last executing test programs:

12.969477679s ago: executing program 0 (id=289):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_proto_private(r0, 0x89e2, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async)
close(0x3) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = dup(r6)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xf4)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0xa, 0x1c6c64, 0x3241eb})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x9, 0xda51}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, 0x0, &(0x7f0000000100)) (async)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) (async)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0x1a, 0x1, 0xb}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

12.353590915s ago: executing program 0 (id=291):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x800)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)

9.877455729s ago: executing program 1 (id=304):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x3ab2c1)
syz_open_dev$dri(0x0, 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0)
syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001940)=@buf)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x271c, &(0x7f00000001c0)=""/12, &(0x7f0000000000)=0xc)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)

8.630768904s ago: executing program 0 (id=306):
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x20, 0x0, 0xb, r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x11a, @loopback}, 0x1c)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvfrom$inet6(r2, 0x0, 0x0, 0x8040, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, <r5=>0x0, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
futimesat(r6, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r4, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x1, 0x1, &(0x7f0000000000)='L', 0x5})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)=0x21)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="500100001000130428bd700000000000fe88000000000000000000000000000164010100000000000000000000000000000000004e2400000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084)

7.980414951s ago: executing program 3 (id=307):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1)
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x2, 0x2c1})
r2 = socket(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000971000010400"/20, @ANYRES32=0x0, @ANYBLOB="9001010000000000280012800b000100697036746e6c000018000280140003002001000000000000000000000000000108001f0003000000"], 0x50}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b42d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345590cfb8c50a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab0300000000000000f2b025ba137b8e3f933af28e1ea9984bc0438ea00b407a946d4dc7d347d526db0e71bb38f873937ca7343fb71a8867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2e629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b3fb5000000000000bd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c3350735442bfdb3193914f52189298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091e8d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929db82762faf2e2bcad00000000f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee84d613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b3ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e14e47ae8071182af80950c43baff03000000000000a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf0100000000000000a0fc96593383458ea0d575ddfe59706738d1e65c50527200"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r2, &(0x7f0000000040)='\"', 0xfe20)
close_range(r1, 0xffffffffffffffff, 0x0)
dup(r0)
fanotify_init(0x200, 0x0)
syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8)
r7 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x20000000)
open_tree(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x1200)
syz_io_uring_setup(0x2b8, &(0x7f0000000000)={0x0, 0x1ccb, 0x800, 0x1, 0xcb, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000006c0)={{0x25000, 0x2000, 0x3, 0x6, 0x80, 0x41, 0xfd, 0x80, 0x80, 0x1d, 0x1, 0xa}, {0x22220fff, 0x2000, 0x4, 0x4, 0x32, 0x81, 0xe9, 0xc, 0x3, 0x4, 0x3, 0x7f}, {0xdddd1000, 0x3000, 0xb, 0xf, 0xf8, 0x5, 0x1, 0xed, 0x97, 0x9, 0x40, 0x5a}, {0x30000, 0x7000, 0x8, 0x6, 0x8, 0x4, 0x89, 0x0, 0x4, 0x2, 0x0, 0x4}, {0x1000, 0x80a0000, 0x0, 0x4c, 0x49, 0x4, 0x6, 0xb, 0x4, 0x2, 0x7, 0x4}, {0x8080000, 0x70000, 0xc, 0xff, 0x80, 0x1, 0x40, 0x6, 0x4, 0x6, 0x2, 0xea}, {0xfec2d002, 0x18000, 0xe, 0x0, 0x2, 0x6, 0x5, 0x2, 0x0, 0x0, 0xc, 0x43}, {0x2, 0x200000, 0x10, 0x7d, 0x81, 0x7b, 0xb4, 0x6, 0x9, 0x0, 0x7, 0x89}, {0x80a0000, 0x5}, {0xd000, 0x2}, 0xe0040008, 0x0, 0x80a0000, 0x24207a, 0x6, 0x1, 0xeeee0000, [0x400000, 0x40, 0x4, 0x9]})

7.503101823s ago: executing program 1 (id=310):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x703c28, 0x0, {0x2, 0x80, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x1100}, [@RTA_DST={0x8, 0x1, @broadcast}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040880}, 0xea5bc50b6199d77e)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x1076}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX], 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>r0})
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5bc, 0x12, 0x400, 0x70bd2a, 0x25dfdbfc, {0x25, 0x4, 0x7, 0x81, {0x4e23, 0x4e22, [0x8, 0x3, 0x81], [0x6, 0xfffffffd, 0xdfa8, 0x5], 0x0, [0x6, 0x3]}, 0x2, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "e8d6d8c56a87dcc5d41a931b51a0c34eac2bebfc068abb89b445553d3de1313e6ec36b56e23d2b3da9c179937da535c8828d4f0b7752cb2afbd4480f0b4185af5b2c70740b30a200b283d81ada610ce16a9f1d16a553f784d77e17fafd878ee7d923e3ee3d7393b851fa68f97dd9b00a72c864de56c42ef2f3f11bf9d824ddfa8348308e9e92a6e8353812470c697945229a"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "28d93d466f7c5d84b7ba7708962dd7568f748038fb2576507f9ded868a5b2611f16790b9fb3bfef4ee9b5734049a6349b561a135b6f2212baf97e5ad905d390c3596e8da4295da9ddfeea35759adcbc946211144d8e85ab40408c21747f6b4c23271d85f4e3a7e4d0e33666ec41c96041d79e0ed6e666719aca19b6c52ad0de657"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "eb6962f6486eac77ececb293312dce273fd986c98e005e76f36e5e4d0ca47a909cfccca8b829360a4c5aee6e540233e85a79ef825fdd80377ff001774cfe14bbb13e7abbac5e0c7d00e7b5b7a83e3bffc5bffdaef2ebbd1105b75237c74b9b98a37b92a25f11be1f0b98da16a4d127e394e3b4baf58bcd3bbb4a402ae94da65059da7ce98a3b7f9af93250c60846ef050bc83599a31d9820afe79916afe6aceff0f0f328b1221ad80910595dc6323d759e794d69750acf08f37647"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "e010729577d5aacb36f9f0e0fb9771ef46a5ca5c31e2061cfd2aa8c43608ef26219de8e5656d35b5bf6b54f0810f2a3f29f795fc88"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "28272180f600124d39b1082d8eece1b879e26d66a27c963900a0ceb9c9a6e8416ff893911985178cbe5df5338c89b5acd93a115ec33692724b29f4782045ce19757cfec5d13051b5ece6ba450c99841dc9edc1"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "37199532453cf2f4896f796d892a54903017fabac631e5b46c80631b30ca9d1ab2dce81adfe1ea21e556d73ec15328c5252dcded3e235b044b5987baf9f7928ede33047277494ac48fd4d6de2eab24d716b15072aa5093938997b661b855d17e75500ccbfa2c5336eb0f37f9e7aadb0807b1b73e2c898f5098d26f04cf9d2e93be1e57d3a5743f605d591b29aabead608a093996907d62a3eaac586ec40e2373408c7e261d4f24502b800318db802c9996eccef26107a70a1b484c2f8ee6c0dd96"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "fb0ebc0a45901fed92ad6c97ffeab72c195753479521482ed4b511b866fe6114fa14b85f6df69d013668bff9959926bb88dbe3187172cbbe079af4a09d98c4195d2ea8accccad472e46eae0682e4d96e20c3b1af53f453b955efa60a6919143d8a2ffd1d60e8d983c650bd2843094d36ec54ceb0512e43b306465dacbeefb66f5918070bc534b4a4f19a5c33eb272ef288ff8f9a96dcdd9d0f9427b708c4e117de2f213a31f45bb4e33c955ba4a611d0245ecea31aaea19f66d542"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "f6e92b4980b8286912591789236b7c854f6265e35e4361cbf8aab8212fa72d494fd99c4962edbf468d18958f807b16568da11f7d6544f636689fe0453aa436ff34fc7d2c3f007b37b341b54b5b14b5b69280ac51eb5b7b1f75b488952a937c6222467a68330a2d9441eac777d1535295093ef888658b9989bba4bf5e07ed4fe3a95bda1884bf056f10c7828c7e513efbca944b286303d513b32878ad6b264866b354cb346b8011174b2333931ec5ed779c8dc053f35a25acbbc9dd6e1222c2b2ea1a9fe1a2e3309ac08b6946430c805c1b7b6fe9efab76db0a308e79"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "fd24c0316dcd268fe27d39a996845f933d6bfc927667bf25af3b869033b67a360d646ed667c594a330ab25da5bbe367da424401347079d16cb8fd36e2f0c5a2541948e831b787c491d6371c23ab6e0063b559e336b359799e490bbd3b20165c49b0628414cfee71fde0dcec9f5cfd2a3004dca6d943a560a15"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "ada9560f99bb0628af4a19138c3667"}]}, 0x5bc}}, 0x4004080)

7.441713368s ago: executing program 0 (id=311):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x10}}]}}, 0x0)
syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x48, 0x93, 0xa7, 0x10, 0x3fd, 0xebbe, 0x9a63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xfb}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8, 0x1, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @rand_addr=0x200}}}})
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xc7c}}}}, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x1, 0x2, "af8f"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xd0}})

6.956222745s ago: executing program 3 (id=312):
socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x6000, @fd_index=0x1, 0x0, 0x90d, 0x4, 0x1})
io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)

6.53998108s ago: executing program 2 (id=313):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280))
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
r2 = socket(0x1000000000000010, 0x80802, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)
sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0xfe}]}, 0x10)

6.126105702s ago: executing program 4 (id=314):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100)="c48cf427c1fdcf6a4e90414d833cfc7363b59148733137785bc12297fc6b63df41438b6e64de2539fb5ced080714b800706203ccac28d2dfa43e13f8fa9026f81b8c4f8349ab1cbb9abae33973f8807338f18e47c6b426e097adcfdce9466e2337fe0deaecf2f1921756e5b59377e56ebac51bde5cbeb742f8b9980fa1e351dc7a47da3e555d7cf432058950360218", &(0x7f00000001c0)="b6e2bb89cd26868f59d5e2676714f5168ca38b21c2f5bbd4370b70f965ee691e0a3d8c4b4afd0ce7d9951de772df02e3e9b59d1020fbe40e826dc657908beac8c3f34dc20fed4fc9735a180987649f1f3c02513df99ddf5ce453d0e1970e4f751c9969b18a126467d5fb4da9e21f9494f0f2b90490d484632260845af8541e6baa6cf5bba98d5d8ec48a5cedf92d1320de04383f34720b2072cbf36356ac07cc896ef6c8988ae8e71821a9122afc"}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000008000/0x3000)=nil)

5.936939325s ago: executing program 4 (id=315):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r1, &(0x7f00000001c0)=""/102400, 0x19000, 0x20000200000)
mmap$IORING_OFF_SQ_RING(&(0x7f00001eb000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0)

5.929337193s ago: executing program 3 (id=316):
openat$ppp(0xffffffffffffff9c, 0x0, 0x448340, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x10009ef8, 0x2, 0x0, 0x0, 0x2000001], [0x1000, 0x1, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0xaa], [0xfffffff3, 0xffffffff, 0x7, 0xfff, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0x2}, {0xffffffff}, {0xfffffff, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x86}, {0xfffffe01}, {0x0, 0x4}, {0x1ff, 0x7f}, {0x2, 0x400}, {0x0, 0xfffffffe}, {0x401}], '\x00', 0x1, 0x0, 0x0, 0xf8}) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
syz_open_dev$vim2m(0x0, 0x2, 0x2) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006090582020002000110fa92"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = syz_open_dev$media(0x0, 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=<r5=>0xffffffffffffffff)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f0000001900)={{r5}, "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"})
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r9, 0x40000000af01, 0x0) (async)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f00000001c0)=0x304008000) (async)
ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f00000003c0)={0x1})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', <r10=>0x0})
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0)={0x7}, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x2400c080)

5.617726004s ago: executing program 4 (id=317):
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
pipe2(0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000006f00f000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d367265673100000000e1ff000008000240000000020900020073797a31000000000900010073797a30000000000800074000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000010200b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000100095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1)
close(0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r8, @ANYBLOB="0200ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r9=>0x0, 0x3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r9, 0x70, &(0x7f0000000340)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0xffff, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}]}, &(0x7f00000001c0)=0x10)

5.204387865s ago: executing program 2 (id=318):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="08000806"], 0xfdef)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
timer_create(0xfffffffd, 0x0, &(0x7f00000011c0))
timer_delete(0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f000058c000/0x2000)=nil, 0x2000, 0x12)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r7, 0x0, &(0x7f000004d000/0x2000)=nil, 0x2000, 0x3})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

4.891693663s ago: executing program 0 (id=319):
r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={{}, {0x0, 0xffffffffffffffff}}, 0x100)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000000000000080000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}})
r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0)
sendto$inet(r7, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

4.413559588s ago: executing program 3 (id=320):
syz_emit_ethernet(0x6e, &(0x7f0000003580)=ANY=[@ANYBLOB="bbbbfbbbbbbbaaaaaaaaaabb86dd6000000000383afffe8000000000000000000000000036ffff0200000000000000000000000000018800907805000000fe80000000000000000000000000002a020321c1e85659ae3f48e9296b2beda7add771735601f8910201fef4b66989e6"], 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x4, 0xfffeffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x50a5, 0x400})
r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mlock2(&(0x7f0000245000/0x1000)=nil, 0x1000, 0x1)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x7fff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10)
close_range(r0, r0, 0x0)

4.323468838s ago: executing program 1 (id=321):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x3ab2c1)
syz_open_dev$dri(0x0, 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0)
syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001940)=@buf)

3.889160827s ago: executing program 2 (id=322):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000003a0007012bbd700000000000017c00000400fc800e0001806d143e65356ee80700000000080002800400338074b845995b50f9fb7ab3e54e04bd6864152e68f5a2c0f6371815ab5a5cec797fc3c09cda5f3fa6ed0ffecae0f37a486918ca15e7f89467814597e12bf190c05227bb35cfa5f06b1b146ec62f22350908763dee6b96c4708c0a0d0a42eb0a4b35ee87b36a4cb9f15b55d9e9a561d5bf8e10f524eaab6382ebed56543ccfc3446b89c45b8649de34da61a36ffee5719ad5464fb14839853e957894601e9dc270c8524dea1fa9392d3ccb40cff29c0661778c"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x10, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$hidraw(&(0x7f00000001c0), 0x8, 0x185a00) (async)
r3 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x8, 0x185a00)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040))
syz_usb_connect$uac1(0x6, 0xa2, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0) (async)
syz_usb_connect$uac1(0x6, 0xa2, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d"], 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1)
close_range(r4, 0xffffffffffffffff, 0x0)

3.361825529s ago: executing program 4 (id=323):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x3ab2c1)
syz_open_dev$dri(0x0, 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001940)=@buf)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x271c, &(0x7f00000001c0)=""/12, &(0x7f0000000000)=0xc)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)

3.143526629s ago: executing program 2 (id=324):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="08000399071f99c3ba", @ANYBLOB], 0x44}}, 0x0) (rerun: 64)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async)
r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r3=>0x0}) (rerun: 32)
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x2, 0x0, <r4=>0xffffffffffffffff}) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10000000005)
syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) (async)
recvmmsg(r1, &(0x7f0000000480), 0x0, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x20010, r4, 0xcba36000) (async)
mbind(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x2, &(0x7f0000000000)=0x100021, 0x3, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xa, 0x84, 0x0) (async)
syz_emit_ethernet(0x16, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @random="b6f13224fcd7", @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x1}}, {@generic={0x4}}}, &(0x7f0000000080)={0x0, 0x2, [0x874, 0x6d0, 0x4ab, 0x30c]})
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

2.837896858s ago: executing program 2 (id=325):
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008c56da201aeba650eb570102030109022400000000100009048b000238f6500009050f02000202000009058202ff"], 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000000)={0x14, &(0x7f0000000180)={0x20, 0x2, 0xf0, {0xf0, 0x10, "4736b1d2b6efbc025e6d84a0cb43c5f6dd128114fc722da387511dd10c20d863ead4fc68b42e9eb72036f9284f26b075fce1c1ee37e273c1d54d1b7e65516bf8fafa7e9db77e4a50f28376943a1c0a5cc0ba8fd6bbb9ecd750a75e48db067fa3ebbaf8ed47fa91ea4baf9f641f58a1e30d1505e85a7278aa98cc0c7da343d169b48564bfa2eaf1a4c0f35668fb11103f67360a31c0db2160556e67071f822f7e0cfa8ca8a73a433a5cc3ee842464ea76057ced67f1c0cc0a17b78f79ee9c03c25ab702ef25268dbade3df78e14b338e0dd5d5735ed7d7ca1d4b5a454effb79b839f8e38f90b3a42e1e9ad85ee436"}}, 0x0}, 0x0)

2.172490919s ago: executing program 1 (id=326):
socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x6000, @fd_index=0x1, 0x0, 0x90d, 0x4, 0x1})
io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)

1.739357421s ago: executing program 0 (id=327):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x0, @private}})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x33)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x82401, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000088a80000810000007a0900000400000000"], 0x0)
r3 = syz_io_uring_setup(0x8f1, &(0x7f0000000140)={0x0, 0x114dc, 0x0, 0x0, 0x80100088}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_emit_ethernet(0xaf, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa000800440300a1fffd0000402f907800000000ac1414aa8313157f000001640101000a010101000000009404010001831393ac149505000014bbac1414317f000001070ffe00000ab20a0101007f0000010000248022eb0002000000007f1a100008000000000086d1a2a9080088be00000000100000000100000000000002080022eb0000000020000002020000000000000000040000080065580000000040a1031feb"], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_open_dev$loop(0x0, 0xfffffffd, 0x14f600)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000280), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "6e38cebc544fe37b", "15e0105630600c58a7db3f424c999197", "0400", "85fb92ed4231e918"}, 0x28)
sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="a2750fd6", 0x4}], 0x1}, 0xc0)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5999ca2af345f8b3d228584972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r2, &(0x7f00000000c0), 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x0, @fd=r2, 0x8, 0xffffffffffffffff, 0x2, 0x6, 0x1, {0x1}})
io_uring_enter(r3, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)

1.533879533s ago: executing program 3 (id=328):
syz_clone(0x40022080, &(0x7f00000000c0)="8af7d157", 0x4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0x1}}}, 0x24}}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944c", 0x2}], 0x1}, 0x20000010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x2a1e2f29d262055, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.078350459s ago: executing program 4 (id=329):
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="7c010700000001000000000000000000e0000001000000000000000000000000ac14140d000000000000000000004000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6c020000000000000000000000000000000000000000000001000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000040000000000000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000ff0000000200000000000000000000000000000000000000000000000500"/308], 0x17c}}, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) (async, rerun: 64)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) (async)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) (async)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f00000004c0)) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x4040090)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, 0x0) (async)
r8 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}})
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, 0x0)

899.466445ms ago: executing program 2 (id=330):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_usb_connect$uac1(0x3, 0xeb, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x7, 0xa0, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x39b0, 0x40}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x10, 0x20, '=%qn'}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x5, 0x6, [0x3, 0xa, 0x3, 0xa, 0x6, 0x7], 0x3}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x5, 0xa}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x5, 0x5d, "bb"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x2, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x7, 0xf7, "1e3f46", "a3"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x758, 0x5668, 0x2, "ebffd367"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0xf7, 0x4, 0x72, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0xc, 0x0, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x1, 0x8, "", "1b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x0, 0x5, {0x7, 0x25, 0x1, 0x0, 0xff, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0x41, 0x6, "6157c9b8e8fe43"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0xfa, 0x15}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x7, 0xd, 0x2, 0x20, 0x5}, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="050f1900030710021071050003100b0a1003000800090a0100b9bee10d9aff05a38dab5f8e618a3043963cb2670119a4a7e88be5a2406300e1aec37c83bca82b795313b27271e72c6608617024ad47eb9ecc379ae6a21b1938eb112795037b1d0ae7a4b5f7b3c290962d8d32de4f57837cb7a759672de8cc77209841070ffdf4097610b614ae8b0240d52a6b46a21287c01edd2c40eed6b60b5e242d30f5e32d560a98211b83a9c3992887d5fda81041f353de1374379d3aa6"], 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}]})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000580)={0x10, 0x0, r2, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0xffffffff80000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a175576e0e2b3aac968188bd2e43384abcaff7f14d4c93", 0xa5}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {0x0}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec62dffdbafb6", 0xa9}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355faf", 0x70}, {&(0x7f0000000d40)}, {0x0}, {&(0x7f0000000f00)="be5db51b6a872fdcd55b5177992aaef4ac57a21bd929bc23aa9ac7f23c14aa214728bc2d3f468e5501762a340223849c9abb8f7e8f27754900e84a", 0x3b}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)}], 0x6, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r8, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="b0"], 0x0, 0x0, 0x0})
syz_io_uring_setup(0x4358, &(0x7f0000000640)={0x0, 0x79a6, 0x2000, 0x1, 0x25f}, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

893.553808ms ago: executing program 1 (id=331):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async, rerun: 32)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$video(0x0, 0x0, 0x10b200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
unshare(0x8040600) (async)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
tee(r2, r2, 0x9, 0xb)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) (async, rerun: 64)
syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (rerun: 64)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/oss_mixer\x00', 0xa180, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000})

497.564255ms ago: executing program 1 (id=332):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x24048010}, 0x8040)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000003940)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/112, 0x70}], 0x1}, 0xfffffffa}, {{&(0x7f0000000440)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x5, &(0x7f0000000700)=""/94, 0x5e}, 0x1}, {{&(0x7f0000000780)=@can, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f0000003a40)=""/114, 0x72}, {&(0x7f0000000940)=""/125, 0x7d}, {&(0x7f0000000e80)=""/215, 0xd7}, {&(0x7f0000003ac0)=""/162, 0xa2}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000001040)=""/162, 0xa2}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000001100)=""/186, 0xba}], 0x9, &(0x7f0000000f80)=""/138, 0x8a}, 0x9}, {{&(0x7f0000001340)=@hci, 0x80, &(0x7f00000017c0)=[{&(0x7f00000013c0)=""/228, 0xe4}, {&(0x7f00000014c0)=""/100, 0x64}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000001540)=""/180, 0xb4}, {&(0x7f0000001600)=""/167, 0xa7}, {&(0x7f00000016c0)=""/211, 0xd3}], 0x6, &(0x7f0000001840)=""/65, 0x41}, 0x4}], 0x4, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(r0, &(0x7f00000057c0)={0x2020}, 0x2020)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000040))
timer_create(0x0, 0x0, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0xa, 0x5, 0x5}, 0x3e, [0x9, 0x1, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0x200000f5, 0x9, 0x80039, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0xffc, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0xc5, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x39cd, 0x400072c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x4, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0xbde, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0xb, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x1dd, 0x9, 0x5, 0x2, 0xd9, 0x800, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x4, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe)
ioctl$VT_SETMODE(r7, 0x5602, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

417.207964ms ago: executing program 4 (id=333):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x3ab2c1)
syz_open_dev$dri(0x0, 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0)
syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, 0x0, 0x0)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001940)=@buf)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x271c, &(0x7f00000001c0)=""/12, &(0x7f0000000000)=0xc)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)

0s ago: executing program 3 (id=334):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_connect$midi(0x1, 0xa6, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x2000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x1, 0x1, 0x4, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0x80, [@midi_out_jack={0x11, 0x24, 0x3, 0x6, 0x5, 0x5, [{0xf, 0x89}, {0x2, 0xe9}, {0x6, 0x2}, {0xf9, 0x3}, {}], 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x40, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x2, 0x9c, 0x7, [{0xf7, 0x8}, {0x80, 0x4}, {0x3, 0x8}, {0x2, 0x4}, {0xf9, 0xa}, {0xfc, 0x9}, {0x61, 0xf}], 0x1e}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x4f}, @ms_header={0x7, 0x24, 0x1, 0xfffd, 0x7}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x2, 0x7, 0x2, {0x7, 0x25, 0x1, 0x3, "a5345c"}}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0x6, 0xfc, {0x5, 0x25, 0x1, 0x1, "89"}}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x3, 0x7f, 0x0, {0xc, 0x25, 0x1, 0x8, "762b7219b88e0db4"}}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0xa, 0xc0, {0xd, 0x25, 0x1, 0x9, "3bc7fb7dabd5f7d3b3"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x6, 0x4, 0x0, 0x40, 0x9}, 0xa1, &(0x7f00000001c0)={0x5, 0xf, 0xa1, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0xd4, 0xf000, 0x9, [0xc000, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x6, 0x8}, @generic={0x77, 0x10, 0x1, "f3575f598ce0ec9b60f5198ce883b0327a83441e369310e5bb02f25cc745dee720fd16c6ff7661175c26e2691b41f80ac9ec284f31440bc2a9c8c8c6e237cfda71027eefd50b4e52333431202568d0852aa45b2a43bb4f49bd93f1ae34cd4a532bfbe0fa54ba5d06ba2e5246088947802a82d1f2"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x7, 0x2}]}, 0x4, [{0x7f, &(0x7f0000000280)=@string={0x7f, 0x3, "655ffdbbfb937b6613fe819f54bc0353385ab838020ab6b85c038d3a2529587e232ac7f797fab3e9586be7ccccbdfe0057a3ad7de45f023e4613426ac99a8c54bf1db3e54b6254c15e79453a163ed3ed59e6da4a973af47df3c361fd320514052f4560a104ef37df1544b9a10365b424dc23c91709b6981add8ff736fb"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3801}}, {0xa5, &(0x7f0000000300)=@string={0xa5, 0x3, "c9a3d97d67c8fb0aebe26372d10c675b0072f6858b44a990f646f36fcf15ae90a40a967edad6d6b6a3b13fad679e2c9c2c34f76e99b5453954ca9c2c490ce565a9c074b4dcbc23755d0d6c54fac946ad1cd470303237c36ecfed4ca8567e144eb121b12dccd057d1ae49d18f280255b64ce71b49f59180026299ef105863402debe17dd9272e100681aa5276e95eb6c01abd20475f91b5776ef7cc4b9ed830dcdb311a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x340a}}]}) (async)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

erface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.486628][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.499357][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.506314][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.532310][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.549498][ T5843] hsr_slave_0: entered promiscuous mode
[   85.555852][ T5843] hsr_slave_1: entered promiscuous mode
[   85.562158][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   85.568067][ T5843] Cannot create hsr debugfs directory
[   85.656623][ T5845] hsr_slave_0: entered promiscuous mode
[   85.663747][ T5845] hsr_slave_1: entered promiscuous mode
[   85.669918][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   85.675654][ T5845] Cannot create hsr debugfs directory
[   85.774719][ T5847] hsr_slave_0: entered promiscuous mode
[   85.781379][ T5847] hsr_slave_1: entered promiscuous mode
[   85.787731][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   85.793470][ T5847] Cannot create hsr debugfs directory
[   86.129907][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.141841][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.169472][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.186662][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.290001][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.302858][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.316175][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.329463][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.417902][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.443969][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.470001][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.480660][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.513367][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.549423][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.560827][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.574157][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.584606][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.649187][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   86.716339][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.723611][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.740848][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.771782][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.786329][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.808443][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.815601][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.841012][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.876109][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.903859][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   86.985444][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.996093][ T5839] Bluetooth: hci1: command tx timeout
[   87.029545][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.036697][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.054489][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.067088][ T5839] Bluetooth: hci0: command tx timeout
[   87.070497][ T5144] Bluetooth: hci2: command tx timeout
[   87.077488][ T5839] Bluetooth: hci3: command tx timeout
[   87.078521][ T5837] Bluetooth: hci4: command tx timeout
[   87.114522][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.121733][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.203254][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   87.226174][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.250246][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.257421][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.283460][  T132] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.290688][  T132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.320894][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   87.342640][  T132] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.349801][  T132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.369241][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.382355][  T132] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.389477][  T132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.477933][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.520031][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.563776][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   87.580729][ T5841] veth0_vlan: entered promiscuous mode
[   87.600641][  T132] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.607850][  T132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.623546][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.630716][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.652951][ T5841] veth1_vlan: entered promiscuous mode
[   87.672065][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.716415][ T5844] veth0_vlan: entered promiscuous mode
[   87.748715][ T5844] veth1_vlan: entered promiscuous mode
[   87.766398][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.831001][ T5841] veth0_macvtap: entered promiscuous mode
[   87.841589][ T5845] veth0_vlan: entered promiscuous mode
[   87.859416][ T5841] veth1_macvtap: entered promiscuous mode
[   87.870600][ T5845] veth1_vlan: entered promiscuous mode
[   87.894300][ T5844] veth0_macvtap: entered promiscuous mode
[   87.930227][ T5844] veth1_macvtap: entered promiscuous mode
[   87.957069][ T5845] veth0_macvtap: entered promiscuous mode
[   87.981558][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.001507][ T5845] veth1_macvtap: entered promiscuous mode
[   88.009750][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.030222][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.039192][ T5843] veth0_vlan: entered promiscuous mode
[   88.054543][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.066279][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.082014][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.093425][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.102806][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.142951][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.152696][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.179993][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.196113][ T5843] veth1_vlan: entered promiscuous mode
[   88.202887][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.213939][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.235044][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.251900][  T145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.275847][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.308614][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.318769][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.364610][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.408490][ T5847] veth0_vlan: entered promiscuous mode
[   88.434198][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.449551][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.489596][ T5847] veth1_vlan: entered promiscuous mode
[   88.528620][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.537274][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.541444][ T5843] veth0_macvtap: entered promiscuous mode
[   88.600276][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.614533][ T5843] veth1_macvtap: entered promiscuous mode
[   88.621050][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.638778][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.646629][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.695087][ T5847] veth0_macvtap: entered promiscuous mode
[   88.719924][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.743167][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.766571][ T5847] veth1_macvtap: entered promiscuous mode
[   88.784881][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.795556][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.807450][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.855419][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.862264][ T3558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.874055][ T3558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.890486][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.937159][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.958671][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.977521][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.011432][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.069288][ T5837] Bluetooth: hci1: command tx timeout
[   89.149052][ T5837] Bluetooth: hci4: command tx timeout
[   89.154507][ T5837] Bluetooth: hci2: command tx timeout
[   89.160901][ T5144] Bluetooth: hci3: command tx timeout
[   89.162375][ T5839] Bluetooth: hci0: command tx timeout
[   89.195939][  T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.207500][  T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.260809][  T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.282062][  T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.301787][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   89.463543][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.502181][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.523605][  T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.553796][  T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.608722][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.627944][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.682135][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.693859][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.114527][ T5945] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[   90.134454][ T5945] syzkaller1: entered promiscuous mode
[   90.149838][ T5945] syzkaller1: entered allmulticast mode
[   90.298359][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   90.400209][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   90.557482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   90.577225][ T5190] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   90.740226][ T5190] usb 1-1: config 0 has no interfaces?
[   90.746036][ T5190] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   90.771972][ T5190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.912078][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.148833][ T5190] usb 1-1: config 0 descriptor??
[   91.150161][ T5839] Bluetooth: hci1: command tx timeout
[   91.178738][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.229905][ T5839] Bluetooth: hci2: command tx timeout
[   91.229935][ T5837] Bluetooth: hci3: command tx timeout
[   91.235345][ T5839] Bluetooth: hci4: command tx timeout
[   91.238665][ T5839] Bluetooth: hci0: command tx timeout
[   91.379250][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.418961][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.427555][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.490392][ T5919] usb 1-1: USB disconnect, device number 2
[   91.508095][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.879352][    T9] cfg80211: failed to load regulatory.db
[   91.967976][ T5919] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   92.122399][ T5919] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[   92.135995][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.146964][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.166053][ T5919] usb 1-1: Product: syz
[   92.173049][ T5919] usb 1-1: Manufacturer: syz
[   92.180537][ T5919] usb 1-1: SerialNumber: syz
[   92.188284][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.244043][ T5919] usb 1-1: config 0 descriptor??
[   92.260479][ T5919] hub 1-1:0.0: bad descriptor, ignoring hub
[   92.266458][ T5919] hub 1-1:0.0: probe with driver hub failed with error -5
[   92.296912][ T5904] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   92.345505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.407086][ T5918] usb 2-1: Using ep0 maxpacket: 8
[   92.433512][ T5918] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   92.442192][ T5918] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.453647][ T5904] usb 4-1: device descriptor read/64, error -71
[   92.476592][ T5918] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.483126][ T5919] speedtch 1-1:0.0: speedtch_bind: wrong device class 9
[   92.493353][ T5918] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   92.493388][ T5918] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.493431][ T5918] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   92.493455][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.555686][ T5919] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[   92.622984][ T5919] usb 1-1: USB disconnect, device number 3
[   92.708140][ T5904] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   92.823050][ T5918] usb 2-1: usb_control_msg returned -32
[   92.830437][ T5918] usbtmc 2-1:16.0: can't read capabilities
[   92.846974][ T5904] usb 4-1: device descriptor read/64, error -71
[   92.957494][ T5904] usb usb4-port1: attempt power cycle
[   93.007201][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.338343][ T6007] process 'syz.2.23' launched './file0' with NULL argv: empty string added
[   93.488154][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22'.
[   93.497116][ T5904] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   93.510239][ T5919] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.542943][ T5904] usb 4-1: device descriptor read/8, error -71
[   93.748003][ T5919] usb 1-1: device descriptor read/64, error -71
[   93.886918][ T5904] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   93.918216][ T5904] usb 4-1: device descriptor read/8, error -71
[   94.056176][ T5919] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   94.059845][ T5904] usb usb4-port1: unable to enumerate USB device
[   94.247178][ T5919] usb 1-1: device descriptor read/64, error -71
[   94.361868][ T5919] usb usb1-port1: attempt power cycle
[   94.716948][ T5919] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   94.775507][ T5919] usb 1-1: device descriptor read/8, error -71
[   95.012138][ T5918] usb 2-1: USB disconnect, device number 2
[   95.052312][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   95.104343][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28'.
[   95.134612][ T5919] usb 1-1: device descriptor read/8, error -71
[   95.247385][ T5919] usb usb1-port1: unable to enumerate USB device
[   96.102534][ T6046] mmap: syz.2.32 (6046) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.110466][ T5904] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   96.297665][ T5904] usb 4-1: Using ep0 maxpacket: 16
[   96.330084][ T5904] usb 4-1: config 0 has no interfaces?
[   96.340090][ T5904] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   96.366208][ T5904] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   96.380125][ T5904] usb 4-1: Manufacturer: syz
[   96.394894][ T5904] usb 4-1: config 0 descriptor??
[   96.553322][   T30] audit: type=1326 audit(1773508686.195:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   96.591940][   T30] audit: type=1326 audit(1773508686.195:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   96.620507][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'.
[   96.640024][   T30] audit: type=1326 audit(1773508686.195:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   96.727977][   T30] audit: type=1326 audit(1773508686.195:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   96.793504][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.816900][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.833903][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.849906][   T30] audit: type=1326 audit(1773508686.195:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   96.919463][   T30] audit: type=1326 audit(1773508686.195:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   96.948381][ T5918] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   96.977262][ T5904] usb 3-1: Using ep0 maxpacket: 32
[   96.979413][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.009616][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.025988][   T30] audit: type=1326 audit(1773508686.195:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   97.049619][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.061137][ T5904] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   97.070717][   T30] audit: type=1326 audit(1773508686.195:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   97.100991][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.130751][ T5904] usb 3-1: config 0 descriptor??
[   97.154628][   T30] audit: type=1326 audit(1773508686.195:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   97.213198][   T30] audit: type=1326 audit(1773508686.195:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[   97.238397][ T5918] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   97.284747][ T5918] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   97.318878][ T5918] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   97.336970][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.377270][ T6057] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   97.439257][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   97.632112][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.641204][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.656263][ T5897] usb 1-1: USB disconnect, device number 8
[   97.718778][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.974466][ T5897] usb 4-1: USB disconnect, device number 6
[  100.176950][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  100.368374][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  100.378320][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.402558][ T6083] could not allocate digest TFM handle sha3-512-generic
[  100.406620][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.557033][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.570160][ T5897] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  100.581743][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.594313][ T5897] usb 1-1: config 0 descriptor??
[  100.618956][ T5904] usbhid 3-1:0.0: can't add hid device: -71
[  100.624943][ T5904] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  100.711056][ T5904] usb 3-1: USB disconnect, device number 2
[  101.044202][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.084515][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.112547][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.173890][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.196691][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.276964][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.291962][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.306987][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  101.318271][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.337511][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.344665][ T5897] gembird 0003:11FF:3331.0001: unknown main item tag 0x0
[  101.439199][ T5897] gembird 0003:11FF:3331.0001: hidraw0: USB HID v1.00 Device [HID 11ff:3331] on usb-dummy_hcd.0-1/input0
[  101.486042][ T5904] usb 3-1: device descriptor read/64, error -71
[  101.616931][    T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  101.726929][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  101.770829][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  101.783244][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  101.793068][    T9] usb 2-1: config 5 has an invalid interface number: 246 but max is 0
[  101.802340][    T9] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  101.813012][    T9] usb 2-1: config 5 has no interface number 0
[  101.819855][    T9] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  101.832267][    T9] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.845841][    T9] usb 2-1: config 5 interface 246 has no altsetting 0
[  101.855989][    T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  101.865522][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.876922][ T5904] usb 3-1: device descriptor read/64, error -71
[  101.882806][    T9] usb 2-1: Product: syz
[  101.891436][    T9] usb 2-1: Manufacturer: syz
[  101.896174][    T9] usb 2-1: SerialNumber: syz
[  101.987331][ T5904] usb usb3-port1: attempt power cycle
[  102.157074][  T132] usb 2-1: Failed to submit usb control message: -71
[  102.164168][    T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  102.178968][  T132] usb 2-1: unable to send the bmi data to the device: -71
[  102.194021][  T132] usb 2-1: unable to get target info from device
[  102.202628][    T9] usb 2-1: USB disconnect, device number 4
[  102.208539][  T132] usb 2-1: could not get target info (-71)
[  102.217991][  T132] usb 2-1: could not probe fw (-71)
[  102.331199][ T5904] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.363824][ T5904] usb 3-1: device descriptor read/8, error -71
[  102.606977][ T5904] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.647434][ T5904] usb 3-1: device descriptor read/8, error -71
[  102.777459][ T5904] usb usb3-port1: unable to enumerate USB device
[  102.794419][    T9] usb 1-1: USB disconnect, device number 9
[  102.966957][  T980] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  103.058144][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'.
[  103.197014][  T980] usb 2-1: Using ep0 maxpacket: 32
[  103.205611][  T980] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  103.213918][  T980] usb 2-1: config 0 has no interface number 0
[  103.220145][  T980] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  103.236060][  T980] usb 2-1: config 0 interface 89 has no altsetting 0
[  103.249079][  T980] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  103.258383][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.268351][  T980] usb 2-1: Product: syz
[  103.272680][  T980] usb 2-1: Manufacturer: syz
[  103.281825][  T980] usb 2-1: SerialNumber: syz
[  103.289060][ T6120] vlan2: entered promiscuous mode
[  103.296509][  T980] usb 2-1: config 0 descriptor??
[  103.302758][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  103.312651][ T6120] bridge0: entered promiscuous mode
[  103.320712][  T980] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  103.356522][  T980] em28xx 2-1:0.89: Video interface 89 found:
[  103.457064][    T9] usb 4-1: Using ep0 maxpacket: 32
[  103.465341][    T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  103.474774][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.520658][    T9] usb 4-1: config 0 descriptor??
[  103.551936][    T9] as10x_usb: device has been detected
[  103.576453][    T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  103.648710][    T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  103.736036][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.752008][    T9] as10x_usb: error during firmware upload part1
[  103.759003][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.770771][    T9] Registered device nBox DVB-T Dongle
[  103.987016][  T980] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  104.489180][ T5890] usb 4-1: USB disconnect, device number 7
[  104.573732][ T5890] Unregistered device nBox DVB-T Dongle
[  104.599071][ T5890] as10x_usb: device has been disconnected
[  104.619048][  T980] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  104.645792][  T980] em28xx 2-1:0.89: board has no eeprom
[  104.656762][ T6131] netlink: 'syz.2.54': attribute type 2 has an invalid length.
[  104.705285][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'.
[  104.752074][ T6134] wg0: entered allmulticast mode
[  104.758507][ T6134] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  104.790906][ T6131] netlink: 'syz.2.54': attribute type 2 has an invalid length.
[  104.810436][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'.
[  104.923980][    C1] sd 0:0:1:0: [sda] tag#8929 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  104.934513][    C1] sd 0:0:1:0: [sda] tag#8929 CDB: Read(6) 08 00 00 00 00 00
[  104.942935][    C1] sd 0:0:1:0: [sda] tag#8930 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  104.953395][    C1] sd 0:0:1:0: [sda] tag#8930 CDB: Read(6) 08 00 00 00 00 00
[  104.961928][    C1] sd 0:0:1:0: [sda] tag#8931 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  104.972401][    C1] sd 0:0:1:0: [sda] tag#8931 CDB: Read(6) 08 00 00 00 00 00
[  104.980912][    C1] sd 0:0:1:0: [sda] tag#8932 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  104.991345][    C1] sd 0:0:1:0: [sda] tag#8932 CDB: Read(6) 08 00 00 00 00 00
[  104.999238][    C1] sd 0:0:1:0: [sda] tag#8933 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  105.009823][    C1] sd 0:0:1:0: [sda] tag#8933 CDB: Read(6) 08 00 00 00 00 00
[  105.018376][    C1] sd 0:0:1:0: [sda] tag#8934 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  105.028824][    C1] sd 0:0:1:0: [sda] tag#8934 CDB: Read(6) 08 00 00 00 00 00
[  105.036699][    C1] sd 0:0:1:0: [sda] tag#8935 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  105.047131][    C1] sd 0:0:1:0: [sda] tag#8935 CDB: Read(6) 08 00 00 00 00 00
[  105.054787][    C1] sd 0:0:1:0: [sda] tag#8936 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  105.065215][    C1] sd 0:0:1:0: [sda] tag#8936 CDB: Read(6) 08 00 00 00 00 00
[  105.073691][    C1] sd 0:0:1:0: [sda] tag#8937 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  105.084115][    C1] sd 0:0:1:0: [sda] tag#8937 CDB: Read(6) 08 00 00 00 00 00
[  105.092255][    C1] sd 0:0:1:0: [sda] tag#8938 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  105.102688][    C1] sd 0:0:1:0: [sda] tag#8938 CDB: Read(6) 08 00 00 00 00 00
[  105.445704][ T6123] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.52'.
[  105.495060][  T980] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  105.506663][  T980] em28xx 2-1:0.89: analog set to bulk mode.
[  105.516166][ T5890] em28xx 2-1:0.89: Registering V4L2 extension
[  105.558401][  T980] usb 2-1: USB disconnect, device number 5
[  105.642831][  T980] em28xx 2-1:0.89: Disconnecting em28xx
[  105.747481][ T5890] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  105.754584][ T5890] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  105.768910][ T5890] em28xx 2-1:0.89: No AC97 audio processor
[  105.791867][ T5904] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.804234][ T5890] usb 2-1: Decoder not found
[  105.840570][ T5890] em28xx 2-1:0.89: failed to create media graph
[  105.878912][ T5890] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  105.904269][ T5890] em28xx 2-1:0.89: Registering snapshot button...
[  105.919230][ T5890] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input6
[  105.950857][ T5890] em28xx 2-1:0.89: Remote control support is not available for this card.
[  105.959927][  T980] em28xx 2-1:0.89: Closing input extension
[  105.967621][ T5904] usb 3-1: Using ep0 maxpacket: 16
[  105.973476][  T980] em28xx 2-1:0.89: Deregistering snapshot button
[  105.978935][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.020204][ T5904] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  106.034583][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.075940][ T5904] usb 3-1: Product: syz
[  106.089529][  T980] em28xx 2-1:0.89: Freeing device
[  106.096918][ T5904] usb 3-1: Manufacturer: syz
[  106.105594][ T5904] usb 3-1: SerialNumber: syz
[  106.128105][ T5904] usb 3-1: config 0 descriptor??
[  106.157393][ T5904] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (046d:0721)
[  106.167225][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  106.185651][ T5904] uvcvideo 3-1:0.0: No valid video chain found.
[  106.188127][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  106.221799][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.66'.
[  106.242450][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'.
[  106.359561][ T5904] usb 3-1: USB disconnect, device number 7
[  106.389927][   T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  106.413995][   T24] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  106.437864][   T24] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.438249][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  106.456406][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  106.467812][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024
[  106.488435][ T5890] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024
[  106.517161][ T5890] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  106.518941][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.536922][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  106.553049][ T5890] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  106.573994][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  106.576066][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  106.633683][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  106.662608][ T5890] usb 4-1: SerialNumber: syz
[  106.686598][ T6170] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  106.696432][ T6170] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  106.749426][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  106.762330][   T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2
[  106.936925][ T5904] usb 3-1: Using ep0 maxpacket: 32
[  106.956300][    T9] usb 1-1: USB disconnect, device number 10
[  106.963873][ T5904] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  106.973319][  T980] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  106.980928][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.993700][ T5904] usb 3-1: config 0 descriptor??
[  107.028370][ T5890] usb 4-1: USB disconnect, device number 8
[  107.147577][  T980] usb 5-1: Using ep0 maxpacket: 32
[  107.158139][  T980] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  107.166549][  T980] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  107.176704][  T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  107.187670][  T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  107.198812][  T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  107.209737][  T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  107.223891][  T980] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  107.224479][ T5904] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  107.233289][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.259721][  T980] usb 5-1: config 0 descriptor??
[  107.280462][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  107.308100][ T5904] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  107.316263][ T5904] usb 3-1: media controller created
[  107.359923][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.509310][  T980] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  107.568092][  T980] usb 5-1: USB disconnect, device number 2
[  107.615120][  T980] usblp0: removed
[  107.691726][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.715198][ T6198] batadv_slave_1: entered promiscuous mode
[  107.721519][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  107.724888][ T6195] netlink: 'syz.0.71': attribute type 11 has an invalid length.
[  107.753603][ T6195] netlink: 448 bytes leftover after parsing attributes in process `syz.0.71'.
[  107.781617][ T6198] batadv_slave_1: left promiscuous mode
[  107.917129][   T24] usb 2-1: Using ep0 maxpacket: 32
[  107.927656][   T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.939013][   T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0
[  107.950707][   T24] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  107.968066][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.974848][   T24] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  107.985703][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.997015][   T24] usb 2-1: config 0 descriptor??
[  108.057909][  T980] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  108.087090][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  108.099246][ T5904] az6027: usb out operation failed. (-71)
[  108.105235][ T5904] stb0899_attach: Driver disabled by Kconfig
[  108.132284][ T5904] az6027: no front-end attached
[  108.132284][ T5904] 
[  108.154596][ T5904] az6027: usb out operation failed. (-71)
[  108.163494][ T5904] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  108.184361][ T5904] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  108.224182][ T5904] dvb-usb: schedule remote query interval to 400 msecs.
[  108.231969][ T5904] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  108.247192][  T980] usb 5-1: Using ep0 maxpacket: 32
[  108.257500][ T5904] usb 3-1: USB disconnect, device number 8
[  108.269285][  T980] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  108.286895][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  108.292926][ T5897] usb 1-1: too many configurations: 170, using maximum allowed: 8
[  108.295155][  T980] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  108.314247][ T5897] usb 1-1: unable to read config index 0 descriptor/start: -61
[  108.324543][  T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  108.334603][  T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  108.344461][  T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  108.357905][  T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  108.358383][ T5897] usb 1-1: can't read configurations, error -61
[  108.387439][  T980] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  108.401661][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.426742][   T24] hid_parser_main: 28 callbacks suppressed
[  108.426760][   T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  108.437110][ T5890] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  108.448391][   T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  108.448431][   T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  108.448458][   T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  108.448485][   T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  108.483301][   T24] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  108.489954][  T980] usb 5-1: config 0 descriptor??
[  108.520861][ T5897] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  108.537820][   T24] hid-thrustmaster 0003:044F:B65D.0002: Unexpected non-int endpoint
[  108.548150][ T5904] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  108.623350][    C1] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71
[  108.636636][   T24] usb 2-1: USB disconnect, device number 6
[  108.648508][ T5890] usb 4-1: device descriptor read/64, error -71
[  108.683590][ T6221] fido_id[6221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  108.744703][  T980] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  108.757363][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  108.766886][ T5897] usb 1-1: too many configurations: 170, using maximum allowed: 8
[  108.777432][ T5897] usb 1-1: unable to read config index 0 descriptor/start: -61
[  108.785109][ T5897] usb 1-1: can't read configurations, error -61
[  108.796698][ T5897] usb usb1-port1: attempt power cycle
[  108.907154][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  108.954853][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.963688][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.020115][   T24] usb 5-1: USB disconnect, device number 3
[  109.030428][   T24] usblp0: removed
[  109.057178][ T5890] usb 4-1: device descriptor read/64, error -71
[  109.167329][ T5890] usb usb4-port1: attempt power cycle
[  109.173898][ T5897] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  109.209418][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  109.221723][ T5897] usb 1-1: too many configurations: 170, using maximum allowed: 8
[  109.277907][ T5897] usb 1-1: unable to read config index 0 descriptor/start: -61
[  109.286252][ T5897] usb 1-1: can't read configurations, error -61
[  109.506952][ T5897] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  109.516931][ T5890] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  109.550950][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  109.551836][ T5890] usb 4-1: device descriptor read/8, error -71
[  109.560824][ T5897] usb 1-1: too many configurations: 170, using maximum allowed: 8
[  109.568380][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  109.582783][ T5897] usb 1-1: unable to read config index 0 descriptor/start: -61
[  109.593902][ T5897] usb 1-1: can't read configurations, error -61
[  109.608756][ T5897] usb usb1-port1: unable to enumerate USB device
[  109.738995][ T5934] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  109.771283][ T5934] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  109.788851][ T5934] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  109.809239][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.817461][ T5890] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  109.854309][ T6229] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  109.863347][ T5890] usb 4-1: device descriptor read/8, error -71
[  109.900111][ T5934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  109.952577][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  109.992451][ T5890] usb usb4-port1: unable to enumerate USB device
[  110.108183][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.129895][ T5897] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  110.144352][ T5934] usb 2-1: USB disconnect, device number 7
[  110.146935][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  110.172185][ T5897] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  110.181756][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.190881][ T5897] usb 3-1: Product: syz
[  110.195282][ T5897] usb 3-1: Manufacturer: syz
[  110.207468][ T5897] usb 3-1: SerialNumber: syz
[  110.221782][ T5897] usb 3-1: config 0 descriptor??
[  110.236326][ T5897] gspca_main: sunplus-2.14.0 probing 055f:c630
[  110.257446][   T24] usb 5-1: device descriptor read/64, error -71
[  110.505628][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.507157][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  110.522093][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.667093][   T24] usb 5-1: device descriptor read/64, error -71
[  110.778624][   T24] usb usb5-port1: attempt power cycle
[  111.117159][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  111.148691][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'.
[  111.168698][   T24] usb 5-1: device descriptor read/8, error -71
[  111.365650][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'.
[  111.417244][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  111.448599][   T24] usb 5-1: device descriptor read/8, error -71
[  111.557446][   T24] usb usb5-port1: unable to enumerate USB device
[  111.616930][ T5934] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  111.766911][ T5934] usb 2-1: Using ep0 maxpacket: 16
[  111.773528][ T5934] usb 2-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config
[  111.785536][ T5934] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  111.794958][ T5934] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 32, changing to 7
[  111.812421][ T5934] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[  111.821791][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.829903][ T5934] usb 2-1: Product: syz
[  111.834224][ T5934] usb 2-1: Manufacturer: syz
[  111.838927][ T5934] usb 2-1: SerialNumber: syz
[  112.059792][ T5934] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  112.079159][ T5934] usb 2-1: 0:2 : does not exist
[  112.164892][ T5934] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  112.181924][ T5934] usb 2-1: USB disconnect, device number 8
[  112.206163][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.247401][ T5890] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  112.261490][ T6272] syzkaller0: entered promiscuous mode
[  112.267339][ T6272] syzkaller0: entered allmulticast mode
[  112.416893][ T5890] usb 1-1: Using ep0 maxpacket: 32
[  112.428373][ T5890] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  112.437715][ T5890] usb 1-1: config 2 has no interface number 0
[  112.443845][ T5890] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  112.455754][ T5890] usb 1-1: config 2 interface 88 has no altsetting 0
[  112.470650][ T5890] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  112.479998][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.488074][ T5890] usb 1-1: Product: syz
[  112.492384][ T5890] usb 1-1: Manufacturer: syz
[  112.497170][ T5890] usb 1-1: SerialNumber: syz
[  112.506660][ T6270] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  112.890606][   T24] usb 3-1: USB disconnect, device number 9
[  113.406965][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  113.829680][ T5934] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  113.997634][ T5934] usb 5-1: too many configurations: 138, using maximum allowed: 8
[  114.018161][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  114.026402][ T5934] usb 5-1: can't read configurations, error -61
[  114.168303][ T5934] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  114.181530][ T6270] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  114.287509][  T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  114.331142][ T5934] usb 5-1: too many configurations: 138, using maximum allowed: 8
[  114.341113][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  114.349446][ T5934] usb 5-1: can't read configurations, error -61
[  114.357913][ T5934] usb usb5-port1: attempt power cycle
[  114.439255][  T980] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  114.451360][  T980] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  114.461496][  T980] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  114.473873][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.498652][ T6293] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  114.523064][  T980] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  114.600158][ T6296] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.719350][ T5934] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  114.740140][ T6300] loop5: detected capacity change from 0 to 7
[  114.751732][ T5934] usb 5-1: too many configurations: 138, using maximum allowed: 8
[  114.775417][ T6300]  loop5:
[  114.780779][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  114.790181][ T6300] loop5: partition table partially beyond EOD, truncated
[  114.797611][ T5934] usb 5-1: can't read configurations, error -61
[  114.888488][  T980] usb 2-1: USB disconnect, device number 9
[  114.951915][ T5934] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  115.150800][ T5934] usb 5-1: too many configurations: 138, using maximum allowed: 8
[  115.193769][ T6307] x_tables: duplicate underflow at hook 3
[  115.211938][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  115.222046][ T5934] usb 5-1: can't read configurations, error -61
[  115.244096][ T5934] usb usb5-port1: unable to enumerate USB device
[  115.367024][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  115.537940][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  115.611538][ T5897] usb 4-1: config 4 has an invalid interface number: 8 but max is 0
[  115.654005][ T5897] usb 4-1: config 4 has no interface number 0
[  115.674058][ T5897] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  115.703134][ T5897] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  115.721966][ T5897] usb 4-1: config 4 interface 8 has no altsetting 0
[  115.744329][ T5897] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  115.901191][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.940934][ T5897] usb 4-1: Product: syz
[  115.945143][ T5897] usb 4-1: Manufacturer: syz
[  115.971182][ T5897] usb 4-1: SerialNumber: syz
[  116.248043][ T5897] opticon 4-1:4.8: opticon converter detected
[  116.288351][ T5897] usb 4-1: opticon converter now attached to ttyUSB0
[  116.338013][ T5897] usb 4-1: USB disconnect, device number 13
[  116.368786][ T5897] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  116.394948][ T5897] opticon 4-1:4.8: device disconnected
[  116.618669][  T980] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  116.786045][ T5890] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  116.830628][  T980] usb 3-1: Using ep0 maxpacket: 32
[  116.840080][ T5890] asix 1-1:2.88: probe with driver asix failed with error -71
[  116.867448][  T980] usb 3-1: unable to get BOS descriptor or descriptor too short
[  116.889273][  T980] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  116.910052][ T5890] usb 1-1: USB disconnect, device number 15
[  116.927923][  T980] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  116.974175][  T980] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  117.008983][  T980] usb 3-1: config 128 has no interface number 0
[  117.018558][  T980] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  117.045628][  T980] usb 3-1: config 128 interface 127 has no altsetting 0
[  117.076357][  T980] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  117.077667][ T5904] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  117.097817][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.119680][ T6327] openvswitch: netlink: Flow key attr not present in new flow.
[  117.129452][  T980] usb 3-1: Product: syz
[  117.133671][  T980] usb 3-1: Manufacturer: syz
[  117.142618][  T980] usb 3-1: SerialNumber: syz
[  117.173104][ T6315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  117.218138][ T6329] syz.3.110 uses obsolete (PF_INET,SOCK_PACKET)
[  117.258966][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.272154][ T5904] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  117.281648][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.289732][ T5904] usb 5-1: Product: syz
[  117.294071][ T5904] usb 5-1: Manufacturer: syz
[  117.298737][ T5904] usb 5-1: SerialNumber: syz
[  117.306115][ T5890] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  117.376967][ T5897] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  117.448673][  T980] usb 3-1: USB disconnect, device number 11
[  117.472022][ T5890] usb 1-1: too many configurations: 168, using maximum allowed: 8
[  117.484361][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.519972][ T5890] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  117.532720][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.552278][ T5890] usb 1-1: Product: syz
[  117.561988][ T5890] usb 1-1: Manufacturer: syz
[  117.571870][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.572996][ T5890] usb 1-1: SerialNumber: syz
[  117.597057][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  117.630797][ T5897] usb 2-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00
[  117.644797][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  117.653278][ T5897] usb 2-1: SerialNumber: syz
[  117.747714][ T5890] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  117.796222][ T5190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  117.904532][ T5897] usb 2-1: 0:2 : does not exist
[  118.119377][ T5897] usb 2-1: USB disconnect, device number 10
[  118.438546][ T5934] usb 1-1: USB disconnect, device number 16
[  118.469535][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.762669][ T6347] loop5: detected capacity change from 0 to 7
[  118.772933][ T6347]  loop5:
[  118.775918][ T6347] loop5: partition table partially beyond EOD, truncated
[  118.843211][ T5190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  118.876316][ T5897] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  118.883463][ T5190] ath9k_htc: Failed to initialize the device
[  119.015316][ T5934] usb 1-1: ath9k_htc: USB layer deinitialized
[  119.138225][ T5897] usb 4-1: Using ep0 maxpacket: 16
[  119.169165][ T5897] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  119.192372][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.251402][ T5897] usb 4-1: Product: syz
[  119.259094][ T6351] fuse: Unknown parameter '00000000000000000000ÿ00000000000000000000'
[  119.280487][ T5897] usb 4-1: Manufacturer: syz
[  119.368274][ T5897] usb 4-1: SerialNumber: syz
[  119.418460][ T5897] usb 4-1: config 0 descriptor??
[  119.464480][ T5897] gspca_main: spca508-2.14.0 probing 041e:4018
[  119.773425][ T5897] gspca_spca508: reg_read err -32
[  119.779641][ T5897] gspca_spca508: reg_read err -32
[  119.826966][ T5897] gspca_spca508: reg_read err -32
[  119.913637][ T5897] gspca_spca508: reg_read err -71
[  119.925519][ T5897] gspca_spca508: reg_read err -71
[  119.955550][ T5897] gspca_spca508: reg write: error -71
[  120.022451][ T5897] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[  120.079451][ T5897] usb 4-1: USB disconnect, device number 14
[  120.161061][ T5904] usb 5-1: unit 8 not found!
[  120.165687][ T5904] usb 5-1: unit 6 not found!
[  120.349860][ T5904] usb 5-1: USB disconnect, device number 12
[  120.392347][ T6365] kvm: emulating exchange as write
[  120.460715][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'.
[  120.476740][ T5829] udevd[5829]: setting mode of /dev/bus/usb/005/012 to 020664 failed: No such file or directory
[  120.522715][ T5829] udevd[5829]: setting owner of /dev/bus/usb/005/012 to uid=0, gid=0 failed: No such file or directory
[  120.697325][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.256902][ T5190] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  121.296895][ T5934] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  121.418100][ T5190] usb 4-1: Using ep0 maxpacket: 8
[  121.431356][ T5190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.445536][ T5190] usb 4-1: config 0 has no interfaces?
[  121.459850][ T5934] usb 2-1: Using ep0 maxpacket: 8
[  121.468538][ T5190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.541609][ T5934] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  121.564683][ T5934] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  121.601016][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.692215][ T5190] usb 4-1: config 0 has no interfaces?
[  121.700326][ T5934] usb 2-1: Product: syz
[  121.707067][ T5190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.729934][ T5934] usb 2-1: Manufacturer: syz
[  121.737799][ T5190] usb 4-1: config 0 has no interfaces?
[  121.743429][ T5934] usb 2-1: SerialNumber: syz
[  121.755942][ T5190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.766968][ T5934] usb 2-1: config 0 descriptor??
[  121.778091][ T5934] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  121.786561][ T5190] usb 4-1: config 0 has no interfaces?
[  121.796071][ T5190] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  121.806234][ T5934] usb 2-1: setting power ON
[  121.813327][ T5934] dvb-usb: bulk message failed: -22 (2/0)
[  121.819862][ T5190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.840690][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  121.858868][ T5190] usb 4-1: config 0 descriptor??
[  121.866255][ T5934] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  121.929943][ T5934] usb 2-1: media controller created
[  121.974584][ T6386] dvb-usb: bulk message failed: -22 (3/0)
[  121.982200][ T6389] dvb-usb: bulk message failed: -22 (3/0)
[  121.989122][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.008098][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.305611][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  122.443222][ T5934] usb 2-1: selecting invalid altsetting 6
[  122.459402][ T5934] usb 2-1: digital interface selection failed (-22)
[  122.466073][ T5934] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  122.507270][ T5190] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  122.520013][ T5934] usb 2-1: setting power OFF
[  122.530326][ T5934] dvb-usb: bulk message failed: -22 (2/0)
[  122.548322][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  122.565804][ T5934] (NULL device *): no alternate interface
[  122.619600][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  122.641860][ T5934] usb 2-1: USB disconnect, device number 12
[  122.669415][ T5190] usb 1-1: unable to get BOS descriptor or descriptor too short
[  122.680215][ T5190] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  122.699686][ T5190] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  122.714041][ T5190] usb 1-1: config 63 has no interface number 0
[  122.732237][ T5190] usb 1-1: config 63 interface 66 has no altsetting 0
[  122.743323][ T5190] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  122.755924][ T5190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.775992][ T5190] usb 1-1: Product: syz
[  122.783987][ T5190] usb 1-1: Manufacturer: syz
[  122.795768][ T5190] usb 1-1: SerialNumber: syz
[  123.039648][ T5190] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  123.064533][ T5190] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[  123.094903][ T5190] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  123.113416][ T5190] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[  123.134789][ T5190] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  123.155849][ T5190] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  123.177452][ T5190] uvcvideo 1-1:63.66: No streaming interface found for terminal 29.
[  123.205480][ T5190] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized!
[  123.252425][ T5190] usb 1-1: USB disconnect, device number 17
[  123.606961][ T5190] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  123.733123][   T24] usb 4-1: USB disconnect, device number 15
[  123.757699][ T5190] usb 1-1: device descriptor read/64, error -71
[  124.027044][ T5190] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  124.200067][ T5190] usb 1-1: device descriptor read/64, error -71
[  124.307132][ T5190] usb usb1-port1: attempt power cycle
[  124.677299][ T5190] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  124.685080][ T6425] capability: warning: `syz.1.132' uses 32-bit capabilities (legacy support in use)
[  124.718493][ T5190] usb 1-1: device descriptor read/8, error -71
[  124.876986][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  124.923655][ T6435] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  124.956926][ T5190] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  124.977549][ T5190] usb 1-1: device descriptor read/8, error -71
[  125.079061][ T5904] usb 5-1: config 0 has no interfaces?
[  125.085906][ T5904] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  125.088028][ T5190] usb usb1-port1: unable to enumerate USB device
[  125.110781][ T5904] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  125.126871][ T5904] usb 5-1: Manufacturer: syz
[  125.156155][ T5904] usb 5-1: config 0 descriptor??
[  125.316874][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[  125.339693][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[  125.372674][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.390003][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.495888][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[  125.515288][ T5904] usb 5-1: USB disconnect, device number 13
[  125.529257][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[  125.640389][ T6440] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up
[  126.163194][ T6453] binder: 6452:6453 ioctl c0189379 200000001ac0 returned -22
[  126.926235][ T6460] loop5: detected capacity change from 0 to 7
[  126.942347][ T6460]  loop5:
[  126.977389][ T6460] loop5: partition table partially beyond EOD, truncated
[  127.081962][ T6468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.358497][ T5890] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  127.440911][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[  127.450566][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.498962][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.557548][ T5890] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  127.566281][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.578450][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.606916][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.668791][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.687959][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.716903][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.731169][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.744150][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.782790][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.784223][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.784280][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.784307][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.785394][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.785449][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.785477][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.787831][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.787877][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.787902][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.795143][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.795192][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.795218][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.796406][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.796463][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.796488][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.817220][ T5890] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  127.817250][ T5890] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  127.817272][ T5890] usb 1-1: Product: syz
[  127.817288][ T5890] usb 1-1: Manufacturer: syz
[  127.817304][ T5890] usb 1-1: SerialNumber: syz
[  127.820094][ T5890] usb 1-1: config 0 descriptor??
[  128.137249][ T5890] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  128.322326][ T5890] usb 1-1: USB disconnect, device number 22
[  128.325057][ T5890] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  128.516389][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  128.516530][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  128.614093][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  128.614260][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  128.829379][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  128.829509][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  129.702520][ T6516] loop5: detected capacity change from 0 to 7
[  129.728903][ T5829]  loop5:
[  129.731923][ T5829] loop5: partition table partially beyond EOD, truncated
[  129.756928][ T6516]  loop5:
[  129.765426][ T6516] loop5: partition table partially beyond EOD, truncated
[  130.187636][ T5190] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  130.358134][ T5190] usb 4-1: Using ep0 maxpacket: 16
[  130.373524][ T5190] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[  130.397076][ T5190] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  130.406728][ T5190] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254
[  130.464111][ T5190] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  130.483493][ T5190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  130.496943][   T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  130.524173][ T5190] usb 4-1: SerialNumber: syz
[  130.678871][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  130.714553][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.746106][   T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  130.787023][ T5897] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  130.807530][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.836430][ T5190] usb 4-1: USB disconnect, device number 16
[  130.872889][   T24] usb 2-1: config 0 descriptor??
[  130.972760][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  130.984786][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.036861][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.074398][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  131.119353][ T5897] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  131.147018][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.199822][ T5897] usb 1-1: config 0 descriptor??
[  131.298841][   T24] elan 0003:04F3:0755.0003: failed to start in urb: -90
[  131.335966][   T24] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  131.504703][  T796] usb 2-1: USB disconnect, device number 13
[  131.593256][ T6529] fido_id[6529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  131.654236][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  131.695453][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  131.711774][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  131.739794][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  131.760812][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  131.811163][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  131.834876][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  131.885825][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  132.056624][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  132.064360][ T5897] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  132.116920][ T5190] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  132.145978][ T5897] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input10
[  132.224060][ T6539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.254352][ T5897] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  132.300619][ T5190] usb 4-1: too many configurations: 185, using maximum allowed: 8
[  132.315196][ T5897] usb 1-1: USB disconnect, device number 23
[  132.328245][ T5190] usb 4-1: unable to read config index 0 descriptor/start: -61
[  132.357289][ T5190] usb 4-1: can't read configurations, error -61
[  132.474808][ T6542] fido_id[6542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  132.566911][ T5190] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  132.744620][ T6549] fuse: Bad value for 'user_id'
[  132.775748][ T6552] ªªªªªª: renamed from vlan0 (while UP)
[  132.782273][ T5190] usb 4-1: too many configurations: 185, using maximum allowed: 8
[  132.810332][ T5190] usb 4-1: unable to read config index 0 descriptor/start: -61
[  132.825717][ T6549] fuse: Bad value for 'user_id'
[  132.837134][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.843712][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  132.883742][ T5190] usb 4-1: can't read configurations, error -61
[  132.897847][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[  132.908449][ T5190] usb usb4-port1: attempt power cycle
[  133.005812][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[  133.154572][ T6561] loop5: detected capacity change from 0 to 7
[  133.193277][ T6561]  loop5:
[  133.226920][ T6561] loop5: partition table partially beyond EOD, truncated
[  133.286958][ T5190] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  133.368463][ T5190] usb 4-1: too many configurations: 185, using maximum allowed: 8
[  133.380962][ T5190] usb 4-1: unable to read config index 0 descriptor/start: -61
[  133.388710][ T5190] usb 4-1: can't read configurations, error -61
[  133.546924][ T5190] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  133.588550][ T5190] usb 4-1: too many configurations: 185, using maximum allowed: 8
[  133.632738][ T5190] usb 4-1: unable to read config index 0 descriptor/start: -61
[  133.650841][ T5190] usb 4-1: can't read configurations, error -61
[  133.673543][ T5190] usb usb4-port1: unable to enumerate USB device
[  134.203430][ T6579] Zero length message leads to an empty skb
[  134.298297][ T5190] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  134.486884][ T5190] usb 3-1: Using ep0 maxpacket: 16
[  134.509672][ T5190] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  134.526955][ T5190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.555196][ T5190] usb 3-1: Product: syz
[  134.580380][ T5190] usb 3-1: Manufacturer: syz
[  134.611805][ T5190] usb 3-1: SerialNumber: syz
[  134.620746][ T6583] overlay: Unknown parameter 'ÅWõƒzÓ!ö?V1—|GŸ*‚<bÿd•|%pù’ÔKÐSnål/F‰6O¸ž�lõ»"xÔv|QTc™r¦nþiYŠÖWªcÙ©Öxë�¾Y8ë.G€»8РXSÿlଅ3èµç÷kgnK^fÚšr¿-¢57ŒÞÂ@'
[  135.087481][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.096317][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.327851][ T5190] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  135.349311][ T5190] usb 3-1: USB disconnect, device number 12
[  135.616891][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  135.778799][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.797034][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  135.836011][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  135.855095][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  135.879353][ T5897] usb 2-1: SerialNumber: syz
[  135.919554][ T5897] cdc_mbim 2-1:1.0: MBIM functional descriptor missing
[  135.926480][ T5897] cdc_mbim 2-1:1.0: bind() failure
[  136.054040][ T6601] loop5: detected capacity change from 0 to 7
[  136.073526][ T6601]  loop5:
[  136.086787][ T6601] loop5: partition table partially beyond EOD, truncated
[  136.278847][ T5897] usb 2-1: USB disconnect, device number 14
[  136.450320][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'.
[  137.557330][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  137.696936][ T5897] usb 4-1: device descriptor read/64, error -71
[  137.729279][  T980] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  137.777261][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  137.896887][  T980] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  137.905652][  T980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.931621][  T796] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  137.939398][   T24] usb 3-1: Using ep0 maxpacket: 16
[  137.949078][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  137.964882][  T980] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  137.986768][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.007333][  T980] usb 1-1: config 1 has no interface number 1
[  138.013510][  T980] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  138.023528][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.057855][  T980] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.067858][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  138.145644][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  138.154880][ T5897] usb 4-1: device descriptor read/64, error -71
[  138.163980][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.174026][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.188902][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.209764][  T980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  138.223808][  T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  138.224936][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.225034][  T796] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  138.258188][   T24] usb 3-1: config 0 descriptor??
[  138.288580][ T5897] usb usb4-port1: attempt power cycle
[  138.295423][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.297147][  T980] usb 1-1: Product: syz
[  138.316427][  T796] usb 5-1: config 0 descriptor??
[  138.345694][  T980] usb 1-1: Manufacturer: syz
[  138.357197][  T980] usb 1-1: SerialNumber: syz
[  138.372526][ T6639] loop5: detected capacity change from 0 to 7
[  138.382605][ T6639]  loop5:
[  138.385629][ T6639] loop5: partition table partially beyond EOD, truncated
[  138.618641][  T980] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  138.627268][  T980] usb 1-1: MIDIStreaming interface descriptor not found
[  138.657685][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  138.678086][ T5897] usb 4-1: device descriptor read/8, error -71
[  138.803829][  T980] usb 1-1: USB disconnect, device number 24
[  138.826942][ T5890] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  138.889718][  T796] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  138.950438][ T5897] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  139.008709][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  139.009359][ T5897] usb 4-1: device descriptor read/8, error -71
[  139.036207][ T5890] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  139.066572][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  139.090107][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.119202][ T6641] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  139.133989][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  139.168863][ T5897] usb usb4-port1: unable to enumerate USB device
[  139.323139][ T5190] usb 5-1: USB disconnect, device number 14
[  139.333053][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  139.340020][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  139.424924][   T24] usb 3-1: USB disconnect, device number 13
[  139.451393][  T796] usb 2-1: USB disconnect, device number 15
[  139.937076][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.956519][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.990509][ T5839] Bluetooth: hci4: Malformed MSFT vendor event: 0x02
[  140.034243][ T6663] trusted_key: syz.1.198 sent an empty control message without MSG_MORE.
[  140.046028][ T6663] fuse: Unknown parameter ''
[  140.176961][ T5190] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  140.217774][ T6665] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.199'.
[  140.227883][ T6665] netlink: Unknown conntrack attr (0)
[  140.398681][ T6670] sit0: entered promiscuous mode
[  140.419856][ T6670] netlink: 'syz.3.201': attribute type 1 has an invalid length.
[  140.435767][ T6670] netlink: 1 bytes leftover after parsing attributes in process `syz.3.201'.
[  140.716954][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  140.827279][ T5190] usb 5-1: device descriptor read/64, error -71
[  140.877013][   T24] usb 3-1: Using ep0 maxpacket: 8
[  140.885612][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  140.896906][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  140.908152][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  140.917917][  T980] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  140.925865][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.925909][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  140.925931][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.106900][ T5190] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  141.140247][  T980] usb 1-1: Using ep0 maxpacket: 16
[  141.149756][  T980] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  141.158308][  T980] usb 1-1: config 0 has no interface number 0
[  141.164449][  T980] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  141.169308][   T24] usb 3-1: GET_CAPABILITIES returned 0
[  141.177719][  T980] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  141.193157][  T980] usb 1-1: config 0 interface 41 has no altsetting 0
[  141.202578][  T980] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  141.212114][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.213159][   T24] usbtmc 3-1:16.0: can't read capabilities
[  141.222175][  T980] usb 1-1: Product: syz
[  141.235565][  T980] usb 1-1: Manufacturer: syz
[  141.248021][  T980] usb 1-1: SerialNumber: syz
[  141.255695][  T980] usb 1-1: config 0 descriptor??
[  141.268232][ T6677] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  141.275501][ T5190] usb 5-1: Using ep0 maxpacket: 32
[  141.284444][ T5190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.307175][ T6677] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  141.316289][ T5190] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  141.341223][ T5190] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[  141.353120][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.366156][ T5190] usb 5-1: Product: syz
[  141.375037][ T5190] usb 5-1: Manufacturer: syz
[  141.386084][ T5190] usb 5-1: SerialNumber: syz
[  141.406965][ T6684] warning: `syz.1.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  141.525924][  T980] sr9700 1-1:0.41: probe with driver sr9700 failed with error -71
[  141.550838][  T980] usb 1-1: USB disconnect, device number 25
[  141.660348][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.675630][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.684831][ T5934] usb 3-1: USB disconnect, device number 14
[  141.699713][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.726537][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.737883][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.747264][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.757842][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.818502][ T5190] usb 5-1: unable to issue vendor read request (ret = -71)
[  141.948111][ T5190] usb 5-1: USB disconnect, device number 16
[  141.971530][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  142.427197][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  142.464543][ T6693] binder: BINDER_SET_CONTEXT_MGR already set
[  142.471133][ T6693] binder: 6692:6693 ioctl 4018620d 200000000100 returned -16
[  142.486415][ T6694] binder: 6692:6694 ioctl c02054a5 200000000500 returned -22
[  142.494124][ T6695] binder: 6692:6695 ioctl c02054a5 200000000500 returned -22
[  142.567235][   T24] usb 5-1: device descriptor read/64, error -71
[  142.780239][ T6704] io-wq is not configured for unbound workers
[  142.796957][  T796] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  142.816945][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  142.836972][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[  142.969142][   T24] usb 5-1: device descriptor read/64, error -71
[  143.015255][  T796] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  143.032708][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.054788][  T796] usb 1-1: Product: syz
[  143.060563][  T796] usb 1-1: Manufacturer: syz
[  143.074869][  T796] usb 1-1: SerialNumber: syz
[  143.094153][  T796] usb 1-1: config 0 descriptor??
[  143.099388][   T24] usb usb5-port1: attempt power cycle
[  143.112818][ T6707] netlink: 'syz.1.212': attribute type 64 has an invalid length.
[  143.125725][  T796] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  143.144843][ T6707] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  143.460197][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  143.487655][   T24] usb 5-1: device descriptor read/8, error -71
[  143.538649][  T796] sonixb 1-1:0.0: Error writing register 01: -71
[  143.553941][  T796] sonixb 1-1:0.0: probe with driver sonixb failed with error -71
[  143.564050][ T6714] loop5: detected capacity change from 0 to 7
[  143.576204][  T796] usb 1-1: USB disconnect, device number 26
[  143.591919][ T6714]  loop5:
[  143.595790][ T6714] loop5: partition table partially beyond EOD, truncated
[  143.761823][   T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  143.814713][   T24] usb 5-1: device descriptor read/8, error -71
[  143.880380][ T6721] netlink: 'syz.3.216': attribute type 1 has an invalid length.
[  143.953726][   T24] usb usb5-port1: unable to enumerate USB device
[  143.981652][ T6724] netlink: 108 bytes leftover after parsing attributes in process `syz.3.216'.
[  143.993963][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.009993][ T6724] bond1: entered promiscuous mode
[  144.015155][ T6724] bond1: entered allmulticast mode
[  144.199460][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  144.376920][   T24] usb 2-1: Using ep0 maxpacket: 8
[  144.391104][   T24] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  144.410401][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.434896][   T24] usb 2-1: Product: syz
[  144.444379][   T24] usb 2-1: Manufacturer: syz
[  144.451173][   T24] usb 2-1: SerialNumber: syz
[  144.473205][   T24] usb 2-1: config 0 descriptor??
[  144.496896][  T796] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  144.507114][   T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  144.533071][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  144.556794][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  144.577767][   T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  144.595857][   T24] usb 2-1: media controller created
[  144.676667][  T796] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  144.692108][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.712386][  T796] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  144.729820][  T796] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  144.738426][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.759328][  T796] usb 1-1: Manufacturer: syz
[  144.820905][  T796] usb 1-1: config 0 descriptor??
[  144.856449][ T6741] fuse: Unknown parameter '0xffffffffffffffff'
[  144.885407][ T6741] ipip0: entered promiscuous mode
[  144.893183][ T6741] ipip0: entered allmulticast mode
[  145.037808][  T796] rc_core: IR keymap rc-hauppauge not found
[  145.043859][  T796] Registered IR keymap rc-empty
[  145.052393][  T796] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  145.080689][  T796] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12
[  145.344544][    C1] igorplugusb 1-1:0.0: receive overflow invalid: 167
[  145.549212][  T980] usb 1-1: USB disconnect, device number 27
[  145.698869][ T5190] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  145.877429][ T5190] usb 5-1: Using ep0 maxpacket: 32
[  145.884840][ T5190] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  145.893187][ T5190] usb 5-1: config 0 has no interface number 0
[  145.909799][ T5190] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  145.937530][ T5190] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  145.947053][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.957747][ T5190] usb 5-1: Product: syz
[  145.967279][ T5190] usb 5-1: Manufacturer: syz
[  145.973702][ T5190] usb 5-1: SerialNumber: syz
[  145.993248][ T5190] usb 5-1: config 0 descriptor??
[  146.008596][ T6748] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  146.040609][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'.
[  146.299219][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'.
[  146.326189][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.435603][ T6758] bridge_slave_1 (unregistering): left allmulticast mode
[  146.528630][ T6758] bridge_slave_1 (unregistering): left promiscuous mode
[  146.573135][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.797970][  T796] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  146.957564][  T796] usb 1-1: device descriptor read/64, error -71
[  147.203353][ T6768] loop5: detected capacity change from 0 to 7
[  147.207224][  T796] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  147.227743][ T5190] asix 5-1:0.188: probe with driver asix failed with error -71
[  147.236965][ T6768]  loop5:
[  147.239959][ T6768] loop5: partition table partially beyond EOD, truncated
[  147.277901][ T5190] usb 5-1: USB disconnect, device number 21
[  147.396938][  T796] usb 1-1: device descriptor read/64, error -71
[  147.507379][  T796] usb usb1-port1: attempt power cycle
[  147.787052][ T5904] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  147.834223][ T6772] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.228'.
[  147.849203][ T6772] input: syz1 as /devices/virtual/input/input13
[  147.858533][  T796] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  147.887626][  T796] usb 1-1: device descriptor read/8, error -71
[  148.022662][ T5904] usb 3-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config
[  148.041306][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.087615][ T5904] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  148.130581][   T24] cxusb: set interface failed
[  148.135310][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  148.148067][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  148.166881][ T5904] usb 3-1: SerialNumber: syz
[  148.206909][  T796] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  148.247632][  T796] usb 1-1: device descriptor read/8, error -71
[  148.307984][   T24] DVB: Unable to find symbol mt352_attach()
[  148.316862][   T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  148.379982][  T796] usb usb1-port1: unable to enumerate USB device
[  148.392449][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.402456][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.427767][ T6778] team_slave_0: entered promiscuous mode
[  148.433583][ T6778] team_slave_1: entered promiscuous mode
[  148.469360][ T6778] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  148.537300][ T5904] usb 3-1: 0:2 : does not exist
[  148.694444][ T5904] usb 3-1: USB disconnect, device number 15
[  148.716865][   T24] rc_core: IR keymap rc-dvico-portable not found
[  148.733609][   T24] Registered IR keymap rc-empty
[  148.780940][   T24] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  148.824514][   T24] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14
[  148.842780][ T6791] bridge_slave_0: left allmulticast mode
[  148.873607][ T6644] udevd[6644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.887265][ T6791] bridge_slave_0: left promiscuous mode
[  148.907869][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.920290][   T24] dvb-usb: schedule remote query interval to 100 msecs.
[  148.953348][   T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  148.986023][ T6791] bridge_slave_1: left allmulticast mode
[  149.003049][   T24] usb 2-1: USB disconnect, device number 16
[  149.012756][ T6791] bridge_slave_1: left promiscuous mode
[  149.057108][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.139896][ T6791] bond0: (slave bond_slave_0): Releasing backup interface
[  149.151622][   T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  149.215495][ T6791] bond0: (slave bond_slave_1): Releasing backup interface
[  149.264079][ T6791] team0: Port device team_slave_0 removed
[  149.289893][ T6791] team0: Port device team_slave_1 removed
[  149.299063][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.324358][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.360738][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.390285][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.425235][ T6791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  149.453538][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'.
[  149.884819][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  150.179020][ T6818] fuse: Unexpected value for 'allow_other'
[  150.234227][ T5897] usb 2-1: Using ep0 maxpacket: 8
[  150.256264][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.277619][ T5897] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  150.300273][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.367747][ T5897] usb 2-1: config 0 descriptor??
[  151.017312][ T6832] dvmrp1: tun_chr_ioctl cmd 1074025677
[  151.023544][ T6832] dvmrp1: linktype set to 1
[  151.243014][ T5897] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  152.043197][ T6843] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  152.276510][ T6843] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  152.536561][ T6848] fuse: Unknown parameter '0x000000000000000c'
[  152.632278][ T6858] kAFS: unable to lookup cell 'ÿ'
[  152.686898][ T5934] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  152.704816][ T6858] fuse: Bad value for 'fd'
[  152.766923][ T5190] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  152.913331][ T5934] usb 3-1: Using ep0 maxpacket: 32
[  153.057118][ T5190] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  153.065594][ T5190] usb 5-1: config 2 has no interface number 0
[  153.075268][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.091178][ T5934] usb 3-1: config 40 has an invalid interface number: 42 but max is 0
[  153.110899][ T5190] usb 5-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64
[  153.126909][ T5934] usb 3-1: config 40 has an invalid descriptor of length 0, skipping remainder of the config
[  153.152960][  T980] usb 2-1: USB disconnect, device number 17
[  153.169292][ T5190] usb 5-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  153.182429][ T5934] usb 3-1: config 40 has no interface number 0
[  153.337367][ T5934] usb 3-1: config 40 interface 42 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  153.350696][ T5190] usb 5-1: config 2 interface 88 has no altsetting 0
[  153.376252][ T5934] usb 3-1: config 40 interface 42 has no altsetting 0
[  153.386306][ T5190] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  153.405925][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.444251][ T5934] usb 3-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=5c.b6
[  153.464970][ T5190] usb 5-1: Product: syz
[  153.470388][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.480449][ T5190] usb 5-1: Manufacturer: syz
[  153.485049][ T5190] usb 5-1: SerialNumber: syz
[  153.495786][ T5934] usb 3-1: Product: syz
[  153.506755][ T5934] usb 3-1: Manufacturer: syz
[  153.516143][ T6855] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  153.540794][ T5934] usb 3-1: SerialNumber: syz
[  153.557407][ T6855] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  153.623529][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.250'.
[  153.802035][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.250'.
[  153.862145][ T6855] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  153.887026][ T6855] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  154.684055][ T6873] xt_HMARK: proto mask must be zero with L3 mode
[  154.992526][   T30] kauditd_printk_skb: 48 callbacks suppressed
[  154.992545][   T30] audit: type=1326 audit(1773508744.675:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f71b9c799 code=0x7ffc0000
[  155.029217][   T30] audit: type=1326 audit(1773508744.705:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f71b9c799 code=0x7ffc0000
[  155.166235][   T30] audit: type=1326 audit(1773508744.735:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f5f71b9c799 code=0x7ffc0000
[  155.235112][   T30] audit: type=1326 audit(1773508744.735:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f71b9c799 code=0x7ffc0000
[  155.264503][ T6878] loop5: detected capacity change from 0 to 7
[  155.277056][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.296029][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.309316][ T6878]  loop5:
[  155.312328][ T6878] loop5: partition table partially beyond EOD, truncated
[  155.331379][ T5190] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  155.352951][ T5190] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  155.356048][   T30] audit: type=1326 audit(1773508744.735:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f71b9c799 code=0x7ffc0000
[  155.464457][ T5934] hub 3-1:40.42: bad descriptor, ignoring hub
[  155.483545][ T5190] asix 5-1:2.88: probe with driver asix failed with error -71
[  155.501526][ T5934] hub 3-1:40.42: probe with driver hub failed with error -5
[  155.549643][ T5934] keyspan 3-1:40.42: Keyspan 1 port adapter converter detected
[  155.574383][ T5934] keyspan 3-1:40.42: found no endpoint descriptor for endpoint 84
[  155.586243][ T5190] usb 5-1: USB disconnect, device number 22
[  155.593940][ T6880] veth1_to_batadv: entered promiscuous mode
[  155.609714][ T6880] veth1_to_batadv: entered allmulticast mode
[  155.632247][ T5934] keyspan 3-1:40.42: found no endpoint descriptor for endpoint 81
[  155.648198][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.255'.
[  155.667808][ T5934] keyspan 3-1:40.42: found no endpoint descriptor for endpoint 82
[  155.675762][ T5934] keyspan 3-1:40.42: found no endpoint descriptor for endpoint 1
[  155.747180][ T5934] keyspan 3-1:40.42: found no endpoint descriptor for endpoint 2
[  155.785219][ T5934] keyspan 3-1:40.42: found no endpoint descriptor for endpoint 83
[  155.809984][ T5934] keyspan 3-1:40.42: found no endpoint descriptor for endpoint 3
[  155.847116][ T5934] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  155.910247][ T5934] usb 3-1: USB disconnect, device number 16
[  155.956542][ T6894] xt_TCPMSS: Only works on TCP SYN packets
[  155.980592][ T5934] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  156.017924][ T5934] keyspan 3-1:40.42: device disconnected
[  156.102152][ T6895] syzkaller0: entered promiscuous mode
[  156.122924][ T6895] syzkaller0: entered allmulticast mode
[  156.166910][ T5897] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  156.197110][   T30] audit: type=1326 audit(1773508745.885:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[  156.276979][   T30] audit: type=1326 audit(1773508745.885:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2b9c799 code=0x7ffc0000
[  156.356883][ T5897] usb 2-1: Using ep0 maxpacket: 32
[  156.364576][   T30] audit: type=1326 audit(1773508745.885:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1af2b5cfce code=0x7ffc0000
[  156.403114][ T5897] usb 2-1: config 4 has an invalid interface number: 8 but max is 0
[  156.404282][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'.
[  156.416901][ T5897] usb 2-1: config 4 has no interface number 0
[  156.436732][ T5897] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  156.453481][   T30] audit: type=1326 audit(1773508745.885:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1af2b5cfce code=0x7ffc0000
[  156.488223][ T5897] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  156.498140][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'.
[  156.523824][   T30] audit: type=1326 audit(1773508745.885:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1af2b5cfce code=0x7ffc0000
[  156.548654][ T5897] usb 2-1: config 4 interface 8 has no altsetting 0
[  156.560049][ T5897] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  156.569568][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.579089][ T5897] usb 2-1: Product: syz
[  156.583495][ T5897] usb 2-1: Manufacturer: syz
[  156.589251][ T5897] usb 2-1: SerialNumber: syz
[  156.844785][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'.
[  157.517046][ T5190] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  157.563547][ T5897] opticon 2-1:4.8: opticon converter detected
[  157.588073][ T5897] usb 2-1: opticon converter now attached to ttyUSB0
[  157.620509][ T5897] usb 2-1: USB disconnect, device number 18
[  157.649074][ T5897] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  157.687436][ T5890] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  157.696562][ T5897] opticon 2-1:4.8: device disconnected
[  157.712334][ T5190] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  157.726925][ T6931] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.747581][ T5190] usb 1-1: config 0 has an invalid interface number: 6 but max is 2
[  157.760975][ T5190] usb 1-1: config 0 has no interface number 0
[  157.780522][ T5190] usb 1-1: config 0 has no interface number 1
[  157.795398][ T5190] usb 1-1: too many endpoints for config 0 interface 6 altsetting 255: 255, using maximum allowed: 30
[  157.812519][ T5190] usb 1-1: config 0 interface 6 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  157.825990][ T5190] usb 1-1: config 0 interface 6 has no altsetting 0
[  157.832928][ T5190] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  157.842233][ T5190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.856921][ T5890] usb 3-1: Using ep0 maxpacket: 8
[  157.863797][ T5890] usb 3-1: config 0 has no interfaces?
[  157.872001][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  157.883508][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.892734][ T5890] usb 3-1: Product: syz
[  157.899102][ T5890] usb 3-1: Manufacturer: syz
[  157.910624][ T5190] usb 1-1: config 0 descriptor??
[  157.928075][ T5890] usb 3-1: SerialNumber: syz
[  157.940957][ T5890] usb 3-1: config 0 descriptor??
[  158.155420][ T5890] usb 3-1: USB disconnect, device number 17
[  158.360248][ T6947] fuse: Unknown parameter '0x0000000000000007'
[  158.450802][ T6951] loop2: detected capacity change from 0 to 7
[  158.461014][ T6951] Dev loop2: unable to read RDB block 7
[  158.466654][ T6951]  loop2: unable to read partition table
[  158.474117][ T6951] loop2: partition table beyond EOD, truncated
[  158.494635][ T6951] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  158.846065][ T5190] usb 1-1: Could not set interface, error -71
[  158.863592][ T5190] usb 1-1: selecting invalid altsetting 0
[  158.890513][ T5190] usb 1-1: Could not set interface, error -22
[  158.896977][ T5890] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  158.912563][ T5190] usb 1-1: USB disconnect, device number 32
[  159.068471][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  159.084309][ T5890] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  159.102537][ T5890] usb 2-1: config 0 has no interface number 0
[  159.115443][ T6968] input: syz1 as /devices/virtual/input/input15
[  159.203918][ T5890] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  159.250710][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.260438][ T5890] usb 2-1: Product: syz
[  159.264819][ T5890] usb 2-1: Manufacturer: syz
[  159.270037][ T5890] usb 2-1: SerialNumber: syz
[  159.283963][ T5890] usb 2-1: config 0 descriptor??
[  159.306208][ T5890] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  159.318249][ T5190] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  159.473576][ T6961] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  159.481440][ T5190] usb 4-1: Using ep0 maxpacket: 16
[  159.500897][ T5190] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  159.517465][ T5190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.529816][ T5190] usb 4-1: Product: syz
[  159.542184][ T5190] usb 4-1: Manufacturer: syz
[  159.551915][ T5190] usb 4-1: SerialNumber: syz
[  159.591747][ T5190] usb 4-1: config 0 descriptor??
[  159.645487][ T6976] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  159.676282][ T3558] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.698430][ T3558] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.771000][ T3558] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.821703][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'.
[  159.843086][ T3558] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.119016][ T5190] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  160.134855][ T6994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.169007][ T5190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  160.180255][ T5190] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  160.191508][ T5190] usb 4-1: media controller created
[  160.342389][ T6996] geneve2: entered promiscuous mode
[  160.348389][ T6996] geneve2: entered allmulticast mode
[  160.376436][ T5190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.438361][ T5190] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  160.448831][ T5190] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  160.911797][ T6998] netlink: 180 bytes leftover after parsing attributes in process `syz.2.284'.
[  160.922688][ T6998] netlink: 180 bytes leftover after parsing attributes in process `syz.2.284'.
[  160.995168][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.005516][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.233518][ T7000] veth1_to_bond: entered allmulticast mode
[  161.308304][ T7003] netlink: 136 bytes leftover after parsing attributes in process `syz.0.285'.
[  161.339844][ T7003] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  161.490948][  T796] hid_parser_main: 5 callbacks suppressed
[  161.490971][  T796] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  161.536529][  T796] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  161.732425][ T5890] usb 2-1: qt2_attach - failed to power on unit: -71
[  161.752363][ T5890] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  161.777445][ T5897] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  161.797172][ T5890] usb 2-1: USB disconnect, device number 19
[  162.024778][ T6999] veth1_to_bond: left allmulticast mode
[  162.178646][  T796] usb 4-1: USB disconnect, device number 25
[  162.319350][  T796] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  162.477143][ T5897] usb 1-1: device descriptor read/64, error -71
[  162.795858][ T5890] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  162.863366][ T5897] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  163.469493][ T5890] usb 5-1: config 160 has an invalid interface number: 200 but max is 0
[  163.485495][ T5890] usb 5-1: config 160 has no interface number 0
[  163.496911][ T5897] usb 1-1: Using ep0 maxpacket: 8
[  163.510015][ T5897] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  163.537094][ T5890] usb 5-1: config 160 interface 200 has no altsetting 0
[  163.558430][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.580381][ T5897] usb 1-1: Product: syz
[  163.589177][ T5897] usb 1-1: Manufacturer: syz
[  163.599616][ T5890] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  163.604287][ T5897] usb 1-1: SerialNumber: syz
[  163.617908][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.625929][ T5890] usb 5-1: Product: syz
[  163.653064][ T5897] usb 1-1: config 0 descriptor??
[  163.670266][ T5890] usb 5-1: Manufacturer: syz
[  163.674906][ T5890] usb 5-1: SerialNumber: syz
[  163.683159][ T5897] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  164.404441][   T24] IPVS: starting estimator thread 0...
[  164.538122][ T7072] IPVS: using max 28 ests per chain, 67200 per kthread
[  165.198736][ T5897] gspca_sonixj: reg_w1 err -71
[  165.237002][ T5897] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  165.277247][ T5897] usb 1-1: USB disconnect, device number 34
[  165.765349][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  165.784747][ T5890] usb 5-1: MIDIStreaming interface descriptor not found
[  166.079808][ T5890] usb 5-1: USB disconnect, device number 23
[  166.305892][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.506904][ T5890] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  166.668610][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.674051][ T7088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer.
[  166.710295][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.715766][ T7088] kvm: kvm [7087]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  166.738848][ T7088] kvm: kvm [7087]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  166.756946][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  166.784232][ T7088] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns
[  166.813942][ T5890] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  166.852120][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.877927][ T5890] usb 5-1: config 0 descriptor??
[  167.276926][ T5897] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  167.344307][ T5890] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  167.363054][ T5890] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  167.377264][   T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  167.378288][ T5890] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  167.393880][ T5890] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  167.405540][ T5890] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  167.413248][ T5890] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  167.427002][ T5890] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  167.435258][ T5890] steelseries 0003:1038:1410.0007: missing HID_OUTPUT_REPORT 0
[  167.448534][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.485542][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.505817][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  167.525835][   T24] usb 2-1: device descriptor read/64, error -71
[  167.546689][ T5897] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  167.566712][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.596087][ T5897] usb 1-1: config 0 descriptor??
[  167.787017][   T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  167.927083][   T24] usb 2-1: device descriptor read/64, error -71
[  168.037333][   T24] usb usb2-port1: attempt power cycle
[  168.059466][ T5897] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  168.076466][ T7113] netlink: 'syz.2.313': attribute type 15 has an invalid length.
[  168.273357][ T5897] usb 5-1: USB disconnect, device number 24
[  168.289189][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.324446][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.340934][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.368804][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.427146][   T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  168.458473][   T24] usb 2-1: device descriptor read/8, error -71
[  168.582499][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.604214][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.710283][    C0] plantronics 0003:047F:FFFF.0008: hid_field_extract() called with n (132) > 32! (kworker/u8:3)
[  168.721954][   T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  168.748673][   T24] usb 2-1: device descriptor read/8, error -71
[  168.857219][ T5890] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  168.867284][   T24] usb usb2-port1: unable to enumerate USB device
[  168.921304][   T24] usb 1-1: USB disconnect, device number 35
[  169.029168][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'.
[  169.038661][ T7130] bridge_slave_0: default FDB implementation only supports local addresses
[  169.076924][ T5890] usb 4-1: Using ep0 maxpacket: 32
[  169.275449][ T5890] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  169.292742][ T5890] usb 4-1: config 0 has no interface number 0
[  169.415904][ T5890] usb 4-1: config 0 interface 184 has no altsetting 0
[  169.442099][ T5890] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  169.460667][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.492503][ T5890] usb 4-1: Product: syz
[  169.510024][ T5890] usb 4-1: Manufacturer: syz
[  169.525121][ T5890] usb 4-1: SerialNumber: syz
[  169.562461][ T5890] usb 4-1: config 0 descriptor??
[  169.905578][ T5890] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  169.925570][ T5890] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  169.935948][    T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  169.956125][ T5890] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  169.990445][ T5890] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  170.031601][ T5890] usb 4-1: USB disconnect, device number 26
[  170.078550][    T9] usb 1-1: device descriptor read/64, error -71
[  170.503591][    T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  170.657629][    T9] usb 1-1: device descriptor read/64, error -71
[  170.767489][    T9] usb usb1-port1: attempt power cycle
[  171.074435][ T5934] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  171.115045][ T5934] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  171.154391][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  171.198999][    T9] usb 1-1: device descriptor read/8, error -71
[  171.477708][ T7159] vivid-004: disconnect
[  171.493075][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  171.553754][ T7157] vivid-004: reconnect
[  171.564778][    T9] usb 1-1: device descriptor read/8, error -71
[  171.839074][    T9] usb usb1-port1: unable to enumerate USB device
[  171.886973][ T5934] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  172.046928][ T5934] usb 3-1: Using ep0 maxpacket: 32
[  172.183315][ T5934] usb 3-1: config 0 has an invalid interface number: 139 but max is -1
[  172.195383][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  172.236990][ T5934] usb 3-1: config 0 has no interface number 0
[  172.243191][ T5934] usb 3-1: config 0 interface 139 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  172.275375][ T5934] usb 3-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=57.eb
[  172.301777][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.323283][ T5934] usb 3-1: Product: syz
[  172.332357][ T5934] usb 3-1: Manufacturer: syz
[  172.351109][ T5934] usb 3-1: SerialNumber: syz
[  172.404134][ T5934] usb 3-1: config 0 descriptor??
[  172.417638][ T7166] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  172.438452][ T5934] em28xx 3-1:0.139: New device syz syz @ 480 Mbps (eb1a:50a6, interface 139, class 139)
[  172.470299][ T5934] em28xx 3-1:0.139: Video interface 139 found: bulk
[  172.687369][ T5934] em28xx 3-1:0.139: unknown em28xx chip ID (0)
[  172.772963][ T5934] em28xx 3-1:0.139: reading from i2c device at 0xa0 failed (error=-5)
[  172.806539][ T5934] em28xx 3-1:0.139: board has no eeprom
[  172.886906][ T5934] em28xx 3-1:0.139: Identified as Gadmei UTV330 (card=37)
[  172.908959][ T5934] em28xx 3-1:0.139: 
[  172.908959][ T5934] 
[  172.908959][ T5934] The support for this board weren't valid yet.
[  172.908959][ T5934] Please send a report of having this working
[  172.908959][ T5934] not to V4L mailing list (and/or to other addresses)
[  172.908959][ T5934] 
[  173.359515][ T5934] em28xx 3-1:0.139: analog set to bulk mode.
[  173.399318][ T5190] em28xx 3-1:0.139: Registering V4L2 extension
[  173.461070][ T5934] usb 3-1: USB disconnect, device number 18
[  173.506036][ T5934] em28xx 3-1:0.139: Disconnecting em28xx
[  174.158251][ T5190] em28xx 3-1:0.139: Config register raw data: 0xffffffed
[  174.182090][ T5190] em28xx 3-1:0.139: AC97 chip type couldn't be determined
[  174.189824][ T5190] em28xx 3-1:0.139: No AC97 audio processor
[  174.227460][ T5190] usb 3-1: Decoder not found
[  174.250221][ T5190] em28xx 3-1:0.139: failed to create media graph
[  174.279548][ T7205] input: syz1 as /devices/virtual/input/input17
[  174.384739][ T5190] em28xx 3-1:0.139: V4L2 device video103 deregistered
[  174.488239][ T7203] ==================================================================
[  174.496359][ T7203] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  174.503770][ T7203] Read of size 8 at addr ffff88807e2d8748 by task v4l_id/7203
[  174.511251][ T7203] 
[  174.513625][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  174.513652][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  174.513673][ T7203] Call Trace:
[  174.513681][ T7203]  <TASK>
[  174.513688][ T7203]  dump_stack_lvl+0xe8/0x150
[  174.513718][ T7203]  print_report+0xba/0x230
[  174.513747][ T7203]  ? v4l2_fh_open+0xac/0x420
[  174.513772][ T7203]  kasan_report+0x117/0x150
[  174.513797][ T7203]  ? v4l2_fh_open+0xac/0x420
[  174.513825][ T7203]  v4l2_fh_open+0xac/0x420
[  174.513848][ T7203]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  174.513874][ T7203]  em28xx_v4l2_open+0x157/0x9a0
[  174.513894][ T7203]  ? do_raw_spin_lock+0x12b/0x2f0
[  174.513918][ T7203]  v4l2_open+0x1bf/0x3a0
[  174.513947][ T7203]  chrdev_open+0x4cd/0x5e0
[  174.513973][ T7203]  ? __pfx_chrdev_open+0x10/0x10
[  174.513996][ T7203]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  174.514021][ T7203]  ? __pfx_chrdev_open+0x10/0x10
[  174.514044][ T7203]  do_dentry_open+0x785/0x14e0
[  174.514077][ T7203]  vfs_open+0x3b/0x340
[  174.514102][ T7203]  ? path_openat+0x2df0/0x3860
[  174.514124][ T7203]  path_openat+0x2e08/0x3860
[  174.514153][ T7203]  ? __pfx_stack_trace_save+0x10/0x10
[  174.514175][ T7203]  ? stack_depot_save_flags+0x33/0x810
[  174.514208][ T7203]  ? __pfx_path_openat+0x10/0x10
[  174.514228][ T7203]  ? __x64_sys_openat+0x138/0x170
[  174.514255][ T7203]  ? do_syscall_64+0x14d/0xf80
[  174.514276][ T7203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.514300][ T7203]  ? __lock_acquire+0x6b5/0x2cf0
[  174.514329][ T7203]  do_file_open+0x23e/0x4a0
[  174.514352][ T7203]  ? __pfx_do_file_open+0x10/0x10
[  174.514384][ T7203]  ? _raw_spin_unlock+0x28/0x50
[  174.514402][ T7203]  ? alloc_fd+0x64b/0x6c0
[  174.514434][ T7203]  do_sys_openat2+0x113/0x200
[  174.514463][ T7203]  ? __pfx_do_sys_openat2+0x10/0x10
[  174.514491][ T7203]  ? exc_page_fault+0x6a/0xc0
[  174.514513][ T7203]  ? do_user_addr_fault+0xc6f/0x1340
[  174.514540][ T7203]  __x64_sys_openat+0x138/0x170
[  174.514570][ T7203]  do_syscall_64+0x14d/0xf80
[  174.514590][ T7203]  ? trace_irq_disable+0x3b/0x150
[  174.514630][ T7203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.514648][ T7203]  ? clear_bhb_loop+0x40/0x90
[  174.514669][ T7203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.514688][ T7203] RIP: 0033:0x7f85fc0a7407
[  174.514714][ T7203] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  174.514731][ T7203] RSP: 002b:00007ffc0757e9c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  174.514757][ T7203] RAX: ffffffffffffffda RBX: 00007f85fc794880 RCX: 00007f85fc0a7407
[  174.514770][ T7203] RDX: 0000000000000000 RSI: 00007ffc0757ef1b RDI: ffffffffffffff9c
[  174.514783][ T7203] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  174.514794][ T7203] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  174.514805][ T7203] R13: 00007ffc0757ec10 R14: 00007f85fc899000 R15: 0000562522d3c4d8
[  174.514826][ T7203]  </TASK>
[  174.514833][ T7203] 
[  174.810218][ T7203] Allocated by task 5190:
[  174.814561][ T7203]  kasan_save_track+0x3e/0x80
[  174.819264][ T7203]  __kasan_kmalloc+0x93/0xb0
[  174.823889][ T7203]  __kmalloc_cache_noprof+0x31c/0x660
[  174.829696][ T7203]  em28xx_v4l2_init+0x10b/0x2e70
[  174.834683][ T7203]  em28xx_init_extension+0x120/0x1c0
[  174.840001][ T7203]  process_scheduled_works+0xb6e/0x18c0
[  174.845586][ T7203]  worker_thread+0xa53/0xfc0
[  174.850217][ T7203]  kthread+0x388/0x470
[  174.854315][ T7203]  ret_from_fork+0x51e/0xb90
[  174.858938][ T7203]  ret_from_fork_asm+0x1a/0x30
[  174.863733][ T7203] 
[  174.866078][ T7203] Freed by task 5190:
[  174.870077][ T7203]  kasan_save_track+0x3e/0x80
[  174.874776][ T7203]  kasan_save_free_info+0x46/0x50
[  174.879865][ T7203]  __kasan_slab_free+0x5c/0x80
[  174.884656][ T7203]  kfree+0x1c1/0x630
[  174.888574][ T7203]  em28xx_v4l2_init+0x1683/0x2e70
[  174.893648][ T7203]  em28xx_init_extension+0x120/0x1c0
[  174.898972][ T7203]  process_scheduled_works+0xb6e/0x18c0
[  174.904581][ T7203]  worker_thread+0xa53/0xfc0
[  174.909206][ T7203]  kthread+0x388/0x470
[  174.913304][ T7203]  ret_from_fork+0x51e/0xb90
[  174.917924][ T7203]  ret_from_fork_asm+0x1a/0x30
[  174.922724][ T7203] 
[  174.925064][ T7203] The buggy address belongs to the object at ffff88807e2d8000
[  174.925064][ T7203]  which belongs to the cache kmalloc-8k of size 8192
[  174.939142][ T7203] The buggy address is located 1864 bytes inside of
[  174.939142][ T7203]  freed 8192-byte region [ffff88807e2d8000, ffff88807e2da000)
[  174.953136][ T7203] 
[  174.955486][ T7203] The buggy address belongs to the physical page:
[  174.961932][ T7203] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e2d8
[  174.970725][ T7203] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  174.979246][ T7203] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  174.986834][ T7203] page_type: f5(slab)
[  174.990847][ T7203] raw: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000
[  174.999463][ T7203] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  175.008073][ T7203] head: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000
[  175.016763][ T7203] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  175.025458][ T7203] head: 00fff00000000003 ffffea0001f8b601 00000000ffffffff 00000000ffffffff
[  175.034125][ T7203] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  175.042789][ T7203] page dumped because: kasan: bad access detected
[  175.049204][ T7203] page_owner tracks the page as allocated
[  175.054908][ T7203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7113, tgid 7110 (syz.2.313), ts 168250489041, free_ts 167657097528
[  175.076169][ T7203]  post_alloc_hook+0x231/0x280
[  175.080939][ T7203]  get_page_from_freelist+0x24dc/0x2580
[  175.086488][ T7203]  __alloc_frozen_pages_noprof+0x18d/0x380
[  175.092296][ T7203]  allocate_slab+0x77/0x660
[  175.096822][ T7203]  refill_objects+0x331/0x3c0
[  175.101516][ T7203]  __pcs_replace_empty_main+0x2e6/0x730
[  175.107065][ T7203]  __kmalloc_noprof+0x474/0x760
[  175.111913][ T7203]  ops_init+0x7b/0x5c0
[  175.115975][ T7203]  setup_net+0x118/0x340
[  175.120217][ T7203]  copy_net_ns+0x50e/0x730
[  175.124637][ T7203]  create_new_namespaces+0x3e7/0x6a0
[  175.129923][ T7203]  unshare_nsproxy_namespaces+0x11a/0x160
[  175.135640][ T7203]  ksys_unshare+0x51d/0x930
[  175.140143][ T7203]  __x64_sys_unshare+0x38/0x50
[  175.144912][ T7203]  do_syscall_64+0x14d/0xf80
[  175.149522][ T7203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.155415][ T7203] page last free pid 24 tgid 24 stack trace:
[  175.161408][ T7203]  __free_frozen_pages+0xc2b/0xdb0
[  175.166529][ T7203]  __slab_free+0x263/0x2b0
[  175.170952][ T7203]  qlist_free_all+0x97/0x100
[  175.175550][ T7203]  kasan_quarantine_reduce+0x148/0x160
[  175.181006][ T7203]  __kasan_slab_alloc+0x22/0x80
[  175.185857][ T7203]  __kmalloc_cache_noprof+0x2ba/0x660
[  175.191237][ T7203]  usb_control_msg+0x73/0x3e0
[  175.195936][ T7203]  hub_port_disable+0x3d2/0x670
[  175.200782][ T7203]  hub_port_init+0x1d31/0x28d0
[  175.205544][ T7203]  hub_event+0x2593/0x4f30
[  175.210046][ T7203]  process_scheduled_works+0xb6e/0x18c0
[  175.215589][ T7203]  worker_thread+0xa53/0xfc0
[  175.220175][ T7203]  kthread+0x388/0x470
[  175.224242][ T7203]  ret_from_fork+0x51e/0xb90
[  175.228835][ T7203]  ret_from_fork_asm+0x1a/0x30
[  175.233634][ T7203] 
[  175.235950][ T7203] Memory state around the buggy address:
[  175.241572][ T7203]  ffff88807e2d8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.249647][ T7203]  ffff88807e2d8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.257699][ T7203] >ffff88807e2d8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.265750][ T7203]                                               ^
[  175.272156][ T7203]  ffff88807e2d8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.280221][ T7203]  ffff88807e2d8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.288272][ T7203] ==================================================================
[  175.307265][ T5190] em28xx 3-1:0.139: Remote control support is not available for this card.
[  175.506309][ T7203] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  175.513663][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  175.522627][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  175.532712][ T7203] Call Trace:
[  175.536022][ T7203]  <TASK>
[  175.538986][ T7203]  vpanic+0x56c/0xa60
[  175.543012][ T7203]  ? __pfx_vpanic+0x10/0x10
[  175.547562][ T7203]  panic+0xc5/0xd0
[  175.551319][ T7203]  ? __pfx_panic+0x10/0x10
[  175.555776][ T7203]  ? preempt_schedule_thunk+0x16/0x30
[  175.561217][ T7203]  ? preempt_schedule_thunk+0x16/0x30
[  175.566621][ T7203]  ? v4l2_fh_open+0xac/0x420
[  175.571245][ T7203]  check_panic_on_warn+0x89/0xb0
[  175.576200][ T7203]  ? v4l2_fh_open+0xac/0x420
[  175.580801][ T7203]  end_report+0x73/0x180
[  175.585080][ T7203]  ? v4l2_fh_open+0xac/0x420
[  175.589672][ T7203]  kasan_report+0x128/0x150
[  175.594199][ T7203]  ? v4l2_fh_open+0xac/0x420
[  175.598794][ T7203]  v4l2_fh_open+0xac/0x420
[  175.603218][ T7203]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  175.609204][ T7203]  em28xx_v4l2_open+0x157/0x9a0
[  175.614056][ T7203]  ? do_raw_spin_lock+0x12b/0x2f0
[  175.619084][ T7203]  v4l2_open+0x1bf/0x3a0
[  175.623332][ T7203]  chrdev_open+0x4cd/0x5e0
[  175.627750][ T7203]  ? __pfx_chrdev_open+0x10/0x10
[  175.632687][ T7203]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  175.639019][ T7203]  ? __pfx_chrdev_open+0x10/0x10
[  175.643955][ T7203]  do_dentry_open+0x785/0x14e0
[  175.648729][ T7203]  vfs_open+0x3b/0x340
[  175.652804][ T7203]  ? path_openat+0x2df0/0x3860
[  175.657572][ T7203]  path_openat+0x2e08/0x3860
[  175.662160][ T7203]  ? __pfx_stack_trace_save+0x10/0x10
[  175.667528][ T7203]  ? stack_depot_save_flags+0x33/0x810
[  175.672995][ T7203]  ? __pfx_path_openat+0x10/0x10
[  175.677949][ T7203]  ? __x64_sys_openat+0x138/0x170
[  175.682981][ T7203]  ? do_syscall_64+0x14d/0xf80
[  175.687780][ T7203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.693848][ T7203]  ? __lock_acquire+0x6b5/0x2cf0
[  175.698796][ T7203]  do_file_open+0x23e/0x4a0
[  175.703332][ T7203]  ? __pfx_do_file_open+0x10/0x10
[  175.708377][ T7203]  ? _raw_spin_unlock+0x28/0x50
[  175.713244][ T7203]  ? alloc_fd+0x64b/0x6c0
[  175.717580][ T7203]  do_sys_openat2+0x113/0x200
[  175.722261][ T7203]  ? __pfx_do_sys_openat2+0x10/0x10
[  175.727468][ T7203]  ? exc_page_fault+0x6a/0xc0
[  175.732154][ T7203]  ? do_user_addr_fault+0xc6f/0x1340
[  175.737456][ T7203]  __x64_sys_openat+0x138/0x170
[  175.742347][ T7203]  do_syscall_64+0x14d/0xf80
[  175.746962][ T7203]  ? trace_irq_disable+0x3b/0x150
[  175.752000][ T7203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.758064][ T7203]  ? clear_bhb_loop+0x40/0x90
[  175.762745][ T7203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.768636][ T7203] RIP: 0033:0x7f85fc0a7407
[  175.773052][ T7203] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  175.792657][ T7203] RSP: 002b:00007ffc0757e9c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  175.801083][ T7203] RAX: ffffffffffffffda RBX: 00007f85fc794880 RCX: 00007f85fc0a7407
[  175.809071][ T7203] RDX: 0000000000000000 RSI: 00007ffc0757ef1b RDI: ffffffffffffff9c
[  175.817050][ T7203] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  175.825032][ T7203] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  175.832996][ T7203] R13: 00007ffc0757ec10 R14: 00007f85fc899000 R15: 0000562522d3c4d8
[  175.840975][ T7203]  </TASK>
[  175.844584][ T7203] Kernel Offset: disabled
[  175.848913][ T7203] Rebooting in 86400 seconds..