last executing test programs:

6.651639672s ago: executing program 2 (id=472):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r1, 0x0, &(0x7f0000000100)) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0)

5.206472402s ago: executing program 0 (id=479):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x1bb, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042022eb"], 0xfdef)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x6}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717edf6b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309977816048f24"}, 0x418, 0x1008})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3\x8b\x87\\\x15Hd~\xf9c\xcblo\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92E/\x9f\x93\xd7\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f/\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\xfb\xc34\x7f\x01\x1fi\xefD?\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\x1b\x19Co\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x05\x00\x00\x00\xfb\xff\xff\xff\xff\xff\xff\xfft\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8', 0x5)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000046c0)={0x2020}, 0x2071)

5.128885121s ago: executing program 2 (id=481):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0600796e2b0000"], 0x3, 0x0, 0x0) (async)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0600796e2b0000"], 0x3, 0x0, 0x0)
write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000040)={0x14}, 0x14)

4.971061835s ago: executing program 1 (id=482):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000180034801400350069"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c000080080003400000000214000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000440)={0x60, 0x3, &(0x7f000061d000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x9, 0x0, 0x0, 0x8, 0x2, 0x48, 0x44, 0x6a})

4.970568961s ago: executing program 3 (id=483):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000280)={'veth0_virt_wifi\x00', {0x2, 0x0, @empty}}) (async)
syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @remote, @empty, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) (async)
socketpair(0xb, 0x4, 0x8, &(0x7f0000000000)={<r2=>0xffffffffffffffff}) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, [{0x22, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b75c9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec0000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28104b543e868a8adc703b346760c14f26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xc0010005, 0x0, 0x7ff}]}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x877349b79c76239a}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e0, r6, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc, 0x3a}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x11c, 0x84, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="be995c002657333696e4dda890e2dd000022"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1694975bc12d"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7ff}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff8000}, @NL80211_BAND_LC={0x8, 0x5, 0xe26}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_2GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x10001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x26}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x94, 0x84, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9474d7b10a75"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="dd9b99b1fa43c9b32e230b970e994abc48e5"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xcc}, @NL80211_BAND_LC={0x8, 0x5, 0x56364548}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)

4.935414622s ago: executing program 2 (id=484):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r1=>0xffffffffffffffff})
r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_io_uring_setup(0xf00, 0x0, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8}})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e)
getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x25)
ptrace(0x10, r10)
ptrace$poke(0x1, r10, &(0x7f0000000040), 0x6)
sched_getattr(r10, &(0x7f00000002c0)={0x38}, 0x38, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r9, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
dup3(r1, r0, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r16=>0x0})
r17 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r14, &(0x7f0000000440)={@val={0x0, 0x6003}, @void, @ipv4=@icmp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x64, 0x0, 0xac, 0x1, 0x0, @broadcast, @private=0xa010102}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x6, 0x0, {0x5, 0x4, 0x1, 0x19, 0xb8b, 0x65, 0x101, 0x61, 0x4, 0x75, @multicast2, @private=0xa010101}}}}, 0x34)

4.735925601s ago: executing program 0 (id=485):
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206})
r4 = syz_open_procfs(0x0, &(0x7f0000000800)='fdinfo\x00')
getdents64(r4, &(0x7f0000000680)=""/45, 0x2d)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getdents(r4, &(0x7f0000000440)=""/223, 0xdf)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.66547477s ago: executing program 1 (id=487):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f00000006c0)={0xa, 0x4e21, 0x5, @ipv4}, 0x1c)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)}, 0x44081)
setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f0000000680)='wg1\x00'})
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r6, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
migrate_pages(0x0, 0x5, 0x0, 0x0)

4.584463016s ago: executing program 2 (id=488):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100))
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='\xf7\xe6\xb8\xaa\xf6(\xda\xf2\x80o_', 0x0)
syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000220)="830d00000000000015000003")

4.369047568s ago: executing program 0 (id=489):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utimes(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x1, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x37}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdir(&(0x7f0000000340)='./file\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0)
chdir(&(0x7f0000000400)='./file/file0/..//file0\x00')
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c000100000000420000000000000000176c5e9f45a3d18a9470ff6ff783d31901fdae4f06d4a9eac6fc045ea0649edee1bb7c08f7c6f8dc974acfd2e644c7b1f1d65ea5d9b570881a2aaa6bf3c1d84e73f93e669293f7f71c93eb235d0ef7c3da83e4e50497f8f47bdf57af4faf7f45e18ba4758767fe74885d06d857a33958d6d341e7af7148708fdc22818e5ffab120c158cd339fac2ba7dd0f451a849d4215d0f65b25fd2ed419957a50f8216de976004d408d4143215d730da07aa336578a94338ad41b812d117aa7a9f88cdc80f80b", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

3.91108584s ago: executing program 3 (id=491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r5, 0xae9a)
bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x70000, 0x30000, 0x0, 0x2, 0x2, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9, 0x80}, {0xe000, 0x10000, 0xc, 0x0, 0x22, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0x0, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0xfd, 0x44, 0x3}, {0x25000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x2ffc, 0xeeee8000, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f, 0x6, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6, 0x3}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x6, 0x0, 0xa1, 0x2, 0x7, 0x0, 0x4}, {0xc002, 0x50000, 0xc, 0x3, 0x9, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0xf}, {0x80a0000, 0x8cc}, {0x3ff8, 0xfffc}, 0x7dfcfff3, 0x0, 0x1, 0x110, 0xe, 0x1, 0xb000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.731857412s ago: executing program 0 (id=494):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r0, 0x6f44, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x3, r2, 0x0, <r3=>0x0, 0x0, 0x0, 0xe3, &(0x7f0000000080)="5d4fbf826f0b8a8b4f4b0addd64a63e7e477dc1e222374981521e512513d02951196ac9f6680a709aa1e18a1c48c3b6b42872b7bc6f7b085d8b2e11a4c4b763466333ca876d95254af24b583c908e92ae29630a07969d2bdd09e95e4bfe7c402c034c3e103480ec4ffc27768504ea5b6f4d2e00f039edc55881f084a69b0fa6e5699114a81cde5fdfd297b8d9e8a1340669b692aa49142f13f51386c6660e4e82848a445705d3267abefc8b75d804cce9b17619947d8f20f13f4a3430488ca99297fbf8eff1eb2137100b577876adc0ad7b39b1a428519d4465fa341dd2655d45f4ba9"})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000200)={0x18, r4, 0x9, 0x3})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mountinfo\x00')
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f00000002c0)={0x20, r3, &(0x7f0000000280)=[{0x0, 0x2}, {0x0, 0x3}], 0xdeadbeef, 0x8, 0x2})
r6 = epoll_create(0xe5b)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000300)={0x40000004})
getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000380)={@private2, <r7=>0x0}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000500)=0xe4)
sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=@getae={0x180, 0x1f, 0x80c, 0x70bd29, 0x25dfdbfb, {{@in=@remote, 0x4d5, 0xa, 0x33}, @in=@private=0xa010102, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0x7}}, @policy={0xa8, 0x7, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x7, 0x4e20, 0x0, 0x2, 0x20, 0xc0, 0x3c, r7, r8}, {0x4, 0x4, 0x3, 0x8, 0x5, 0x1, 0x8000000000000000, 0x7ff}, {0x9, 0x4, 0x6, 0x1}, 0x4457, 0x6e6bb9, 0x1, 0x2, 0x0, 0x1}}, @algo_comp={0x8c, 0x3, {{'deflate\x00'}, 0x220, "03ef85f6ec0894f476809539276456f27e66214f5e0c866ef98460bbffd1c5325a54ac87b320f35401dae1eb9ddb703709fff3ba981dc9c8fed10a1ddfdd591f25434432"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20048050}, 0x800)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000740)={<r9=>0x0, 0x3, 0x0, 0x18b, 0x6}, &(0x7f0000000780)=0x18)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000007c0)={r9, 0x2, 0x8001, 0x80000001, 0x7ff, 0xfffff5f7}, &(0x7f0000000800)=0x14)
ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4008641a, &(0x7f0000000880)={0x9, &(0x7f0000000840)=[0xf, 0x1, 0xffff, 0xfff, 0x0, 0x48eb, 0x7f, 0x7, 0x2]})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000008c0)={0x48, 0xb, r5, 0x0, r4})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000940)={0x48, 0x2, r4, 0x0, 0x0, <r10=>0x0, 0x0, 0x1})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f00000009c0)={0x10, 0x0, r10})
ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000a00)={0x0, 0x110000})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000a40)={0x5, <r11=>0x0, 0x1})
ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0086438, &(0x7f0000000a80)={0xc, r11})
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000b40)={0x48, 0xa, r1, 0x0, r4})
writev(r5, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="c44d27858bba23ff17b9f4da31e9907c5c4d2a4466ca4bf24a05d2f2826ceb2c19faafc451ab0b61f5455f66397cf8a8466e9e9e9c458af9281754ae09c1b78ec1a16e015e70e5bc860379f9e5167e8480166e0ec816b8bf82a648126c312393b215ee20473e8027ee2c30827ae08c5c6022a86b8addf002614f7bcd963b59a3d83d84177b", 0x85}, {&(0x7f0000000c80)="af88d69f012924accf45fbbed461481a16cd49f2eaae8c99fb787cfd7b6417267c276a40b209017d48470e46488fcadd947a5ec05eabad9669daa867858ca4feaa488b6df383383bd194ed8d6229ed183ebdfe732df4a0cc940eaa27399ea035ef8ad109e96800a521690fd3ccfc9d0f25593c3dae164bfbc7026196e5b9fb9d356a5006dc0c", 0x86}, {&(0x7f0000000d40)="e671e299f7e557218adc6855efbaaeb3fe0d7b8f75e282d8d33bf0443557ec448505ee7e02", 0x25}, {&(0x7f0000000d80)="81b29f2d", 0x4}, {&(0x7f0000000dc0)="7c170e16aa421068b367c2f9faa7ed4284b53f8d3d622f", 0x17}, {&(0x7f0000000e00)="c0ac6356c9b70859818752e009eebf", 0xf}], 0x6)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r12)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000f00)={0x18, r4, 0x3, 0x0, &(0x7f0000000ec0)=[{0xffffffffffff0000, 0xe0}, {0x9, 0x1000}, {0xe0000000000000, 0x5}]})
ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f0000000f40)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}})
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000f80), &(0x7f0000000fc0)=0x8)

3.722395195s ago: executing program 1 (id=495):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x8, &(0x7f0000000240))
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
unshare(0x22020400)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a0709070000002bbd7000fddbdf2505001a00ac1414bb0000000000000000000000000000000c260014ca00000000000030631e109f"], 0x38}}, 0x4)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002480)=@newtfilter={0xac, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_ACT={0x78, 0x3, [@m_nat={0x74, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x40, 0x6}, @multicast2, @empty, 0x0, 0x8001}}]}, {0x21, 0x6, "31eb0cde865244e9a00799831167fff4bf2d26296439bd90d7431afbb1"}, {0xc}, {0xc}}}]}]}}]}, 0xac}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r13, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r12, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)

3.55452186s ago: executing program 0 (id=497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x8) (rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x4, 0x8, 0x100000000, 0x8, 0x400, 0x4, 0x4, 0x400000c6cf, 0x2f2, 0x7, 0x6, 0x7, 0x7fffffff, 0xc3]}, &(0x7f0000000240)=0xfc)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00082abd700001dcdf250d0000000c00028006000b000a0000000800040005000000480003800800030000000000050008000600000008000300020000000800010001000000060007004e23000014000600fc0000000000000000000000000000010500080007000000500001800800080001000000080009006f000000060001000a000000060002001d000000060001000200000014000300fe80000000000000000000000000001408000b0073697000060001000a0000002400028006000e004e210000080003000200000006000b000a00000006000f00040000005c00018014000300ff010000000000000000000000000001080009002b000000060004004e230000060001000a0000000800"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) (async)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x10000)

3.451360442s ago: executing program 1 (id=498):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r1=>0xffffffffffffffff})
r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_io_uring_setup(0xf00, 0x0, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8}})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e)
getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x25)
ptrace(0x10, r10)
ptrace$poke(0x1, r10, &(0x7f0000000040), 0x6)
sched_getattr(r10, &(0x7f00000002c0)={0x38}, 0x38, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r9, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
dup3(r1, r0, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r16=>0x0})
r17 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r14, &(0x7f0000000440)={@val={0x0, 0x6003}, @void, @ipv4=@icmp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x64, 0x0, 0xac, 0x1, 0x0, @broadcast, @private=0xa010102}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x6, 0x0, {0x5, 0x4, 0x1, 0x19, 0xb8b, 0x65, 0x101, 0x61, 0x4, 0x75, @multicast2, @private=0xa010101}}}}, 0x34)

3.299510396s ago: executing program 1 (id=499):
r0 = syz_open_dev$radio(&(0x7f0000000b80), 0x0, 0x2)
writev(r0, &(0x7f0000001d00)=[{&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="62456f9b21f9e1fef39d128763d94e0e8f1051d0344457c573a583a71bf95b11c723a4e00f93d7c708e0693407e0d173d4608f080b430f7d7fa7ee8eb3039db1b4b5b931b7b2157d97c693402f7a33ec23d1ff4d8ad1ee4793510d05719eb6b0d701306e7fa90edecd8022df5885776dfbb41e4c3f7a74c6a12fa8f64e212fcc74ac727145c87d", 0x87}], 0x2)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000bc0)={0x0, "cd48b8ad5516b3851ea8a13d68eb4d6d7d86d64a7263cc6b7e157fff84922c04", 0x1, 0x4, 0x108c, 0x2, 0x4, 0x2, 0x3, 0x2b})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
unshare(0x400)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r6, &(0x7f00000000c0)={0x1d, 0x0, 0x4003, {0x0, 0xff, 0x2}, 0xfe}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffd, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@getchain={0x2c, 0x66, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffe2}, {0xb}}, [{0x8, 0xb, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000840)="6558fc70760d1916384e297e571fd7057ee962f65f8e9fd6341f5350efb139561451", 0x22}], 0x1}, 0x4008840)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x449, 0x47314356, 0x34324241, 0x3, [{0x9, 0x2009}, {0x5, 0xfffffffe}, {0x0, 0x2003}, {0x292, 0x9}, {0x7, 0x4}, {0xee, 0x200}, {0xffffff03, 0x7ffe}, {0x1, 0x4}], 0x2, 0xa, 0x1, 0x2, 0x6}})
r9 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r10 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
syz_usb_disconnect(r9)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x810c5701, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040fec20720704"], 0x7)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefe560100000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e20500050002000000050001000600000084"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

3.044354044s ago: executing program 3 (id=500):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x1, 0x108)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r4, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x300, 0x2714e8a0, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x41080)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0xf30, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x200480c0)
sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4042044}, 0x4000000)
fstatfs(r1, &(0x7f0000000440)=""/177)

2.647025806s ago: executing program 0 (id=501):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = getpid()
fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r3})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41)
fcntl$lock(r0, 0x26, &(0x7f0000000800)={0x0, 0x1, 0x7, 0x7fffffff, 0xffffffffffffffff})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/hardlockup_count', 0x200000, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async)
socket$packet(0x11, 0x3, 0x300) (async)
fcntl$dupfd(r1, 0x0, r1) (async)
getpid() (async)
fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r3}) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4001) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) (async)
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) (async)
fcntl$lock(r0, 0x26, &(0x7f0000000800)={0x0, 0x1, 0x7, 0x7fffffff, 0xffffffffffffffff}) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) (async)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/hardlockup_count', 0x200000, 0x10) (async)

2.644784448s ago: executing program 2 (id=502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48)
write$cgroup_devices(r1, &(0x7f0000000040)={'a', ' *:* ', 'r\x00'}, 0x8)

2.56236722s ago: executing program 2 (id=503):
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x25dfdbfd, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)
set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, 0x0)
r3 = io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9"], 0x0)
r6 = openat$proc_mixer(0xffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x8000, 0x0)
write$proc_mixer(r6, &(0x7f00000001c0)=[{'ALTPCM', @val={' \'', 'Mic Capture'}}, {'LINE3', @void}, {'IMIX', @void}], 0x35)
syz_open_dev$audion(0x0, 0x3, 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10)

2.370530401s ago: executing program 4 (id=504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
r2 = io_uring_setup(0x4dfc, &(0x7f0000000040)={0x0, 0x1c81, 0x1, 0x0, 0xe9})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x2000000, 0x9, 0x1a, 0x4, 0x1b, 0x5}}]}}]}, 0x150}}, 0x8000008)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
io_uring_setup(0x4dfc, &(0x7f0000000040)={0x0, 0x1c81, 0x1, 0x0, 0xe9}) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x2000000, 0x9, 0x1a, 0x4, 0x1b, 0x5}}]}}]}, 0x150}}, 0x8000008) (async)

2.254868814s ago: executing program 4 (id=505):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)={0x2, 0x0, [{0xeeee8000, 0x79, &(0x7f0000000000)=""/121}, {0x3000, 0x38, &(0x7f0000000080)=""/56}]})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000000105040000000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700000c0004000000010052415300080007"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
unshare(0x72fae85621a36569)
epoll_create(0x9)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1})

2.085420423s ago: executing program 4 (id=506):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
open(0x0, 0x0, 0x109)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
io_uring_enter(r1, 0x2216, 0xb21b, 0x2, &(0x7f0000000000)={[0x3, 0x7]}, 0x8)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x20040600)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={0x0}, 0x14)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000280)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f987f4224ff7dc937253dc5598275597e7207bea32c4c7cf884c2fcd814228e4d1c211d167b8713f83fbff0f000000000000d85468f02e8b5ad561098840402f168e1012bdfd6977a7fe9cd5b8a3ed012d8e74a3479f", 0x34})

1.782484247s ago: executing program 4 (id=507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100001000010000000000000000e411fc0c8a6900000000016401010000000000000000003a0000000000000000000000000000000040000043abb33d1807872625f95b3e38b258cd721132f9415b807f72e95970f7e5b7936c23dff403c9aca10abdc8b987e32258b94c705748120d8a7da09162877cbf7f547cf47f3842f725f24e6f988e426684fd1455e79079f6be2edd7b9bec7c1ad30c045880cfe1b396945b71a2b53ccf5e88953f16d6cae0ad40ca5b6d899ff14626d4fbe7e5b3111e3b81c45267289d93a3769560e96e258bbbd3ed03b85ed08924bedde4692448e0509d0c74217a49064728bac546309b79658d5e135a749f25d2860cb8b6285baff22a772c253a2dab4e566a4b00"/282, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff020000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0xec, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xb, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0x2}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xec}}, 0x844)

1.650923448s ago: executing program 4 (id=508):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r2, 0xc010128e, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000400))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r14, {0x10}, {}, {0x5, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0xfffffffc, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r15 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r16=>0x0})
sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014)
socket$inet6(0xa, 0x800, 0x3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'})
stat(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0))

1.524889198s ago: executing program 3 (id=509):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r1=>0xffffffffffffffff})
r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x7842, 0x10000, 0x20, 0x40055}, 0x0, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(0x0, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8}})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e)
getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x25)
ptrace(0x10, r9)
ptrace$poke(0x1, r9, &(0x7f0000000040), 0x6)
sched_getattr(r9, &(0x7f00000002c0)={0x38}, 0x38, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup(r11)
syz_ublk_setup_queues(r12, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
dup3(r1, r0, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r15=>0x0})
r16 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r16, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r13, &(0x7f0000000440)={@val={0x0, 0x6003}, @void, @ipv4=@icmp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x64, 0x0, 0xac, 0x1, 0x0, @broadcast, @private=0xa010102}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x6, 0x0, {0x5, 0x4, 0x1, 0x19, 0xb8b, 0x65, 0x101, 0x61, 0x4, 0x75, @multicast2, @private=0xa010101}}}}, 0x34)

1.34946928s ago: executing program 3 (id=510):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffe})
r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @win={{0x8, 0x0, 0x7ff, 0x3132564e}, 0x9, 0x0, 0x0, 0xffffd01c, 0x0, 0x8}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES8=r1], 0x6c}, 0x1, 0x0, 0x0, 0x20004850}, 0x20004000)
socket$unix(0x1, 0x2, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, @hci={0x1f, 0x3, 0x1}, @ethernet={0x1, @broadcast}, 0xa5b5, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='dvmrp1\x00', 0x20009, 0x100, 0x9})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000070000040500010007000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="950000000a004e2400000005fe8000000000000000000000000000aa0b000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a004e2100000007fe8000000000000000000000000000bb01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300007fff200100000000000000000000000000010700000000000000000000000080000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007fc00000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdee94ba2a4156380000000000000000000000000000000000000000000000000000000000000a004e2100000075000000000000000000000000000000017a0e00000000000000000000000000000000000000000000000000a95b00000000000000000000000000000000000000000000000000000000000000000000ff0300"/644], 0x28c)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20)
connect$l2tp6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x20)
io_uring_enter(0xffffffffffffffff, 0x4dd7, 0xc47c, 0x70, &(0x7f00000003c0)={[0xfffffffa]}, 0x8)
syz_open_dev$video(&(0x7f0000000240), 0x9, 0x123100)
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd556", 0x93, 0x5, 0xff}], 0x0)
syz_usb_connect(0x3, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100193ac931040206582a3b50102030109024d0001027f400909040c07027b85530009058103030000000622023ed13729711a6e3f7ee9e3c2f767f89a2dee56136e3bbee236b084ecfe5b5c6c09059a"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x2, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xff00)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x4e2c, @multicast1}}}, 0x104)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4844}, 0x2c000010)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000001180)={0x41, 0x1, 0x10, "d3f375000020f0fb10ebff00000000000000000000000000000000990699ed15", 0x3436324d})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

1.25935903s ago: executing program 4 (id=511):
r0 = getpgrp(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x84, 0x0, 0x3, 0x0)
listen(r1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
unshare(0x6a040000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r7, 0x80047437, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
readv(r8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB='\b\x00'], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r9, 0x6a9354ab0d020bb7, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0)

199.201394ms ago: executing program 1 (id=512):
r0 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x115102, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[], 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0xae642, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) (async)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (rerun: 32)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x304}, "330f10f077605f1d", "d2d00e2d607844b6edb4a995812c08bc", '\b\x00', "6118b40056e11b12"}, 0x28) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x4, 0x0, 0xfffff018}, {0x6, 0x40, 0x0, 0x6eaa}]}, 0x8) (async)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x20}, {}, {0x0, 0x5}, {0x8}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xd0}, {0x0, 0x4, 0x0, '\x00', 0xfd}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {0x4}, {0x20, 0x4}, {}, {}, {0x5}, {}, {}, {}, {}, {0x16}, {}, {0x0, 0x1a, 0x40}]}}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r10, 0x0, 0x0)

0s ago: executing program 3 (id=513):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
fadvise64(r2, 0x2, 0x0, 0x4)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000200)=""/47, &(0x7f0000000280)=0x2f)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffff01, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], 0x1, 0x400})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x5, {{0xa, 0x4e21, 0xffffff03, @remote, 0x2}}}, 0x84)
getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
close(r8)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000080)={0xf1})
setsockopt(r5, 0x0, 0x482, &(0x7f0000000000)="110000007f0000014e200000000000006d6800000000000000000000000000001000"/44, 0x2c)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = syz_io_uring_setup(0x2fef, &(0x7f0000000140)={0x0, 0x1715, 0xa424, 0x2, 0x164}, &(0x7f0000000040)=<r10=>0x0, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000000)=<r12=>0x0)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000340)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f00000003c0))
socket(0x400000000010, 0x3, 0x0)

kernel console output (not intermixed with test programs):

ig
[  128.504626][   T10] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2
[  128.504644][   T10] usb 3-1: config 9 has no interface number 0
[  128.504681][   T10] usb 3-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping
[  128.504701][   T10] usb 3-1: config 9 interface 5 has no altsetting 0
[  128.507305][ T5702] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  128.508363][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.508385][   T10] usb 3-1: Product: syz
[  128.508397][   T10] usb 3-1: Manufacturer: syz
[  128.508410][   T10] usb 3-1: SerialNumber: syz
[  128.598321][ T4945] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  128.657928][ T5702] usb 2-1: Using ep0 maxpacket: 32
[  128.658672][ T5702] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  128.662115][ T5702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.662139][ T5702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.664057][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.664100][ T5702] usb 2-1: Product: syz
[  128.664109][ T5702] usb 2-1: Manufacturer: syz
[  128.664120][ T5702] usb 2-1: SerialNumber: syz
[  128.747664][ T4945] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  128.748481][ T4945] usb 4-1: config 0 has an invalid interface number: 182 but max is 1
[  128.748495][ T4945] usb 4-1: config 0 has an invalid interface number: 9 but max is 1
[  128.748505][ T4945] usb 4-1: config 0 has no interface number 0
[  128.748512][ T4945] usb 4-1: config 0 has no interface number 1
[  128.748532][ T4945] usb 4-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[  128.748550][ T4945] usb 4-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  128.748563][ T4945] usb 4-1: config 0 interface 9 has no altsetting 0
[  128.748598][ T4945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.750819][ T4945] usb 4-1: config 0 descriptor??
[  128.755130][ T4945] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  128.755719][ T4945] snd-usb-audio 4-1:0.182: probe with driver snd-usb-audio failed with error -2
[  128.764963][ T4945] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  128.898152][ T5681] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  128.913726][ T5702] usb 2-1: interface 1 not found
[  128.929237][ T5702] usb 2-1: USB disconnect, device number 13
[  128.934217][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.988909][ T4945] snd-usb-audio 4-1:0.9: probe with driver snd-usb-audio failed with error -2
[  129.026984][ T5681] usb 5-1: device descriptor read/64, error -71
[  129.047905][ T4945] usb 4-1: USB disconnect, device number 18
[  129.267260][ T5681] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  129.382788][ T6630] netlink: 'syz.0.206': attribute type 13 has an invalid length.
[  129.382812][ T6630] netlink: 'syz.0.206': attribute type 17 has an invalid length.
[  129.404785][ T5681] usb 5-1: device descriptor read/64, error -71
[  129.514134][ T5681] usb usb5-port1: attempt power cycle
[  129.727711][ T5729] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  129.847502][ T5681] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  129.868364][ T5681] usb 5-1: device descriptor read/8, error -71
[  129.900228][ T5729] usb 2-1: unable to get BOS descriptor or descriptor too short
[  129.900281][ T5729] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  129.901244][ T5729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.901268][ T5729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.904597][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.904635][ T5729] usb 2-1: Product: syz
[  129.904649][ T5729] usb 2-1: Manufacturer: syz
[  129.904662][ T5729] usb 2-1: SerialNumber: syz
[  129.923421][ T5729] usb 2-1: selecting invalid altsetting 1
[  129.924270][ T5729] usb 2-1: unit 6 not found!
[  130.117861][ T5681] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  130.139899][ T5681] usb 5-1: device descriptor read/8, error -71
[  130.247738][ T5681] usb usb5-port1: unable to enumerate USB device
[  131.176758][   T10] usb 3-1: USB disconnect, device number 17
[  131.247641][ T6652] binder: 6651:6652 ioctl c0306201 800003c0 returned -14
[  131.730490][ T6665] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  131.732905][ T6665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  131.735086][ T6666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.196962][ T5737] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  132.318268][ T4945] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  132.346980][ T5737] usb 3-1: Using ep0 maxpacket: 16
[  132.352860][ T5737] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  132.353823][ T5737] usb 3-1: config 0 has an invalid interface number: 107 but max is 0
[  132.353847][ T5737] usb 3-1: config 0 has no interface number 0
[  132.353885][ T5737] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  132.355522][ T5737] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  132.355535][ T5737] usb 3-1: Product: syz
[  132.355543][ T5737] usb 3-1: Manufacturer: syz
[  132.355550][ T5737] usb 3-1: SerialNumber: syz
[  132.416367][ T5737] usb 3-1: config 0 descriptor??
[  132.425297][ T5737] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected
[  132.425792][ T5737] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81
[  132.445110][ T5737] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1
[  132.459965][ T5737] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  132.462773][ T5737] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2
[  132.468858][ T4945] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[  132.472225][ T4945] usb 4-1: config 6 has an invalid interface number: 14 but max is 0
[  132.472250][ T4945] usb 4-1: config 6 has no interface number 0
[  132.472423][ T4945] usb 4-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0
[  132.472446][ T4945] usb 4-1: config 6 interface 14 has no altsetting 0
[  132.477321][ T4945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.477344][ T4945] usb 4-1: Product: syz
[  132.477357][ T4945] usb 4-1: Manufacturer: syz
[  132.477369][ T4945] usb 4-1: SerialNumber: syz
[  132.553221][ T5729] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  132.574054][ T5737] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  132.589945][ T5737] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4
[  132.645439][ T5737] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  132.661873][ T5737] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6
[  132.678094][ T5737] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  132.715111][ T5737] usb 3-1: USB disconnect, device number 18
[  132.788702][ T5737] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  132.791318][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  132.791367][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  132.829465][ T5729] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  132.831075][ T5737] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  132.848121][ T4945] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  132.848259][ T4945] command write [95] error -8
[  132.875456][ T5729] usb 2-1: USB disconnect, device number 14
[  132.927572][ T5737] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  132.948853][ T4945] usb 4-1: USB disconnect, device number 19
[  132.971338][ T5737] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  132.975595][ T5737] keyspan 3-1:0.107: device disconnected
[  133.015752][ T6675] udevd[6675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.548891][   T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  133.559471][ T6698] binder: 6692:6698 ioctl c0306201 80000640 returned -22
[  133.592947][ T6699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.225'.
[  133.717651][   T10] usb 1-1: Using ep0 maxpacket: 8
[  133.721342][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  133.721393][   T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  133.722367][   T10] usb 1-1: config 9 has an invalid interface number: 5 but max is 1
[  133.722391][   T10] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  133.722410][   T10] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2
[  133.722429][   T10] usb 1-1: config 9 has no interface number 0
[  133.722467][   T10] usb 1-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping
[  133.722488][   T10] usb 1-1: config 9 interface 5 has no altsetting 0
[  133.725655][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.725680][   T10] usb 1-1: Product: syz
[  133.725694][   T10] usb 1-1: Manufacturer: syz
[  133.725708][   T10] usb 1-1: SerialNumber: syz
[  133.829230][ T6699] dummy0 (unregistering): left allmulticast mode
[  134.316970][ T5737] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  134.472149][ T5737] usb 2-1: Using ep0 maxpacket: 32
[  134.472871][ T5737] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  134.475676][ T5737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  134.509370][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  134.509398][ T5737] usb 2-1: Product: syz
[  134.509411][ T5737] usb 2-1: Manufacturer: syz
[  134.509423][ T5737] usb 2-1: SerialNumber: syz
[  134.514219][ T5737] usb 2-1: config 0 descriptor??
[  134.516785][ T6706] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  134.562423][ T5737] hub 2-1:0.0: bad descriptor, ignoring hub
[  134.562448][ T5737] hub 2-1:0.0: probe with driver hub failed with error -5
[  134.745557][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.757311][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.166482][ T6726] kvm: pic: single mode not supported
[  135.166637][ T6726] kvm: pic: level sensitive irq not supported
[  135.377520][ T5702] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  135.445737][ T5729] usb 2-1: USB disconnect, device number 15
[  135.537395][ T5702] usb 5-1: Using ep0 maxpacket: 32
[  135.538074][ T5702] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  135.539493][ T5702] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  135.539525][ T5702] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  135.539544][ T5702] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  135.539608][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  135.539627][ T5702] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  135.539650][ T5702] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  135.539688][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.542889][ T5702] usb 5-1: config 0 descriptor??
[  135.610992][ T5729] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  135.754447][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.755186][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.775467][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.775867][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.794832][ T5729] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  135.795996][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  135.820607][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  135.820633][ T5729] usb 2-1: Product: syz
[  135.820648][ T5729] usb 2-1: Manufacturer: syz
[  135.820661][ T5729] usb 2-1: SerialNumber: syz
[  135.823541][ T5729] usb 2-1: config 0 descriptor??
[  135.824471][ T6720] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  135.825908][ T5729] hub 2-1:0.0: bad descriptor, ignoring hub
[  135.825929][ T5729] hub 2-1:0.0: probe with driver hub failed with error -5
[  135.927685][ T4945] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  135.967347][ T5702] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  135.983363][ T5702] usb 5-1: USB disconnect, device number 19
[  135.995231][ T5702] usblp1: removed
[  136.077227][ T4945] usb 4-1: Using ep0 maxpacket: 32
[  136.077710][ T4945] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  136.078770][ T4945] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  136.078784][ T4945] usb 4-1: config 0 has too many interfaces: 92, using maximum allowed: 32
[  136.078794][ T4945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.078805][ T4945] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 92
[  136.078824][ T4945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.080961][ T4945] usb 4-1: config 0 descriptor??
[  136.148651][  T991] usb 2-1: USB disconnect, device number 16
[  136.328023][   T10] usb 1-1: USB disconnect, device number 23
[  136.364238][ T6745] CIFS: VFS: bad security option: krb5i�
[  136.575755][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.594239][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.896923][ T5737] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  137.061527][ T5737] usb 3-1: unable to get BOS descriptor or descriptor too short
[  137.061585][ T5737] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[  137.065248][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.065299][ T5737] usb 3-1: config 1 interface 0 altsetting 35 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  137.065326][ T5737] usb 3-1: config 1 interface 0 has no altsetting 0
[  137.120129][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.120158][ T5737] usb 3-1: Product: syz
[  137.120173][ T5737] usb 3-1: Manufacturer: syz
[  137.120186][ T5737] usb 3-1: SerialNumber: syz
[  137.185873][ T6750] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.240'.
[  137.359896][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.360306][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.389863][ T5737] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  137.405683][ T5737] usb 3-1: USB disconnect, device number 19
[  137.463381][ T5729] usb 4-1: USB disconnect, device number 20
[  137.477641][ T5702] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  137.629428][ T5702] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  137.634781][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.634808][ T5702] usb 1-1: Product: syz
[  137.634815][ T5702] usb 1-1: Manufacturer: syz
[  137.634823][ T5702] usb 1-1: SerialNumber: syz
[  137.682560][ T5702] usb 1-1: config 0 descriptor??
[  138.138736][ T4945] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  138.217739][ T5737] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  138.288903][ T4945] usb 5-1: Using ep0 maxpacket: 32
[  138.291275][ T4945] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  138.292121][ T4945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  138.295688][ T4945] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  138.295705][ T4945] usb 5-1: Product: syz
[  138.295712][ T4945] usb 5-1: Manufacturer: syz
[  138.295719][ T4945] usb 5-1: SerialNumber: syz
[  138.328904][ T4945] usb 5-1: config 0 descriptor??
[  138.331225][ T6777] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  138.367035][ T5737] usb 3-1: Using ep0 maxpacket: 16
[  138.367749][ T5737] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  138.392853][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.392879][ T5737] usb 3-1: Product: syz
[  138.392900][ T5737] usb 3-1: Manufacturer: syz
[  138.392914][ T5737] usb 3-1: SerialNumber: syz
[  138.396382][ T5737] usb 3-1: config 0 descriptor??
[  138.428646][ T5737] usb 3-1: selecting invalid altsetting 1
[  138.428669][ T5737] technisat-usb2: could not set alternate setting to 0
[  138.632657][ T5737] technisat-usb2: firmware version: 0.0
[  138.633336][ T5737] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  139.196099][ T5737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  139.213609][ T5737] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[  139.213675][ T5737] usb 3-1: media controller created
[  139.240541][ T5737] technisat-usb2: i2c-error: out failed 53 = -22
[  139.240807][ T5737] dvb-usb: MAC address reading failed.
[  139.311432][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.456164][ T5737] DVB: Unable to find symbol stv090x_attach()
[  139.463569][ T5737] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[  139.567010][ T5737] rc_core: IR keymap rc-technisat-usb2 not found
[  139.567029][ T5737] Registered IR keymap rc-empty
[  139.575353][ T5737] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  139.601134][ T5737] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input15
[  139.629248][ T5737] dvb-usb: schedule remote query interval to 100 msecs.
[  140.084493][ T6758] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  140.085626][ T6758] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.112976][ T6758] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.126047][ T6758] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  140.126375][ T6758] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.144308][ T5737] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[  140.158537][ T6789] technisat-usb2: i2c-error: out failed 41 = -22
[  140.165061][ T5704] dvb-usb: error -32 while querying for an remote control event.
[  140.242088][ T6758] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.246808][ T6758] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  140.260611][ T6758] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  140.263847][ T6758] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  140.266509][ T6758] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  140.266575][ T6758] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  140.285595][ T5737] dvb-usb: error -32 while querying for an remote control event.
[  140.297605][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout
[  140.322222][ T6758] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  140.334541][ T6758] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  140.335016][ T6758] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  140.348226][ T6758] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  140.371917][ T5737] usb 3-1: USB disconnect, device number 20
[  140.534495][ T5737] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[  140.588334][ T5702] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  140.588378][ T5702] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  140.614056][ T5704] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  140.697374][ T6805] netlink: 'syz.0.252': attribute type 7 has an invalid length.
[  140.701937][ T6806] qrtr: Invalid version 0
[  140.718275][ T6806] netlink: 52 bytes leftover after parsing attributes in process `syz.0.252'.
[  140.731536][ T5702] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71
[  140.742053][ T5702] usb 1-1: USB disconnect, device number 24
[  140.775614][ T5704] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  140.789543][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  140.789572][ T5704] usb 4-1: Product: syz
[  140.789586][ T5704] usb 4-1: SerialNumber: syz
[  140.825565][ T5704] usb 4-1: config 0 descriptor??
[  140.882980][ T5737] usb 5-1: USB disconnect, device number 20
[  141.048467][ T5704] ldusb 4-1:0.0: Interrupt in endpoint not found
[  141.055273][ T5704] usb 4-1: USB disconnect, device number 21
[  141.186665][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'.
[  141.186694][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'.
[  141.245299][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'.
[  141.457238][ T4945] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  141.607426][ T4945] usb 5-1: Using ep0 maxpacket: 16
[  141.608179][ T4945] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  141.609314][ T4945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.609341][ T4945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.609362][ T4945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  141.609401][ T4945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.614408][ T4945] usb 5-1: config 0 descriptor??
[  141.658751][ T5729] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  141.658862][ T5704] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  141.807526][ T5729] usb 3-1: Using ep0 maxpacket: 8
[  141.813584][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short
[  141.813615][ T5729] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  141.817534][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.818669][ T5729] usb 3-1: config 0 has no interfaces?
[  141.850178][ T5704] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  141.854138][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.854164][ T5729] usb 3-1: Product: syz
[  141.854176][ T5729] usb 3-1: Manufacturer: syz
[  141.854190][ T5729] usb 3-1: SerialNumber: syz
[  141.855693][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.867230][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.867256][ T5704] usb 1-1: Product: syz
[  141.867269][ T5704] usb 1-1: Manufacturer: syz
[  141.867282][ T5704] usb 1-1: SerialNumber: syz
[  141.879057][ T5729] usb 3-1: config 0 descriptor??
[  141.886529][ T5704] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  142.002277][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'.
[  142.112455][ T4945] hid-multitouch 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  142.116403][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.116723][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.139118][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout
[  142.150487][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.174163][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.192423][ T5737] usb 3-1: USB disconnect, device number 21
[  142.289571][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.289876][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.298330][ T4945] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  142.307153][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  142.307274][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout
[  142.360402][ T5704] gspca_mr97310a: reg write [21] error -71
[  142.360466][ T5704] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -71
[  142.381699][ T5704] usb 1-1: USB disconnect, device number 25
[  142.381923][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.391339][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout
[  142.446220][ T5729] usb 5-1: USB disconnect, device number 21
[  142.477376][ T4945] usb 4-1: Using ep0 maxpacket: 32
[  142.478424][ T4945] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  142.480716][ T4945] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  142.480736][ T4945] usb 4-1: config 0 has no interface number 0
[  142.480757][ T4945] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  142.480770][ T4945] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  142.480783][ T4945] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  142.480796][ T4945] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  142.480806][ T4945] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  142.484828][ T4945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.484853][ T4945] usb 4-1: Product: syz
[  142.484865][ T4945] usb 4-1: Manufacturer: syz
[  142.484878][ T4945] usb 4-1: SerialNumber: syz
[  142.605530][ T4945] usb 4-1: config 0 descriptor??
[  142.606509][ T6838] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  143.467515][ T5702] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  143.550051][ T6845] raw_sendmsg: syz.2.261 forgot to set AF_INET. Fix it!
[  143.644509][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.644586][ T5702] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  143.682201][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.682305][ T5702] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  143.682339][ T5702] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.726721][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[  143.726750][ T5702] usb 1-1: Product: syz
[  143.726764][ T5702] usb 1-1: Manufacturer: syz
[  143.726779][ T5702] usb 1-1: SerialNumber: syz
[  143.839235][  T991] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  144.007270][  T991] usb 5-1: Using ep0 maxpacket: 32
[  144.007966][  T991] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  144.009527][  T991] usb 5-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config
[  144.023787][  T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.023813][  T991] usb 5-1: Product: syz
[  144.023827][  T991] usb 5-1: Manufacturer: syz
[  144.023840][  T991] usb 5-1: SerialNumber: syz
[  144.045058][  T991] usb 5-1: config 0 descriptor??
[  144.069295][  T991] cdc_ether 5-1:0.0: skipping garbage
[  144.069320][  T991] usb 5-1: No union descriptors
[  144.070193][  T991] usb 5-1: unsupported MDLM descriptors
[  144.161456][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'.
[  144.227031][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout
[  144.298411][ T5704] usb 5-1: USB disconnect, device number 22
[  144.327818][ T6856] vlan2: entered allmulticast mode
[  144.327840][ T6856] bridge1: entered allmulticast mode
[  144.330057][ T6855] bridge1: port 1(erspan0) entered blocking state
[  144.330217][ T6855] bridge1: port 1(erspan0) entered disabled state
[  144.330336][ T6855] erspan0: entered allmulticast mode
[  144.339616][ T6855] erspan0: entered promiscuous mode
[  144.344426][ T6855] bridge1: port 1(erspan0) entered blocking state
[  144.344691][ T6855] bridge1: port 1(erspan0) entered forwarding state
[  144.385195][ T6855] bridge1: port 1(erspan0) entered disabled state
[  144.388553][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  144.388635][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout
[  144.414425][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.430187][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.458162][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  144.458203][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout
[  144.487933][ T5702] usb 1-1: USB disconnect, device number 26
[  144.716145][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.832679][ T6859] kAFS: unparsable volume name
[  145.174885][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[  145.174911][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[  145.217256][ T5681] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  145.345549][ T4945] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz)
[  145.357897][ T4945] etas_es58x 4-1:0.219: could not retrieve the product info string
[  145.375270][ T5681] usb 5-1: Using ep0 maxpacket: 8
[  145.382887][ T5681] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  145.404703][ T5681] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  145.404732][ T5681] usb 5-1: config 0 has no interface number 0
[  145.404771][ T5681] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  145.404793][ T5681] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  145.404816][ T5681] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  145.404839][ T5681] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  145.404880][ T5681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.474289][ T5681] usb 5-1: config 0 descriptor??
[  145.504273][ T5681] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  145.573496][ T4945] usb 4-1: USB disconnect, device number 22
[  145.594657][ T4945] etas_es58x 4-1:0.219: Disconnecting syz syz
[  145.819235][  T991] usb 5-1: USB disconnect, device number 23
[  145.819323][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  145.849534][  T991] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  145.987842][ T4945] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  146.138272][ T4945] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  146.139450][ T4945] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  146.139495][ T4945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.139520][ T4945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.139541][ T4945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  146.139581][ T4945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.144312][ T4945] usb 4-1: config 0 descriptor??
[  146.188118][ T5704] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  146.296954][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout
[  146.307268][ T5704] usb 3-1: device descriptor read/64, error -71
[  146.416919][  T991] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  146.457000][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  146.457051][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout
[  146.503898][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'.
[  146.537138][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout
[  146.547183][ T5704] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  146.547340][  T991] usb 2-1: device descriptor read/64, error -71
[  146.657581][   T30] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  146.676994][ T5704] usb 3-1: device descriptor read/64, error -71
[  146.787399][ T5704] usb usb3-port1: attempt power cycle
[  146.788877][  T991] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  146.788988][   T30] usb 5-1: device descriptor read/64, error -71
[  146.836956][ T5729] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  146.916946][  T991] usb 2-1: device descriptor read/64, error -71
[  146.967046][ T5729] usb 1-1: device descriptor read/64, error -71
[  147.027013][   T30] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  147.028556][  T991] usb usb2-port1: attempt power cycle
[  147.090493][ T4945] usbhid 4-1:0.0: can't add hid device: -71
[  147.090598][ T4945] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  147.102489][ T4945] usb 4-1: USB disconnect, device number 23
[  147.126927][ T5704] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  147.149545][ T5704] usb 3-1: device descriptor read/8, error -71
[  147.177219][   T30] usb 5-1: device descriptor read/64, error -71
[  147.207569][ T5729] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  147.287411][   T30] usb usb5-port1: attempt power cycle
[  147.337424][ T5729] usb 1-1: device descriptor read/64, error -71
[  147.384683][ T6921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  147.387258][  T991] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  147.403932][ T5704] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  147.412513][  T991] usb 2-1: device descriptor read/8, error -71
[  147.429472][ T5704] usb 3-1: device descriptor read/8, error -71
[  147.447319][ T5729] usb usb1-port1: attempt power cycle
[  147.537216][ T5704] usb usb3-port1: unable to enumerate USB device
[  147.627030][   T30] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  147.647127][  T991] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  147.647597][   T30] usb 5-1: device descriptor read/8, error -71
[  147.671595][  T991] usb 2-1: device descriptor read/8, error -71
[  147.777322][  T991] usb usb2-port1: unable to enumerate USB device
[  147.793873][ T5729] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  147.820032][ T5729] usb 1-1: device descriptor read/8, error -71
[  147.897111][   T30] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  147.917599][   T30] usb 5-1: device descriptor read/8, error -71
[  148.022827][ T6925] openvswitch: netlink: Missing key (keys=40, expected=100)
[  148.034832][   T30] usb usb5-port1: unable to enumerate USB device
[  148.077007][ T5729] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  148.099828][ T5729] usb 1-1: device descriptor read/8, error -71
[  148.143431][ T6932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.143444][ T6932] IPv6: NLM_F_CREATE should be set when creating new route
[  148.143509][ T6932] IPv6: NLM_F_CREATE should be set when creating new route
[  148.196622][ T6929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  148.196649][ T6929] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  148.214802][ T5729] usb usb1-port1: unable to enumerate USB device
[  148.224096][ T6929] vhci_hcd vhci_hcd.0: Device attached
[  148.260275][ T6936] vhci_hcd: connection closed
[  148.265041][ T1464] vhci_hcd vhci_hcd.3: stop threads
[  148.265362][ T1464] vhci_hcd vhci_hcd.3: release socket
[  148.265383][ T1464] vhci_hcd vhci_hcd.3: disconnect device
[  149.243261][  T991] wiimote 0005:057E:0330.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  149.244358][  T991] wiimote 0005:057E:0330.0006: New device registered
[  149.336981][   T30] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  149.490446][   T30] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  149.491587][   T30] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  149.491602][   T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.493629][   T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.493644][   T30] usb 3-1: Product: syz
[  149.493651][   T30] usb 3-1: Manufacturer: syz
[  149.493658][   T30] usb 3-1: SerialNumber: syz
[  149.744773][   T30] usb 3-1: 0:1 : does not exist
[  149.744823][   T30] usb 3-1: unit 6 not found!
[  149.744832][   T30] usb 3-1: unit 2 not found!
[  149.895057][   T30] usb 3-1: USB disconnect, device number 26
[  150.007507][ T5702] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  150.159573][ T5702] usb 5-1: Using ep0 maxpacket: 8
[  150.164331][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short
[  150.164377][ T5702] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=22.d5
[  150.190974][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0
[  150.192402][ T6945] wiimote 0005:057E:0330.0006: Device removed
[  150.195005][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0
[  150.195953][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0
[  150.229232][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.229250][ T5702] usb 5-1: Product: syz
[  150.229258][ T5702] usb 5-1: Manufacturer: syz
[  150.229265][ T5702] usb 5-1: SerialNumber: syz
[  150.231213][ T5702] usb 5-1: config 0 descriptor??
[  150.311101][ T5701] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2)
[  150.440215][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.441936][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.479531][ T5702] pwc: Logitech ViewPort AV 100 webcam detected.
[  150.480397][ T5702] pwc: Warning: more than 1 configuration available.
[  150.480818][ T5702] pwc: Failed to set LED on/off time (-71)
[  150.481151][ T5702] pwc: send_video_command error -71
[  150.481163][ T5702] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  150.481273][ T5702] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  150.537390][ T5702] usb 5-1: USB disconnect, device number 28
[  150.579597][ T5701] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input17
[  150.645735][ T5701] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input18
[  150.686145][ T6964] sctp: [Deprecated]: syz.2.294 (pid 6964) Use of int in max_burst socket option.
[  150.686145][ T6964] Use struct sctp_assoc_value instead
[  150.706599][ T5701] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input16
[  150.870506][ T6965] input: syz1 as /devices/virtual/input/input19
[  151.459070][ T6988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  151.846327][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'.
[  152.045020][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[  152.055553][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[  152.103295][ T7001] usb usb7: usbfs: process 7001 (syz.3.305) did not claim interface 0 before use
[  152.360831][ T5702] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  152.487165][ T5702] usb 4-1: device descriptor read/64, error -71
[  152.736928][ T5702] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  152.868420][ T5702] usb 4-1: device descriptor read/64, error -71
[  152.980738][ T5702] usb usb4-port1: attempt power cycle
[  153.338248][ T5702] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  153.360289][ T5702] usb 4-1: device descriptor read/8, error -71
[  153.572308][ T7025] sctp: [Deprecated]: syz.2.311 (pid 7025) Use of int in max_burst socket option.
[  153.572308][ T7025] Use struct sctp_assoc_value instead
[  153.573437][ T7025] sctp: [Deprecated]: syz.2.311 (pid 7025) Use of int in maxseg socket option.
[  153.573437][ T7025] Use struct sctp_assoc_value instead
[  153.597518][ T5702] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  153.618069][ T5702] usb 4-1: device descriptor read/8, error -71
[  153.729358][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  153.730415][ T5702] usb usb4-port1: unable to enumerate USB device
[  153.878080][   T10] usb 1-1: Using ep0 maxpacket: 32
[  153.879244][   T10] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=fe.8f
[  153.880171][   T10] usb 1-1: config 0 has an invalid interface number: 97 but max is 0
[  153.880196][   T10] usb 1-1: config 0 has no interface number 0
[  153.880224][   T10] usb 1-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30
[  153.880258][   T10] usb 1-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  153.880274][   T10] usb 1-1: config 0 interface 97 has no altsetting 0
[  153.882845][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.882871][   T10] usb 1-1: Product: syz
[  153.882885][   T10] usb 1-1: Manufacturer: syz
[  153.882899][   T10] usb 1-1: SerialNumber: syz
[  153.885498][   T10] usb 1-1: config 0 descriptor??
[  153.997398][ T5702] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  154.148337][ T5702] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  154.149847][ T5702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.149877][ T5702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.149933][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.362509][ T7038] netlink: NAT attribute has 1 unknown bytes
[  154.362566][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.572298][ T7031] syzkaller0: entered promiscuous mode
[  154.572314][ T7031] syzkaller0: entered allmulticast mode
[  154.596996][ T5729] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  154.641327][ T5702] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0007/input/input20
[  154.727407][ T5702] rc_core: IR keymap rc-rc6-mce not found
[  154.727420][ T5702] Registered IR keymap rc-empty
[  154.728537][ T5702] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0007/rc/rc0
[  154.732054][ T5702] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0007/rc/rc0/input21
[  154.777712][ T5729] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  154.778652][ T5729] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.778674][ T5729] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  154.778712][ T5729] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5
[  154.778735][ T5729] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  154.778757][ T5729] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.778789][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.784099][ T5702] hid-picolcd 0003:04D8:C002.0007: No report with id 0x94 found
[  154.784123][ T5702] hid-picolcd 0003:04D8:C002.0007: failed to configure display
[  154.893804][ T5729] ims_pcu 5-1:1.0: Control endpoint is not INTERRUPT IN
[  154.893858][ T5729] ims_pcu 5-1:1.0: probe with driver ims_pcu failed with error -22
[  155.001757][ T5702] usb 3-1: USB disconnect, device number 27
[  155.058721][ T5673] usb 5-1: USB disconnect, device number 29
[  155.784056][ T7042] syz.3.317 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  155.784111][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.3.317 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.784140][ T7042] Tainted: [L]=SOFTLOCKUP
[  155.784148][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.784167][ T7042] Call Trace:
[  155.784177][ T7042]  <TASK>
[  155.784186][ T7042]  dump_stack_lvl+0xe8/0x150
[  155.784230][ T7042]  dump_header+0xd3/0x4b0
[  155.784257][ T7042]  oom_kill_process+0x3ab/0x9e0
[  155.784288][ T7042]  out_of_memory+0x1064/0x1480
[  155.784310][ T7042]  ? try_charge_memcg+0xc32/0x15e0
[  155.784346][ T7042]  ? __pfx_out_of_memory+0x10/0x10
[  155.784368][ T7042]  ? do_raw_spin_unlock+0xf5/0x200
[  155.784404][ T7042]  try_charge_memcg+0xcdf/0x15e0
[  155.784455][ T7042]  ? __pfx_try_charge_memcg+0x10/0x10
[  155.784477][ T7042]  ? lock_acquire+0x115/0x350
[  155.784514][ T7042]  ? charge_memcg+0x47/0x310
[  155.784541][ T7042]  charge_memcg+0x1dd/0x310
[  155.784566][ T7042]  __mem_cgroup_charge+0x25/0x80
[  155.784589][ T7042]  do_pte_missing+0x175b/0x34b0
[  155.784637][ T7042]  handle_mm_fault+0x1a53/0x3750
[  155.784678][ T7042]  ? handle_mm_fault+0xf1/0x3750
[  155.784714][ T7042]  ? __pfx_handle_mm_fault+0x10/0x10
[  155.784740][ T7042]  ? follow_page_pte+0xc8f/0xf10
[  155.784785][ T7042]  __get_user_pages+0x1675/0x2750
[  155.784840][ T7042]  faultin_page_range+0x26a/0x8f0
[  155.784869][ T7042]  ? blk_start_plug+0x6e/0x1b0
[  155.784894][ T7042]  madvise_do_behavior+0x2e4/0x540
[  155.784930][ T7042]  ? __pfx_madvise_do_behavior+0x10/0x10
[  155.784970][ T7042]  ? down_read+0x2be/0x330
[  155.785001][ T7042]  do_madvise+0x327/0x3a0
[  155.785025][ T7042]  ? __pfx_do_madvise+0x10/0x10
[  155.785070][ T7042]  ? rcu_is_watching+0x16/0xb0
[  155.785101][ T7042]  __ia32_sys_madvise+0xa6/0xc0
[  155.785124][ T7042]  __do_fast_syscall_32+0x27a/0x6a0
[  155.785148][ T7042]  ? do_fast_syscall_32+0x33/0x70
[  155.785168][ T7042]  ? irqentry_exit+0x10f/0x910
[  155.785185][ T7042]  ? trace_irq_disable+0x3b/0x140
[  155.785209][ T7042]  do_fast_syscall_32+0x33/0x70
[  155.785233][ T7042]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  155.785256][ T7042] RIP: 0023:0xf701f0ec
[  155.785279][ T7042] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  155.785297][ T7042] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000db
[  155.785318][ T7042] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000
[  155.785332][ T7042] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000
[  155.785344][ T7042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  155.785355][ T7042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  155.785367][ T7042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  155.785396][ T7042]  </TASK>
[  155.818348][ T7042] memory: usage 8kB, limit 8kB, failcnt 1555
[  155.818366][ T7042] memory+swap: usage 2052kB, limit 9007199254740988kB, failcnt 0
[  155.818380][ T7042] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[  155.818393][ T7042] Memory cgroup stats for /syz3/test:
[  155.827831][ T4945] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  155.828509][ T7042] cache 0
[  155.828520][ T7042] rss 0
[  155.828526][ T7042] rss_huge 0
[  155.828533][ T7042] shmem 0
[  155.828539][ T7042] mapped_file 0
[  155.828546][ T7042] dirty 0
[  155.828552][ T7042] writeback 0
[  155.828558][ T7042] workingset_refault_anon 0
[  155.828565][ T7042] workingset_refault_file 0
[  155.828572][ T7042] swap 2093056
[  155.828578][ T7042] swapcached 2093056
[  155.828584][ T7042] pgpgin 512
[  155.828590][ T7042] pgpgout 512
[  155.828597][ T7042] pgfault 516
[  155.828603][ T7042] pgmajfault 0
[  155.828630][ T7042] inactive_anon 0
[  155.828637][ T7042] active_anon 0
[  155.828643][ T7042] inactive_file 0
[  155.828650][ T7042] active_file 0
[  155.828660][ T7042] unevictable 0
[  155.828666][ T7042] hierarchical_memory_limit 8192
[  155.828674][ T7042] hierarchical_memsw_limit 9223372036854771712
[  155.828682][ T7042] total_cache 0
[  155.828688][ T7042] total_rss 0
[  155.828694][ T7042] total_rss_huge 0
[  155.828701][ T7042] total_shmem 0
[  155.828707][ T7042] total_mapped_file 0
[  155.828714][ T7042] total_dirty 0
[  155.828740][ T7042] total_writeback 0
[  155.828771][ T7042] total_workingset_refault_anon 0
[  155.828779][ T7042] total_workingset_refault_file 0
[  155.828786][ T7042] total_swap 2093056
[  155.828793][ T7042] total_swapcached 2093056
[  155.828800][ T7042] total_pgpgin 512
[  155.828806][ T7042] total_pgpgout 512
[  155.828813][ T7042] total_pgfault 516
[  155.828819][ T7042] total_pgmajfault 0
[  155.828826][ T7042] total_inactive_anon 0
[  155.828833][ T7042] total_active_anon 0
[  155.828840][ T7042] total_inactive_file 0
[  155.828846][ T7042] total_active_file 0
[  155.828853][ T7042] total_unevictable 0
[  155.828860][ T7042] anon_cost 0
[  155.828866][ T7042] file_cost 0
[  155.828873][ T7042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.317,pid=7041,uid=0
[  155.830251][ T7042] Memory cgroup out of memory: Killed process 7041 (syz.3.317) total-vm:102028kB, anon-rss:1304kB, file-rss:22764kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  155.984157][ T4945] usb 3-1: New USB device found, idVendor=10cf, idProduct=1713, bcdDevice= 0.40
[  155.986726][ T4945] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  155.986758][ T4945] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.986779][ T4945] usb 3-1: config 1 interface 0 has no altsetting 0
[  155.994687][ T4945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.994711][ T4945] usb 3-1: Product: syz
[  155.994725][ T4945] usb 3-1: Manufacturer: syz
[  155.994738][ T4945] usb 3-1: SerialNumber: syz
[  156.257942][ T4945] usbhid 3-1:1.0: can't add hid device: -71
[  156.258046][ T4945] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  156.264032][ T4945] usb 3-1: USB disconnect, device number 28
[  156.509662][   T10] usb 1-1: USB disconnect, device number 31
[  156.697221][ T5673] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  156.800960][ T7072] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[  156.807883][ T5702] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  156.829725][ T7072] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.847358][ T5673] usb 5-1: Using ep0 maxpacket: 32
[  156.848050][ T5673] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00
[  156.849163][ T5673] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30
[  156.849201][ T5673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.849223][ T5673] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126
[  156.850362][ T5673] usb 5-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0
[  156.850386][ T5673] usb 5-1: Product: syz
[  156.854958][ T5673] usb 5-1: config 0 descriptor??
[  156.874604][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.875705][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.879799][ T7076] netlink: 'syz.2.326': attribute type 10 has an invalid length.
[  156.879818][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.326'.
[  156.888023][   T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  156.904715][ T7073] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  156.952879][ T5702] usb 4-1: device descriptor read/64, error -71
[  157.038205][   T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  157.039306][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.039341][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.041528][   T10] usb 1-1: config 0 descriptor??
[  157.046695][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  157.067995][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068042][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068091][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068117][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068142][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068167][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068192][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068237][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068262][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.068287][ T5673] monterey 0003:0566:3004.0008: unknown main item tag 0x0
[  157.078735][ T5673] monterey 0003:0566:3004.0008: hidraw1: USB HID v5.40 Device [syz] on usb-dummy_hcd.4-1/input0
[  157.098744][ T4945] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[  157.187332][ T5702] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  157.247690][ T4945] usb 3-1: Invalid ep0 maxpacket: 16
[  157.279111][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.279626][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.280833][ T7057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.323'.
[  157.318108][ T5702] usb 4-1: device descriptor read/64, error -71
[  157.336772][ T5681] usb 5-1: USB disconnect, device number 30
[  157.377212][ T4945] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  157.427815][ T5702] usb usb4-port1: attempt power cycle
[  157.446242][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  157.453426][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  157.455954][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  157.527224][ T4945] usb 3-1: Invalid ep0 maxpacket: 16
[  157.527580][ T4945] usb usb3-port1: attempt power cycle
[  157.657440][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  157.657937][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  157.658886][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  157.662637][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  157.663182][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[  157.767285][ T5702] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  157.788088][ T5702] usb 4-1: device descriptor read/8, error -71
[  157.866566][   T10] pwc: recv_control_msg error -32 req 02 val 2400
[  157.867290][ T4945] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[  157.891707][ T4945] usb 3-1: Invalid ep0 maxpacket: 16
[  157.905810][   T10] pwc: recv_control_msg error -32 req 02 val 2600
[  157.909484][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'.
[  157.931854][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'.
[  158.017604][ T4945] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[  158.029374][ T5702] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  158.039005][ T4945] usb 3-1: Invalid ep0 maxpacket: 16
[  158.039303][ T4945] usb usb3-port1: unable to enumerate USB device
[  158.048262][ T5702] usb 4-1: device descriptor read/8, error -71
[  158.125454][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  158.125855][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  158.126165][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  158.160586][ T5702] usb usb4-port1: unable to enumerate USB device
[  158.183637][   T10] pwc: Registered as video103.
[  158.197380][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22
[  158.230287][   T10] usb 1-1: USB disconnect, device number 32
[  158.419272][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.328'.
[  158.554922][ T7084] binfmt_misc: register: failed to install interpreter ./file0
[  158.772902][ T7102] tap0: tun_chr_ioctl cmd 1074025677
[  158.773180][ T7102] tap0: linktype set to 802
[  158.777424][ T4945] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  158.928244][ T4945] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  158.929848][ T4945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.932813][ T4945] usb 2-1: config 0 descriptor??
[  158.935919][ T4945] cp210x 2-1:0.0: cp210x converter detected
[  159.339720][ T4945] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  159.359256][ T4945] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -32
[  159.359274][ T4945] cp210x 2-1:0.0: GPIO initialisation failed: -32
[  159.371638][ T4945] usb 2-1: cp210x converter now attached to ttyUSB0
[  159.972423][ T7113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.334'.
[  159.972446][ T7113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.334'.
[  161.319183][   T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  161.468085][   T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  161.469214][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.469260][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.471496][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.471520][   T10] usb 3-1: Product: syz
[  161.471533][   T10] usb 3-1: Manufacturer: syz
[  161.471547][   T10] usb 3-1: SerialNumber: syz
[  161.569257][   T10] usb 2-1: USB disconnect, device number 21
[  161.575441][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  161.575968][   T10] cp210x 2-1:0.0: device disconnected
[  161.885531][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.885910][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.099283][   T10] usb 3-1: USB disconnect, device number 33
[  162.198273][ T7142] kAFS: unable to lookup cell '�'
[  162.559463][ T7147] ipvlan2: entered promiscuous mode
[  163.085773][ T5704] hid_parser_main: 11 callbacks suppressed
[  163.085790][ T5704] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0
[  163.085808][ T5704] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0
[  163.085823][ T5704] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0
[  163.118620][ T5704] hid-generic 0000:0000:0001.0009: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  163.287415][ T4945] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  163.396454][ T7162] bridge0: port 3(syz_tun) entered disabled state
[  163.414478][ T7162] bridge0: port 4(ip6gretap0) entered disabled state
[  163.414788][ T7162] bridge0: port 5(team0) entered disabled state
[  163.416561][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.416968][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.438403][ T4945] usb 4-1: Using ep0 maxpacket: 16
[  163.439499][ T4945] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  163.440652][ T4945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.440708][ T4945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.440734][ T4945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  163.440753][ T4945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  163.440775][ T4945] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.443911][ T4945] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  163.443933][ T4945] usb 4-1: Manufacturer: syz
[  163.460390][ T4945] usb 4-1: config 0 descriptor??
[  163.747538][ T4945] rc_core: IR keymap rc-hauppauge not found
[  163.747559][ T4945] Registered IR keymap rc-empty
[  163.747710][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.768534][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.789399][ T4945] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  163.796591][ T4945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23
[  163.810720][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.819587][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.828355][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.849414][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.869313][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.875572][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.887596][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.907910][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.927266][ T5681] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  163.927664][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.954488][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.972475][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  163.989899][ T4945] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.019789][ T4945] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  164.019823][ T4945] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  164.035806][ T7187] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  164.079264][ T5681] usb 3-1: Using ep0 maxpacket: 8
[  164.084936][ T5681] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  164.088041][ T5681] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.092404][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.092429][ T5681] usb 3-1: Product: syz
[  164.092442][ T5681] usb 3-1: Manufacturer: syz
[  164.092456][ T5681] usb 3-1: SerialNumber: syz
[  164.139966][ T5681] usb 3-1: config 0 descriptor??
[  164.149627][ T5681] usb 3-1: No union descriptors
[  164.158260][ T5681] usb 3-1: unsupported MDLM descriptors
[  164.367402][ T1155] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.367677][ T1155] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.367722][ T1155] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.367754][ T1155] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.385347][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.396785][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.564331][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.564602][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.571660][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.580371][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.623008][ T5704] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  164.767577][ T5704] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00
[  164.768962][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.768993][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.769014][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  164.769055][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.772592][ T5704] usb 1-1: config 0 descriptor??
[  165.267348][ T3105] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  165.417825][ T3105] usb 2-1: Using ep0 maxpacket: 16
[  165.422384][ T3105] usb 2-1: unable to get BOS descriptor or descriptor too short
[  165.422433][ T3105] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  165.430459][ T3105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.430485][ T3105] usb 2-1: Product: syz
[  165.430498][ T3105] usb 2-1: Manufacturer: syz
[  165.430533][ T3105] usb 2-1: SerialNumber: syz
[  165.649474][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.650030][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.678021][   T30] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  165.743034][ T3105] usb 2-1: USB disconnect, device number 22
[  165.814248][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.838374][   T30] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  165.839566][   T30] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  165.839590][   T30] usb 5-1: config 0 has no interface number 0
[  165.839627][   T30] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.842251][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.842275][   T30] usb 5-1: Product: syz
[  165.842289][   T30] usb 5-1: Manufacturer: syz
[  165.842324][   T30] usb 5-1: SerialNumber: syz
[  165.865484][   T30] usb 5-1: config 0 descriptor??
[  165.917812][   T30] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  166.004352][ T3105] usb 4-1: USB disconnect, device number 32
[  166.102199][ T5702] usb 3-1: USB disconnect, device number 34
[  166.362918][ T7233] netlink: 65031 bytes leftover after parsing attributes in process `syz.1.362'.
[  166.487550][ T3105] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  166.521632][    C1] usb 5-1: yurex_control_callback - control failed: -71
[  166.523493][ T5729] usb 5-1: USB disconnect, device number 31
[  166.547310][ T5729] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  166.637610][ T3105] usb 4-1: Using ep0 maxpacket: 32
[  166.638293][ T3105] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  166.639149][ T3105] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  166.639170][ T3105] usb 4-1: config 0 has no interface number 0
[  166.639215][ T3105] usb 4-1: config 0 interface 12 has no altsetting 0
[  166.640962][ T3105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.640985][ T3105] usb 4-1: Product: syz
[  166.640999][ T3105] usb 4-1: Manufacturer: syz
[  166.641012][ T3105] usb 4-1: SerialNumber: syz
[  166.643416][ T3105] usb 4-1: config 0 descriptor??
[  166.667636][ T5702] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  166.827378][ T5702] usb 2-1: Using ep0 maxpacket: 32
[  166.828044][ T5702] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  166.829105][ T5702] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  166.829128][ T5702] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  166.829147][ T5702] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  166.829173][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  166.829183][ T5702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  166.829196][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  166.829246][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.832071][ T5702] usb 2-1: config 0 descriptor??
[  167.038258][ T5702] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  167.242502][    C1] usblp0: nonzero read bulk status received: -71
[  167.244317][ T5729] usb 2-1: USB disconnect, device number 23
[  167.260939][ T5701] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  167.347397][ T5702] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  167.407229][ T5701] usb 3-1: Using ep0 maxpacket: 32
[  167.407963][ T5701] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  167.409062][ T5701] usb 3-1: config index 0 descriptor too short (expected 19, got 18)
[  167.411099][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.411123][ T5701] usb 3-1: Product: syz
[  167.411136][ T5701] usb 3-1: Manufacturer: syz
[  167.411150][ T5701] usb 3-1: SerialNumber: syz
[  167.413931][ T5701] usb 3-1: config 0 descriptor??
[  167.473545][ T5701] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  167.478430][ T5701] dvb-usb: bulk message failed: -22 (2/0)
[  167.480529][ T7236] usblp0: removed
[  167.499370][ T5702] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  167.502272][ T5701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  167.503064][ T5701] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  167.503116][ T5701] usb 3-1: media controller created
[  167.513627][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.513654][ T5702] usb 5-1: Product: syz
[  167.513668][ T5702] usb 5-1: Manufacturer: syz
[  167.513681][ T5702] usb 5-1: SerialNumber: syz
[  167.566699][ T5704] usbhid 1-1:0.0: can't add hid device: -71
[  167.567093][ T5704] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  167.576580][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.602059][ T5704] usb 1-1: USB disconnect, device number 33
[  167.641912][ T5701] usb 3-1: selecting invalid altsetting 7
[  167.641933][ T5701] cxusb: set interface failed
[  167.641945][ T5701] dvb-usb: bulk message failed: -22 (1/0)
[  167.712337][ T5701] DVB: Unable to find symbol lgdt330x_attach()
[  167.712356][ T5701] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  167.783536][ T5702] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  167.853840][ T7245] cxusb: i2c wr: len=79 is too big!
[  167.853840][ T7245] 
[  167.868787][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.869251][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.906264][ T7245] cxusb: i2c wr: len=79 is too big!
[  167.906264][ T7245] 
[  167.981726][ T5701] rc_core: IR keymap rc-dvico-portable not found
[  167.981747][ T5701] Registered IR keymap rc-empty
[  168.002646][ T5701] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  168.006106][ T5701] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input24
[  168.042463][ T5701] dvb-usb: schedule remote query interval to 100 msecs.
[  168.042487][ T5701] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  168.073618][   T10] usb 3-1: USB disconnect, device number 35
[  168.324503][ T7287] fuse: Bad value for 'fd'
[  168.331984][   T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  168.401416][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.401432][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.401542][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.401551][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.401653][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.401668][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.401813][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.401821][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.401925][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.401933][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402110][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402119][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402228][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402236][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402343][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402352][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402434][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402442][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402547][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402556][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402671][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402679][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402786][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402794][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.402876][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.402902][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.420249][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.420263][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.420438][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.420447][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.420597][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.420651][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.420771][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.420779][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.420858][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.420865][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.420962][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.420969][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421065][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421072][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421144][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421151][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421287][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421295][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421398][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421405][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421505][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421512][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421590][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421597][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421701][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421708][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.421803][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.421810][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.433735][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.433750][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.433898][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.433906][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.434020][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.434029][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.434132][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.434139][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.434221][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.434228][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.434333][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.434341][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.434442][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.434449][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.434547][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.434556][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.436175][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.436186][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.436290][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.436298][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.436422][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.436430][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.436528][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.436535][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.436612][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.436619][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.436723][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.436730][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.440726][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.440738][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.440850][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.440858][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.443819][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.443853][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.443944][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.443952][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.444052][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.444060][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.444482][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.444490][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.444588][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.444596][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.444697][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.444704][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.447887][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.447917][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.455866][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.455879][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.455971][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.455979][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.456081][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.456088][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.456211][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.456218][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.456317][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.456325][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.456403][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.456431][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.456508][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.456516][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.456615][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.456622][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.456722][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.456729][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.460916][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.460931][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.461059][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.461067][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.461168][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.461176][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.461273][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.461280][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.463264][ T7288] binder: BINDER_SET_CONTEXT_MGR already set
[  168.463277][ T7288] binder: 7283:7288 ioctl 4018620d 800002c0 returned -16
[  168.482558][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'.
[  169.105640][ T7271] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  169.105877][ T7271] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  169.106052][ T7271] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  169.106215][ T7271] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  169.106392][ T7271] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  169.496453][ T7299] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  169.514557][ T7299] overlayfs: option "workdir=/65" is useless in a non-upper mount, ignore
[  169.514642][ T7299] overlayfs: missing 'lowerdir'
[  169.991399][ T3105] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -32
[  169.991469][ T3105] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32
[  169.991487][ T3105] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  169.991555][ T3105] f81534 4-1:0.12: probe with driver f81534 failed with error -32
[  170.137805][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  170.173732][ T5701] usb 5-1: USB disconnect, device number 32
[  170.192284][ T5701] usblp0: removed
[  170.287448][   T10] usb 2-1: Using ep0 maxpacket: 8
[  170.289970][   T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  170.293841][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.293865][   T10] usb 2-1: Product: syz
[  170.293879][   T10] usb 2-1: Manufacturer: syz
[  170.293893][   T10] usb 2-1: SerialNumber: syz
[  170.296712][   T10] usb 2-1: config 0 descriptor??
[  170.311271][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  170.500881][ T5704] usb 4-1: USB disconnect, device number 33
[  170.612350][ T7345] syzkaller1: entered promiscuous mode
[  170.612373][ T7345] syzkaller1: entered allmulticast mode
[  170.754031][ T7315] warning: `syz.1.374' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  170.755546][   T10] gspca_sonixj: reg_r err -71
[  170.755636][   T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  170.768181][   T10] usb 2-1: USB disconnect, device number 24
[  170.937404][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout
[  171.088549][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[  171.178529][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout
[  171.178562][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout
[  171.178587][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout
[  171.178606][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout
[  172.190659][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'.
[  172.206682][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[  172.899874][ T7413] netlink: 64 bytes leftover after parsing attributes in process `syz.0.388'.
[  173.357183][ T5729] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  173.510156][ T5729] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  173.513673][ T5729] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  173.549833][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.549860][ T5729] usb 1-1: Product: ﻸÄ湊䒉
[  173.549874][ T5729] usb 1-1: Manufacturer: 
[  173.549888][ T5729] usb 1-1: SerialNumber: 嬽楷誋㋧寄賙낾遺ꣃ⶛Ⓤ陸㦕쩈꫽풫뾎ᾉ珓韻Ῥ鷯홬痁噏틽肌⅟躟趛⋣﫩ǒ閠쾡ڻ歋짟⾘ѭ埡ꭅ勴萍롚败⡰朲궎䈷⋢꒒豻炯վ嶱蝈ꜽꔿ⢣霯ᚌ䖽ꩨ俶տ煽㓵ߢᛨ﮼뾾뛭ힾ嘢㮬묶碚뗏끷寸족憜⯐㳮ꃢ뒩矷帨
[  173.619901][ T7427] fuse: Unknown parameter './file1'
[  173.814292][ T7430] netlink: 292 bytes leftover after parsing attributes in process `syz.3.392'.
[  174.112930][  T168] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  174.115014][ T7436] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  174.387430][ T3105] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  174.390226][ T5729] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  174.390647][ T5729] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  174.391062][ T5729] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  174.433638][ T5729] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  174.434719][ T5729] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  174.435163][ T5729] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2
[  174.470807][ T5729] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  174.472407][ T5729] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  174.518503][ T3105] usb 5-1: device descriptor read/64, error -71
[  174.565377][ T5729] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2
[  174.582849][ T5729] usb 1-1: USB disconnect, device number 34
[  174.715148][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.757763][ T3105] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  174.835121][   T31] audit: type=1326 audit(1790007783.865:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.835171][   T31] audit: type=1326 audit(1790007783.865:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.839970][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  174.845220][   T31] audit: type=1326 audit(1790007783.875:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.845266][   T31] audit: type=1326 audit(1790007783.875:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.850498][   T31] audit: type=1326 audit(1790007783.885:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.850543][   T31] audit: type=1326 audit(1790007783.885:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.851293][   T31] audit: type=1326 audit(1790007783.885:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.851332][   T31] audit: type=1326 audit(1790007783.885:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.851367][   T31] audit: type=1326 audit(1790007783.885:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.851401][   T31] audit: type=1326 audit(1790007783.885:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.401" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[  174.897461][ T3105] usb 5-1: device descriptor read/64, error -71
[  174.990345][   T10] usb 4-1: Using ep0 maxpacket: 32
[  174.992301][   T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  174.999872][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  174.999905][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  174.999929][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  174.999950][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  175.007629][ T3105] usb usb5-port1: attempt power cycle
[  175.008699][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.008722][   T10] usb 4-1: Product: syz
[  175.008735][   T10] usb 4-1: Manufacturer: syz
[  175.008747][   T10] usb 4-1: SerialNumber: syz
[  175.024684][   T10] usb 4-1: config 0 descriptor??
[  175.347478][ T3105] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  175.368632][ T3105] usb 5-1: device descriptor read/8, error -71
[  175.607432][ T3105] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  175.632213][ T3105] usb 5-1: device descriptor read/8, error -71
[  175.741196][ T3105] usb usb5-port1: unable to enumerate USB device
[  175.821741][ T5704] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  175.864867][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'.
[  175.976950][ T5704] usb 3-1: Using ep0 maxpacket: 32
[  175.977647][ T5704] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  175.986194][ T5704] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  175.986222][ T5704] usb 3-1: config 0 has no interface number 0
[  176.018469][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.018497][ T5704] usb 3-1: Product: syz
[  176.018511][ T5704] usb 3-1: Manufacturer: syz
[  176.018524][ T5704] usb 3-1: SerialNumber: syz
[  176.026526][ T5704] usb 3-1: config 0 descriptor??
[  176.432484][ T5704] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  176.432516][ T5704] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  176.457728][ T5704] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  176.457983][ T5704] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[  176.956941][ T5704] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  177.127657][ T5704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.128515][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.128532][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.128543][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  177.128593][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.130339][ T5704] usb 1-1: config 0 descriptor??
[  177.534342][ T5729] usb 4-1: USB disconnect, device number 34
[  177.570168][ T5704] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  177.612618][ T7523] input: syz0 as /devices/virtual/input/input26
[  177.644626][ T7523] netlink: 'syz.3.410': attribute type 1 has an invalid length.
[  177.688420][   T10] usb 5-1: new low-speed USB device number 37 using dummy_hcd
[  177.690865][ T7523] 8021q: adding VLAN 0 to HW filter on device bond1
[  177.724537][ T7523] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  177.744361][ T7523] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  177.746073][ T7523] bond1 (unregistering): Released all slaves
[  177.845932][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  177.969359][   T10] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  178.117381][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  178.117682][   T10] usb usb5-port1: attempt power cycle
[  178.327354][ T3105] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  178.457486][   T10] usb 5-1: new low-speed USB device number 39 using dummy_hcd
[  178.477434][ T3105] usb 4-1: Using ep0 maxpacket: 8
[  178.478522][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  178.478749][ T3105] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  178.480944][ T3105] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  178.480967][ T3105] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  178.481080][ T3105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.581505][ T5729] usb 3-1: USB disconnect, device number 36
[  178.609878][   T10] usb 5-1: new low-speed USB device number 40 using dummy_hcd
[  178.628475][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  178.628726][   T10] usb usb5-port1: unable to enumerate USB device
[  179.065710][ T7551] netlink: 'syz.1.418': attribute type 10 has an invalid length.
[  179.065735][ T7551] ipvlan0: entered allmulticast mode
[  179.065745][ T7551] veth0_vlan: entered allmulticast mode
[  179.072097][ T7551] team0: Device ipvlan0 failed to register rx_handler
[  179.126056][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'.
[  179.141932][ T7551] bond1: (slave bond_slave_1): Device is not our slave
[  179.141948][ T7551] bond1: option active_slave: invalid value (bond_slave_1)
[  179.145611][ T7551] bond1 (unregistering): Released all slaves
[  179.888670][ T5701] usb 1-1: reset high-speed USB device number 35 using dummy_hcd
[  179.909656][ T5701] usb 1-1: device reset changed ep0 maxpacket size!
[  179.918987][   T10] usb 1-1: USB disconnect, device number 35
[  180.077328][   T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  180.125629][ T7574] openvswitch: netlink: Actions may not be safe on all matching packets
[  180.227387][   T10] usb 1-1: Using ep0 maxpacket: 32
[  180.228523][   T10] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40
[  180.229969][   T10] usb 1-1: config 1 has an invalid descriptor of length 69, skipping remainder of the config
[  180.229994][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  180.230071][   T10] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  180.230097][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  180.233086][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.233110][   T10] usb 1-1: Product: syz
[  180.233124][   T10] usb 1-1: Manufacturer: syz
[  180.233150][   T10] usb 1-1: SerialNumber: syz
[  180.499192][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'.
[  180.582271][   T52] Bluetooth: hci1: unexpected event 0x09 length: 19 > 3
[  180.622248][   T10] usb 1-1: unknown interface protocol 0x7, assuming v1
[  180.622666][   T10] usb 1-1: 0:2 : does not exist
[  180.769127][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  180.801206][   T10] usb 1-1: USB disconnect, device number 36
[  180.874380][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.078865][ T3105] usb 4-1: USB disconnect, device number 35
[  181.343339][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'.
[  181.387131][ T5701] usb 3-1: new low-speed USB device number 37 using dummy_hcd
[  181.570082][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short
[  181.570124][ T5701] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  181.607178][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.607259][ T5701] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  181.607287][ T5701] usb 3-1: config 1 interface 0 has no altsetting 1
[  181.658913][ T5701] usb 3-1: string descriptor 0 read error: -22
[  181.659005][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.786760][ T7611] bridge1: port 1(veth3) entered blocking state
[  181.798557][ T7611] bridge1: port 1(veth3) entered disabled state
[  181.802358][ T7611] veth3: entered allmulticast mode
[  181.825054][ T7611] veth3: entered promiscuous mode
[  182.042786][ T7617] bridge1: port 2(veth5) entered blocking state
[  182.052140][ T7617] bridge1: port 2(veth5) entered disabled state
[  182.052343][ T7617] veth5: entered allmulticast mode
[  182.054272][ T7617] veth5: entered promiscuous mode
[  182.501863][ T7598] syz.1.429 (7598): drop_caches: 2
[  182.948421][ T7647] loop9: detected capacity change from 0 to 8
[  182.965140][ T7647]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  182.965163][ T7647] loop9: partition table partially beyond EOD, truncated
[  182.982661][ T7647] loop9: p1 size 81768186 extends beyond EOD, truncated
[  183.047201][   T30] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  183.051214][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  183.172100][ T7651] usb usb7: usbfs: process 7651 (syz.1.442) did not claim interface 36 before use
[  183.196871][   T30] usb 1-1: Using ep0 maxpacket: 16
[  183.199355][   T30] usb 1-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  183.203809][   T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  183.206139][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.206164][   T30] usb 1-1: Product: syz
[  183.206179][   T30] usb 1-1: Manufacturer: syz
[  183.206193][   T30] usb 1-1: SerialNumber: syz
[  183.398611][ T5701] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  183.496046][   T30] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  183.496099][   T30] usb 1-1: MIDIStreaming interface descriptor not found
[  183.524970][ T3105] usb 3-1: USB disconnect, device number 37
[  183.565125][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'.
[  183.567359][ T5701] usb 4-1: Using ep0 maxpacket: 8
[  183.567531][ T5704] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  183.568572][ T5701] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  183.604940][ T5701] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  183.604967][ T5701] usb 4-1: config 0 has no interface number 0
[  183.605003][ T5701] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  183.605025][ T5701] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  183.605047][ T5701] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  183.605071][ T5701] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  183.605111][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.682003][ T5701] usb 4-1: config 0 descriptor??
[  183.698924][ T5701] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  183.759363][ T5704] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  183.763901][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.763940][ T5704] usb 2-1: Product: syz
[  183.763954][ T5704] usb 2-1: Manufacturer: syz
[  183.763967][ T5704] usb 2-1: SerialNumber: syz
[  183.802953][ T5704] usb 2-1: config 0 descriptor??
[  183.818981][   T30] usb 1-1: USB disconnect, device number 37
[  183.957393][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.041526][ T3105] usb 4-1: USB disconnect, device number 36
[  184.061481][ T3105] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  184.285235][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.285976][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.304199][ T5704] usb 2-1: Firmware: major: 0, minor: 65, hardware type: UNKNOWN (112)
[  184.473608][ T7678] pimreg: entered allmulticast mode
[  184.474918][ T7678] pimreg: left allmulticast mode
[  184.510014][ T5704] usb 2-1: failed to fetch extended address, random address set
[  184.510052][ T5704] usb 2-1: atusb_probe: initialization failed, error = -524
[  184.510510][ T5704] atusb 2-1:0.0: probe with driver atusb failed with error -524
[  184.544958][ T5704] usb 2-1: USB disconnect, device number 25
[  184.988201][ T5704] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  185.157751][ T5704] usb 3-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=75.d0
[  185.158615][ T5704] usb 3-1: config index 0 descriptor too short (expected 7972, got 36)
[  185.158632][ T5704] usb 3-1: config 10 has an invalid interface number: 62 but max is 0
[  185.158642][ T5704] usb 3-1: config 10 has 2 interfaces, different from the descriptor's value: 1
[  185.158653][ T5704] usb 3-1: config 10 has no interface number 1
[  185.158680][ T5704] usb 3-1: too many endpoints for config 10 interface 0 altsetting 163: 251, using maximum allowed: 30
[  185.158698][ T5704] usb 3-1: config 10 interface 0 altsetting 163 has 0 endpoint descriptors, different from the interface descriptor's value: 251
[  185.158711][ T5704] usb 3-1: config 10 interface 62 has no altsetting 0
[  185.158720][ T5704] usb 3-1: config 10 interface 0 has no altsetting 0
[  185.164117][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.164132][ T5704] usb 3-1: Product: syz
[  185.164139][ T5704] usb 3-1: Manufacturer: syz
[  185.164146][ T5704] usb 3-1: SerialNumber: syz
[  185.395037][ T7678] syz.0.452 (7678): drop_caches: 2
[  185.503575][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.503894][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.552234][ T5704] pwc: Samsung SNC-35E (v3.0) USB webcam detected.
[  185.568992][ T5704] pwc: Failed to set LED on/off time (-71)
[  185.569335][ T5704] pwc: send_video_command error -71
[  185.569344][ T5704] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  185.569403][ T5704] Philips webcam 3-1:10.0: probe with driver Philips webcam failed with error -71
[  185.576159][ T5704] usb 3-1: USB disconnect, device number 38
[  185.676284][ T7697] openvswitch: netlink: Tunnel attr 16360 out of range max 16
[  186.059942][   T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  186.165726][ T5701] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  186.208087][   T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  186.209332][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.209386][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.212916][   T10] usb 1-1: config 0 descriptor??
[  186.316905][ T5701] usb 2-1: Using ep0 maxpacket: 16
[  186.317699][ T5701] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  186.319504][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.319532][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.319554][ T5701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  186.319589][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.322458][ T5701] usb 2-1: config 0 descriptor??
[  186.429927][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.430465][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.460067][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  186.460148][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  186.465691][   T10] usb 1-1: USB disconnect, device number 38
[  186.795965][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x2
[  186.796123][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796152][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796179][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796207][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796234][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796261][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796287][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796313][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.796339][ T5701] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0
[  186.886295][ T5701] hid-multitouch 0003:045E:9994.000B: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.1-1/input0
[  186.957507][   T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  187.036926][ T5681] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  187.108747][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  187.110116][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.110161][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.120234][   T10] usb 1-1: config 0 descriptor??
[  187.193123][ T5681] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  187.208518][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  187.208535][ T5681] usb 4-1: Product: syz
[  187.208543][ T5681] usb 4-1: SerialNumber: syz
[  187.216579][ T5681] usb 4-1: config 0 descriptor??
[  187.306246][   T31] kauditd_printk_skb: 288 callbacks suppressed
[  187.306263][   T31] audit: type=1400 audit(1790007796.335:561): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=7728 comm="syz.4.466"
[  187.435586][ T5681] usb 4-1: USB disconnect, device number 37
[  187.499285][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'.
[  187.962819][   T10] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[  187.975277][   T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27
[  187.994521][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.994952][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.028831][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.031624][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.257672][ T1464] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.257702][ T1464] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.257726][ T1464] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.257755][ T1464] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.306953][ T5701] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  188.372758][   T10] usb 1-1: USB disconnect, device number 39
[  188.372835][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  188.477954][ T5701] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  188.479666][ T5701] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.479685][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0
[  188.479704][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.485705][ T5701] usb 3-1: config 0 descriptor??
[  188.788816][ T3105] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  188.895231][ T5701] usb 3-1: string descriptor 0 read error: -71
[  188.895921][ T5701] uclogic 0003:256C:006E.000C: failed retrieving string descriptor #200: -71
[  188.895980][ T5701] uclogic 0003:256C:006E.000C: failed retrieving pen parameters: -71
[  188.895997][ T5701] uclogic 0003:256C:006E.000C: failed probing pen v2 parameters: -71
[  188.896043][ T5701] uclogic 0003:256C:006E.000C: failed probing parameters: -71
[  188.896146][ T5701] uclogic 0003:256C:006E.000C: probe with driver uclogic failed with error -71
[  188.939391][ T3105] usb 5-1: Using ep0 maxpacket: 16
[  188.942427][ T3105] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  188.962735][ T5701] usb 3-1: USB disconnect, device number 39
[  188.963115][ T3105] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.963143][ T3105] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.963168][ T3105] usb 5-1: config 0 interface 0 has no altsetting 0
[  188.986017][ T3105] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.986099][ T3105] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.986124][ T3105] usb 5-1: config 0 interface 0 has no altsetting 0
[  188.996526][ T3105] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.996559][ T3105] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.996584][ T3105] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.000708][ T3105] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.000740][ T3105] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.000764][ T3105] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.013045][ T3105] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.013078][ T3105] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.013102][ T3105] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.030353][ T3105] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.030386][ T3105] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.030411][ T3105] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.036300][ T3105] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.036334][ T3105] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.036359][ T3105] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.045819][ T3105] usb 5-1: New USB device strings: Mfr=3, Product=172, SerialNumber=168
[  189.045846][ T3105] usb 5-1: Product: syz
[  189.045859][ T3105] usb 5-1: Manufacturer: syz
[  189.045873][ T3105] usb 5-1: SerialNumber: syz
[  189.062755][   T10] usb 2-1: USB disconnect, device number 26
[  189.081493][ T3105] usb 5-1: config 0 descriptor??
[  189.302715][ T3105] usbhid 5-1:0.0: can't add hid device: -71
[  189.302820][ T3105] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  189.309994][ T3105] usb 5-1: USB disconnect, device number 41
[  189.578043][ T7786] fuse: Unknown parameter ''
[  189.580962][ T7785] fuse: Unknown parameter ''
[  189.814912][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'.
[  189.814937][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'.
[  190.015592][ T7805] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  190.254503][ T7819] netlink: 'syz.1.487': attribute type 4 has an invalid length.
[  190.347221][ T5737] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  190.508457][ T5737] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  190.512350][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.693083][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'.
[  190.750406][ T7832] input: syz0 as /devices/virtual/input/input28
[  190.912905][ T7834] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  190.959679][ T7841] syzkaller0: entered promiscuous mode
[  190.959702][ T7841] syzkaller0: entered allmulticast mode
[  191.179759][ T5737] usb 3-1: NFC: NXP PN500 firmware ver 0.0 now attached
[  191.297802][ T5701] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  191.369085][    C1] usb 3-1: NFC: Urb failure (status -71)
[  191.369456][ T5737] usb 3-1: NFC: Error on setting MAX_RETRIES config
[  191.370165][ T5737] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -71
[  191.375465][ T5737] usb 3-1: USB disconnect, device number 40
[  191.479081][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short
[  191.479113][ T5701] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  191.480075][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.480093][ T5701] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  191.480123][ T5701] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  191.482198][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.482223][ T5701] usb 5-1: Product: syz
[  191.482237][ T5701] usb 5-1: Manufacturer: syz
[  191.482251][ T5701] usb 5-1: SerialNumber: syz
[  191.589240][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  191.701078][ T5701] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  191.718577][   T10] usb 2-1: device descriptor read/64, error -71
[  191.755675][ T5701] usb 5-1: USB disconnect, device number 42
[  191.811607][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.842831][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'.
[  191.867292][ T7859] netlink: 104 bytes leftover after parsing attributes in process `syz.3.500'.
[  191.867319][ T7859] netlink: 104 bytes leftover after parsing attributes in process `syz.3.500'.
[  191.957394][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  192.088537][   T10] usb 2-1: device descriptor read/64, error -71
[  192.121229][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'.
[  192.121789][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'.
[  192.197936][   T10] usb usb2-port1: attempt power cycle
[  192.399121][ T7878] netlink: 'syz.4.505': attribute type 1 has an invalid length.
[  192.407373][ T3105] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  192.460130][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'.
[  192.480023][ T7878] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.538763][   T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  192.538941][ T3105] usb 1-1: device descriptor read/64, error -71
[  192.547135][ T5701] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  192.558003][   T10] usb 2-1: device descriptor read/8, error -71
[  192.732678][ T5701] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  192.733941][ T5701] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  192.733960][ T5701] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  192.733975][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0
[  192.736110][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  192.736125][ T5701] usb 3-1: Product: syz
[  192.736133][ T5701] usb 3-1: Manufacturer: syz
[  192.736140][ T5701] usb 3-1: SerialNumber: syz
[  192.777538][ T3105] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  192.789136][ T5701] usb 3-1: config 0 descriptor??
[  192.797084][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  192.829944][ T5701] usb 3-1: selecting invalid altsetting 0
[  192.834598][   T10] usb 2-1: device descriptor read/8, error -71
[  192.898885][ T7887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.507'.
[  192.899110][ T7887] netlink: 216 bytes leftover after parsing attributes in process `syz.4.507'.
[  192.899120][ T7887] netlink: 216 bytes leftover after parsing attributes in process `syz.4.507'.
[  192.907704][ T3105] usb 1-1: device descriptor read/64, error -71
[  192.938107][   T10] usb usb2-port1: unable to enumerate USB device
[  193.018798][ T3105] usb usb1-port1: attempt power cycle
[  193.029254][ T7889] syzkaller0: entered promiscuous mode
[  193.029276][ T7889] syzkaller0: entered allmulticast mode
[  193.357637][ T3105] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  193.378272][ T3105] usb 1-1: device descriptor read/8, error -71
[  193.617172][ T3105] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  193.617302][   T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  193.638089][ T3105] usb 1-1: device descriptor read/8, error -71
[  193.717044][ T5701] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  193.747225][ T3105] usb usb1-port1: unable to enumerate USB device
[  193.767097][   T10] usb 4-1: Using ep0 maxpacket: 16
[  193.767754][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3
[  193.768907][   T10] usb 4-1: config 2 has an invalid interface number: 12 but max is 0
[  193.768922][   T10] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  193.768931][   T10] usb 4-1: config 2 has an invalid descriptor of length 128, skipping remainder of the config
[  193.768941][   T10] usb 4-1: config 2 has no interface number 0
[  193.768961][   T10] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.768974][   T10] usb 4-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  193.768987][   T10] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0
[  193.768998][   T10] usb 4-1: config 2 interface 12 altsetting 7 bulk endpoint 0x8A has invalid maxpacket 0
[  193.769010][   T10] usb 4-1: config 2 interface 12 has no altsetting 0
[  193.770692][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.770706][   T10] usb 4-1: Product: syz
[  193.770713][   T10] usb 4-1: Manufacturer: syz
[  193.770720][   T10] usb 4-1: SerialNumber: syz
[  193.926895][ T5701] usb 5-1: Using ep0 maxpacket: 8
[  193.928314][ T5701] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  193.930590][ T5701] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  193.930617][ T5701] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  193.930662][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.009668][   T10] em28xx 4-1:2.12: New device syz syz @ 480 Mbps (2040:8265, interface 12, class 12)
[  194.009712][   T10] em28xx 4-1:2.12: Video interface 12 found: bulk
[  194.009729][   T10] em28xx 4-1:2.12: DVB interface 12 found:
[  194.067782][   T10] em28xx 4-1:2.12: unknown em28xx chip ID (0)
[  194.134944][   T10] em28xx 4-1:2.12: reading from i2c device at 0xa0 failed (error=-5)
[  194.134966][   T10] em28xx 4-1:2.12: board has no eeprom
[  194.197538][   T10] em28xx 4-1:2.12: Identified as Hauppauge WinTV-dualHD DVB (card=99)
[  194.197558][   T10] em28xx 4-1:2.12: Currently, V4L2 is not supported on this model
[  194.197566][   T10] em28xx 4-1:2.12: dvb set to bulk mode.
[  194.225718][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  194.228699][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  194.257544][   T10] em28xx 4-1:2.12: unknown em28xx chip ID (0)
[  194.323800][   T10] em28xx 4-1:2.12: reading from i2c device at 0xa0 failed (error=-5)
[  194.323821][   T10] em28xx 4-1:2.12: board has no eeprom
[  194.386940][   T10] em28xx 4-1:2.12: Identified as Hauppauge WinTV-dualHD DVB (card=99)
[  194.386961][   T10] em28xx 4-1:2.12: dvb ts2 set to bulk mode.
[  194.612839][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'.
[  194.737723][   T31] audit: type=1326 audit(1790007803.775:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741398][   T31] audit: type=1326 audit(1790007803.775:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741446][   T31] audit: type=1326 audit(1790007803.775:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741482][   T31] audit: type=1326 audit(1790007803.775:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741522][   T31] audit: type=1326 audit(1790007803.775:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=250 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741559][   T31] audit: type=1326 audit(1790007803.775:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0
** replaying previous printk message **
[  194.741559][   T31] audit: type=1326 audit(1790007803.775:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741596][   T31] audit: type=1326 audit(1790007803.775:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741632][   T31] audit: type=1326 audit(1790007803.775:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741669][   T31] audit: type=1326 audit(1790007803.775:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.741704][   T31] audit: type=1326 audit(1790007803.775:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701f0ec code=0x7ffc0000
[  194.814562][ T5673] em28xx 4-1:2.12: Binding DVB extension
[  194.814596][ T5673] em28xx 4-1:2.12: no endpoint for DVB mode and transfer type 1
[  194.814611][ T5673] em28xx 4-1:2.12: failed to pre-allocate USB transfer buffers for DVB.
[  194.814636][ T5673] em28xx 4-1:2.12: Binding DVB extension
[  194.814657][ T5673] em28xx 4-1:2.12: no endpoint for DVB mode and transfer type 1
[  194.814671][ T5673] em28xx 4-1:2.12: failed to pre-allocate USB transfer buffers for DVB.
[  194.814728][ T5673] em28xx 4-1:2.12: Registering input extension
[  194.814888][ T5673] em28xx 4-1:2.12: Remote control support is not available for this card.
[  194.852843][   T10] usb 4-1: USB disconnect, device number 38
[  194.878899][   T10] em28xx 4-1:2.12: Disconnecting em28xx #1
[  194.878922][   T10] em28xx 4-1:2.12: Disconnecting em28xx
[  194.878941][   T10] em28xx 4-1:2.12: Closing input extension
[  194.878960][   T10] em28xx 4-1:2.12: Closing input extension
[  194.889753][   T10] list_del corruption, ffff88807b8b4250->next is NULL
[  194.890421][   T10] ------------[ cut here ]------------
[  194.890432][   T10] kernel BUG at lib/list_debug.c:53!
[  194.890526][   T10] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  195.125332][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  195.136077][   T10] Tainted: [L]=SOFTLOCKUP
[  195.140392][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  195.150459][   T10] Workqueue: usb_hub_wq hub_event
[  195.155508][   T10] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190
[  195.162462][   T10] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 c0 9d 6d 8c 48 89 de e8 62 75 3d fc 90 <0f> 0b 48 c7 c7 20 9e 6d 8c 48 89 de e8 50 75 3d fc 90 0f 0b 4c 89
[  195.182074][   T10] RSP: 0000:ffffc900000f7380 EFLAGS: 00010246
[  195.188146][   T10] RAX: 0000000000000033 RBX: ffff88807b8b4250 RCX: 760aa2d6a9a03a00
[  195.196115][   T10] RDX: ffffc9001a47f000 RSI: 000000000000448b RDI: 000000000000448c
[  195.204074][   T10] RBP: dead000000000100 R08: ffff8880b8624713 R09: 1ffff110170c48e2
[  195.212041][   T10] R10: dffffc0000000000 R11: ffffed10170c48e3 R12: 1ffffffff1fd0e39
[  195.220003][   T10] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  195.227966][   T10] FS:  0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000
[  195.236890][   T10] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  195.243464][   T10] CR2: 00007f89ee97b000 CR3: 0000000028b32000 CR4: 00000000003526f0
[  195.251431][   T10] Call Trace:
[  195.254705][   T10]  <TASK>
[  195.257628][   T10]  ? __pfx_em28xx_ir_fini+0x10/0x10
[  195.262835][   T10]  em28xx_close_extension+0x15a/0x390
[  195.268212][   T10]  em28xx_usb_disconnect+0x16b/0x2f0
[  195.273498][   T10]  usb_unbind_interface+0x295/0x9f0
[  195.278699][   T10]  ? kernfs_remove_by_name_ns+0x101/0x140
[  195.284437][   T10]  ? kernfs_remove_by_name_ns+0x101/0x140
[  195.290175][   T10]  ? __pfx_usb_unbind_interface+0x10/0x10
[  195.296000][   T10]  device_release_driver_internal+0x4f5/0x880
[  195.302081][   T10]  bus_remove_device+0x444/0x560
[  195.307031][   T10]  ? __pfx_bus_remove_device+0x10/0x10
[  195.312519][   T10]  ? kernfs_remove_by_name_ns+0x101/0x140
[  195.318324][   T10]  device_del+0x524/0x8f0
[  195.322652][   T10]  ? __pfx_device_del+0x10/0x10
[  195.327493][   T10]  ? kobject_put+0x516/0x550
[  195.332083][   T10]  usb_disable_device+0x3d4/0x8d0
[  195.337114][   T10]  usb_disconnect+0x346/0x9a0
[  195.341798][   T10]  hub_event+0x1bbb/0x4d30
[  195.346241][   T10]  ? register_lock_class+0x31/0x2e0
[  195.351462][   T10]  ? __pfx_hub_event+0x10/0x10
[  195.356311][   T10]  ? rcu_is_watching+0x16/0xb0
[  195.361086][   T10]  ? process_scheduled_works+0x97a/0x1630
[  195.366815][   T10]  process_scheduled_works+0xc3d/0x1630
[  195.372417][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  195.378402][   T10]  ? assign_work+0x3cf/0x5d0
[  195.382993][   T10]  worker_thread+0xa47/0xfb0
[  195.387585][   T10]  ? __kthread_parkme+0x71/0x1f0
[  195.392625][   T10]  kthread+0x38b/0x480
[  195.396710][   T10]  ? __pfx_worker_thread+0x10/0x10
[  195.401824][   T10]  ? __pfx_kthread+0x10/0x10
[  195.406410][   T10]  ret_from_fork+0x514/0xb70
[  195.410992][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  195.416105][   T10]  ? __switch_to+0xc89/0x1420
[  195.420776][   T10]  ? __pfx_kthread+0x10/0x10
[  195.425362][   T10]  ret_from_fork_asm+0x1a/0x30
[  195.430127][   T10]  </TASK>
[  195.433130][   T10] Modules linked in:
[  195.438658][   T10] ---[ end trace 0000000000000000 ]---
[  195.485574][ T5701] usb 3-1: USB disconnect, device number 41
[  195.512550][   T10] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190
[  195.512680][   T10] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 c0 9d 6d 8c 48 89 de e8 62 75 3d fc 90 <0f> 0b 48 c7 c7 20 9e 6d 8c 48 89 de e8 50 75 3d fc 90 0f 0b 4c 89
[  195.512700][   T10] RSP: 0000:ffffc900000f7380 EFLAGS: 00010246
[  195.512718][   T10] RAX: 0000000000000033 RBX: ffff88807b8b4250 RCX: 760aa2d6a9a03a00
[  195.512732][   T10] RDX: ffffc9001a47f000 RSI: 000000000000448b RDI: 000000000000448c
[  195.512745][   T10] RBP: dead000000000100 R08: ffff8880b8624713 R09: 1ffff110170c48e2
[  195.512759][   T10] R10: dffffc0000000000 R11: ffffed10170c48e3 R12: 1ffffffff1fd0e39
[  195.512774][   T10] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  195.512787][   T10] FS:  0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000
[  195.512804][   T10] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  195.512817][   T10] CR2: 000000005667820c CR3: 0000000078980000 CR4: 00000000003526f0
[  195.512837][   T10] Kernel panic - not syncing: Fatal exception
[  195.614961][   T10] Kernel Offset: disabled
[  195.619277][   T10] Rebooting in 86400 seconds..