[ 1597.720302][T17351] hsr_slave_1: entered promiscuous mode
[ 1597.731634][T17351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1597.743794][T17351] Cannot create hsr debugfs directory
[ 1597.871825][T12034] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1597.976183][T16619] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1598.018740][ T5916] hsr_slave_0: left promiscuous mode
[ 1598.027297][ T5916] hsr_slave_1: left promiscuous mode
[ 1598.041830][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1598.060052][T11545] Bluetooth: hci3: command tx timeout
[ 1598.077224][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1598.094063][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1598.109690][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1598.151067][ T5916] veth0_macvtap: left promiscuous mode
[ 1598.160376][T17436] fuse: Bad value for 'fd'
[ 1598.168526][T16619] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1598.172890][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1598.172908][   T30] audit: type=1800 audit(1749174843.513:154): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2882" name="file1" dev="tmpfs" ino=3145 res=0 errno=0
[ 1598.179690][ T5916] veth1_vlan: left promiscuous mode
[ 1598.210755][T16619] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1598.235393][T16619] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1598.246272][T16619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1598.254440][T16619] usb 6-1: SerialNumber: syz
[ 1598.264037][ T5916] veth0_vlan: left promiscuous mode
[ 1598.513592][T16619] usb 6-1: 0:2 : does not exist
[ 1598.579082][T16619] usb 6-1: USB disconnect, device number 54
[ 1598.719591][T16102] udevd[16102]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1598.736241][  T917] usb 7-1: USB disconnect, device number 55
[ 1598.799881][  T917] usblp0: removed
[ 1598.934155][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2884'.
[ 1598.971131][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2884'.
[ 1599.562705][T12034] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1599.621810][T12034] usb 5-1: USB disconnect, device number 76
[ 1600.485644][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'.
[ 1600.713767][ T5916] team_slave_1 (unregistering): left promiscuous mode
[ 1600.738309][ T5916] team0 (unregistering): Port device team_slave_1 removed
[ 1600.841368][ T5916] team_slave_0 (unregistering): left promiscuous mode
[ 1600.899073][ T5916] team0 (unregistering): Port device team_slave_0 removed
[ 1603.351681][T17491] netlink: 'syz.4.2896': attribute type 4 has an invalid length.
[ 1603.440076][T17464] syz_tun: entered allmulticast mode
[ 1603.455364][T17468] syz_tun: left allmulticast mode
[ 1604.680158][T14211] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1604.846186][T14211] usb 5-1: Using ep0 maxpacket: 32
[ 1604.927975][T14211] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1604.944008][T14211] usb 5-1: config 0 has no interface number 0
[ 1604.965360][T14211] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1605.003283][T14211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.024372][T14211] usb 5-1: Product: syz
[ 1605.036029][T14211] usb 5-1: Manufacturer: syz
[ 1605.046067][T14211] usb 5-1: SerialNumber: syz
[ 1605.063372][T14211] usb 5-1: config 0 descriptor??
[ 1605.103200][T14211] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1605.133404][T14211] usb 5-1: selecting invalid altsetting 1
[ 1605.159987][T14211] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1605.248427][T14211] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1605.277204][T14211] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1605.293229][T14211] usb 5-1: media controller created
[ 1605.365647][T17490] usb 5-1: dvb_usb_ce6230: I2C read not implemented
[ 1605.433167][T14211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1605.518446][T14211] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1605.525811][T14211] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1605.585080][T14211] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1605.762513][T14211] usb 5-1: USB disconnect, device number 77
[ 1605.816271][ T5831] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1606.026269][ T5831] usb 6-1: Using ep0 maxpacket: 8
[ 1606.040636][ T5831] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1606.065299][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1606.099258][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1606.112641][T17351] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1606.133005][ T5831] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1606.160357][ T5831] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1606.164145][T17351] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1606.196949][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1606.270513][T17351] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1606.347381][T17351] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1606.435503][ T5831] usb 6-1: GET_CAPABILITIES returned 0
[ 1606.456119][ T5831] usbtmc 6-1:16.0: can't read capabilities
[ 1606.762346][T17351] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1606.797848][T17351] 8021q: adding VLAN 0 to HW filter on device team0
[ 1606.821447][ T5831] usb 6-1: USB disconnect, device number 55
[ 1606.891571][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1606.898835][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1607.013898][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2906'.
[ 1607.046503][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2906'.
[ 1607.075451][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1607.082752][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1607.322587][T17351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1607.387688][T14211] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1607.594427][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.977552][T14211] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1607.998098][T14211] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1608.013786][T14211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1608.046144][T14211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1608.068912][T14211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1608.105079][T14211] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1608.121537][T14211] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1608.138910][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2909'.
[ 1608.316190][T14211] usb 2-1: Product: syz
[ 1608.331873][T14211] usb 2-1: Manufacturer: syz
[ 1608.365118][T14211] cdc_wdm 2-1:1.0: skipping garbage
[ 1608.380597][T14211] cdc_wdm 2-1:1.0: skipping garbage
[ 1608.504447][T14211] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1608.540097][T14211] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1608.877928][T17563] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2911'.
[ 1608.896086][T14211] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1609.718846][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 7 bytes
[ 1609.746015][T14211] usb 7-1: Using ep0 maxpacket: 8
[ 1609.788105][T14211] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1609.797944][T14211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.809756][T14211] usb 7-1: Product: syz
[ 1609.819995][T14211] usb 7-1: Manufacturer: syz
[ 1609.824712][T14211] usb 7-1: SerialNumber: syz
[ 1609.843205][T14211] usb 7-1: config 0 descriptor??
[ 1609.903325][T17351] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1610.116280][T14211] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1610.190947][T17351] veth0_vlan: entered promiscuous mode
[ 1610.229133][T17351] veth1_vlan: entered promiscuous mode
[ 1610.501182][T17351] veth0_macvtap: entered promiscuous mode
[ 1610.541126][T17351] veth1_macvtap: entered promiscuous mode
[ 1610.628406][T17351] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1610.701985][T17351] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1610.772311][T17351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.820811][T17351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.838304][T17351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.848340][T17351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.976424][ T9011] usb 2-1: USB disconnect, device number 83
[ 1611.293494][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1611.356020][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1611.450238][ T7190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1611.458884][ T7190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1612.424998][T14211] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1612.440012][T14211] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[ 1612.457549][T14211] usb 7-1: media controller created
[ 1612.527078][T14211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1612.608862][T17593] netlink: 'syz.4.2918': attribute type 1 has an invalid length.
[ 1612.760072][T14211] i2c i2c-1: Added multiplexed i2c bus 2
[ 1612.760098][T14211] rtl2832 1-0010: Realtek RTL2832 successfully attached
[ 1612.761542][T14211] usb 7-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))...
[ 1612.762919][T14211] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
[ 1612.822011][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2918'.
[ 1612.834167][T17593] bond3 (unregistering): Released all slaves
[ 1612.976265][T14211] DVB: Unable to find symbol r820t_attach()
[ 1613.100268][T12034] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[ 1613.310113][T12034] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1613.359203][  T917] usb 7-1: USB disconnect, device number 56
[ 1613.386764][ T5831] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1613.405805][T12034] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1613.499455][T12034] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[ 1613.542362][T12034] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1613.572725][T12034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1613.582028][ T5831] usb 6-1: Using ep0 maxpacket: 8
[ 1613.601117][ T5831] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1613.633146][T12034] usb 1-1: Product: syz
[ 1613.643270][T12034] usb 1-1: Manufacturer: syz
[ 1613.648788][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1613.672837][T12034] usb 1-1: SerialNumber: syz
[ 1613.697799][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1613.710072][T12034] usb 1-1: config 0 descriptor??
[ 1613.717571][T17601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1613.755757][T17601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1613.768772][ T5831] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1613.799633][T12034] usb 1-1: ucan: probing device on interface #0
[ 1613.816130][ T5831] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1613.855944][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1614.090812][ T5831] usb 6-1: GET_CAPABILITIES returned 0
[ 1614.096438][ T5831] usbtmc 6-1:16.0: can't read capabilities
[ 1614.310417][ T5831] usb 6-1: USB disconnect, device number 56
[ 1614.599519][T12034] ucan 1-1:0.0 can0: registered device
[ 1614.790238][T12034] ucan 1-1:0.0 can0: firmware string: unknown
[ 1614.850106][T12034] usb 1-1: USB disconnect, device number 89
[ 1615.236195][T17625] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1615.243529][T17625] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1615.313349][T17625] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1615.366059][T16619] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[ 1615.579597][T15035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1615.580972][T16619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1615.600896][T15035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1615.610333][T15035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1615.626721][T15035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1615.637886][T15035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1615.678362][T16619] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1615.767096][T16619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[ 1615.943688][T17629] lo speed is unknown, defaulting to 1000
[ 1615.954063][T16619] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1615.976022][ T5831] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1615.977003][T16619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1616.020318][T16619] usb 6-1: Product: syz
[ 1616.044872][T16619] usb 6-1: Manufacturer: syz
[ 1616.055011][T16619] usb 6-1: SerialNumber: syz
[ 1616.059982][ T9011] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1616.077863][T16619] usb 6-1: config 0 descriptor??
[ 1616.093823][T17623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1616.115678][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1616.134853][T17623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1616.237252][ T5831] usb 1-1: Using ep0 maxpacket: 8
[ 1616.268177][ T5831] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1616.287631][T16619] usb 6-1: ucan: probing device on interface #0
[ 1616.321864][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1616.346528][ T9011] usb 2-1: Using ep0 maxpacket: 16
[ 1616.349237][ T5831] usb 1-1: Product: syz
[ 1616.400471][ T5831] usb 1-1: Manufacturer: syz
[ 1616.423370][ T5831] usb 1-1: SerialNumber: syz
[ 1616.463781][ T5831] usb 1-1: config 0 descriptor??
[ 1616.471400][T17644] netlink: 'syz.6.2928': attribute type 4 has an invalid length.
[ 1616.729340][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1616.774361][ T5831] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1616.926482][  T917] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1616.993812][ T5877] lo speed is unknown, defaulting to 1000
[ 1617.070891][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1617.098901][  T917] usb 7-1: Using ep0 maxpacket: 32
[ 1617.123375][  T917] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1617.136679][  T917] usb 7-1: config 0 has no interface number 0
[ 1617.159883][  T917] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1617.170205][  T917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.190840][  T917] usb 7-1: Product: syz
[ 1617.201055][  T917] usb 7-1: Manufacturer: syz
[ 1617.213407][  T917] usb 7-1: SerialNumber: syz
[ 1617.246908][  T917] usb 7-1: config 0 descriptor??
[ 1617.264226][T16619] ucan 6-1:0.0 can0: registered device
[ 1617.274563][  T917] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1617.293110][  T917] usb 7-1: selecting invalid altsetting 1
[ 1617.308368][  T917] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1617.335274][  T917] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1617.359475][  T917] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1617.380638][  T917] usb 7-1: media controller created
[ 1617.386681][T16619] ucan 6-1:0.0 can0: firmware string: ��>��Vi�RGߵ:�j��5��<��M_K*ӴSn���t!���)��Ow���`�kVo���������k��h�H�.
[ 1617.422742][  T917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1617.541829][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1617.597350][T16619] usb 6-1: USB disconnect, device number 57
[ 1617.666055][  T917] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1617.695754][  T917] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1617.730818][  T917] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1617.738900][T15035] Bluetooth: hci2: command tx timeout
[ 1618.177853][  T917] usb 7-1: USB disconnect, device number 57
[ 1618.213657][ T5831] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1618.838487][   T36] bridge_slave_1: left allmulticast mode
[ 1618.867029][   T36] bridge_slave_1: left promiscuous mode
[ 1618.889872][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1619.092354][   T36] bridge_slave_0: left allmulticast mode
[ 1619.108597][   T36] bridge_slave_0: left promiscuous mode
[ 1619.128812][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1619.826750][T15035] Bluetooth: hci2: command tx timeout
[ 1619.885005][ T1213] usb 1-1: USB disconnect, device number 90
[ 1619.925842][   T36] veth11: left allmulticast mode
[ 1619.976647][   T36] bridge2: port 1(veth11) entered disabled state
[ 1620.069157][   T36] veth13: left allmulticast mode
[ 1620.092143][   T36] bridge3: port 1(veth13) entered disabled state
[ 1620.167204][   T36] veth21: left allmulticast mode
[ 1620.206069][   T36] bridge4: port 1(veth21) entered disabled state
[ 1620.216022][ T9011] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1620.267724][ T9011] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1620.275413][ T9011] usb 2-1: can't read configurations, error -71
[ 1620.959106][T12034] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1620.965962][ T9011] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1621.159381][T12034] usb 1-1: Using ep0 maxpacket: 16
[ 1621.168907][ T9011] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1621.179720][ T9011] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1621.191191][ T9011] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1621.201256][ T9011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1621.210029][ T9011] usb 2-1: SerialNumber: syz
[ 1621.321361][   T36] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1621.444834][ T9011] usb 2-1: 0:2 : does not exist
[ 1621.457954][ T9011] usb 2-1: unit 255 not found!
[ 1621.491584][ T9011] usb 2-1: USB disconnect, device number 85
[ 1621.883210][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2938'.
[ 1621.896540][T15035] Bluetooth: hci2: command tx timeout
[ 1622.485525][ T5831] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1622.644985][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1622.684988][ T5831] usb 2-1: Using ep0 maxpacket: 32
[ 1622.701559][ T5831] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1622.719708][   T36] bond_slave_0: left promiscuous mode
[ 1622.726440][ T5831] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1622.747733][   T36] bond_slave_0: left allmulticast mode
[ 1622.782335][ T5831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1622.833722][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1622.863678][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1622.917884][   T36] bond_slave_1: left promiscuous mode
[ 1622.930964][   T36] bond_slave_1: left allmulticast mode
[ 1622.960985][ T5831] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1623.003195][   T36] bond0 (unregistering): Released all slaves
[ 1623.012778][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1623.126029][ T5831] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1623.128033][   T36] bond1 (unregistering): Released all slaves
[ 1623.135560][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1623.214657][   T36] bond2 (unregistering): Released all slaves
[ 1623.223408][ T5831] usb 2-1: config 0 descriptor??
[ 1623.284420][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'.
[ 1623.421416][T17629] chnl_net:caif_netlink_parms(): no params data found
[ 1623.462313][ T5831] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1623.523185][ T5831] usb 2-1: USB disconnect, device number 86
[ 1623.550074][ T5831] usblp0: removed
[ 1623.591525][   T36] tipc: Left network mode
[ 1623.680977][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2941'.
[ 1623.970902][   T36] IPVS: stopping master sync thread 16003 ...
[ 1623.996076][T15035] Bluetooth: hci2: command tx timeout
[ 1624.199766][T17629] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1624.220262][T17629] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1624.244310][T17629] bridge_slave_0: entered allmulticast mode
[ 1624.265757][T17629] bridge_slave_0: entered promiscuous mode
[ 1624.390818][T17629] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1624.516202][T17629] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1624.532054][T17629] bridge_slave_1: entered allmulticast mode
[ 1624.571648][T17629] bridge_slave_1: entered promiscuous mode
[ 1624.751641][T12034] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1624.760468][T12034] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1624.801351][T12034] usb 1-1: can't read configurations, error -71
[ 1624.861049][T17629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1624.961302][T17629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1624.981092][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2943'.
[ 1625.077849][  T917] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1625.278197][  T917] usb 2-1: Using ep0 maxpacket: 8
[ 1625.309594][  T917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1625.319562][T17629] team0: Port device team_slave_0 added
[ 1625.335231][  T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.372841][  T917] usb 2-1: Product: syz
[ 1625.383074][  T917] usb 2-1: Manufacturer: syz
[ 1625.413103][T17629] team0: Port device team_slave_1 added
[ 1625.427395][  T917] usb 2-1: SerialNumber: syz
[ 1625.444380][  T917] usb 2-1: config 0 descriptor??
[ 1625.612603][T17629] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1625.633297][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1625.663898][  T917] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1625.686689][T12312] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1625.725007][T17629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1625.828448][T17629] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1625.845419][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1625.906379][T12312] usb 7-1: Using ep0 maxpacket: 8
[ 1625.925858][T12312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1625.938405][T17629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1625.954968][T12312] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1625.965462][T12312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.035209][T12312] usb 7-1: config 0 descriptor??
[ 1626.299052][T12312] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1626.612519][T17629] hsr_slave_0: entered promiscuous mode
[ 1626.636743][T17629] hsr_slave_1: entered promiscuous mode
[ 1626.653708][T17629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1626.661842][T17629] Cannot create hsr debugfs directory
[ 1626.813734][   T36] hsr_slave_0: left promiscuous mode
[ 1626.839619][   T36] hsr_slave_1: left promiscuous mode
[ 1626.854565][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1626.865692][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1626.884002][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1626.904394][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1626.942456][   T36] batadv0: left allmulticast mode
[ 1626.948109][   T36] batadv0: left promiscuous mode
[ 1626.953869][   T36] team0: left allmulticast mode
[ 1626.963558][   T36] team_slave_0: left allmulticast mode
[ 1626.969594][   T36] team_slave_1: left allmulticast mode
[ 1626.975346][   T36] team0: left promiscuous mode
[ 1626.996684][   T36] team_slave_0: left promiscuous mode
[ 1627.002519][   T36] team_slave_1: left promiscuous mode
[ 1627.046184][   T36] veth0_macvtap: left promiscuous mode
[ 1627.053415][   T36] veth1_vlan: left promiscuous mode
[ 1627.080710][   T36] veth0_vlan: left promiscuous mode
[ 1627.103489][  T917] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1627.978887][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2950'.
[ 1628.606707][T12312] usb 2-1: USB disconnect, device number 87
[ 1629.236821][  T917] usb 7-1: USB disconnect, device number 58
[ 1629.289991][T17771] netlink: 'syz.1.2952': attribute type 1 has an invalid length.
[ 1629.693082][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2955'.
[ 1630.234266][   T36] team0 (unregistering): Port device team_slave_1 removed
[ 1630.302884][   T36] team0 (unregistering): Port device team_slave_0 removed
[ 1631.283217][T17771] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1631.308006][T17772] ip6erspan0: entered promiscuous mode
[ 1632.796071][ T9011] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1633.016879][ T9011] usb 1-1: Using ep0 maxpacket: 8
[ 1633.026742][ T9011] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1633.036243][ T9011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.166698][ T9011] usb 1-1: Product: syz
[ 1633.175567][ T9011] usb 1-1: Manufacturer: syz
[ 1633.225844][ T9011] usb 1-1: SerialNumber: syz
[ 1633.256714][ T9011] usb 1-1: config 0 descriptor??
[ 1633.305997][ T5877] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[ 1633.489349][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1633.702313][ T9011] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1633.714812][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1633.726796][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[ 1633.836330][ T5877] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1633.862592][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.962876][ T5877] usb 6-1: Product: syz
[ 1633.980614][ T5877] usb 6-1: Manufacturer: syz
[ 1633.994324][ T5877] usb 6-1: SerialNumber: syz
[ 1634.032556][ T5877] usb 6-1: config 0 descriptor??
[ 1634.098536][T17812] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1634.105865][T17812] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1634.136732][ T5877] usb 6-1: ucan: probing device on interface #0
[ 1634.269538][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2965'.
[ 1634.665461][T17629] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1634.913261][T17629] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1634.918685][ T5877] ucan 6-1:0.0 can0: registered device
[ 1635.019880][ T5877] ucan 6-1:0.0 can0: firmware string: ��>��Vi�RGߵ:�j��5��<��M_K*ӴSn���t!���)��Ow���`�kVo���������k��h�H�.
[ 1635.043158][T17629] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1635.065468][T17629] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1635.104930][ T9011] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1635.301135][ T5877] usb 6-1: USB disconnect, device number 58
[ 1635.434948][T17629] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1635.540520][T17629] 8021q: adding VLAN 0 to HW filter on device team0
[ 1635.577740][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1635.585415][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1635.647229][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1635.654572][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1636.488793][  T917] usb 1-1: USB disconnect, device number 93
[ 1636.797292][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'.
[ 1636.912224][T17629] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1637.135328][T17867] veth0_to_bond: entered promiscuous mode
[ 1637.258442][T17867] veth0_to_bond: left promiscuous mode
[ 1638.072881][T17629] veth0_vlan: entered promiscuous mode
[ 1638.078762][  T917] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1638.130403][T17629] veth1_vlan: entered promiscuous mode
[ 1638.152797][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'.
[ 1638.246853][  T917] usb 1-1: Using ep0 maxpacket: 16
[ 1638.276586][T17629] veth0_macvtap: entered promiscuous mode
[ 1638.279578][  T917] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1638.331584][T17629] veth1_macvtap: entered promiscuous mode
[ 1638.343336][  T917] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1638.368417][  T917] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1638.396911][  T917] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1638.432622][T17629] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1638.455212][  T917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1638.485310][  T917] usb 1-1: config 0 has no interface number 0
[ 1638.490031][T17629] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1638.511721][  T917] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1638.551732][  T917] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1638.555542][T17629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1638.568111][  T917] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1638.585988][  T917] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1638.608979][  T917] usb 1-1: config 0 interface 125 has no altsetting 0
[ 1638.646308][T17629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1638.649353][  T917] usb 1-1: config 0 interface 125 has no altsetting 2
[ 1638.655074][T17629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1638.655109][T17629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1638.690363][  T917] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1638.763880][  T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1638.775378][  T917] usb 1-1: Product: syz
[ 1638.781211][  T917] usb 1-1: Manufacturer: syz
[ 1638.789260][T12034] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1638.809814][  T917] usb 1-1: SerialNumber: syz
[ 1638.829172][  T917] usb 1-1: config 0 descriptor??
[ 1638.840808][  T917] usb 1-1: selecting invalid altsetting 2
[ 1638.860712][T17910] netlink: 'syz.6.2978': attribute type 1 has an invalid length.
[ 1638.956351][T12034] usb 6-1: Using ep0 maxpacket: 8
[ 1638.996967][T17910] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1638.997117][T12034] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1639.030730][T12034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1639.039060][T12034] usb 6-1: Product: syz
[ 1639.039082][T12034] usb 6-1: Manufacturer: syz
[ 1639.039098][T12034] usb 6-1: SerialNumber: syz
[ 1639.053265][   T30] audit: type=1326 audit(1749174884.393:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.100207][T12034] usb 6-1: config 0 descriptor??
[ 1639.123423][   T30] audit: type=1326 audit(1749174884.393:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.233878][   T30] audit: type=1326 audit(1749174884.393:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.325294][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1639.337687][   T30] audit: type=1326 audit(1749174884.393:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.354855][T12034] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1639.376168][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1639.392018][ T5877] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 1639.442215][ T5877] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1639.484417][   T30] audit: type=1326 audit(1749174884.393:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.533149][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1639.562884][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.589208][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.600609][   T30] audit: type=1326 audit(1749174884.393:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.606018][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1639.636097][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.677647][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.696548][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.704862][   T30] audit: type=1326 audit(1749174884.463:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.739440][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.775819][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.803981][   T30] audit: type=1326 audit(1749174884.463:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.826282][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.848411][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.886364][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.896354][  T917] get_1284_register timeout
[ 1639.905667][   T30] audit: type=1326 audit(1749174884.463:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1639.917663][    C1] usb 1-1: async_complete: urb error -104
[ 1639.930060][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1639.933398][    C1] usb 1-1: async_complete: urb error -104
[ 1639.946633][    C1] usb 1-1: async_complete: urb error -104
[ 1639.971106][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1640.032036][  T917] uss720 1-1:0.125: probe with driver uss720 failed with error -5
[ 1640.035958][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1640.063014][   T30] audit: type=1326 audit(1749174884.463:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17886 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319df8e929 code=0x7ffc0000
[ 1640.095388][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1640.113655][ T5877] hid-generic 00A0:0008:0003.0019: unknown main item tag 0x0
[ 1640.186125][ T5877] hid-generic 00A0:0008:0003.0019: hidraw1: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[ 1640.262336][ T5877] usb 1-1: USB disconnect, device number 94
[ 1640.485142][T17920] fido_id[17920]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1642.008953][T12034] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1642.036552][T12034] usb 6-1: USB disconnect, device number 59
[ 1642.332706][T11545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1642.342572][T11545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1642.352076][T11545] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1642.364176][T11545] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1642.373946][T11545] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1642.569307][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1642.580330][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1642.605091][T17938] lo speed is unknown, defaulting to 1000
[ 1643.252975][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1643.350730][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1643.807139][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1643.825562][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1644.063040][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2994'.
[ 1644.270415][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1644.496164][ T9011] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1644.507611][T15035] Bluetooth: hci1: command tx timeout
[ 1644.846602][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1644.963603][T17974] vlan2: entered allmulticast mode
[ 1644.968905][T17974] bond0: entered allmulticast mode
[ 1644.974148][T17974] bond_slave_0: entered allmulticast mode
[ 1644.979966][T17974] bond_slave_1: entered allmulticast mode
[ 1645.027343][ T9011] usb 6-1: Using ep0 maxpacket: 16
[ 1645.934197][T17980] vlan2: entered allmulticast mode
[ 1645.940131][T17980] bond0: entered allmulticast mode
[ 1645.945267][T17980] bond_slave_0: entered allmulticast mode
[ 1645.951149][T17980] bond_slave_1: entered allmulticast mode
[ 1646.347326][T17938] chnl_net:caif_netlink_parms(): no params data found
[ 1646.546487][T15035] Bluetooth: hci1: command tx timeout
[ 1647.317994][   T49] bridge_slave_1: left allmulticast mode
[ 1647.407516][   T49] bridge_slave_1: left promiscuous mode
[ 1647.433713][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1647.625316][   T49] bridge_slave_0: left allmulticast mode
[ 1647.777990][   T49] bridge_slave_0: left promiscuous mode
[ 1647.837841][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1647.933110][   T49] veth7: left allmulticast mode
[ 1647.946767][   T49] bridge1: port 1(veth7) entered disabled state
[ 1647.992476][   T49] veth15: left allmulticast mode
[ 1648.013483][   T49] bridge4: port 1(veth15) entered disabled state
[ 1648.112693][   T49] ip6gretap1: left allmulticast mode
[ 1648.152532][   T49] ip6gretap1: left promiscuous mode
[ 1648.189703][   T49] bridge7: port 1(ip6gretap1) entered disabled state
[ 1648.552466][ T9011] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1648.594648][ T9011] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1648.632004][T15035] Bluetooth: hci1: command tx timeout
[ 1648.645668][ T9011] usb 6-1: can't read configurations, error -71
[ 1650.205378][T18031] netlink: 'syz.5.3006': attribute type 11 has an invalid length.
[ 1650.757926][T15035] Bluetooth: hci1: command tx timeout
[ 1651.006506][ T9011] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1651.015778][   T49] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1651.213229][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3007'.
[ 1651.226463][ T9011] usb 6-1: device descriptor read/64, error -71
[ 1651.706258][ T9011] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1651.906147][ T9011] usb 6-1: device descriptor read/64, error -71
[ 1652.017341][ T9011] usb usb6-port1: attempt power cycle
[ 1652.367920][ T9011] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1652.403406][ T9011] usb 6-1: device descriptor read/8, error -71
[ 1652.444192][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1652.453787][   T49] bond_slave_0: left allmulticast mode
[ 1652.464853][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1652.474488][   T49] bond_slave_1: left allmulticast mode
[ 1652.481385][   T49] bond0 (unregistering): Released all slaves
[ 1652.495511][   T49] bond1 (unregistering): Released all slaves
[ 1652.656262][ T9011] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1652.690581][ T9011] usb 6-1: device descriptor read/8, error -71
[ 1652.698688][T17938] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1652.716227][T17938] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1652.726402][T17938] bridge_slave_0: entered allmulticast mode
[ 1652.745484][T17938] bridge_slave_0: entered promiscuous mode
[ 1652.785670][   T49] tipc: Left network mode
[ 1652.797198][T17938] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1652.806571][T17938] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1652.813874][T17938] bridge_slave_1: entered allmulticast mode
[ 1652.824690][ T9011] usb usb6-port1: unable to enumerate USB device
[ 1652.845063][T17938] bridge_slave_1: entered promiscuous mode
[ 1653.097298][   T49] IPVS: stopping master sync thread 15958 ...
[ 1653.523831][T17938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1653.654961][T18060] netlink: 'syz.4.3014': attribute type 1 has an invalid length.
[ 1653.719239][T18060] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1653.749087][T17938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1654.652054][ T5877] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1654.727050][T18060] ip6erspan0: entered promiscuous mode
[ 1654.966084][ T5877] usb 1-1: Using ep0 maxpacket: 8
[ 1654.973736][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1654.987076][ T5877] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1655.252874][ T5877] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1655.281198][T17938] team0: Port device team_slave_0 added
[ 1655.286966][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1655.286999][ T5877] usb 1-1: Product: syz
[ 1655.287016][ T5877] usb 1-1: Manufacturer: syz
[ 1655.287032][ T5877] usb 1-1: SerialNumber: syz
[ 1655.324666][ T5877] usb 1-1: config 0 descriptor??
[ 1655.424710][T17938] team0: Port device team_slave_1 added
[ 1655.655608][  T917] usb 1-1: USB disconnect, device number 95
[ 1655.799391][T17938] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1655.811063][T17938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1655.902955][T17938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1655.989358][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[ 1656.045693][T17938] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1656.078382][T17938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1656.158556][T17938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1657.191022][T17938] hsr_slave_0: entered promiscuous mode
[ 1657.231023][T17938] hsr_slave_1: entered promiscuous mode
[ 1657.356026][ T1213] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1657.684544][ T1213] usb 1-1: Using ep0 maxpacket: 32
[ 1658.116510][ T1213] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1658.155940][ T1213] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1658.202711][ T1213] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1658.219721][   T49] hsr_slave_0: left promiscuous mode
[ 1658.225630][   T49] hsr_slave_1: left promiscuous mode
[ 1658.234322][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1658.280214][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1658.288615][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1658.325952][ T1213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1658.366228][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1658.401297][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1658.431540][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1658.439079][ T1213] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1658.470980][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.502513][ T1213] usb 1-1: config 0 descriptor??
[ 1658.522861][   T49] veth0_macvtap: left promiscuous mode
[ 1658.529180][   T49] veth1_vlan: left promiscuous mode
[ 1658.534911][   T49] veth0_vlan: left promiscuous mode
[ 1658.738961][ T1213] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1659.225253][ T1213] usb 1-1: USB disconnect, device number 96
[ 1659.247042][ T1213] usblp0: removed
[ 1659.636108][T18123] usb 5-1: new low-speed USB device number 78 using dummy_hcd
[ 1659.675982][ T1213] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1659.814305][T18123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 32200, setting to 8
[ 1659.826056][T18123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[ 1659.826086][T18123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1659.826109][T18123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 152, changing to 4
[ 1659.846190][ T1213] usb 1-1: Using ep0 maxpacket: 32
[ 1659.889737][ T1213] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1659.938535][ T1213] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1659.960374][T18123] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[ 1659.976234][ T1213] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1660.024103][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1660.063171][T18123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.072766][ T1213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1660.092722][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1660.111067][T18123] usb 5-1: config 0 descriptor??
[ 1660.311439][ T1213] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1660.333117][T18131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1660.356431][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.626415][ T1213] usb 1-1: config 0 descriptor??
[ 1660.648295][ T1213] usb 1-1: can't set config #0, error -71
[ 1660.732298][ T1213] usb 1-1: USB disconnect, device number 97
[ 1661.618522][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1661.680309][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1663.688232][  T917] usb 5-1: USB disconnect, device number 78
[ 1663.875138][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'.
[ 1665.602128][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3043'.
[ 1667.410756][T18210] netlink: 'syz.4.3048': attribute type 11 has an invalid length.
[ 1667.615987][T18123] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1667.897049][T18123] usb 1-1: Using ep0 maxpacket: 8
[ 1667.905772][T18123] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1667.926130][T18123] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1667.938035][T18123] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1667.957649][T18123] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1667.975352][T18123] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1668.085983][ T5876] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1668.491679][T18123] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1668.879334][T18123] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1668.890332][T18123] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1668.901864][T18123] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1668.916475][T18212] kvm: requested 5028 ns i8254 timer period limited to 200000 ns
[ 1668.928956][T18123] usb 1-1: string descriptor 0 read error: -22
[ 1668.935392][T18123] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1668.951911][T18123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.973645][T18123] adutux 1-1:168.0: interrupt endpoints not found
[ 1668.989401][T18215] page: refcount:2 mapcount:0 mapping:ffff888148dcb678 index:0xd67e2 pfn:0x4d4f6
[ 1669.028693][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.053218][T18215] memcg:ffff88806ad93e80
[ 1669.058077][T18215] aops:def_blk_aops ino:fa00000
[ 1669.063090][T18215] flags: 0xfff00000000039(locked|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff)
[ 1669.073017][T18215] raw: 00fff00000000039 ffffea0001353d08 ffff88801ba8a428 ffff888148dcb678
[ 1669.081886][T18215] raw: 00000000000d67e2 0000000000000000 00000002ffffffff ffff88806ad93e80
[ 1669.091262][T18215] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index))
[ 1669.100014][T18215] page_owner tracks the page as allocated
[ 1669.106066][T18215] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 18213, tgid 18213 (syz.6.3050), ts 1667974738580, free_ts 1667625280308
[ 1669.127350][T18215]  post_alloc_hook+0x240/0x2a0
[ 1669.132472][T18215]  get_page_from_freelist+0x21d5/0x22b0
[ 1669.135994][T12312] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1669.146346][T18215]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1669.152465][T18215]  alloc_pages_mpol+0x232/0x4a0
[ 1669.225323][ T5876] usb 6-1: Using ep0 maxpacket: 8
[ 1669.335360][T18215]  alloc_pages_noprof+0xa9/0x190
[ 1669.340566][T18215]  folio_alloc_noprof+0x1e/0x30
[ 1669.345471][T18215]  filemap_alloc_folio_noprof+0xdf/0x470
[ 1669.351439][T18215]  page_cache_ra_order+0x5e5/0xc70
[ 1669.356842][T18215]  do_sync_mmap_readahead+0x4b5/0x5f0
[ 1669.362258][T18215]  filemap_fault+0x62a/0x1200
[ 1669.367035][T18215]  __do_fault+0x135/0x390
[ 1669.371508][T18215]  __handle_mm_fault+0x198b/0x5620
[ 1669.376723][T18215]  handle_mm_fault+0x2d5/0x7f0
[ 1669.381569][T18215]  do_user_addr_fault+0xa81/0x1390
[ 1669.386819][T18215]  exc_page_fault+0x76/0xf0
[ 1669.391372][T18215]  asm_exc_page_fault+0x26/0x30
[ 1669.396340][T18215] page last free pid 16122 tgid 16122 stack trace:
[ 1669.402967][T18215]  __free_frozen_pages+0xc65/0xe60
[ 1669.408235][T18215]  __slab_free+0x326/0x400
[ 1669.412790][T18215]  qlist_free_all+0x97/0x140
[ 1669.417598][T18215]  kasan_quarantine_reduce+0x148/0x160
[ 1669.423225][T18215]  __kasan_slab_alloc+0x22/0x80
[ 1669.428260][T18215]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1669.433766][T18215]  getname_flags+0xb8/0x540
[ 1669.438379][T18215]  do_sys_openat2+0xbc/0x1c0
[ 1669.443009][T18215]  __x64_sys_openat+0x138/0x170
[ 1669.448197][T18215]  do_syscall_64+0xfa/0x3b0
[ 1669.452758][T18215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1669.458932][T18215] ------------[ cut here ]------------
[ 1669.464416][T18215] kernel BUG at mm/filemap.c:3442!
[ 1669.469660][T18215] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1669.475982][T18215] CPU: 0 UID: 0 PID: 18215 Comm: syz.6.3050 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) 
[ 1669.487901][T18215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1669.498162][T18215] RIP: 0010:filemap_fault+0x117d/0x1200
[ 1669.503744][T18215] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 5d 5f 29 00 e9 81 fc ff ff e8 83 18 c8 ff 48 89 df 48 c7 c6 a0 2e 94 8b e8 c4 a7 0d 00 90 <0f> 0b e8 6c 18 c8 ff 48 8b 3c 24 48 c7 c6 20 35 94 8b e8 ac a7 0d
[ 1669.523407][T18215] RSP: 0018:ffffc9000b4bf280 EFLAGS: 00010246
[ 1669.529541][T18215] RAX: 605fe0f4379cd300 RBX: ffffea0001353d80 RCX: 0000000000000000
[ 1669.537542][T18215] RDX: 0000000000000000 RSI: ffffffff8d96929a RDI: 00000000ffffffff
[ 1669.545630][T18215] RBP: ffffc9000b4bf3b8 R08: ffffffff8f9fd6f7 R09: 1ffffffff1f3fade
[ 1669.553630][T18215] R10: dffffc0000000000 R11: fffffbfff1f3fadf R12: dffffc0000000000
[ 1669.561630][T18215] R13: 1ffffd400026a7b1 R14: ffffea0001353d98 R15: ffffea0001353d88
[ 1669.569628][T18215] FS:  00007fa990c6c6c0(0000) GS:ffff888125c89000(0000) knlGS:0000000000000000
[ 1669.578583][T18215] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1669.585196][T18215] CR2: 0000001b32b07ff8 CR3: 0000000034cec000 CR4: 00000000003526f0
[ 1669.593220][T18215] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1669.601218][T18215] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1669.609215][T18215] Call Trace:
[ 1669.612550][T18215]  <TASK>
[ 1669.615515][T18215]  ? __pfx_filemap_fault+0x10/0x10
[ 1669.620667][T18215]  __do_fault+0x135/0x390
[ 1669.625087][T18215]  __handle_mm_fault+0x198b/0x5620
[ 1669.630263][T18215]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1669.635830][T18215]  ? follow_page_pte+0x8d6/0x14b0
[ 1669.641059][T18215]  ? __pfx_mtree_load+0x10/0x10
[ 1669.645943][T18215]  handle_mm_fault+0x2d5/0x7f0
[ 1669.650747][T18215]  ? vma_is_secretmem+0xd/0x50
[ 1669.655980][T18215]  __get_user_pages+0x1af4/0x30b0
[ 1669.661060][T18215]  ? __pfx___get_user_pages+0x10/0x10
[ 1669.666553][T18215]  faultin_page_range+0x257/0x890
[ 1669.671697][T18215]  ? blk_start_plug+0x6f/0x1b0
[ 1669.676509][T18215]  madvise_do_behavior+0x232/0x2e70
[ 1669.681986][T18215]  ? __lock_acquire+0xab9/0xd20
[ 1669.686886][T18215]  ? __pfx_madvise_do_behavior+0x10/0x10
[ 1669.692655][T18215]  ? __pfx___might_resched+0x10/0x10
[ 1669.698074][T18215]  ? io_handle_tw_list+0x468/0x4c0
[ 1669.703225][T18215]  ? __lock_acquire+0xab9/0xd20
[ 1669.708110][T18215]  ? madvise_lock+0xda/0x200
[ 1669.712752][T18215]  do_madvise+0x174/0x220
[ 1669.717131][T18215]  ? __pfx_do_madvise+0x10/0x10
[ 1669.722277][T18215]  ? rcu_is_watching+0x15/0xb0
[ 1669.727166][T18215]  __x64_sys_madvise+0xa7/0xc0
[ 1669.731968][T18215]  do_syscall_64+0xfa/0x3b0
[ 1669.736507][T18215]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1669.741743][T18215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1669.747828][T18215]  ? clear_bhb_loop+0x60/0xb0
[ 1669.752699][T18215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1669.758617][T18215] RIP: 0033:0x7fa98fd8e929
[ 1669.763058][T18215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1669.782688][T18215] RSP: 002b:00007fa990c6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 1669.791139][T18215] RAX: ffffffffffffffda RBX: 00007fa98ffb6080 RCX: 00007fa98fd8e929
[ 1669.799135][T18215] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000
[ 1669.807130][T18215] RBP: 00007fa98fe10b39 R08: 0000000000000000 R09: 0000000000000000
[ 1669.815128][T18215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1669.823130][T18215] R13: 0000000000000000 R14: 00007fa98ffb6080 R15: 00007fff128c81d8
[ 1669.831137][T18215]  </TASK>
[ 1669.834181][T18215] Modules linked in:
[ 1669.839094][T18215] ---[ end trace 0000000000000000 ]---
[ 1669.844611][T18215] RIP: 0010:filemap_fault+0x117d/0x1200
[ 1669.851055][T18215] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 5d 5f 29 00 e9 81 fc ff ff e8 83 18 c8 ff 48 89 df 48 c7 c6 a0 2e 94 8b e8 c4 a7 0d 00 90 <0f> 0b e8 6c 18 c8 ff 48 8b 3c 24 48 c7 c6 20 35 94 8b e8 ac a7 0d
[ 1669.870864][T18215] RSP: 0018:ffffc9000b4bf280 EFLAGS: 00010246
[ 1669.877098][T18215] RAX: 605fe0f4379cd300 RBX: ffffea0001353d80 RCX: 0000000000000000
[ 1669.885106][T18215] RDX: 0000000000000000 RSI: ffffffff8d96929a RDI: 00000000ffffffff
[ 1669.893158][T18215] RBP: ffffc9000b4bf3b8 R08: ffffffff8f9fd6f7 R09: 1ffffffff1f3fade
[ 1669.901204][T18215] R10: dffffc0000000000 R11: fffffbfff1f3fadf R12: dffffc0000000000
[ 1669.909268][T18215] R13: 1ffffd400026a7b1 R14: ffffea0001353d98 R15: ffffea0001353d88
[ 1669.917413][T18215] FS:  00007fa990c6c6c0(0000) GS:ffff888125c89000(0000) knlGS:0000000000000000
[ 1669.926512][T18215] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1669.933418][T18215] CR2: 0000001b32b07ff8 CR3: 0000000034cec000 CR4: 00000000003526f0
[ 1669.941479][T18215] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1669.949651][T18215] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1669.957919][T18215] Kernel panic - not syncing: Fatal exception
[ 1669.964374][T18215] Kernel Offset: disabled
[ 1669.968699][T18215] Rebooting in 86400 seconds..