last executing test programs:

7.549623861s ago: executing program 4 (id=312):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x5)
landlock_restrict_self(r0, 0x4)
landlock_restrict_self(r0, 0x5)
landlock_restrict_self(r0, 0x1)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

7.397628622s ago: executing program 4 (id=314):
fsopen(0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x0, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff0000ff, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x6e20], [0x4e21, 0x4e24], [0x4, 0x5, 0x7f, 0x7, 0x1, 0xb, 0x1ff, 0x9, 0x2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb97d, 0x5b000000, 0x6, 0x1, 0x6c7c, 0x9, 0x0, 0xb, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e786, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf6, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x4000007, 0x7, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x9, 0x1}, {0x2, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x2, 0x0, 0x7f8cd23aef24d0c6}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@socket0={{0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xff, 0xe, 0x1, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)
syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x1a75, 0x100, 0x0, 0x25c}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

6.426138816s ago: executing program 4 (id=318):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="20010d"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0)

6.057035623s ago: executing program 2 (id=320):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)

5.686533558s ago: executing program 3 (id=323):
r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904"], 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
r4 = dup(r2)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x4000)
splice(r5, 0x0, r2, 0x0, 0x100000000, 0x1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000080)={0x4, [0x0, 0x1000, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x380, 0x0, 0x0, 0xfffc, 0x0, 0x800, 0x0, 0x0, 0x8, 0x80, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x638, 0x8, 0x0, 0x3, 0x0, 0xfff9, 0x2, 0x5, 0x0, 0x222, 0x4, 0x0, 0x0, 0x2, 0x445b, 0x1, 0x7f, 0x0, 0x0, 0x6, 0x0, 0xffff], 0x5})
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x1000, 0xfffffff7, 0x3}, 0x20)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

5.043168116s ago: executing program 2 (id=329):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

4.86566001s ago: executing program 0 (id=331):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0x30ee, 0xc000, 0x7fff, 0x65})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.799887389s ago: executing program 2 (id=332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x2, 0x5, 0x7fffffff, 0xc01}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x1fc9, 0x8, 0x3, 0x1, 0x9, 0xfffffc00, 0x6, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040a1}, 0x44890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @broadcast}, 0x14)

4.797494899s ago: executing program 1 (id=333):
socket(0x10, 0x3, 0x0)
r0 = epoll_create1(0x80000)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
r1 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000580))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000340)={0x30000015})
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESOCT], 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x40, 0x1, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"})

4.682341013s ago: executing program 2 (id=334):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001380)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x2, 0x5e2, 0x0, &(0x7f0000000380)=@buf_max_buf="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"}}, 0x0)

4.493931071s ago: executing program 3 (id=335):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240))
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4000845)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
r1 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
capset(0x0, &(0x7f0000000100)={0x0, 0x2eec, 0x0, 0x0, 0x4, 0x36})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)

4.364959077s ago: executing program 2 (id=336):
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)

3.613249259s ago: executing program 3 (id=337):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.50639058s ago: executing program 1 (id=338):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.492446478s ago: executing program 3 (id=339):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000ffffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r0, &(0x7f0000008340)={0x2020}, 0x2020)
fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
close(0xffffffffffffffff)
open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000480)=""/74, 0x4a)
write$char_usb(r2, &(0x7f00000003c0), 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)

3.36740356s ago: executing program 4 (id=340):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5)
r1 = syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0)
close(0x3)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000002020101667c000000000000000000082c00038006000340000100000c00028005000100880000001400018008000100ac14143708000200ac1414aa96d6b37754b8f4d0cd9e14d165c75c60dbbd200bb68cfcab179a822c9734b874ad357182e0429bc6c3784f064f231e0e588616fd1c64c951ec32097ab91e5148177a8f722022f9b90af4752a7385e40b229a9189dc4a429b390ac698a2719585d90ec52c07"], 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000d"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)

3.304281335s ago: executing program 1 (id=341):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_emit_ethernet(0x22d, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1f7, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x55, 0x2, 0x0, 0x0, [{0x4, 0x5, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {0x0, 0x1, "000000001c00000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}]}}}}}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047)
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, 0x40055, 0x0, r1}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000180)=0xe)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r7 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0)
fcntl$lock(r7, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
futimesat(r6, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
lseek(r8, 0x8, 0x0)
clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0xa, 0x0, 0x200000000002000, 0x0, 0x4100000000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x920, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff})
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000004c0)=0x79, 0x4)

2.354255804s ago: executing program 1 (id=342):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e41000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000e54000/0x2000)=nil, 0x0, 0xfffffffffffffeea}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
close(r1)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)

1.858020339s ago: executing program 4 (id=343):
syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)
io_setup(0x9, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x45, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe)
getxattr(0x0, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0xd13e, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7b, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x7, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x100, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x80000000, 0x4f8f1192, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x5, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000007, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffd, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfb2, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x1, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0xfffffffe, 0x57, 0x4, 0x8000003, 0x101, 0x40010000, 0x4, 0x7fff, 0xfffc, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.635407312s ago: executing program 0 (id=344):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x8, 0xa3, 0x1, @vifc_lcl_ifindex, @loopback}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b9700"], 0x0)

1.594274607s ago: executing program 0 (id=345):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r2)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

1.450037044s ago: executing program 1 (id=346):
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000027c0), 0x0, 0x10021, &(0x7f0000002900)={0x77359400})
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0)
r0 = memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4)
fcntl$getownex(r0, 0x5, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x32, 0x75, 0x2, 0x20, 0x4da, 0x250d, 0x1d43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0x9, 0x40, 0x9, "", [{{0x9, 0x4, 0x3, 0x8, 0x0, 0xda, 0x6e, 0x3a}}, {{0x9, 0x4, 0x32, 0x6, 0x0, 0xff, 0x2, 0xa9}}]}}]}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)="1800000016005f021dffff", 0xb)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

1.31002964s ago: executing program 4 (id=347):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x5}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
bind$tipc(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x20, 0xf, 0x37, {0x37, 0x4, "2f65e8e051e4a35f5325534d34b38137b79a937ce252c90504815b205c01dffb00b0c3767754c24ddedc62a1f56c55effc24e547a6"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0x1, 0x407}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d437ae54198389aa70c7ab10a95049b9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6c, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0x3, 0x8, 0x160, 0x9}, @ptm_cap={0x3}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf5, 0xb, 0x6, 0x1, "ab03451d", "6ba21ef8"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x8, 0x6, 0x4, 0x6, 0x2, 0x9}}}, &(0x7f0000000900)={0x84, 0x0, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1260, 0x4}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xd}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "1b81"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "85f4"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x41}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xa}})
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086603, &(0x7f0000000040))

1.307820096s ago: executing program 0 (id=348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1.106113395s ago: executing program 3 (id=349):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4)

1.002574552s ago: executing program 0 (id=350):
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)

826.567381ms ago: executing program 2 (id=351):
set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x10480, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
eventfd2(0xe5c, 0x80000)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xa8902, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
syz_open_dev$tty1(0xc, 0x4, 0x4)

789.091023ms ago: executing program 3 (id=352):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba)
write$char_usb(r1, &(0x7f0000000080)='B', 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
syz_usb_disconnect(r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
close(0xffffffffffffffff)

593.736918ms ago: executing program 0 (id=353):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
write$tun(r0, &(0x7f0000003680)={@val={0x0, 0x88e7}, @void, @ipv6=@icmpv6={0xc, 0x6, "417583", 0x88, 0x3a, 0xff, @private1, @loopback, {[@hopopts={0x1f2}, @fragment={0x1d, 0x0, 0x5, 0x0, 0x0, 0x1, 0x66}, @routing={0x8, 0xc, 0x3, 0x2, 0x0, [@private1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @local]}, @fragment={0x8, 0x0, 0xf7, 0x1, 0x0, 0x11, 0x64}], @mlv2_report={0x8f, 0x0, 0x0, 0xd}}}}, 0xb4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)

0s ago: executing program 1 (id=354):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0x850d, 0x80, 0x5, 0x2e5, 0x0, r0})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000003700)={@multicast2, @multicast2, <r2=>0x0}, &(0x7f0000003740)=0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003800)={0x0, 0x10000000, 0x18}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003880)={0x11, 0x0, &(0x7f0000000200), 0x0, 0x5, 0x0, 0x0, 0x41100, 0x11, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000003780)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x70}, 0x94)
r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="03010000ac0fce405d0501904431000000010902120009000080040904"], 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x1, 0x8080000, 0x2000, &(0x7f00000e6000/0x2000)=nil})
socket$inet6_tcp(0xa, 0x1, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'user.', '\x00'}, &(0x7f0000000140)=""/158, 0x9e)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)

kernel console output (not intermixed with test programs):

ltsetting 0
[   75.478639][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   75.478664][   T10] usb 4-1: Product: syz
[   75.478697][   T10] usb 4-1: Manufacturer: syz
[   75.478733][   T10] usb 4-1: SerialNumber: syz
[   75.524221][  T190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.524284][  T190] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.524312][  T190] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.585944][  T190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.586009][  T190] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.586047][  T190] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.632859][  T190] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   75.632886][  T190] usb 5-1: Product: syz
[   75.632908][  T190] usb 5-1: Manufacturer: syz
[   75.632948][  T190] usb 5-1: SerialNumber: syz
[   75.677224][  T190] usb 5-1: config 0 descriptor??
[   75.705183][  T190] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[   75.896681][   T10] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   75.960269][ T5754] netlink: 'syz.0.15': attribute type 13 has an invalid length.
[   76.152920][  T190] usb 4-1: USB disconnect, device number 2
[   76.226977][ T5692] usb 5-1: USB disconnect, device number 2
[   76.279598][  T190] usblp1: removed
[   76.309979][ T5692] yurex 5-1:0.0: USB YUREX #0 now disconnected
[   77.165132][ T5628] Bluetooth: hci4: command tx timeout
[   77.166467][ T5628] Bluetooth: hci3: command tx timeout
[   77.166491][ T5628] Bluetooth: hci0: command tx timeout
[   77.166511][ T5628] Bluetooth: hci2: command tx timeout
[   77.245978][ T5627] Bluetooth: hci1: command tx timeout
[   77.614648][ T5692] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.805173][ T5692] usb 2-1: Using ep0 maxpacket: 32
[   77.811137][ T5692] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   77.823061][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   77.835868][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   77.851768][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   77.862513][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[   77.862540][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[   77.888946][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.897071][ T5692] usb 2-1: Product: syz
[   77.897081][ T5692] usb 2-1: Manufacturer: syz
[   77.897089][ T5692] usb 2-1: SerialNumber: syz
[   77.914826][ T5692] usb 2-1: config 0 descriptor??
[   78.131687][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -32
[   78.593562][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   78.710001][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.718809][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.725345][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.733394][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.740795][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.747255][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.753554][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.765704][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.772278][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.772752][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.785780][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.792187][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.799763][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.806106][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.812399][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.818883][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.827385][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.835391][ T5692] iforce 2-1:0.0: usb_submit_urb failed: -71
[   78.835465][ T5692] input input5: Timeout waiting for response from device.
[   78.885503][ T5692] usb 2-1: USB disconnect, device number 2
[   79.185293][ T1220] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   79.335735][ T1220] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   79.344154][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.344175][ T1220] usb 1-1: Product: syz
[   79.344187][ T1220] usb 1-1: Manufacturer: syz
[   79.344200][ T1220] usb 1-1: SerialNumber: syz
[   79.538109][ T5693] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   80.224191][    T9] usb 1-1: USB disconnect, device number 2
[   80.817449][ T5692] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   80.832034][ T5838] netlink: 27 bytes leftover after parsing attributes in process `syz.2.43'.
[   80.849556][ T5693] usb 1-1: Service connection timeout for: 256
[   80.849594][ T5693] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[   80.851099][ T5693] ath9k_htc: Failed to initialize the device
[   80.855937][    T9] usb 1-1: ath9k_htc: USB layer deinitialized
[   80.953422][ T5841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.45'.
[   80.997956][ T5692] usb 2-1: Using ep0 maxpacket: 32
[   81.209838][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short
[   81.209902][ T5692] usb 2-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40
[   81.210922][ T5692] usb 2-1: unable to read config index 0 descriptor/start: -71
[   81.210959][ T5692] usb 2-1: can't read configurations, error -71
[   81.287499][    T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   81.444726][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.465438][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   81.475821][    T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   81.475874][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   81.491527][   T25] cfg80211: failed to load regulatory.db
[   81.519404][    T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   81.519437][    T9] usb 1-1: Product: syz
[   81.519471][    T9] usb 1-1: Manufacturer: syz
[   81.519488][    T9] usb 1-1: SerialNumber: syz
[   81.544159][    T9] usb 1-1: config 0 descriptor??
[   81.570426][    T9] usb 1-1: selecting invalid altsetting 0
[   81.596210][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.607656][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.607699][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.607741][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.607783][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.656801][   T10] usb 4-1: config 0 descriptor??
[   81.789046][ T5842] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow!
[   81.826704][ T5693] usb 1-1: USB disconnect, device number 3
[   82.355776][   T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   82.658459][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   82.933108][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   82.943706][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.943746][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.943769][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   82.943831][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.983948][   T10] usb 2-1: config 0 descriptor??
[   83.016829][ T5870] vcan0: tx address claim with different name
[   83.167071][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   83.352299][    C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1
[   83.384732][    T9] usb 1-1: Using ep0 maxpacket: 16
[   83.391619][    T9] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[   83.403715][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.403761][    T9] usb 1-1: config 0 has no interfaces?
[   83.422779][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.422813][    T9] usb 1-1: Product: syz
[   83.422852][    T9] usb 1-1: Manufacturer: syz
[   83.422868][    T9] usb 1-1: SerialNumber: syz
[   83.450037][    T9] usb 1-1: config 0 descriptor??
[   83.457113][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.478955][   T10] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   83.607731][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   83.610038][   T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.610071][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   83.610093][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   83.610112][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   83.610147][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.629518][   T25] usb 3-1: config 0 descriptor??
[   83.728972][ T5693] usb 2-1: USB disconnect, device number 5
[   83.756382][ T5805] Set syz0 is full, maxelem 65536 reached
[   84.063445][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063504][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063537][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063561][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063585][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063609][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063633][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063657][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063680][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.063704][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   84.069729][   T25] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   84.122059][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.175496][ T5708] usb 4-1: USB disconnect, device number 3
[   84.241901][ T5622] usb 1-1: USB disconnect, device number 4
[   84.246846][ T5743] usb 3-1: USB disconnect, device number 2
[   84.263432][ T5888] syz.3.64: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   84.289389][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) 
[   84.289416][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   84.289435][ T5888] Call Trace:
[   84.289445][ T5888]  <TASK>
[   84.289454][ T5888]  dump_stack_lvl+0xe8/0x150
[   84.289491][ T5888]  warn_alloc+0x24d/0x270
[   84.289521][ T5888]  ? kasan_save_track+0x4f/0x80
[   84.289540][ T5888]  ? kasan_save_track+0x3e/0x80
[   84.289560][ T5888]  ? __pfx_warn_alloc+0x10/0x10
[   84.289585][ T5888]  ? __x64_sys_setsockopt+0x13d/0x1b0
[   84.289606][ T5888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.289643][ T5888]  __vmalloc_node_range_noprof+0x127/0x1540
[   84.289690][ T5888]  ? rcu_is_watching+0x16/0xb0
[   84.289718][ T5888]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   84.289744][ T5888]  ? __kmalloc_cache_noprof+0x321/0x600
[   84.289773][ T5888]  ? __kmalloc_cache_noprof+0x14d/0x600
[   84.289800][ T5888]  ? xskq_create+0x56/0x220
[   84.289831][ T5888]  xskq_create+0x148/0x220
[   84.289856][ T5888]  ? xsk_init_queue+0x8a/0xe0
[   84.289884][ T5888]  xsk_init_queue+0x8a/0xe0
[   84.289910][ T5888]  xsk_setsockopt+0x52a/0x960
[   84.289935][ T5888]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.289957][ T5888]  ? __pfx_aa_sk_perm+0x10/0x10
[   84.289985][ T5888]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   84.290016][ T5888]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.290043][ T5888]  do_sock_setsockopt+0x17c/0x1b0
[   84.290067][ T5888]  __x64_sys_setsockopt+0x13d/0x1b0
[   84.290093][ T5888]  do_syscall_64+0x166/0x520
[   84.290111][ T5888]  ? trace_irq_disable+0x3b/0x140
[   84.290129][ T5888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.290148][ T5888]  ? clear_bhb_loop+0x70/0xc0
[   84.290171][ T5888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.290190][ T5888] RIP: 0033:0x7fc5f439e159
[   84.290214][ T5888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.290230][ T5888] RSP: 002b:00007fc5f5279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   84.290250][ T5888] RAX: ffffffffffffffda RBX: 00007fc5f4625fa0 RCX: 00007fc5f439e159
[   84.290264][ T5888] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   84.290276][ T5888] RBP: 00007fc5f4435024 R08: 0000000000000029 R09: 0000000000000000
[   84.290288][ T5888] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.290299][ T5888] R13: 00007fc5f4626038 R14: 00007fc5f4625fa0 R15: 00007fc5f474fa48
[   84.290331][ T5888]  </TASK>
[   84.311471][   T10] usb 5-1: Using ep0 maxpacket: 32
[   84.323531][ T5888] Mem-Info:
[   84.323543][ T5888] active_anon:5750 inactive_anon:0 isolated_anon:0
[   84.323543][ T5888]  active_file:0 inactive_file:43391 isolated_file:0
[   84.323543][ T5888]  unevictable:0 dirty:1920 writeback:0
[   84.323543][ T5888]  slab_reclaimable:10226 slab_unreclaimable:94780
[   84.323543][ T5888]  mapped:29932 shmem:527 pagetables:1200
[   84.323543][ T5888]  sec_pagetables:0 bounce:0
[   84.323543][ T5888]  kernel_misc_reclaimable:0
[   84.323543][ T5888]  free:1326709 free_pcp:14954 free_cma:0
[   84.323591][ T5888] Node 0 active_anon:23000kB inactive_anon:0kB active_file:0kB inactive_file:173360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119728kB dirty:7664kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12044kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   84.323642][ T5888] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   84.323692][ T5888] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.323744][ T5888] lowmem_reserve[]: 0 2487 2487 2487 2487
[   84.323777][ T5888] Node 0 DMA32 free:1350916kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23000kB inactive_anon:0kB active_file:0kB inactive_file:173360kB unevictable:0kB writepending:7664kB zspages:0kB present:3129332kB managed:2546700kB mlocked:0kB bounce:0kB free_pcp:59568kB local_pcp:27316kB free_cma:0kB
[   84.323831][ T5888] lowmem_reserve[]: 0 0 0 0 0
[   84.323862][ T5888] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.323910][ T5888] lowmem_reserve[]: 0 0 0 0 0
[   84.323941][ T5888] Node 1 Normal free:3940560kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[   84.323992][ T5888] lowmem_reserve[]: 0 0 0 0 0
[   84.324024][ T5888] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.324151][ T5888] Node 0 DMA32: 415*4kB (UM) 235*8kB (UM) 95*16kB (UM) 80*32kB (UME) 17*64kB (UME) 16*128kB (UME) 13*256kB (UME) 13*512kB (UME) 9*1024kB (ME) 7*2048kB (UM) 319*4096kB (M) = 1350916kB
[   84.324299][ T5888] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   84.324391][ T5888] Node 1 Normal: 2*4kB (M) 1*8kB (M) 2*16kB (UM) 3*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 
[   84.334954][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   84.350781][ T5888] 2*2048kB (U) 960*4096kB (M) = 3940560kB
[   84.350827][ T5888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   84.350843][ T5888] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.350861][ T5888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   84.350876][ T5888] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.350891][ T5888] 43915 total pagecache pages
[   84.350902][ T5888] 0 pages in swap cache
[   84.350909][ T5888] Free swap  = 124996kB
[   84.350916][ T5888] Total swap = 124996kB
[   84.350924][ T5888] 2097051 pages RAM
[   84.350931][ T5888] 0 pages HighMem/MovableOnly
[   84.350937][ T5888] 428760 pages reserved
[   84.350944][ T5888] 0 pages cma reserved
[   84.388912][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.388940][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.388974][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.638762][   T10] usb 5-1: config 0 descriptor??
[   85.060113][ T5708] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.235252][ T5708] usb 1-1: Using ep0 maxpacket: 16
[   85.242209][ T5708] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[   85.246424][ T5708] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   85.246445][ T5708] usb 1-1: config 16 has no interfaces?
[   85.270438][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.270458][ T5708] usb 1-1: Product: syz
[   85.270471][ T5708] usb 1-1: Manufacturer: syz
[   85.270484][ T5708] usb 1-1: SerialNumber: syz
[   85.291476][   T10] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[   85.408142][ T5910] bridge0: port 3(ipvlan2) entered blocking state
[   85.410596][ T5910] bridge0: port 3(ipvlan2) entered disabled state
[   85.410750][ T5910] ipvlan2: entered allmulticast mode
[   85.410763][ T5910] bridge0: entered allmulticast mode
[   85.433853][ T5910] ipvlan2: left allmulticast mode
[   85.433869][ T5910] bridge0: left allmulticast mode
[   85.464646][ T5743] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   85.516760][   T25] usb 5-1: USB disconnect, device number 3
[   85.614745][ T5743] usb 2-1: Using ep0 maxpacket: 8
[   85.621777][ T5743] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.638405][ T5743] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   85.638464][ T5743] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.638503][ T5743] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.638528][ T5743] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   85.638554][ T5743] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.638592][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.864914][ T5622] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   85.926689][ T5743] usb 2-1: usb_control_msg returned -32
[   85.926751][ T5743] usbtmc 2-1:16.0: can't read capabilities
[   86.014652][ T5622] usb 4-1: Using ep0 maxpacket: 8
[   86.020056][ T5622] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   86.032202][ T5622] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   86.040487][ T5622] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   86.040501][ T5622] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   86.040514][ T5622] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   86.040525][ T5622] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.040548][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.144746][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   86.294700][   T10] usb 3-1: Using ep0 maxpacket: 32
[   86.300778][   T10] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   86.311815][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   86.326006][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   86.326052][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   86.326077][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[   86.326131][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[   86.358733][ T5622] usb 4-1: usb_control_msg returned -32
[   86.358775][ T5622] usbtmc 4-1:16.0: can't read capabilities
[   86.390517][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.398750][   T10] usb 3-1: Product: syz
[   86.404346][   T10] usb 3-1: Manufacturer: syz
[   86.404433][   T10] usb 3-1: SerialNumber: syz
[   86.419717][   T10] usb 3-1: config 0 descriptor??
[   86.504680][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   86.632422][   T10] iforce 3-1:0.0: usb_submit_urb failed: -32
[   86.664668][    T9] usb 5-1: Using ep0 maxpacket: 16
[   86.668160][    T9] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[   86.669337][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.669356][    T9] usb 5-1: config 0 has no interfaces?
[   86.673007][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.673028][    T9] usb 5-1: Product: syz
[   86.673041][    T9] usb 5-1: Manufacturer: syz
[   86.673053][    T9] usb 5-1: SerialNumber: syz
[   86.682961][    T9] usb 5-1: config 0 descriptor??
[   86.739760][ T5924] usbtmc 2-1:16.0: usb_control_msg returned -32
[   86.741442][    T9] usb 2-1: USB disconnect, device number 6
[   86.850221][ T5917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.74'.
[   86.877805][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.878263][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.878685][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.879116][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.879541][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.879970][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.880388][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.880832][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.881270][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.881688][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.882135][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.882553][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.882991][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.883409][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.883832][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.884273][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.885060][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.885484][   T10] iforce 3-1:0.0: usb_submit_urb failed: -71
[   86.885545][   T10] input input6: Timeout waiting for response from device.
[   86.899613][   T10] usb 3-1: USB disconnect, device number 3
[   87.393815][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'.
[   87.423987][ T5622] usb 5-1: USB disconnect, device number 4
[   87.927023][ T5708] usb 1-1: USB disconnect, device number 5
[   88.031213][ T5949] mmap: syz.0.85 (5949) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   88.112121][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'.
[   88.222767][ T5959] netlink: 'syz.4.89': attribute type 1 has an invalid length.
[   88.233029][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'.
[   88.376631][ T5708] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   88.378275][ T5965] vlan2: entered allmulticast mode
[   88.378525][ T5965] bridge0: port 3(vlan2) entered blocking state
[   88.378679][ T5965] bridge0: port 3(vlan2) entered disabled state
[   88.380779][ T5965] vlan2: entered promiscuous mode
[   88.484647][ T5622] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   88.525246][ T5708] usb 2-1: Using ep0 maxpacket: 8
[   88.526040][ T5708] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[   88.542967][ T5708] usb 2-1: config 0 has an invalid interface number: 170 but max is 0
[   88.543002][ T5708] usb 2-1: config 0 has no interface number 0
[   88.557719][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   88.561365][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.561386][ T5708] usb 2-1: Product: syz
[   88.561398][ T5708] usb 2-1: Manufacturer: syz
[   88.561411][ T5708] usb 2-1: SerialNumber: syz
[   88.564429][ T5708] usb 2-1: config 0 descriptor??
[   88.571946][ T5708] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[   88.572377][ T5708] dvb-usb: bulk message failed: -22 (2/0)
[   88.584167][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   88.585233][ T5708] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[   88.585284][ T5708] usb 2-1: media controller created
[   88.621177][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.634660][ T5622] usb 1-1: Using ep0 maxpacket: 16
[   88.636051][ T5622] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[   88.637217][ T5622] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.637236][ T5622] usb 1-1: config 0 has no interfaces?
[   88.642678][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.642698][ T5622] usb 1-1: Product: syz
[   88.642711][ T5622] usb 1-1: Manufacturer: syz
[   88.642723][ T5622] usb 1-1: SerialNumber: syz
[   88.649433][ T5622] usb 1-1: config 0 descriptor??
[   88.668102][ T5708] cxusb: set interface failed
[   88.668125][ T5708] dvb-usb: bulk message failed: -22 (1/0)
[   88.704800][    T9] usb 5-1: Using ep0 maxpacket: 32
[   88.705664][    T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   88.707630][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   88.707656][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   88.707678][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   88.707698][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[   88.707719][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[   88.710006][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.710026][    T9] usb 5-1: Product: syz
[   88.710038][    T9] usb 5-1: Manufacturer: syz
[   88.710051][    T9] usb 5-1: SerialNumber: syz
[   88.717996][    T9] usb 5-1: config 0 descriptor??
[   88.762277][ T5708] DVB: Unable to find symbol mt352_attach()
[   88.762291][ T5708] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[   88.816555][ T5622] usb 4-1: USB disconnect, device number 4
[   88.926641][ T5708] rc_core: IR keymap rc-dvico-portable not found
[   88.926672][ T5708] Registered IR keymap rc-empty
[   88.940604][ T5708] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[   88.956025][    T9] iforce 5-1:0.0: usb_submit_urb failed: -32
[   88.958196][ T5708] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8
[   88.968694][ T5708] dvb-usb: schedule remote query interval to 100 msecs.
[   88.968712][ T5708] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[   88.977248][ T5708] usb 2-1: USB disconnect, device number 7
[   89.122111][ T5708] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[   89.191721][ T5980] syz.3.97 uses obsolete (PF_INET,SOCK_PACKET)
[   89.192606][ T5980] syzkaller1: entered promiscuous mode
[   89.192624][ T5980] syzkaller1: entered allmulticast mode
[   89.237940][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.90'.
[   89.305319][   T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.308389][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.309849][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.310412][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.310786][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.311173][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.313375][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.313845][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.316914][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.319545][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.319928][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.320394][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.320773][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.321147][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.322635][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.325865][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.326620][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.328312][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.329648][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[   89.329690][    T9] input input7: Timeout waiting for response from device.
[   89.354019][    T9] usb 5-1: USB disconnect, device number 5
[   89.429537][  T190] usb 1-1: USB disconnect, device number 6
[   89.505990][   T25] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   89.517744][   T25] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   89.517773][   T25] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   89.517801][   T25] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   89.517821][   T25] usb 3-1: config 220 has no interface number 2
[   89.517879][   T25] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   89.517906][   T25] usb 3-1: config 220 interface 0 has no altsetting 0
[   89.517924][   T25] usb 3-1: config 220 interface 76 has no altsetting 0
[   89.517944][   T25] usb 3-1: config 220 interface 1 has no altsetting 0
[   89.521134][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.521156][   T25] usb 3-1: Product: syz
[   89.521169][   T25] usb 3-1: Manufacturer: syz
[   89.521181][   T25] usb 3-1: SerialNumber: syz
[   89.537128][ T5708] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   89.695509][ T5708] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[   89.709944][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.718048][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.718077][ T5708] usb 4-1: Product: syz
[   89.718089][ T5708] usb 4-1: Manufacturer: syz
[   89.718102][ T5708] usb 4-1: SerialNumber: syz
[   89.721900][ T5708] usb 4-1: config 0 descriptor??
[   89.744245][   T25] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   89.744277][   T25] uvcvideo 3-1:220.0: No valid video chain found.
[   89.744358][   T25] usb 3-1: selecting invalid altsetting 0
[   89.769259][   T25] usb 3-1: selecting invalid altsetting 0
[   89.769284][   T25] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[   89.774069][   T25] usb 3-1: USB disconnect, device number 4
[   89.785482][ T5622] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   89.800781][ T5708] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[   89.931712][ T5995] syzkaller1: entered allmulticast mode
[   89.948313][ T5622] usb 2-1: Using ep0 maxpacket: 32
[   89.954362][ T5622] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   89.955128][ T5693] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   89.972442][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.972482][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.972534][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.003248][ T5622] usb 2-1: config 0 descriptor??
[   90.015591][ T5622] hub 2-1:0.0: USB hub found
[   90.084957][ T5693] usb 1-1: device descriptor read/64, error -71
[   90.213455][ T5622] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   90.324749][ T5693] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   90.404638][   T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   90.464747][ T5693] usb 1-1: device descriptor read/64, error -71
[   90.565470][   T25] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   90.568178][ T5708] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9
[   90.584440][ T5693] usb usb1-port1: attempt power cycle
[   90.592284][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   90.602352][   T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   90.614049][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[   90.634317][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.634356][   T25] usb 5-1: Product: syz
[   90.634387][   T25] usb 5-1: Manufacturer: syz
[   90.634404][   T25] usb 5-1: SerialNumber: syz
[   90.636424][ T5622] hid_parser_main: 5 callbacks suppressed
[   90.636443][ T5622] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0
[   90.675521][   T25] usb 5-1: config 0 descriptor??
[   90.681539][ T6002] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   90.681697][ T6002] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   90.699881][   T25] usb 5-1: ucan: probing device on interface #0
[   90.730133][ T5622] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[   90.768697][ T5743] usb 4-1: USB disconnect, device number 5
[   90.944698][ T5693] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   90.976790][ T5693] usb 1-1: device descriptor read/8, error -71
[   91.074392][ T6012] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[   91.082443][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'.
[   91.224720][ T5693] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   91.245870][ T5693] usb 1-1: device descriptor read/8, error -71
[   91.355001][ T5693] usb usb1-port1: unable to enumerate USB device
[   91.364050][   T25] ucan 5-1:0.0 can0: registered device
[   91.515225][   T25] ucan 5-1:0.0 can0: firmware string: unknown
[   91.537155][   T25] usb 5-1: USB disconnect, device number 6
[   91.795466][ T5622] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   91.945585][ T5622] usb 4-1: Using ep0 maxpacket: 16
[   91.946742][ T5622] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[   91.948358][ T5622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.948379][ T5622] usb 4-1: config 0 has no interfaces?
[   91.952041][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.952068][ T5622] usb 4-1: Product: syz
[   91.952081][ T5622] usb 4-1: Manufacturer: syz
[   91.952094][ T5622] usb 4-1: SerialNumber: syz
[   91.966537][ T5622] usb 4-1: config 0 descriptor??
[   92.151144][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   92.556524][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   92.628274][ T6042] hsr_slave_0: left promiscuous mode
[   92.636582][ T6042] hsr_slave_1: left promiscuous mode
[   92.679439][ T6044] netlink: 'syz.0.122': attribute type 12 has an invalid length.
[   92.679463][ T6044] netlink: 'syz.0.122': attribute type 29 has an invalid length.
[   92.680016][ T6044] netlink: 148 bytes leftover after parsing attributes in process `syz.0.122'.
[   92.680044][ T6044] netlink: 59 bytes leftover after parsing attributes in process `syz.0.122'.
[   92.680328][ T6044] Zero length message leads to an empty skb
[   92.705737][    T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   92.711171][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.711194][    T9] usb 3-1: Product: syz
[   92.711207][    T9] usb 3-1: Manufacturer: syz
[   92.711220][    T9] usb 3-1: SerialNumber: syz
[   92.715585][    T9] usb 3-1: config 0 descriptor??
[   92.784488][   T10] usb 4-1: USB disconnect, device number 6
[   93.214688][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   93.304756][ T5693] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   93.365927][   T10] usb 4-1: Using ep0 maxpacket: 16
[   93.366923][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[   93.368072][   T10] usb 4-1: config 0 interface 0 altsetting 148 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.368098][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[   93.368127][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.371179][   T10] usb 4-1: config 0 descriptor??
[   93.425177][ T5622] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[   93.495484][ T5693] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   93.498501][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.498521][ T5693] usb 1-1: Product: syz
[   93.498534][ T5693] usb 1-1: Manufacturer: syz
[   93.498547][ T5693] usb 1-1: SerialNumber: syz
[   93.504851][ T5693] usb 1-1: config 0 descriptor??
[   93.595296][ T5622] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[   93.596647][ T5622] usb 5-1: config 0 interface 0 has no altsetting 0
[   93.596678][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.601789][ T5622] usb 5-1: config 0 descriptor??
[   93.733567][    T9] usb 3-1: non-Atmel transceiver xxxx3d3a
[   93.795023][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x1
[   93.795114][   T10] apple 0003:05AC:026C.0006: ignoring exceeding usage max
[   93.800570][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.800599][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.800649][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.800672][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.800696][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.800720][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.800743][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.800793][   T10] apple 0003:05AC:026C.0006: unknown main item tag 0x0
[   93.911367][ T5693] usb 1-1: Firmware version (0.0) predates our first public release.
[   93.911391][ T5693] usb 1-1: Please update to version 0.2 or newer
[   93.934700][    T9] usb 3-1: Firmware version (0.0) predates our first public release.
[   93.944258][    T9] usb 3-1: Please update to version 0.2 or newer
[   93.951033][    T9] usb 3-1: atusb_probe: initialization failed, error = -19
[   93.960712][    T9] usb 3-1: USB disconnect, device number 5
[   94.012745][ T5622] ryos 0003:1E7D:3232.0007: item fetching failed at offset 14/44
[   94.013386][ T5622] ryos 0003:1E7D:3232.0007: parse failed
[   94.013448][ T5622] ryos 0003:1E7D:3232.0007: probe with driver ryos failed with error -22
[   94.112169][ T5693] usb 1-1: Firmware: build 
[   94.138056][ T1220] usb 2-1: USB disconnect, device number 8
[   94.165165][   T10] apple 0003:05AC:026C.0006: hidraw0: USB HID v0.05 Device [HID 05ac:026c] on usb-dummy_hcd.3-1/input0
[   94.186780][   T10] usb 4-1: USB disconnect, device number 7
[   94.220621][   T25] usb 5-1: USB disconnect, device number 7
[   94.299459][ T6065] fido_id[6065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   94.352068][ T5693] usb 1-1: USB disconnect, device number 11
[   94.815146][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   94.853863][ T6089] netlink: 'syz.4.138': attribute type 16 has an invalid length.
[   94.947298][ T5693] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   94.957124][   T10] usb 3-1: device descriptor read/64, error -71
[   95.095227][ T5693] usb 4-1: Using ep0 maxpacket: 32
[   95.097089][ T5693] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   95.098185][ T5693] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   95.098211][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   95.098233][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   95.098253][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[   95.098275][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[   95.100770][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.100791][ T5693] usb 4-1: Product: syz
[   95.100811][ T5693] usb 4-1: Manufacturer: syz
[   95.100824][ T5693] usb 4-1: SerialNumber: syz
[   95.113265][ T5693] usb 4-1: config 0 descriptor??
[   95.194660][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   95.274691][ T5679] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   95.324649][   T10] usb 3-1: device descriptor read/64, error -71
[   95.342386][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -32
[   95.435523][   T10] usb usb3-port1: attempt power cycle
[   95.437322][ T5679] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[   95.438545][ T5679] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[   95.438566][ T5679] usb 1-1: config 1 has no interface number 0
[   95.441505][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.441525][ T5679] usb 1-1: Product: syz
[   95.441538][ T5679] usb 1-1: Manufacturer: syz
[   95.441551][ T5679] usb 1-1: SerialNumber: syz
[   95.452383][ T5679] usb 1-1: 3:1 : does not exist
[   95.452402][ T5679] usb 1-1: 3:2 : does not exist
[   95.565794][ T5622] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   95.668485][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.670487][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.670931][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.672780][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.679593][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.681600][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.683712][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.686022][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.687966][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.688969][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.690297][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.690832][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.693118][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.693817][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.694379][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.696191][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.700655][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.703220][ T5693] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.703262][ T5693] input input10: Timeout waiting for response from device.
[   95.736908][ T5693] usb 4-1: USB disconnect, device number 8
[   95.737920][ T5622] usb 2-1: Using ep0 maxpacket: 32
[   95.750446][ T5622] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   95.762609][ T5679] usb 1-1: USB disconnect, device number 12
[   95.801595][ T5622] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   95.801618][ T5622] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   95.801636][ T5622] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   95.801675][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   95.801693][ T5622] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   95.801714][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   95.801749][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.862629][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   95.895174][   T10] usb 3-1: device descriptor read/8, error -71
[   95.901537][ T5622] usb 2-1: config 0 descriptor??
[   96.006964][ T6108] syzkaller1: entered promiscuous mode
[   96.007008][ T6108] syzkaller1: entered allmulticast mode
[   96.128188][ T5622] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   96.144774][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   96.153518][ T5622] usb 2-1: USB disconnect, device number 9
[   96.167949][   T10] usb 3-1: device descriptor read/8, error -71
[   96.176933][ T5622] usblp0: removed
[   96.275885][   T10] usb usb3-port1: unable to enumerate USB device
[   96.606705][ T6124] ucma_write: process 76 (syz.3.150) changed security contexts after opening file descriptor, this is not allowed.
[   96.634842][ T5622] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   96.795318][ T5622] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   96.809489][ T5622] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   96.818072][ T5622] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   96.818095][ T5622] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   96.818140][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   96.818160][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   96.818183][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   96.818221][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.884863][ T5622] usb 2-1: config 0 descriptor??
[   96.895111][ T6105] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   97.004725][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   97.114850][ T5622] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   97.155486][   T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00
[   97.167128][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.181611][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.189878][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   97.197704][   T10] usb 1-1: Product: syz
[   97.202364][   T10] usb 1-1: Manufacturer: syz
[   97.207103][   T10] usb 1-1: SerialNumber: syz
[   97.355372][    T9] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[   97.368375][    T9] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[   97.376781][    T9] usb 4-1: Product: syz
[   97.376798][    T9] usb 4-1: Manufacturer: syz
[   97.376811][    T9] usb 4-1: SerialNumber: syz
[   97.404540][    T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[   97.464527][    C0] usblp0: nonzero read bulk status received: -71
[   97.475898][ T6137] usblp0:failed reading printer status (-32)
[   97.483639][ T5622] usb 2-1: USB disconnect, device number 10
[   97.503007][ T5622] usblp0: removed
[   97.617342][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.629437][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.639977][   T10] hackrf 1-1:1.0: usb_control_msg() failed -32 request 0f
[   97.647599][   T10] hackrf 1-1:1.0: Could not detect board
[   97.653501][   T10] hackrf 1-1:1.0: probe with driver hackrf failed with error -32
[   97.683516][ T5679] usb 1-1: USB disconnect, device number 13
[   97.695197][    T9] vp7045: USB control message 'out' went wrong.
[   97.705739][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   97.718141][    T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[   97.740910][    T9] usb 4-1: USB disconnect, device number 9
[   97.920262][ T6145] gre1: entered promiscuous mode
[   98.004784][ T1220] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   98.168750][ T1220] usb 5-1: Using ep0 maxpacket: 16
[   98.169497][ T1220] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   98.170933][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.170960][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.170979][ T1220] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   98.171029][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.174344][ T1220] usb 5-1: config 0 descriptor??
[   98.534839][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   98.641522][ T1220] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input11
[   98.685244][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.695613][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.695655][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.695675][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.695710][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.706163][    T9] usb 4-1: config 0 descriptor??
[   98.790783][ T1220] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   98.824734][   T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   98.838564][ T1220] usb 5-1: USB disconnect, device number 8
[   98.954757][   T25] usb 2-1: device descriptor read/64, error -71
[   98.966178][ T6172] fido_id[6172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   99.183067][    T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   99.195555][   T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   99.327357][   T25] usb 2-1: device descriptor read/64, error -71
[   99.435414][   T25] usb usb2-port1: attempt power cycle
[   99.776652][   T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   99.806168][   T25] usb 2-1: device descriptor read/8, error -71
[  100.048212][   T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  100.075184][   T25] usb 2-1: device descriptor read/8, error -71
[  100.155072][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  100.185134][   T25] usb usb2-port1: unable to enumerate USB device
[  100.305543][    T9] usb 5-1: Using ep0 maxpacket: 32
[  100.306664][    T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  100.309328][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  100.309353][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  100.309374][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  100.309393][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  100.309416][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  100.314481][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.314502][    T9] usb 5-1: Product: syz
[  100.314515][    T9] usb 5-1: Manufacturer: syz
[  100.314527][    T9] usb 5-1: SerialNumber: syz
[  100.323057][    T9] usb 5-1: config 0 descriptor??
[  100.531718][    T9] iforce 5-1:0.0: usb_submit_urb failed: -32
[  100.654757][ T1220] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  100.761546][ T6188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.173'.
[  100.815432][ T1220] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  100.828438][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.830157][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.832445][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.832829][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.833198][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.833577][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.834073][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.840104][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.841347][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.841751][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.842137][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.842604][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.842978][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.843417][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.843794][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.844166][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.844538][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.846635][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  100.846675][    T9] input input12: Timeout waiting for response from device.
[  100.879918][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.879942][ T1220] usb 1-1: Product: syz
[  100.879955][ T1220] usb 1-1: Manufacturer: syz
[  100.879968][ T1220] usb 1-1: SerialNumber: syz
[  100.935212][    T9] usb 5-1: USB disconnect, device number 9
[  100.983139][ T1220] usb 1-1: config 0 descriptor??
[  101.202470][ T1220] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  101.259239][ T5622] usb 4-1: USB disconnect, device number 10
[  101.725563][ T5622] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  101.874649][ T5622] usb 5-1: Using ep0 maxpacket: 32
[  101.875342][ T5622] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  101.876474][ T5622] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  101.876498][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  101.876520][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  101.876540][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  101.876561][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  101.879468][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.879489][ T5622] usb 5-1: Product: syz
[  101.879502][ T5622] usb 5-1: Manufacturer: syz
[  101.879515][ T5622] usb 5-1: SerialNumber: syz
[  101.934740][ T5693] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  101.949660][ T5622] usb 5-1: config 0 descriptor??
[  102.074702][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  102.094656][ T5693] usb 3-1: Using ep0 maxpacket: 32
[  102.094731][  T190] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  102.107988][ T5693] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  102.109126][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.109145][ T5693] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  102.109183][ T5693] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  102.109238][ T5693] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  102.109272][ T5693] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  102.109291][ T5693] usb 3-1: config 1 interface 1 has no altsetting 0
[  102.111428][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.111448][ T5693] usb 3-1: Product: syz
[  102.111460][ T5693] usb 3-1: Manufacturer: syz
[  102.111473][ T5693] usb 3-1: SerialNumber: syz
[  102.155751][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -32
[  102.221745][ T1220] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  102.229505][ T1220] usb 1-1: USB disconnect, device number 14
[  102.232293][    T9] usb 4-1: Using ep0 maxpacket: 8
[  102.245154][    T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  102.258050][    T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  102.258103][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.274921][  T190] usb 2-1: Using ep0 maxpacket: 32
[  102.276029][  T190] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  102.281464][  T190] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  102.281490][  T190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  102.281511][  T190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  102.281556][  T190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  102.281578][  T190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  102.286143][  T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.286164][  T190] usb 2-1: Product: syz
[  102.286176][  T190] usb 2-1: Manufacturer: syz
[  102.286189][  T190] usb 2-1: SerialNumber: syz
[  102.291687][  T190] usb 2-1: config 0 descriptor??
[  102.381395][ T5693] usb 3-1: selecting invalid altsetting 0
[  102.427412][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.427939][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.429402][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.431431][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.432496][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.434489][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.435495][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.436502][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.438271][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.438963][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.439357][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.439790][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.441818][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.442589][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.443234][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.443676][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.444127][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.445473][ T5622] iforce 5-1:0.0: usb_submit_urb failed: -71
[  102.445513][ T5622] input input13: Timeout waiting for response from device.
[  102.455816][ T5622] usb 5-1: USB disconnect, device number 10
[  102.490486][    T9] usb 4-1: string descriptor 0 read error: -71
[  102.491019][    T9] hub 4-1:32.0: bad descriptor, ignoring hub
[  102.491039][    T9] hub 4-1:32.0: probe with driver hub failed with error -5
[  102.524963][  T190] iforce 2-1:0.0: usb_submit_urb failed: -32
[  102.559952][ T5693] usb 3-1: 1:1: cannot get freq (v2/v3): err -32
[  102.745419][ T6220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.187'.
[  102.780548][ T5693] usb 3-1: 1:1: cannot get freq (v2/v3): err -71
[  102.832645][ T6222] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  102.849019][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.855166][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.856184][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.856649][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.858736][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.859958][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.861514][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.862378][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.863136][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.863694][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.864365][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.864781][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.865471][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.866481][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.866859][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.868082][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.870554][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.871218][  T190] iforce 2-1:0.0: usb_submit_urb failed: -71
[  102.871260][  T190] input input14: Timeout waiting for response from device.
[  102.879683][  T190] usb 2-1: USB disconnect, device number 15
[  103.010753][ T5693] usb 3-1: USB disconnect, device number 10
[  103.226378][    T9] usb 4-1: USB disconnect, device number 11
[  103.600400][ T6239] syzkaller1: entered promiscuous mode
[  103.609078][ T6239] syzkaller1: entered allmulticast mode
[  103.647284][ T5693] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  103.805795][ T5693] usb 1-1: Using ep0 maxpacket: 32
[  103.811903][ T5693] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  103.828904][ T5693] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  103.828943][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  103.828985][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  103.829009][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  103.829035][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  103.893038][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.893082][ T5693] usb 1-1: Product: syz
[  103.893112][ T5693] usb 1-1: Manufacturer: syz
[  103.893129][ T5693] usb 1-1: SerialNumber: syz
[  103.919517][ T5693] usb 1-1: config 0 descriptor??
[  103.931595][ T6247] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[  103.931629][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[  104.154696][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -32
[  104.438407][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.192'.
[  104.455329][  T190] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  104.588717][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.595148][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.602139][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.605832][  T190] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  104.610093][  T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.610117][  T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.610150][  T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.616049][  T190] usb 3-1: config 0 descriptor??
[  104.654079][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.661863][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.668652][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.677572][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.685459][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.693134][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.701205][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.707832][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.714267][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.720774][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.729322][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.735981][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.742459][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.750619][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.757066][ T5693] iforce 1-1:0.0: usb_submit_urb failed: -71
[  104.763163][ T5693] input input15: Timeout waiting for response from device.
[  104.776169][ T5693] usb 1-1: USB disconnect, device number 15
[  104.943774][ T6262] cgroup: fork rejected by pids controller in /syz4
[  105.056592][  T190] hid_parser_main: 22 callbacks suppressed
[  105.056650][  T190] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  105.059629][  T190] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  105.125373][  T190] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected
[  105.125691][  T190] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT present for ID 0
[  105.125715][  T190] hid-steam 0003:28DE:1142.000A: steam_probe:steam_get_conn_status failed with error -22
[  105.189333][  T190] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[  105.217560][  T190] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  105.474696][ T5693] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  105.635541][ T5693] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  105.646478][ T5693] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.646519][ T5693] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.646546][ T5693] usb 1-1: config 0 interface 0 has no altsetting 0
[  105.646578][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.687459][ T5693] usb 1-1: config 0 descriptor??
[  105.905469][    T9] usb 3-1: USB disconnect, device number 11
[  105.912910][ T5693] usbhid 1-1:0.0: can't add hid device: -71
[  105.922552][ T5693] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  105.942951][ T5693] usb 1-1: USB disconnect, device number 16
[  105.943206][ T1167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.049125][    T9] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected
[  106.184164][ T1167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.338749][ T1167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.458026][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.469560][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.477949][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.488190][ T1167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.499160][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.517308][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  106.945676][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  107.094668][    T9] usb 1-1: Using ep0 maxpacket: 32
[  107.095337][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  107.098841][    T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  107.098862][    T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  107.098880][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  107.098919][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  107.098938][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  107.098957][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  107.098992][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.104137][    T9] usb 1-1: config 0 descriptor??
[  107.109937][   T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  107.311526][ T6336] netlink: 'syz.3.214': attribute type 1 has an invalid length.
[  107.321494][   T25] usb 2-1: Using ep0 maxpacket: 32
[  107.327978][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'.
[  107.330455][   T25] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  107.352690][   T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  107.352730][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  107.352770][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  107.352793][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  107.352818][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  107.418578][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.418615][   T25] usb 2-1: Product: syz
[  107.418651][   T25] usb 2-1: Manufacturer: syz
[  107.418667][   T25] usb 2-1: SerialNumber: syz
[  107.443651][   T25] usb 2-1: config 0 descriptor??
[  107.458953][ T1167] bridge_slave_1: left allmulticast mode
[  107.470021][ T1167] bridge_slave_1: left promiscuous mode
[  107.473995][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  107.493117][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.530653][ T1167] bridge_slave_0: left allmulticast mode
[  107.541485][ T1167] bridge_slave_0: left promiscuous mode
[  107.547647][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.661060][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.171651][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.193643][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.209446][ T1167] bond0 (unregistering): Released all slaves
[  108.320484][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.213'.
[  108.414050][    T9] usb 1-1: USB disconnect, device number 17
[  108.429397][    T9] usblp0: removed
[  108.608911][ T5627] Bluetooth: hci1: command tx timeout
[  108.685710][   T25] iforce 2-1:0.0: usb_submit_urb failed: -110
[  108.692567][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.700179][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.706733][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.714412][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.720830][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.727224][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.734660][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.741129][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.748599][   T25] iforce 2-1:0.0: usb_submit_urb failed: -32
[  108.758509][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.765219][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.773170][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.779866][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.787054][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.793588][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.802288][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.808964][   T25] iforce 2-1:0.0: usb_submit_urb failed: -71
[  108.815188][   T25] input input16: Timeout waiting for response from device.
[  108.828179][   T25] usb 2-1: USB disconnect, device number 16
[  108.895602][ T5679] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  109.100634][ T6361] xt_hashlimit: size too large, truncated to 1048576
[  109.110771][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  109.253483][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.253539][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.266378][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.266397][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.370443][ T1167] veth1_macvtap: left promiscuous mode
[  109.377564][ T1167] veth0_macvtap: left promiscuous mode
[  109.378080][ T1167] veth1_vlan: left promiscuous mode
[  109.383668][ T5679] usb 1-1: unable to get BOS descriptor or descriptor too short
[  109.389531][ T5679] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  109.394509][ T5679] usb 1-1: unable to read config index 0 descriptor/start: -71
[  109.394541][ T5679] usb 1-1: can't read configurations, error -71
[  109.406828][ T1167] veth0_vlan: left promiscuous mode
[  109.583248][ T6386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.608647][ T6386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.876554][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[  109.942560][ T1167] team0 (unregistering): Port device team_slave_1 removed
[  109.967171][ T1167] team0 (unregistering): Port device team_slave_0 removed
[  110.020203][ T6399] xt_hashlimit: size too large, truncated to 1048576
[  110.075500][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803271ac00: rx timeout, send abort
[  110.169199][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.169369][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.169486][ T6317] bridge_slave_0: entered allmulticast mode
[  110.171335][ T6317] bridge_slave_0: entered promiscuous mode
[  110.291806][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.291959][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.292112][ T6317] bridge_slave_1: entered allmulticast mode
[  110.296714][ T6317] bridge_slave_1: entered promiscuous mode
[  110.353992][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.366825][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.418569][ T6317] team0: Port device team_slave_0 added
[  110.427638][ T6317] team0: Port device team_slave_1 added
[  110.445968][ T5679] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  110.492319][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.499393][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.526171][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.553616][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.553657][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.553679][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.589345][ T6410] netlink: 'syz.3.228': attribute type 1 has an invalid length.
[  110.589362][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'.
[  110.615519][ T5679] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  110.633489][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.633515][ T5679] usb 1-1: Product: syz
[  110.633542][ T5679] usb 1-1: Manufacturer: syz
[  110.633558][ T5679] usb 1-1: SerialNumber: syz
[  110.650557][ T5679] usb 1-1: config 0 descriptor??
[  110.685592][ T5627] Bluetooth: hci1: command tx timeout
[  110.723722][ T6317] hsr_slave_0: entered promiscuous mode
[  110.730447][ T6317] hsr_slave_1: entered promiscuous mode
[  110.732547][ T6317] debugfs: 'hsr0' already exists in 'hsr'
[  110.732566][ T6317] Cannot create hsr debugfs directory
[  110.795475][ T1220] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  110.957629][ T1220] usb 2-1: unable to get BOS descriptor or descriptor too short
[  110.958954][ T1220] usb 2-1: not running at top speed; connect to a high speed hub
[  110.958983][ T1220] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  110.962274][ T1220] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  110.962294][ T1220] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  110.962312][ T1220] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  110.962328][ T1220] usb 2-1: config 14 has no interface number 0
[  110.962344][ T1220] usb 2-1: config 14 has no interface number 1
[  110.962419][ T1220] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  110.962440][ T1220] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  110.962461][ T1220] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  110.962482][ T1220] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  110.962527][ T1220] usb 2-1: config 14 interface 57 has no altsetting 0
[  110.962543][ T1220] usb 2-1: config 14 interface 228 has no altsetting 0
[  110.973244][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.973288][ T1220] usb 2-1: Product: syz
[  110.973302][ T1220] usb 2-1: Manufacturer: syz
[  110.973314][ T1220] usb 2-1: SerialNumber: syz
[  111.217048][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  111.374652][    T9] usb 3-1: Using ep0 maxpacket: 32
[  111.382743][    T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  111.396360][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  111.408857][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  111.408885][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  111.408905][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  111.408928][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  111.445600][ T1220] legousbtower 2-1:14.57: interrupt endpoints not found
[  111.463762][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.471834][    T9] usb 3-1: Product: syz
[  111.471851][    T9] usb 3-1: Manufacturer: syz
[  111.471864][    T9] usb 3-1: SerialNumber: syz
[  111.492144][    T9] usb 3-1: config 0 descriptor??
[  111.600428][ T5679] usb 1-1: Firmware version (0.0) predates our first public release.
[  111.600472][ T5679] usb 1-1: Please update to version 0.2 or newer
[  111.682914][ T5679] usb 1-1: USB disconnect, device number 19
[  111.715567][    T9] iforce 3-1:0.0: usb_submit_urb failed: -32
[  111.858740][ T1220] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  111.877932][ T1220] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  112.122023][ T6428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.230'.
[  112.358331][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.366356][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.375115][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.385873][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.392430][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.398815][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.405898][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.413801][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.422959][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.429331][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.435862][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.442592][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.449263][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.455729][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.464110][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.471014][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.477778][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.484034][ T1220] usb 2-1: USB disconnect, device number 17
[  112.484058][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[  112.484099][    T9] input input17: Timeout waiting for response from device.
[  112.484108][    C1] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[  112.535844][    T9] usb 3-1: USB disconnect, device number 12
[  112.659569][ T6317] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  112.670158][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  112.679091][ T6317] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  112.689672][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  112.698947][ T6317] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  112.709687][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  112.718559][ T6317] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  112.728981][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  112.739804][ T1220] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected
[  112.765212][ T5627] Bluetooth: hci1: command tx timeout
[  112.825268][ T5679] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  112.859757][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.875526][ T6317] 8021q: adding VLAN 0 to HW filter on device team0
[  112.893085][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.893215][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.915570][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.915753][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.976228][ T5679] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  112.978023][ T5679] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.978064][ T5679] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  112.978095][ T5679] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  112.978115][ T5679] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.978150][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.110050][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.172205][ T6317] veth0_vlan: entered promiscuous mode
[  113.190356][ T6317] veth1_vlan: entered promiscuous mode
[  113.263895][ T6317] veth0_macvtap: entered promiscuous mode
[  113.276579][ T6317] veth1_macvtap: entered promiscuous mode
[  113.318128][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.330466][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.357558][ T1048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.357635][ T1048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.357703][ T1048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.357732][ T1048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.616631][ T3404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.616674][ T3404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.759584][ T3404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.759629][ T3404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.777170][ T6470] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[  113.777188][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'.
[  114.086132][ T5679] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5)
[  114.087288][ T5679] gud 4-1:1.0: Failed to get connectors (error=-5)
[  114.087315][ T5679] gud 4-1:1.0: probe with driver gud failed with error -5
[  114.219083][ T6481] VFS: Lookup of 'devices.allow' in fuse fuse would have caused loop
[  114.339409][ T5693] usb 4-1: USB disconnect, device number 12
[  114.844924][ T5627] Bluetooth: hci1: command tx timeout
[  116.005197][ T5679] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  116.155298][ T5679] usb 2-1: Using ep0 maxpacket: 32
[  116.159322][ T5679] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  116.165859][ T5679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.165885][ T5679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.165918][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.188956][ T5679] usb 2-1: config 0 descriptor??
[  116.249285][ T6517] netlink: Failed to add batadv0 helper -22
[  116.249387][ T6517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.704225][ T5679] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  116.899797][ T5693] usb 2-1: USB disconnect, device number 18
[  116.934662][ T5622] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  117.025143][ T5679] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  117.094940][ T5622] usb 4-1: Using ep0 maxpacket: 32
[  117.100514][ T5622] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  117.101936][ T5622] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  117.101957][ T5622] usb 4-1: config 0 has no interface number 0
[  117.101995][ T5622] usb 4-1: config 0 interface 184 has no altsetting 0
[  117.103992][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.104012][ T5622] usb 4-1: Product: syz
[  117.104024][ T5622] usb 4-1: Manufacturer: syz
[  117.104037][ T5622] usb 4-1: SerialNumber: syz
[  117.107399][ T5622] usb 4-1: config 0 descriptor??
[  117.175327][ T5679] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  117.176516][ T5679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.176556][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.184526][ T5679] usb 1-1: config 0 descriptor??
[  117.254735][ T1220] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  117.395500][ T5679] usbhid 1-1:0.0: can't add hid device: -71
[  117.395609][ T5679] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  117.398032][ T5679] usb 1-1: USB disconnect, device number 20
[  117.407161][ T1220] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  117.408068][ T1220] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  117.408088][ T1220] usb 5-1: config 0 has no interface number 0
[  117.414376][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.414396][ T1220] usb 5-1: Product: syz
[  117.414408][ T1220] usb 5-1: Manufacturer: syz
[  117.414421][ T1220] usb 5-1: SerialNumber: syz
[  117.421579][ T1220] usb 5-1: config 0 descriptor??
[  117.434291][ T1220] usb 5-1: selecting invalid altsetting 1
[  117.456520][ T1220] dvb_ttusb_budget: ttusb_init_controller: error
[  117.456534][ T1220] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  117.527286][ T1220] DVB: Unable to find symbol stv0299_attach()
[  117.573471][ T1220] DVB: Unable to find symbol tda8083_attach()
[  117.573494][ T1220] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  117.629522][ T5679] usb 5-1: USB disconnect, device number 11
[  117.722687][ T5622] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  117.733670][ T5622] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  117.854687][ T1220] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  118.005176][ T1220] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  118.006290][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.006331][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.008921][ T1220] usb 1-1: config 0 descriptor??
[  118.538494][ T5622] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  118.538528][ T5622] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  118.538561][ T5622] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  118.539033][ T5622] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  118.549504][ T5622] usb 4-1: USB disconnect, device number 13
[  118.724812][ T5679] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  118.815199][ T1220] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[  118.824515][ T1220] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18
[  118.877267][ T5679] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  118.889555][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.900196][ T5679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.916903][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.916931][ T5679] usb 2-1: SerialNumber: syz
[  119.143451][ T5679] usb 2-1: 0:2 : does not exist
[  119.172459][  T190] usb 1-1: USB disconnect, device number 21
[  119.172604][    C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  119.194691][ T5679] usb 2-1: USB disconnect, device number 19
[  119.258367][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.354906][ T1220] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  119.374903][ T5622] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  119.505260][ T1220] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  119.517512][ T1220] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.517552][ T1220] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  119.517573][ T1220] usb 5-1: config 0 interface 0 has no altsetting 0
[  119.547215][ T5622] usb 4-1: Using ep0 maxpacket: 32
[  119.553025][ T5622] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  119.564809][ T5622] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  119.564864][ T5622] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  119.564899][ T5622] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  119.564926][ T5622] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  119.567112][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  119.567133][ T1220] usb 5-1: Product: syz
[  119.567152][ T1220] usb 5-1: Manufacturer: syz
[  119.567165][ T1220] usb 5-1: SerialNumber: syz
[  119.601500][ T1220] usb 5-1: config 0 descriptor??
[  119.626546][ T1220] usb 5-1: selecting invalid altsetting 0
[  119.647979][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.648002][ T5622] usb 4-1: Product: syz
[  119.648014][ T5622] usb 4-1: Manufacturer: syz
[  119.648027][ T5622] usb 4-1: SerialNumber: syz
[  119.704898][    C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  119.729350][ T5622] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input19
[  119.867143][ T1220] usb 5-1: USB disconnect, device number 12
[  119.905303][ T5622] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  119.905334][ T5622]  (id 0x00)
[  119.939514][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.076187][ T5622] rc_core: IR keymap rc-imon-pad not found
[  120.083029][ T5622] Registered IR keymap rc-empty
[  120.083207][ T5622] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  120.083224][ T5622] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  120.132406][ T5622] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[  120.151253][ T5622] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input20
[  120.170661][ T5622] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:14> initialized
[  120.339814][ T5622] usb 4-1: USB disconnect, device number 14
[  120.659580][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'.
[  120.864860][ T1220] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  121.068006][ T1220] usb 1-1: Using ep0 maxpacket: 8
[  121.069548][ T1220] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  121.076969][ T1220] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  121.076990][ T1220] usb 1-1: config 0 has no interface number 0
[  121.077030][ T1220] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.077067][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.082237][ T1220] usb 1-1: config 0 descriptor??
[  121.113042][ T1220] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  121.115555][   T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  121.265083][   T25] usb 5-1: Using ep0 maxpacket: 32
[  121.267783][   T25] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  121.273198][   T25] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  121.273219][   T25] usb 5-1: config 0 has no interface number 0
[  121.273256][   T25] usb 5-1: config 0 interface 184 has no altsetting 0
[  121.286743][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.286763][   T25] usb 5-1: Product: syz
[  121.286776][   T25] usb 5-1: Manufacturer: syz
[  121.286789][   T25] usb 5-1: SerialNumber: syz
[  121.299808][   T25] usb 5-1: config 0 descriptor??
[  121.379713][ T5622] usb 1-1: USB disconnect, device number 22
[  121.649520][ T6608] 0: reclassify loop, rule prio 0, protocol 03
[  121.894699][ T5622] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  122.058304][ T5622] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  122.068817][ T5622] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7
[  122.068871][ T5622] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  122.094098][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.094133][ T5622] usb 4-1: Product: syz
[  122.094160][ T5622] usb 4-1: Manufacturer: syz
[  122.094175][ T5622] usb 4-1: SerialNumber: syz
[  122.142288][   T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  122.142338][   T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  122.222845][ T6624] syzkaller0: entered promiscuous mode
[  122.222873][ T6624] syzkaller0: entered allmulticast mode
[  122.325845][ T5693] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  122.341513][ T5622] usb 4-1: unit 5 not found!
[  122.347789][   T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  122.347813][   T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  122.347829][   T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  122.347844][   T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  122.348062][   T25] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  122.353817][   T25] usb 5-1: USB disconnect, device number 13
[  122.437928][ T5622] usb 4-1: disable ehci-hcd to run US-144
[  122.446037][ T5622] usb 4-1: disable ehci-hcd to run US-144
[  122.454064][ T5622] usb 4-1: USB disconnect, device number 15
[  122.474638][ T5693] usb 3-1: Using ep0 maxpacket: 8
[  122.476710][ T5693] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  122.477635][ T5693] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  122.477657][ T5693] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config
[  122.477694][ T5693] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  122.477728][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.479937][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.554837][  T190] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  122.562703][ T5693] usbtmc 3-1:16.0: bulk endpoints not found
[  122.654766][ T5679] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  122.705313][  T190] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  122.716962][  T190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.727106][  T190] usb 1-1: config 0 has no interfaces?
[  122.734130][  T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.734163][  T190] usb 1-1: Product: syz
[  122.734179][  T190] usb 1-1: Manufacturer: syz
[  122.734198][  T190] usb 1-1: SerialNumber: syz
[  122.736925][  T190] usb 1-1: config 0 descriptor??
[  122.805187][ T5679] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  122.806325][ T5679] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  122.806354][ T5679] usb 2-1: config 0 interface 0 has no altsetting 0
[  122.808495][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  122.808516][ T5679] usb 2-1: Product: syz
[  122.808530][ T5679] usb 2-1: Manufacturer: syz
[  122.808542][ T5679] usb 2-1: SerialNumber: syz
[  122.815940][ T5679] usb 2-1: config 0 descriptor??
[  122.822778][ T5679] usb 2-1: selecting invalid altsetting 0
[  122.965530][ T6630] syzkaller0: entered promiscuous mode
[  122.971107][ T6630] syzkaller0: entered allmulticast mode
[  123.159888][  T190] usb 2-1: USB disconnect, device number 20
[  123.162128][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.162483][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.162799][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.163109][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.163442][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.165676][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.166002][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.166341][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.166666][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.166979][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.169382][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.169713][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.170062][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.170383][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.170701][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.171053][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.171378][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.171714][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.172047][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.172366][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.172688][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.173014][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.173327][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.173664][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.173975][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.174282][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.174996][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.175322][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.175651][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.175981][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.176292][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.178110][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.178464][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.178777][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.179226][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.179557][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.179869][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.180189][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.180507][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.180833][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.181173][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.181500][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.181819][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.182133][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.182456][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.182768][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.183089][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.183406][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.183726][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.184036][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.184346][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.186236][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.186575][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.186887][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.187210][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.187528][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.188851][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.189309][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.189632][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.189963][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.190275][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.190593][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.190947][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.191260][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.191577][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.191911][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.192222][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.192541][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.192861][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.193173][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.193501][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.193812][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.194144][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.194472][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.196364][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.196681][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.197005][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.197317][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.197657][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.197978][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.198290][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.198615][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.198926][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.199239][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.201363][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.201682][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.201993][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.202315][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.204076][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  123.204417][ T6635] usb 2-1: cannot submit urb 0, error -19: no device
[  124.035985][ T5693] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  124.154648][  T190] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  124.191701][ T5693] usb 5-1: unable to get BOS descriptor or descriptor too short
[  124.191773][ T5693] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.211679][ T5693] usb 5-1: unable to read config index 0 descriptor/start: -71
[  124.211721][ T5693] usb 5-1: can't read configurations, error -71
[  124.305536][  T190] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  124.315709][  T190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  124.315746][  T190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15073, setting to 1024
[  124.315773][  T190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  124.318502][  T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.318523][  T190] usb 2-1: Product: syz
[  124.318536][  T190] usb 2-1: Manufacturer: syz
[  124.318549][  T190] usb 2-1: SerialNumber: syz
[  124.328407][  T190] usb 2-1: config 0 descriptor??
[  124.330257][ T6628] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  124.330385][ T6628] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  124.554592][ T6628] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  124.555030][ T6628] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  124.757385][  T190] Error reading MAC address
[  124.768496][  T190] usb 2-1: USB disconnect, device number 21
[  124.918837][ T6655] netlink: 'syz.3.300': attribute type 12 has an invalid length.
[  124.918863][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'.
[  124.918911][ T6655] bond0: option primary_reselect: invalid value (97)
[  125.052536][ T6659] syzkaller0: entered promiscuous mode
[  125.052562][ T6659] syzkaller0: entered allmulticast mode
[  125.072868][ T6659] syzkaller0: tun_net_xmit 14
[  125.090330][ T5679] usb 3-1: USB disconnect, device number 13
[  125.236767][ T6663] syzkaller0: entered promiscuous mode
[  125.236791][ T6663] syzkaller0: entered allmulticast mode
[  125.392041][    T9] usb 1-1: USB disconnect, device number 23
[  126.330779][ T6689] syzkaller0: entered promiscuous mode
[  126.330821][ T6689] syzkaller0: entered allmulticast mode
[  126.732562][ T6694] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  126.768823][ T6694] input: syz0 as /devices/virtual/input/input21
[  127.255223][ T5693] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  127.416447][ T5693] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  127.429157][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.429186][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.429222][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.468404][ T5693] usb 5-1: config 0 descriptor??
[  127.552836][ T6706] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  127.823879][ T6711] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.324'.
[  127.925278][ T5693] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  127.925333][ T5693] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  127.925356][ T5693] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  127.925376][ T5693] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  127.925399][ T5693] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  127.925424][ T5693] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  127.925448][ T5693] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  127.930608][ T5693] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[  127.991167][  T190] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  128.118991][ T6717] team0: Port device vxlan0 added
[  128.124923][   T45] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.126011][   T45] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.126057][   T45] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.126116][   T45] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.201006][ T6719] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[  128.278839][  T190] usb 4-1: unable to get BOS descriptor or descriptor too short
[  128.278901][  T190] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  128.296677][  T190] usb 4-1: unable to read config index 0 descriptor/start: -71
[  128.296733][  T190] usb 4-1: can't read configurations, error -71
[  128.322018][ T6722] syzkaller0: entered promiscuous mode
[  128.327711][ T6722] syzkaller0: entered allmulticast mode
[  128.543161][ T6731] syzkaller0: entered promiscuous mode
[  128.543226][ T6731] syzkaller0: entered allmulticast mode
[  128.795927][ T5622] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  128.955519][ T5622] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  128.966768][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  128.978356][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12592, setting to 64
[  128.980878][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.980900][ T5622] usb 2-1: Product: syz
[  128.980913][ T5622] usb 2-1: Manufacturer: syz
[  128.980926][ T5622] usb 2-1: SerialNumber: syz
[  128.991007][ T5622] usb 2-1: config 0 descriptor??
[  128.991777][ T6733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  129.084687][ T5622] rc_core: IR keymap rc-streamzap not found
[  129.084718][ T5622] Registered IR keymap rc-empty
[  129.089856][ T5622] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  129.093716][ T5622] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22
[  129.184773][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  129.212619][ T5622] usb 2-1: USB disconnect, device number 22
[  129.334692][    T9] usb 3-1: Using ep0 maxpacket: 8
[  129.335422][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  129.336388][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.339604][    T9] usb 3-1: config 0 descriptor??
[  129.347227][    T9] usb 3-1: probing VID:PID(0424:012C)   
[  129.350680][    T9] usb 3-1: vub300 testing BULK IN EndPoint(0) 81
[  129.355343][    T9] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02
[  129.355363][    T9] usb 3-1: vub300 testing BULK IN EndPoint(2) 83
[  129.355379][    T9] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04
[  129.355403][    T9] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  129.375920][ T5693] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device
[  129.375970][ T5693] pyra 0003:1E7D:2CF6.000D: couldn't install mouse
[  129.418579][ T5693] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71
[  129.430099][ T5693] usb 5-1: USB disconnect, device number 16
[  129.749053][    T9] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  129.950041][    T9] usb 3-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  130.225480][ T5622] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  130.254641][  T190] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  130.376557][ T5622] usb 4-1: Using ep0 maxpacket: 8
[  130.377222][ T5622] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  130.378981][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  130.379020][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.383660][ T5622] usb 4-1: config 0 descriptor??
[  130.404976][  T190] usb 5-1: Using ep0 maxpacket: 32
[  130.425002][  T190] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.426515][  T190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.426597][  T190] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  130.426619][  T190] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  130.426649][  T190] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  130.426693][  T190] usb 5-1: config 1 interface 1 has no altsetting 0
[  130.430648][  T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.430669][  T190] usb 5-1: Product: syz
[  130.430682][  T190] usb 5-1: Manufacturer: syz
[  130.430695][  T190] usb 5-1: SerialNumber: syz
[  130.462076][  T190] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  130.463914][  T190] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  130.611795][ T5622] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  130.655396][ T6756] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  130.948227][  T190] usb 5-1: USB disconnect, device number 17
[  131.007799][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.567280][ T5692] usb 4-1: USB disconnect, device number 18
[  131.661591][ T6771] af_packet: tpacket_rcv: packet too big, clamped from 131 to 4294967286. macoff=82
[  131.741981][ T6774] netlink: 'syz.0.345': attribute type 39 has an invalid length.
[  131.909481][ T6763] raw-gadget.2 gadget.2: fail, usb_ep_queue returned -108
[  132.116767][ T5693] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  132.117133][ T6781] syzkaller0: entered promiscuous mode
[  132.117156][ T6781] syzkaller0: entered allmulticast mode
[  132.288985][ T5693] usb 2-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43
[  132.302581][ T5693] usb 2-1: config 3 has an invalid interface number: 3 but max is 1
[  132.302633][ T5693] usb 2-1: config 3 has an invalid interface number: 50 but max is 1
[  132.302673][ T5693] usb 2-1: config 3 has no interface number 0
[  132.302691][ T5693] usb 2-1: config 3 has no interface number 1
[  132.302730][ T5693] usb 2-1: config 3 interface 3 has no altsetting 0
[  132.302749][ T5693] usb 2-1: config 3 interface 50 has no altsetting 0
[  132.325552][ T5679] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  132.357861][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.357897][ T5693] usb 2-1: Product: syz
[  132.357925][ T5693] usb 2-1: Manufacturer: syz
[  132.357941][ T5693] usb 2-1: SerialNumber: syz
[  132.486409][ T5679] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  132.500384][ T5679] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  132.500420][ T5679] usb 5-1: config 0 has no interface number 0
[  132.520177][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.520220][ T5679] usb 5-1: Product: syz
[  132.520280][ T5679] usb 5-1: Manufacturer: syz
[  132.520297][ T5679] usb 5-1: SerialNumber: syz
[  132.527258][ T6785] netlink: 14 bytes leftover after parsing attributes in process `syz.0.350'.
[  132.561255][ T5679] usb 5-1: config 0 descriptor??
[  132.629312][ T5693] usb 2-1: unknown number of interfaces: 2
[  132.646388][ T5693] usb 2-1: USB disconnect, device number 23
[  132.689275][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  132.689844][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  132.760590][ T5692] usb 3-1: USB disconnect, device number 14
[  132.777328][    T9] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  132.792465][    T9] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  132.797402][    T9] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  132.834657][   T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  132.984691][   T25] usb 4-1: Using ep0 maxpacket: 8
[  132.991760][   T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  133.002451][   T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  133.009982][   T25] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  133.010021][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  133.010046][   T25] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.010068][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.010117][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  133.010141][   T25] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  133.010165][   T25] usb 4-1: config 168 interface 0 has no altsetting 0
[  133.074640][ T5622] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  133.093343][   T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  133.093378][   T25] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  133.093437][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  133.093463][   T25] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.093486][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.093509][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  133.093532][   T25] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  133.093588][   T25] usb 4-1: config 168 interface 0 has no altsetting 0
[  133.156925][   T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  133.156960][   T25] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  133.156998][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  133.157023][   T25] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.157069][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.157093][   T25] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  133.157116][   T25] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  133.157140][   T25] usb 4-1: config 168 interface 0 has no altsetting 0
[  133.227431][ T5622] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  133.228395][ T5622] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  133.228445][ T5622] usb 1-1: config 0 has no interface number 0
[  133.231812][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.231833][ T5622] usb 1-1: Product: syz
[  133.231846][ T5622] usb 1-1: Manufacturer: syz
[  133.231859][ T5622] usb 1-1: SerialNumber: syz
[  133.244186][ T5622] usb 1-1: config 0 descriptor??
[  133.263255][ T5622] usb 1-1: selecting invalid altsetting 1
[  133.267107][ T5622] dvb_ttusb_budget: ttusb_init_controller: error
[  133.267120][ T5622] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  133.271093][ T5679] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  133.271117][ T5679] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  133.271317][ T5679] asix 5-1:0.251: probe with driver asix failed with error -71
[  133.340870][   T25] usb 4-1: string descriptor 0 read error: -22
[  133.341000][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.405203][ T5679] usb 5-1: USB disconnect, device number 18
[  133.445038][   T25] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  133.447694][ T5622] DVB: Unable to find symbol stv0299_attach()
[  133.489349][ T5692] USB vub300 remote SDIO host controller[0] now disconnected
[  133.512037][ T6794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.512078][ T6794] IPv6: NLM_F_CREATE should be set when creating new route
[  133.569802][ T5622] DVB: Unable to find symbol tda8083_attach()
[  133.569841][ T5622] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  133.633059][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.635238][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.657241][  T190] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  133.770150][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.786495][ T5692] usb 4-1: USB disconnect, device number 19
[  133.788902][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.815297][    C0] 
[  133.817645][    C0] =============================
[  133.822960][    C0] WARNING: suspicious RCU usage
[  133.827878][    C0] syzkaller #0 Tainted: G             L     
[  133.833874][    C0] -----------------------------
[  133.838739][    C0] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section!
[  133.848739][    C0] 
[  133.848739][    C0] other info that might help us debug this:
[  133.848739][    C0] 
[  133.858991][    C0] 
[  133.858991][    C0] rcu_scheduler_active = 2, debug_locks = 1
[  133.867081][    C0] locks held by syz.4.347/6779: 5, last CPU#0:
[  133.873257][    C0]  #0: ffff888025c15cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  133.882399][    C0]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  133.891957][    C0]  #2: ffff88807fc133d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  133.902472][    C0]  #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  133.911921][    C0]  #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  133.922416][    C0] 
[  133.922416][    C0] stack backtrace:
[  133.928345][    C0] CPU: 0 UID: 0 PID: 6779 Comm: syz.4.347 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.939112][    C0] Tainted: [L]=SOFTLOCKUP
[  133.943437][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.953491][    C0] Call Trace:
[  133.956775][    C0]  <IRQ>
[  133.959620][    C0]  dump_stack_lvl+0xe8/0x150
[  133.964231][    C0]  lockdep_rcu_suspicious+0x140/0x1d0
[  133.969616][    C0]  __might_resched+0xbb/0x4c0
[  133.974315][    C0]  ? __cancel_work_sync+0x5c/0x110
[  133.979542][    C0]  __cancel_work_sync+0x6d/0x110
[  133.984510][    C0]  mmc_free_host+0x19/0x30
[  133.988950][    C0]  call_timer_fn+0x18d/0x5f0
[  133.993563][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  134.000259][    C0]  ? call_timer_fn+0xd5/0x5f0
[  134.004955][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  134.010093][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.015312][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  134.022010][    C0]  __run_timer_base+0x652/0x8b0
[  134.026901][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  134.032298][    C0]  ? ktime_get+0x1f5/0x220
[  134.036730][    C0]  ? lapic_next_event+0x11/0x20
[  134.041596][    C0]  run_timer_softirq+0xb7/0x170
[  134.046461][    C0]  handle_softirqs+0x226/0x860
[  134.051248][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  134.056041][    C0]  __irq_exit_rcu+0xcb/0x220
[  134.060652][    C0]  irq_exit_rcu+0x9/0x30
[  134.064909][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  134.070561][    C0]  </IRQ>
[  134.073494][    C0]  <TASK>
[  134.076428][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  134.082419][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  134.087713][    C0] Code: ff ff ff e8 20 39 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 64 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 3c 44 0a cc 48 8d 3d f7 35 da
[  134.107343][    C0] RSP: 0018:ffffc90003b8f2d8 EFLAGS: 00000286
[  134.113421][    C0] RAX: e59af7da5204bd00 RBX: 0000000000000000 RCX: 8000000000000002
[  134.121401][    C0] RDX: 000000000a4f2d11 RSI: ffffffff8e6fd430 RDI: ffffffff8c6d9480
[  134.129384][    C0] RBP: ffff88802fbf1f40 R08: 5d00000000000000 R09: 0000000000000000
[  134.137361][    C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  134.145339][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  134.153335][    C0]  ? pfn_valid+0xba/0x490
[  134.157681][    C0]  pfn_valid+0xd6/0x490
[  134.161848][    C0]  ? pfn_valid+0xba/0x490
[  134.166189][    C0]  page_table_check_clear+0x21/0x500
[  134.171474][    C0]  ? vm_normal_page+0x13c/0x2b0
[  134.176341][    C0]  __zap_vma_range+0x3a12/0x4f80
[  134.181339][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  134.186652][    C0]  ? mas_find+0x6d6/0xcb0
[  134.191007][    C0]  unmap_vmas+0x390/0x550
[  134.195367][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  134.200222][    C0]  ? mas_next_slot+0xc91/0xd70
[  134.205038][    C0]  exit_mmap+0x293/0x9f0
[  134.209300][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  134.214106][    C0]  ? __pfx_exit_aio+0x10/0x10
[  134.218815][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  134.224039][    C0]  __mmput+0x118/0x420
[  134.228127][    C0]  exit_mm+0x221/0x2d0
[  134.232209][    C0]  do_exit+0x6cd/0x2360
[  134.236380][    C0]  ? __pfx_do_exit+0x10/0x10
[  134.240981][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.246045][    C0]  do_group_exit+0x22d/0x2f0
[  134.250638][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.255867][    C0]  get_signal+0x121b/0x12c0
[  134.260406][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  134.265975][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  134.272175][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  134.277559][    C0]  ? rcu_is_watching+0x16/0xb0
[  134.282339][    C0]  do_syscall_64+0x328/0x520
[  134.286938][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.293022][    C0]  ? clear_bhb_loop+0x70/0xc0
[  134.297718][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.303623][    C0] RIP: 0033:0x7f767639e159
[  134.308061][    C0] Code: Unable to access opcode bytes at 0x7f767639e12f.
[  134.315083][    C0] RSP: 002b:00007f76771cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  134.323503][    C0] RAX: fffffffffffffe00 RBX: 00007f7676625fa8 RCX: 00007f767639e159
[  134.331484][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7676625fa8
[  134.339463][    C0] RBP: 00007f7676625fa0 R08: 0000000000000000 R09: 0000000000000000
[  134.347439][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.355418][    C0] R13: 00007f7676626038 R14: 00007f767674f960 R15: 00007f767674fa48
[  134.363411][    C0]  </TASK>
[  134.366616][ 
** replaying previous printk message **
[  134.366616][    C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561
[  134.366638][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6779, name: syz.4.347
[  134.366659][    C0] preempt_count: 102, expected: 0
[  134.366671][    C0] RCU nest depth: 1, expected: 0
[  134.366684][    C0] locks held by syz.4.347/6779: 5, last CPU#0:
[  134.366702][    C0]  #0: ffff888025c15cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  134.366785][    C0]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  134.366862][    C0]  #2: ffff88807fc133d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  134.366951][    C0]  #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  134.367014][    C0]  #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  134.367083][    C0] Preemption disabled at:
[  134.367090][    C0] [<0000000000000000>] 0x0
[  134.367120][    C0] CPU: 0 UID: 0 PID: 6779 Comm: syz.4.347 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  134.367147][    C0] Tainted: [L]=SOFTLOCKUP
[  134.367154][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.367165][    C0] Call Trace:
[  134.367172][    C0]  <IRQ>
[  134.367179][    C0]  dump_stack_lvl+0xe8/0x150
[  134.367206][    C0]  __might_resched+0x36a/0x4c0
[  134.367239][    C0]  __cancel_work_sync+0x6d/0x110
[  134.367272][    C0]  mmc_free_host+0x19/0x30
[  134.367303][    C0]  call_timer_fn+0x18d/0x5f0
[  134.367328][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  134.367355][    C0]  ? call_timer_fn+0xd5/0x5f0
[  134.367379][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  134.367413][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.367443][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  134.367472][    C0]  __run_timer_base+0x652/0x8b0
[  134.367507][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  134.367534][    C0]  ? ktime_get+0x1f5/0x220
[  134.367555][    C0]  ? lapic_next_event+0x11/0x20
[  134.367580][    C0]  run_timer_softirq+0xb7/0x170
[  134.367600][    C0]  handle_softirqs+0x226/0x860
[  134.367629][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  134.367659][    C0]  __irq_exit_rcu+0xcb/0x220
[  134.367686][    C0]  irq_exit_rcu+0x9/0x30
[  134.367712][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  134.367743][    C0]  </IRQ>
[  134.367750][    C0]  <TASK>
[  134.367759][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  134.367782][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  134.367803][    C0] Code: ff ff ff e8 20 39 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 64 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 3c 44 0a cc 48 8d 3d f7 35 da
[  134.367822][    C0] RSP: 0018:ffffc90003b8f2d8 EFLAGS: 00000286
[  134.367841][    C0] RAX: e59af7da5204bd00 RBX: 0000000000000000 RCX: 8000000000000002
[  134.367857][    C0] RDX: 000000000a4f2d11 RSI: ffffffff8e6fd430 RDI: ffffffff8c6d9480
[  134.367872][    C0] RBP: ffff88802fbf1f40 R08: 5d00000000000000 R09: 0000000000000000
[  134.367885][    C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  134.367900][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  134.367930][    C0]  ? pfn_valid+0xba/0x490
[  134.367954][    C0]  pfn_valid+0xd6/0x490
[  134.367974][    C0]  ? pfn_valid+0xba/0x490
[  134.367999][    C0]  page_table_check_clear+0x21/0x500
[  134.368027][    C0]  ? vm_normal_page+0x13c/0x2b0
[  134.368052][    C0]  __zap_vma_range+0x3a12/0x4f80
[  134.368120][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  134.368153][    C0]  ? mas_find+0x6d6/0xcb0
[  134.368190][    C0]  unmap_vmas+0x390/0x550
[  134.368218][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  134.368237][    C0]  ? mas_next_slot+0xc91/0xd70
[  134.368287][    C0]  exit_mmap+0x293/0x9f0
[  134.368317][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  134.368366][    C0]  ? __pfx_exit_aio+0x10/0x10
[  134.368404][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  134.368437][    C0]  __mmput+0x118/0x420
[  134.368466][    C0]  exit_mm+0x221/0x2d0
[  134.368488][    C0]  do_exit+0x6cd/0x2360
[  134.368515][    C0]  ? __pfx_do_exit+0x10/0x10
[  134.368538][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.368576][    C0]  do_group_exit+0x22d/0x2f0
[  134.368594][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.368627][    C0]  get_signal+0x121b/0x12c0
[  134.368674][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  134.368707][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  134.368756][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  134.368779][    C0]  ? rcu_is_watching+0x16/0xb0
[  134.368806][    C0]  do_syscall_64+0x328/0x520
[  134.368826][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.368847][    C0]  ? clear_bhb_loop+0x70/0xc0
[  134.368872][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.368893][    C0] RIP: 0033:0x7f767639e159
[  134.368910][    C0] Code: Unable to access opcode bytes at 0x7f767639e12f.
[  134.368921][    C0] RSP: 002b:00007f76771cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  134.368942][    C0] RAX: fffffffffffffe00 RBX: 00007f7676625fa8 RCX: 00007f767639e159
[  134.368958][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7676625fa8
[  134.368972][    C0] RBP: 00007f7676625fa0 R08: 0000000000000000 R09: 0000000000000000
[  134.368985][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.368997][    C0] R13: 00007f7676626038 R14: 00007f767674f960 R15: 00007f767674fa48
[  134.369036][    C0]  </TASK>
[  134.369232][    C0] 
[  134.893353][    C0] =============================
[  134.898224][    C0] WARNING: suspicious RCU usage
[  134.903089][    C0] syzkaller #0 Tainted: G        W    L     
[  134.909082][    C0] -----------------------------
[  134.913927][    C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!
[  134.925906][    C0] 
[  134.925906][    C0] other info that might help us debug this:
[  134.925906][    C0] 
[  134.936176][    C0] 
[  134.936176][    C0] rcu_scheduler_active = 2, debug_locks = 1
[  134.944225][    C0] locks held by syz.4.347/6779: 5, last CPU#0:
[  134.950405][    C0]  #0: ffff888025c15cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  134.959503][    C0]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  134.969025][    C0]  #2: ffff88807fc133d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  134.979539][    C0]  #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  134.989067][    C0]  #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  134.999550][    C0] 
[  134.999550][    C0] stack backtrace:
[  135.005463][    C0] CPU: 0 UID: 0 PID: 6779 Comm: syz.4.347 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  135.016226][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  135.021413][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  135.031540][    C0] Call Trace:
[  135.034825][    C0]  <IRQ>
[  135.037656][    C0]  dump_stack_lvl+0xe8/0x150
[  135.042241][    C0]  lockdep_rcu_suspicious+0x140/0x1d0
[  135.047608][    C0]  __synchronize_srcu+0x157/0x2f0
[  135.052640][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  135.058185][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  135.063206][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  135.069002][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  135.074541][    C0]  ? synchronize_srcu+0x20a/0x260
[  135.079564][    C0]  wakeup_source_unregister+0x129/0x3f0
[  135.085113][    C0]  mmc_host_classdev_release+0x47/0x100
[  135.090685][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  135.096832][    C0]  device_release+0xc4/0x1f0
[  135.101419][    C0]  kobject_put+0x222/0x550
[  135.105849][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  135.110607][    C0]  call_timer_fn+0x18d/0x5f0
[  135.115226][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  135.121894][    C0]  ? call_timer_fn+0xd5/0x5f0
[  135.126657][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  135.131760][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.136946][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  135.143608][    C0]  __run_timer_base+0x652/0x8b0
[  135.148454][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  135.153814][    C0]  ? ktime_get+0x1f5/0x220
[  135.158218][    C0]  ? lapic_next_event+0x11/0x20
[  135.163066][    C0]  run_timer_softirq+0xb7/0x170
[  135.167911][    C0]  handle_softirqs+0x226/0x860
[  135.172664][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  135.177428][    C0]  __irq_exit_rcu+0xcb/0x220
[  135.182006][    C0]  irq_exit_rcu+0x9/0x30
[  135.186239][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  135.191879][    C0]  </IRQ>
[  135.194795][    C0]  <TASK>
[  135.197723][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.203692][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  135.208985][    C0] Code: ff ff ff e8 20 39 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 64 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 3c 44 0a cc 48 8d 3d f7 35 da
[  135.228576][    C0] RSP: 0018:ffffc90003b8f2d8 EFLAGS: 00000286
[  135.234630][    C0] RAX: e59af7da5204bd00 RBX: 0000000000000000 RCX: 8000000000000002
[  135.242603][    C0] RDX: 000000000a4f2d11 RSI: ffffffff8e6fd430 RDI: ffffffff8c6d9480
[  135.250559][    C0] RBP: ffff88802fbf1f40 R08: 5d00000000000000 R09: 0000000000000000
[  135.258515][    C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  135.266468][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  135.274454][    C0]  ? pfn_valid+0xba/0x490
[  135.278772][    C0]  pfn_valid+0xd6/0x490
[  135.282913][    C0]  ? pfn_valid+0xba/0x490
[  135.287227][    C0]  page_table_check_clear+0x21/0x500
[  135.292500][    C0]  ? vm_normal_page+0x13c/0x2b0
[  135.297354][    C0]  __zap_vma_range+0x3a12/0x4f80
[  135.302304][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  135.307580][    C0]  ? mas_find+0x6d6/0xcb0
[  135.311918][    C0]  unmap_vmas+0x390/0x550
[  135.316254][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  135.321089][    C0]  ? mas_next_slot+0xc91/0xd70
[  135.325854][    C0]  exit_mmap+0x293/0x9f0
[  135.330090][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  135.334855][    C0]  ? __pfx_exit_aio+0x10/0x10
[  135.339536][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  135.344747][    C0]  __mmput+0x118/0x420
[  135.348807][    C0]  exit_mm+0x221/0x2d0
[  135.352870][    C0]  do_exit+0x6cd/0x2360
[  135.357043][    C0]  ? __pfx_do_exit+0x10/0x10
[  135.361617][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  135.366651][    C0]  do_group_exit+0x22d/0x2f0
[  135.371229][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.376414][    C0]  get_signal+0x121b/0x12c0
[  135.380916][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  135.386453][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  135.392603][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  135.397959][    C0]  ? rcu_is_watching+0x16/0xb0
[  135.402738][    C0]  do_syscall_64+0x328/0x520
[  135.407334][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.413395][    C0]  ? clear_bhb_loop+0x70/0xc0
[  135.418061][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.423937][    C0] RIP: 0033:0x7f767639e159
[  135.428334][    C0] Code: Unable to access opcode bytes at 0x7f767639e12f.
[  135.435384][    C0] RSP: 002b:00007f76771cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  135.443817][    C0] RAX: fffffffffffffe00 RBX: 00007f7676625fa8 RCX: 00007f767639e159
[  135.451774][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7676625fa8
[  135.459727][    C0] RBP: 00007f7676625fa0 R08: 0000000000000000 R09: 0000000000000000
[  135.467682][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.475661][    C0] R13: 00007f7676626038 R14: 00007f767674f960 R15: 00007f767674fa48
[  135.483627][    C0]  </TASK>
[  135.486710][    C0] BUG: sleeping function ca
** replaying previous printk message **
[  135.486710][    C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472
[  135.486738][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6779, name: syz.4.347
[  135.486757][    C0] preempt_count: 102, expected: 0
[  135.486765][    C0] RCU nest depth: 1, expected: 0
[  135.486775][    C0] locks held by syz.4.347/6779: 5, last CPU#0:
[  135.486790][    C0]  #0: ffff888025c15cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  135.486855][    C0]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  135.486911][    C0]  #2: ffff88807fc133d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  135.486973][    C0]  #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  135.487024][    C0]  #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  135.487078][    C0] Preemption disabled at:
[  135.487084][    C0] [<0000000000000000>] 0x0
[  135.487110][    C0] CPU: 0 UID: 0 PID: 6779 Comm: syz.4.347 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  135.487140][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  135.487148][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  135.487160][    C0] Call Trace:
[  135.487168][    C0]  <IRQ>
[  135.487176][    C0]  dump_stack_lvl+0xe8/0x150
[  135.487208][    C0]  __might_resched+0x36a/0x4c0
[  135.487246][    C0]  __synchronize_srcu+0x1a1/0x2f0
[  135.487270][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  135.487289][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  135.487329][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  135.487357][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  135.487400][    C0]  ? synchronize_srcu+0x20a/0x260
[  135.487424][    C0]  wakeup_source_unregister+0x129/0x3f0
[  135.487461][    C0]  mmc_host_classdev_release+0x47/0x100
[  135.487497][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  135.487530][    C0]  device_release+0xc4/0x1f0
[  135.487556][    C0]  kobject_put+0x222/0x550
[  135.487581][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  135.487607][    C0]  call_timer_fn+0x18d/0x5f0
[  135.487632][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  135.487660][    C0]  ? call_timer_fn+0xd5/0x5f0
[  135.487683][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  135.487718][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.487746][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  135.487777][    C0]  __run_timer_base+0x652/0x8b0
[  135.487813][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  135.487839][    C0]  ? ktime_get+0x1f5/0x220
[  135.487860][    C0]  ? lapic_next_event+0x11/0x20
[  135.487887][    C0]  run_timer_softirq+0xb7/0x170
[  135.487911][    C0]  handle_softirqs+0x226/0x860
[  135.487942][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  135.487975][    C0]  __irq_exit_rcu+0xcb/0x220
[  135.488003][    C0]  irq_exit_rcu+0x9/0x30
[  135.488028][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  135.488059][    C0]  </IRQ>
[  135.488065][    C0]  <TASK>
[  135.488073][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.488097][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  135.488117][    C0] Code: ff ff ff e8 20 39 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 64 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 3c 44 0a cc 48 8d 3d f7 35 da
[  135.488136][    C0] RSP: 0018:ffffc90003b8f2d8 EFLAGS: 00000286
[  135.488153][    C0] RAX: e59af7da5204bd00 RBX: 0000000000000000 RCX: 8000000000000002
[  135.488168][    C0] RDX: 000000000a4f2d11 RSI: ffffffff8e6fd430 RDI: ffffffff8c6d9480
[  135.488184][    C0] RBP: ffff88802fbf1f40 R08: 5d00000000000000 R09: 0000000000000000
[  135.488198][    C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  135.488213][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  135.488242][    C0]  ? pfn_valid+0xba/0x490
[  135.488266][    C0]  pfn_valid+0xd6/0x490
[  135.488286][    C0]  ? pfn_valid+0xba/0x490
[  135.488309][    C0]  page_table_check_clear+0x21/0x500
[  135.488332][    C0]  ? vm_normal_page+0x13c/0x2b0
[  135.488355][    C0]  __zap_vma_range+0x3a12/0x4f80
[  135.488429][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  135.488460][    C0]  ? mas_find+0x6d6/0xcb0
[  135.488496][    C0]  unmap_vmas+0x390/0x550
[  135.488525][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  135.488543][    C0]  ? mas_next_slot+0xc91/0xd70
[  135.488596][    C0]  exit_mmap+0x293/0x9f0
[  135.488627][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  135.488677][    C0]  ? __pfx_exit_aio+0x10/0x10
[  135.488721][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  135.488753][    C0]  __mmput+0x118/0x420
[  135.488780][    C0]  exit_mm+0x221/0x2d0
[  135.488803][    C0]  do_exit+0x6cd/0x2360
[  135.488831][    C0]  ? __pfx_do_exit+0x10/0x10
[  135.488854][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  135.488891][    C0]  do_group_exit+0x22d/0x2f0
[  135.488910][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.488942][    C0]  get_signal+0x121b/0x12c0
[  135.488988][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  135.489021][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  135.489070][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  135.489091][    C0]  ? rcu_is_watching+0x16/0xb0
[  135.489119][    C0]  do_syscall_64+0x328/0x520
[  135.489138][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.489160][    C0]  ? clear_bhb_loop+0x70/0xc0
[  135.489184][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.489206][    C0] RIP: 0033:0x7f767639e159
[  135.489222][    C0] Code: Unable to access opcode bytes at 0x7f767639e12f.
[  135.489232][    C0] RSP: 002b:00007f76771cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  135.489252][    C0] RAX: fffffffffffffe00 RBX: 00007f7676625fa8 RCX: 00007f767639e159
[  135.489268][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7676625fa8
[  135.489281][    C0] RBP: 00007f7676625fa0 R08: 0000000000000000 R09: 0000000000000000
[  135.489294][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.489307][    C0] R13: 00007f7676626038 R14: 00007f767674f960 R15: 00007f767674fa48
[  135.489338][    C0]  </TASK>
[  135.489349][    C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90003b88000, but annotated.
[  135.490022][    C0] ------------[ cut here ]------------
[  135.490030][    C0] 1
[  135.490040][    C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.4.347/6779
[  136.091455][    C0] Modules linked in:
[  136.095343][    C0] CPU: 0 UID: 0 PID: 6779 Comm: syz.4.347 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  136.106090][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  136.111266][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  136.121306][    C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  136.127193][    C0] Code: cc cc cc 41 ff c7 44 89 3d 49 64 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd d8 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 ad 6e 0a 3b 05 5f
[  136.146791][    C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046
[  136.152855][    C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: e59af7da5204bd00
[  136.160819][    C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  136.168775][    C0] RBP: ffff88802fbf1f60 R08: 0000000000000100 R09: 0000000000080000
[  136.176742][    C0] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: ffff88807e092248
[  136.184699][    C0] R13: ffff888076ac3e00 R14: dffffc0000000000 R15: 0000000000000001
[  136.192660][    C0] FS:  0000000000000000(0000) GS:ffff888124cd8000(0000) knlGS:0000000000000000
[  136.201574][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  136.208143][    C0] CR2: 0000001b33f14ff8 CR3: 000000000eb48000 CR4: 00000000003526f0
[  136.216104][    C0] Call Trace:
[  136.219371][    C0]  <IRQ>
[  136.222204][    C0]  ? __init_swait_queue_head+0xa8/0x150
[  136.227747][    C0]  __synchronize_srcu+0x1d5/0x2f0
[  136.232764][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  136.238303][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  136.243334][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  136.249137][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  136.254683][    C0]  ? synchronize_srcu+0x20a/0x260
[  136.259700][    C0]  wakeup_source_unregister+0x129/0x3f0
[  136.265248][    C0]  mmc_host_classdev_release+0x47/0x100
[  136.270798][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  136.276951][    C0]  device_release+0xc4/0x1f0
[  136.281544][    C0]  kobject_put+0x222/0x550
[  136.285976][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  136.290751][    C0]  call_timer_fn+0x18d/0x5f0
[  136.295361][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  136.302038][    C0]  ? call_timer_fn+0xd5/0x5f0
[  136.306707][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  136.311818][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.317009][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  136.323680][    C0]  __run_timer_base+0x652/0x8b0
[  136.328532][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  136.333901][    C0]  ? ktime_get+0x1f5/0x220
[  136.338313][    C0]  ? lapic_next_event+0x11/0x20
[  136.343164][    C0]  run_timer_softirq+0xb7/0x170
[  136.348012][    C0]  handle_softirqs+0x226/0x860
[  136.352777][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  136.357550][    C0]  __irq_exit_rcu+0xcb/0x220
[  136.362137][    C0]  irq_exit_rcu+0x9/0x30
[  136.366370][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  136.372002][    C0]  </IRQ>
[  136.374923][    C0]  <TASK>
[  136.377847][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  136.383822][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  136.389096][    C0] Code: ff ff ff e8 20 39 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 64 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 3c 44 0a cc 48 8d 3d f7 35 da
[  136.408697][    C0] RSP: 0018:ffffc90003b8f2d8 EFLAGS: 00000286
[  136.414766][    C0] RAX: e59af7da5204bd00 RBX: 0000000000000000 RCX: 8000000000000002
[  136.422739][    C0] RDX: 000000000a4f2d11 RSI: ffffffff8e6fd430 RDI: ffffffff8c6d9480
[  136.430698][    C0] RBP: ffff88802fbf1f40 R08: 5d00000000000000 R09: 0000000000000000
[  136.438661][    C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  136.446624][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  136.454606][    C0]  ? pfn_valid+0xba/0x490
[  136.458936][    C0]  pfn_valid+0xd6/0x490
[  136.463082][    C0]  ? pfn_valid+0xba/0x490
[  136.467403][    C0]  page_table_check_clear+0x21/0x500
[  136.472679][    C0]  ? vm_normal_page+0x13c/0x2b0
[  136.477521][    C0]  __zap_vma_range+0x3a12/0x4f80
[  136.482484][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  136.487767][    C0]  ? mas_find+0x6d6/0xcb0
[  136.492104][    C0]  unmap_vmas+0x390/0x550
[  136.496428][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  136.501265][    C0]  ? mas_next_slot+0xc91/0xd70
[  136.506048][    C0]  exit_mmap+0x293/0x9f0
[  136.510285][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  136.515068][    C0]  ? __pfx_exit_aio+0x10/0x10
[  136.519750][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  136.524949][    C0]  __mmput+0x118/0x420
[  136.529064][    C0]  exit_mm+0x221/0x2d0
[  136.533131][    C0]  do_exit+0x6cd/0x2360
[  136.537294][    C0]  ? __pfx_do_exit+0x10/0x10
[  136.541884][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  136.546916][    C0]  do_group_exit+0x22d/0x2f0
[  136.551521][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.556724][    C0]  get_signal+0x121b/0x12c0
[  136.561245][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  136.566797][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  136.572966][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  136.578339][    C0]  ? rcu_is_watching+0x16/0xb0
[  136.583103][    C0]  do_syscall_64+0x328/0x520
[  136.587683][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.593739][    C0]  ? clear_bhb_loop+0x70/0xc0
[  136.598409][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.604290][    C0] RIP: 0033:0x7f767639e159
[  136.608693][    C0] Code: Unable to access opcode bytes at 0x7f767639e12f.
[  136.615698][    C0] RSP: 002b:00007f76771cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  136.624100][    C0] RAX: fffffffffffffe00 RBX: 00007f7676625fa8 RCX: 00007f767639e159
[  136.632059][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7676625fa8
[  136.640016][    C0] RBP: 00007f7676625fa0 R08: 0000000000000000 R09: 0000000000000000
[  136.647982][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.655939][    C0] R13: 00007f7676626038 R14: 00007f767674f960 R15: 00007f767674fa48
[  136.663926][    C0]  </TASK>
[  136.666935][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  136.674208][    C0] CPU: 0 UID: 0 PID: 6779 Comm: syz.4.347 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  136.684954][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  136.690136][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  136.700176][    C0] Call Trace:
[  136.703441][    C0]  <IRQ>
[  136.706272][    C0]  vpanic+0x56d/0xa60
[  136.710253][    C0]  ? __pfx__printk+0x10/0x10
[  136.714832][    C0]  ? __pfx_vpanic+0x10/0x10
[  136.719330][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  136.724605][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  136.729798][    C0]  panic+0xc5/0xd0
[  136.733515][    C0]  ? __pfx_panic+0x10/0x10
[  136.737940][    C0]  __warn+0x315/0x4c0
[  136.741922][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  136.747209][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  136.752486][    C0]  __report_bug+0x276/0x570
[  136.756990][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  136.762268][    C0]  ? __pfx___report_bug+0x10/0x10
[  136.767291][    C0]  ? __wake_up_klogd+0xf0/0x130
[  136.772138][    C0]  ? vprintk_emit+0x4ee/0x560
[  136.776827][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  136.781842][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  136.787133][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  136.792405][    C0]  report_bug+0x16b/0x220
[  136.796732][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  136.802015][    C0]  ? __debug_object_init+0x2c6/0x3c0
[  136.807311][    C0]  handle_bug+0x9c/0x200
[  136.811565][    C0]  exc_invalid_op+0x1a/0x50
[  136.816070][    C0]  asm_exc_invalid_op+0x1a/0x20
[  136.820934][    C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  136.826828][    C0] Code: cc cc cc 41 ff c7 44 89 3d 49 64 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd d8 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 ad 6e 0a 3b 05 5f
[  136.846433][    C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046
[  136.852496][    C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: e59af7da5204bd00
[  136.860456][    C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  136.868415][    C0] RBP: ffff88802fbf1f60 R08: 0000000000000100 R09: 0000000000080000
[  136.876377][    C0] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: ffff88807e092248
[  136.884340][    C0] R13: ffff888076ac3e00 R14: dffffc0000000000 R15: 0000000000000001
[  136.892323][    C0]  ? __debug_object_init+0x2c3/0x3c0
[  136.897607][    C0]  ? __init_swait_queue_head+0xa8/0x150
[  136.903148][    C0]  __synchronize_srcu+0x1d5/0x2f0
[  136.908164][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  136.913694][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  136.918742][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  136.924550][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  136.930120][    C0]  ? synchronize_srcu+0x20a/0x260
[  136.935137][    C0]  wakeup_source_unregister+0x129/0x3f0
[  136.940685][    C0]  mmc_host_classdev_release+0x47/0x100
[  136.946241][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  136.952400][    C0]  device_release+0xc4/0x1f0
[  136.956985][    C0]  kobject_put+0x222/0x550
[  136.961393][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  136.966148][    C0]  call_timer_fn+0x18d/0x5f0
[  136.970743][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  136.977425][    C0]  ? call_timer_fn+0xd5/0x5f0
[  136.982099][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  136.987213][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.992409][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  136.999081][    C0]  __run_timer_base+0x652/0x8b0
[  137.003933][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  137.009301][    C0]  ? ktime_get+0x1f5/0x220
[  137.013707][    C0]  ? lapic_next_event+0x11/0x20
[  137.018563][    C0]  run_timer_softirq+0xb7/0x170
[  137.023420][    C0]  handle_softirqs+0x226/0x860
[  137.028197][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  137.032961][    C0]  __irq_exit_rcu+0xcb/0x220
[  137.037550][    C0]  irq_exit_rcu+0x9/0x30
[  137.041788][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  137.047423][    C0]  </IRQ>
[  137.050343][    C0]  <TASK>
[  137.053261][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  137.059231][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  137.064508][    C0] Code: ff ff ff e8 20 39 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 64 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 3c 44 0a cc 48 8d 3d f7 35 da
[  137.084103][    C0] RSP: 0018:ffffc90003b8f2d8 EFLAGS: 00000286
[  137.090160][    C0] RAX: e59af7da5204bd00 RBX: 0000000000000000 RCX: 8000000000000002
[  137.098118][    C0] RDX: 000000000a4f2d11 RSI: ffffffff8e6fd430 RDI: ffffffff8c6d9480
[  137.106076][    C0] RBP: ffff88802fbf1f40 R08: 5d00000000000000 R09: 0000000000000000
[  137.114033][    C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  137.121991][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  137.129966][    C0]  ? pfn_valid+0xba/0x490
[  137.134290][    C0]  pfn_valid+0xd6/0x490
[  137.138435][    C0]  ? pfn_valid+0xba/0x490
[  137.142755][    C0]  page_table_check_clear+0x21/0x500
[  137.148026][    C0]  ? vm_normal_page+0x13c/0x2b0
[  137.152867][    C0]  __zap_vma_range+0x3a12/0x4f80
[  137.157832][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  137.163116][    C0]  ? mas_find+0x6d6/0xcb0
[  137.167447][    C0]  unmap_vmas+0x390/0x550
[  137.171777][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  137.176613][    C0]  ? mas_next_slot+0xc91/0xd70
[  137.181396][    C0]  exit_mmap+0x293/0x9f0
[  137.185643][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  137.190418][    C0]  ? __pfx_exit_aio+0x10/0x10
[  137.195109][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  137.200302][    C0]  __mmput+0x118/0x420
[  137.204362][    C0]  exit_mm+0x221/0x2d0
[  137.208421][    C0]  do_exit+0x6cd/0x2360
[  137.212569][    C0]  ? __pfx_do_exit+0x10/0x10
[  137.217163][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  137.222192][    C0]  do_group_exit+0x22d/0x2f0
[  137.226765][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.231960][    C0]  get_signal+0x121b/0x12c0
[  137.236473][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  137.242015][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  137.248177][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  137.253536][    C0]  ? rcu_is_watching+0x16/0xb0
[  137.258293][    C0]  do_syscall_64+0x328/0x520
[  137.262874][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.268936][    C0]  ? clear_bhb_loop+0x70/0xc0
[  137.273602][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.279481][    C0] RIP: 0033:0x7f767639e159
[  137.283884][    C0] Code: Unable to access opcode bytes at 0x7f767639e12f.
[  137.290906][    C0] RSP: 002b:00007f76771cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  137.299314][    C0] RAX: fffffffffffffe00 RBX: 00007f7676625fa8 RCX: 00007f767639e159
[  137.307272][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7676625fa8
[  137.315227][    C0] RBP: 00007f7676625fa0 R08: 0000000000000000 R09: 0000000000000000
[  137.323184][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.331141][    C0] R13: 00007f7676626038 R14: 00007f767674f960 R15: 00007f767674fa48
[  137.339110][    C0]  </TASK>
[  137.342386][    C0] Kernel Offset: disabled
[  137.346702][    C0] Rebooting in 86400 seconds..