last executing test programs:

19.847549581s ago: executing program 3 (id=1407):
r0 = syz_open_dev$usbmon(&(0x7f0000002a40), 0x0, 0x80000)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000002ac0)={&(0x7f0000000000)=[0x0], 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = epoll_create(0xeb5)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x10000000})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80202, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="070000001000010026bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db2020025110100140003006e657464657673696d3000000000000014001680100001800c00030004000000080000000a000100aaaaaaaaaaaa0000"], 0x54}, 0x1, 0x0, 0x0, 0xc051}, 0x48880)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x1, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)
socket(0x1e, 0x4, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x1c3641)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x36f1b45fa508832a)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000100000a0000000500010001e46494c66d69978a7a51000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002c40)=@newtaction={0x48, 0x30, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0xd797c607e107e24b}}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0)

17.625885735s ago: executing program 3 (id=1418):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000180)='X', 0xfee4, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="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", 0x374}, {&(0x7f00000007c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f03f455e96a02001fc3fb089ed9e5234", 0x25}, {&(0x7f0000000900)="201ba88fc9cd069cab08278b13fe8e", 0xf}], 0x3}}], 0x2, 0x0)

17.460437189s ago: executing program 3 (id=1421):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})

17.272523773s ago: executing program 3 (id=1423):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

17.166915086s ago: executing program 3 (id=1424):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0x1006)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
socket$kcm(0x2, 0x7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x6, 0x2001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=ANY=[@ANYBLOB="010000000104012006400002e400000000000000000000000000523f"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x0)

16.333918246s ago: executing program 3 (id=1431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0)

15.843380288s ago: executing program 32 (id=1431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0)

10.38046366s ago: executing program 2 (id=1456):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0x1006)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x123e00, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
socket$kcm(0x2, 0x7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x6, 0x2001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)

8.688720521s ago: executing program 2 (id=1462):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1}, 0x48043)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000840)={0x7, 0x1b, 0x2}, 0xffffff9a)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0)
splice(r3, 0x0, r0, 0x0, 0x317e, 0x4)

8.267822141s ago: executing program 5 (id=1434):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000300)={0xc400000000000000, 0x5000, 0x9, 0xe, 0xff})

8.031521406s ago: executing program 5 (id=1463):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20d42, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x21fd, 0xdd33, 0x0, 0xfffffffffffffffa, 0x81})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000010000037348d94a37f4dc4825b332eb2aa0010000000050000000e0000000e0341b5000100000000095f2e00"], &(0x7f0000000100)=""/188, 0x2d, 0xbc, 0x0, 0x0, 0x10000}, 0x28)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000380)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000004c0))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000780)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000800)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)=""/1})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x40002, 0x0)
pselect6(0x40, &(0x7f0000000940)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000980)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000a00)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

7.597789037s ago: executing program 2 (id=1467):
r0 = syz_open_dev$usbmon(&(0x7f0000002a40), 0x0, 0x80000)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000002ac0)={&(0x7f0000000000)=[0x0], 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = epoll_create(0xeb5)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x10000000})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80202, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="070000001000010026bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db2020025110100140003006e657464657673696d3000000000000014001680100001800c00030004000000080000000a000100aaaaaaaaaaaa0000"], 0x54}, 0x1, 0x0, 0x0, 0xc051}, 0x48880)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x1, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)
socket(0x1e, 0x4, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x1c3641)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x36f1b45fa508832a)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000100000a0000000500010001e46494c66d69978a7a51000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002c40)=@newtaction={0x48, 0x30, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0xd797c607e107e24b}}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0)

7.06213533s ago: executing program 5 (id=1469):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0)

6.523467313s ago: executing program 5 (id=1472):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x155081)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24004045)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000a882, 0x0)
r3 = dup(r2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r4, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20)

4.914765982s ago: executing program 5 (id=1478):
unshare(0x28000600)
r0 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0)
mq_notify(r0, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0})
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
personality(0x400000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xcc5e, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x52, 0x8c}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r2)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r4, 0x4b3d, 0x0)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)

4.291326217s ago: executing program 2 (id=1480):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1}, 0x48043)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000840)={0x7, 0x1b, 0x2}, 0xffffff9a)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0)
splice(r3, 0x0, r0, 0x0, 0x317e, 0x4)
write$tun(r1, &(0x7f00000008c0)=ANY=[], 0x11b0)

3.664325832s ago: executing program 1 (id=1481):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x27, '\x00', @st={0x4, [{0x3, @uvalue=0x5}, {0x3, @uvalue=0x1000000000}, {0x2, @svalue=0x1}, {0x1, @uvalue=0x3}]}, 0x5}]})

3.552464594s ago: executing program 0 (id=1482):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}}, 0x40)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002780)={'syzkaller0\x00', @random="2b0100004ec6"})

3.285586041s ago: executing program 1 (id=1484):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489, 0x10122}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4017}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
shmget(0x1, 0x1000, 0x1, &(0x7f00003ae000/0x1000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000340)={0x30, 0xd, {0x54, 0x8, 0x2000, {0x3, 0xfff}, {0x4, 0x1}, @period={0x5d, 0x8000, 0x6, 0x548, 0x9, {0x0, 0x3, 0x4, 0x7}, 0x0, 0x0}}, {0x57, 0x4, 0x7, {0x0, 0xe0}, {0x10, 0x9}, @period={0x59, 0xbbbf, 0x0, 0x0, 0x2624, {0x800, 0x1ff, 0x513, 0x40}, 0x0, 0x0}}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, &(0x7f00000005c0)={0xffffffff, [[0x64ab, 0x0, 0x0, 0x8, 0x40000200, 0x0, 0x54bf, 0xfffffffd], [0x800004, 0x0, 0x101, 0xfffffffc, 0x81, 0x3, 0x9, 0xe], [0xffffffff, 0x4000008, 0x44, 0x2, 0x1, 0x4, 0x8]], '\x00', [{0x0, 0x3}, {0x3}, {0x400, 0x80000000}, {0xfffffffa}, {0x7fffffff}, {0x2, 0x22c685d5}, {0xf68b}, {0x1, 0xfffffff8}, {0xc51, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7334486a, 0x401}, {0xffffffff}, {0xffffffff, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x20})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000008c0))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000980)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
read$FUSE(r2, &(0x7f0000010e40)={0x2020}, 0x2020)

3.218314293s ago: executing program 4 (id=1485):
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='cdg', 0x3)
sendto$inet(0xffffffffffffffff, &(0x7f0000000440), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000480)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

3.187699423s ago: executing program 2 (id=1486):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x3, 0x1, 0x0, 0x0, 0x6}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, 0xf})
r3 = fcntl$dupfd(r1, 0x0, r1)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$snddsp(r3, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

3.071335006s ago: executing program 0 (id=1487):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x40)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002840)={{0xb, 0x1, 0x3f00, 0x6, '\x00', 0x10000}, 0x3, 0x2, 0x4, 0x0, 0x0, 0x8, 'syz0\x00', 0x0})
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
syz_usb_connect(0x0, 0x24, &(0x7f00000029c0)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x1, 0x3, &(0x7f0000002ac0)=ANY=[], &(0x7f0000002b80)='GPL\x00', 0x1, 0xc3, &(0x7f0000002bc0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000002cc0), 0x8, 0x10, &(0x7f0000002d00), 0x10}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = creat(&(0x7f0000003000)='./bus\x00', 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000003040)=""/75)
r3 = openat(0xffffffffffffff9c, &(0x7f00000030c0)='./file0\x00', 0x2d41, 0xd5)
mount$fuse(0x0, &(0x7f0000003140)='./file0\x00', &(0x7f0000000040), 0x1042, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES64, @ANYRESHEX=r1, @ANYBLOB='|', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000000800)={0x2020}, 0xffffffffffffffc2)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000005300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000007300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r4, 0x11c, 0x2, 0xfffffffffffffffe, &(0x7f00000001c0)=0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000007400)='./file0\x00', 0x109081, 0x4e)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007440)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa34741845808000000fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab24ed74ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320bf6350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1586303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd6559e01f868e4d96d68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c57c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21e977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58a59320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea0010000805f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1105a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d434293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738a42258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f0000009440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000002ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x48, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x33, 0x45, "e2b766fc5593dc4ab2d0f68c8cc40600de95cef392bf8910ab10bc71032942a062e13ec783c6a764e1b861e097ae0d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
fsetxattr$system_posix_acl(r2, &(0x7f0000009540)='system.posix_acl_default\x00', &(0x7f0000009580)=ANY=[@ANYBLOB="020000000010"], 0xfe44, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d40)={r1, 0xe0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffe4d, 0x10, 0x8, 0x0, 0x0}}, 0x10)

2.991571958s ago: executing program 4 (id=1488):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x21dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.93550445s ago: executing program 5 (id=1489):
r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0xfffc, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x203b6}}], 0x50}, 0x200040c4)
syz_clone(0x20000, &(0x7f0000000080)="d40286349404b0a434d657a5deb0abb64e4eada4f7085901120d1ffc6c662ee1e5c8fa6fe79ec23a6313bd5028bd6005a04d202b3ae7cc14adb9406654", 0x3d, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x8008976)
socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r4, &(0x7f0000000180)=@known='security.selinux\x00')
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00"], 0x30}}, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000140), 0xffffffffffffffff, 0x2e2502)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x02\x00\x00\x00\x00\x00\x00', 0x6)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x113502, 0x0)
syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

2.804296543s ago: executing program 4 (id=1490):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000180)='X', 0xfee4, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="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", 0x382}, {&(0x7f00000007c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f03f455e96a02001fc3fb089ed9e5234", 0x25}, {&(0x7f0000000900)="201ba88fc9cd069cab08278b13fe8e", 0xf}], 0x3}}], 0x2, 0x0)

2.49356282s ago: executing program 4 (id=1491):
r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000180)={0xf0f03c, 0x1})

2.119675049s ago: executing program 4 (id=1492):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
set_mempolicy(0x3, 0x0, 0x40)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000680)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x4e22, @empty}, 0x10)
r2 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[], 0xfffffdef}}, 0x1)

1.803196727s ago: executing program 2 (id=1493):
madvise(&(0x7f0000cf9000/0x4000)=nil, 0x4000, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000000480), 0x800001d, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x2000005, 0x810, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

1.574119083s ago: executing program 0 (id=1494):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x1000, 0x2, 0x3})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000680)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@decrefs], 0x0, 0x0, 0x0})

1.383183267s ago: executing program 1 (id=1495):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000640)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000700)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x8, 0x0, &(0x7f00000007c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000840)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.25963817s ago: executing program 0 (id=1496):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1}, 0x48043)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400000600"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000840)={0x7, 0x1b, 0x2}, 0xffffff9a)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0)
splice(r3, 0x0, r0, 0x0, 0x317e, 0x4)
write$tun(r1, &(0x7f00000008c0)=ANY=[], 0x11b0)

1.072657085s ago: executing program 1 (id=1497):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x89}, 0x8)

831.29266ms ago: executing program 1 (id=1498):
socket$can_bcm(0x1d, 0x2, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})

785.422652ms ago: executing program 4 (id=1499):
unshare(0x28000600)
r0 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0)
mq_notify(r0, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0})
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
personality(0x400000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xcc5e, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x52, 0x8c}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r2)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r4, 0x4b3d, 0x0)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)

250.622634ms ago: executing program 0 (id=1500):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r0, 0x1)

52.984009ms ago: executing program 1 (id=1501):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000180)='X', 0xfee4, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="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", 0x37f}, {&(0x7f00000007c0)="439e9c06fc666cabc8569d63", 0xc}, {&(0x7f0000000900)="201ba88fc9cd069cab08278b13fe8ee410ceeab4c8a41b66d55c1d71cdc74dfe41d1a658357da26eff4b", 0x2a}], 0x3}}], 0x2, 0x0)

0s ago: executing program 0 (id=1502):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a80)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0x1c}], 0x1, 0x0, 0x0, 0x840}, 0x0)

kernel console output (not intermixed with test programs):

: syz
[  242.743009][  T130] usb 2-1: SerialNumber: syz
[  242.760785][  T130] usb 2-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  242.771130][  T130] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  242.781776][  T130] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  242.789797][  T130] usb 2-1: media controller created
[  242.812616][  T130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  242.833608][  T130] usb 2-1: selecting invalid altsetting 1
[  242.839403][  T130] set interface failed
[  242.839436][  T130] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  242.852800][  T130] error writing reg: 0xff, val: 0x00
[  242.875227][  T130] dvb_usb_mxl111sf: probe of 2-1:2.0 failed with error -22
[  243.267144][   T26] audit: type=1326 audit(1792048741.378:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.862" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d06b9e559 code=0x0
[  243.518098][ T4363] usb 2-1: USB disconnect, device number 38
[  244.481119][ T4359] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  244.519474][ T6941] futex_wake_op: syz.1.869 tries to shift op by -1; fix this program
[  244.692868][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.704267][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.714570][ T4359] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  244.724146][  T130] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  244.732480][ T4359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.749331][ T4359] usb 3-1: config 0 descriptor??
[  244.805204][ T1175] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  244.813684][ T4363] usb 5-1: USB disconnect, device number 43
[  244.953318][  T130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.963891][  T130] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  244.979139][  T130] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  244.988603][  T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.004420][  T130] usb 1-1: config 0 descriptor??
[  245.016711][  T130] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  245.028992][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.040279][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.051304][ T1175] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  245.070334][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.091338][ T1175] usb 2-1: config 0 descriptor??
[  245.144891][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.871'.
[  245.156194][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.871'.
[  245.220306][ T4363] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  245.378287][ T4359] usb 3-1: language id specifier not provided by device, defaulting to English
[  245.414791][ T4363] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  245.426436][ T4363] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  245.436469][ T4363] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  245.445679][ T4363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.463818][ T6944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  245.711583][ T1175] usb 2-1: language id specifier not provided by device, defaulting to English
[  245.778258][  T130] usb 5-1: USB disconnect, device number 44
[  245.784985][ T4359] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71
[  245.795959][ T4359] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71
[  245.805431][ T4359] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71
[  245.817502][ T4359] uclogic 0003:256C:006D.000E: failed probing parameters: -71
[  245.826470][ T4359] uclogic: probe of 0003:256C:006D.000E failed with error -71
[  245.861151][ T4359] usb 3-1: USB disconnect, device number 44
[  246.120801][ T1175] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input24
[  246.275545][ T1175] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input25
[  246.364635][ T1175] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input26
[  246.417097][ T1175] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input27
[  246.480081][ T1175] uclogic 0003:256C:006D.000F: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  246.515347][ T1175] usb 2-1: USB disconnect, device number 39
[  246.561319][   T26] audit: type=1326 audit(1792048744.678:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.3.877" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c0f9e559 code=0x0
[  246.800362][  T130] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  246.848730][ T6971] fido_id[6971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  246.900269][ T4359] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  247.024548][  T130] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  247.045797][  T130] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.059543][  T130] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  247.086194][  T130] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.102252][ T4359] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  247.120513][ T4359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.137627][ T4359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  247.152466][  T130] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  247.169695][ T4359] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.182787][  T130] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  247.192997][  T130] usb 3-1: Product: syz
[  247.197690][  T130] usb 3-1: Manufacturer: syz
[  247.204652][ T4359] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  247.214803][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  247.233220][  T130] cdc_wdm 3-1:1.0: skipping garbage
[  247.238520][  T130] cdc_wdm 3-1:1.0: skipping garbage
[  247.247130][ T4359] usb 5-1: Product: syz
[  247.251780][  T130] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  247.262407][ T4359] usb 5-1: Manufacturer: syz
[  247.281182][ T4359] cdc_wdm 5-1:1.0: skipping garbage
[  247.286464][ T4359] cdc_wdm 5-1:1.0: skipping garbage
[  247.292192][ T4359] cdc_wdm: probe of 5-1:1.0 failed with error -22
[  247.453575][ T4359] usb 3-1: USB disconnect, device number 45
[  247.486890][ T1175] usb 5-1: USB disconnect, device number 45
[  247.494351][ T4363] usb 1-1: USB disconnect, device number 28
[  247.815531][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.882'.
[  247.824777][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.882'.
[  248.070503][ T6986] device syzkaller0 entered promiscuous mode
[  248.590430][ T1175] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  248.784289][ T1175] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  248.828713][ T1175] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  248.846833][   T26] audit: type=1326 audit(1792048746.958:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c0f9e559 code=0x0
[  248.877522][ T1175] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  248.908647][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.938634][ T6993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  249.363726][  T127] usb 3-1: USB disconnect, device number 46
[  250.065053][ T4359] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  250.138327][ T7021] device syzkaller0 entered promiscuous mode
[  250.270468][ T4359] usb 4-1: Using ep0 maxpacket: 8
[  250.282092][ T4359] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  250.303156][ T1175] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  250.320473][ T4359] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  250.340232][ T4359] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  250.355285][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.501826][ T1175] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  250.515561][ T1175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.526633][ T1175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  250.547176][ T1175] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.563771][  T127] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  250.581642][ T1175] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.602401][ T1175] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  250.623666][ T1175] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  250.639768][ T1175] usb 3-1: Product: syz
[  250.645420][ T1175] usb 3-1: Manufacturer: syz
[  250.665245][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  250.674330][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  250.693948][ T1175] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  250.699992][ T1175] cdc_wdm 3-1:1.0: Unknown control protocol
[  250.764439][  T127] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  250.779071][  T127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.793742][  T127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  250.803707][  T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.832538][  T127] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  250.847210][  T127] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  250.857702][  T127] usb 2-1: Product: syz
[  250.871231][ T7019] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[  250.877989][  T127] usb 2-1: Manufacturer: syz
[  250.928786][ T4261] usb 3-1: USB disconnect, device number 47
[  250.936640][ T7031] cdc_wdm 3-1:1.0: Error submitting int urb - -19
[  250.952140][  T127] cdc_wdm 2-1:1.0: skipping garbage
[  250.962075][  T127] cdc_wdm 2-1:1.0: skipping garbage
[  250.997417][  T127] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  251.007038][  T127] cdc_wdm 2-1:1.0: Unknown control protocol
[  251.139082][  T127] usb 2-1: USB disconnect, device number 40
[  251.698497][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'.
[  251.708853][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'.
[  251.790476][  T127] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  251.841084][ T4356] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  251.982845][  T127] usb 1-1: config 0 interface 0 has no altsetting 0
[  251.991976][  T127] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  252.006497][  T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.019279][  T127] usb 1-1: config 0 descriptor??
[  252.053018][ T4356] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  252.077787][ T4356] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  252.105827][ T4356] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  252.130971][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.169429][ T7046] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  252.560293][ T4356] usb 3-1: USB disconnect, device number 48
[  252.583406][ T7055] device syzkaller0 entered promiscuous mode
[  252.838014][ T4359] usb 4-1: USB disconnect, device number 36
[  253.223255][ T7072] futex_wake_op: syz.1.914 tries to shift op by -1; fix this program
[  253.510292][ T4359] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  253.701948][ T4359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.718493][ T4359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.728362][ T4359] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  253.737865][ T4356] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  253.757347][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.770996][ T4359] usb 2-1: config 0 descriptor??
[  253.902853][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'.
[  253.912221][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'.
[  253.958481][ T4356] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  253.974438][ T4356] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.993453][ T4356] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  254.007952][ T4356] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.030413][ T4356] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  254.039936][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  254.055431][ T4356] usb 3-1: Product: syz
[  254.059785][ T4356] usb 3-1: Manufacturer: syz
[  254.080749][ T4356] cdc_wdm 3-1:1.0: skipping garbage
[  254.087956][ T4356] cdc_wdm 3-1:1.0: skipping garbage
[  254.119082][ T4356] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  254.131629][ T4356] cdc_wdm 3-1:1.0: Unknown control protocol
[  254.289652][  T130] usb 3-1: USB disconnect, device number 49
[  254.394634][ T4359] usb 2-1: language id specifier not provided by device, defaulting to English
[  254.470282][ T4356] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  254.596882][  T127] usbhid 1-1:0.0: can't add hid device: -71
[  254.613141][  T127] usbhid: probe of 1-1:0.0 failed with error -71
[  254.643726][  T127] usb 1-1: USB disconnect, device number 29
[  254.680218][ T4356] usb 5-1: Using ep0 maxpacket: 8
[  254.688518][ T4356] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  254.716392][ T4356] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  254.737620][ T4356] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  254.754674][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.779171][ T7089] device syzkaller0 entered promiscuous mode
[  254.811297][ T4359] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0010/input/input29
[  254.903092][ T4359] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0010/input/input30
[  254.947120][ T4359] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0010/input/input31
[  254.999245][ T4359] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0010/input/input32
[  255.042199][ T7095] fuse: Bad value for 'fd'
[  255.088750][ T4359] uclogic 0003:256C:006D.0010: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  255.170572][ T4359] usb 2-1: USB disconnect, device number 41
[  255.373636][ T7098] fido_id[7098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  255.400280][  T127] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  255.573673][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  255.580068][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  255.592763][  T127] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  255.604086][  T127] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  255.614635][  T127] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  255.624772][  T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.640611][ T7097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  256.001590][ T4348] usb 1-1: USB disconnect, device number 30
[  256.903900][  T127] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  256.920279][ T4359] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  257.092578][  T127] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.111761][ T4359] usb 4-1: config 0 interface 0 has no altsetting 0
[  257.118488][ T4359] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  257.128600][  T127] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  257.148035][  T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.152029][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.169630][  T127] usb 1-1: Product: syz
[  257.179656][  T127] usb 1-1: Manufacturer: syz
[  257.193910][ T4359] usb 4-1: config 0 descriptor??
[  257.208062][  T127] usb 1-1: SerialNumber: syz
[  257.237992][  T127] kaweth 1-1:1.0: couldn't find required endpoints
[  257.270722][  T127] usb 5-1: USB disconnect, device number 46
[  257.339056][ T7136] fuse: Bad value for 'fd'
[  257.586047][ T4261] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  257.778633][ T4261] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  257.797468][ T4261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  257.815142][ T4261] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  257.825956][ T4261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.853292][ T4261] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  257.873814][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  257.894085][ T4261] usb 3-1: Product: syz
[  257.904124][ T4261] usb 3-1: Manufacturer: syz
[  257.924079][ T4261] cdc_wdm 3-1:1.0: skipping garbage
[  257.934987][ T4261] cdc_wdm 3-1:1.0: skipping garbage
[  257.954968][ T4261] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  257.968149][ T4261] cdc_wdm 3-1:1.0: Unknown control protocol
[  258.103144][   T26] audit: type=1326 audit(1792048756.218:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.1.938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739879e559 code=0x0
[  258.134331][ T4261] usb 3-1: USB disconnect, device number 50
[  259.845658][ T1175] usb 1-1: USB disconnect, device number 31
[  260.420280][ T1175] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  260.620367][ T1175] usb 1-1: Using ep0 maxpacket: 8
[  260.631873][ T1175] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  260.735169][ T4359] usbhid 4-1:0.0: can't add hid device: -71
[  260.746213][ T4359] usbhid: probe of 4-1:0.0 failed with error -71
[  260.775464][ T1175] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  260.798239][ T4359] usb 4-1: USB disconnect, device number 37
[  260.808580][ T1175] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  260.870822][ T1175] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  260.900740][ T1175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.953752][ T1175] usbtmc 1-1:16.0: bulk endpoints not found
[  261.520332][ T4359] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  261.623895][   T26] audit: type=1326 audit(1792048759.738:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.4.950" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96859e559 code=0x0
[  261.722236][ T4359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.744766][ T4359] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  261.767275][ T4359] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  261.793863][ T4359] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  261.817284][ T4359] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  261.840511][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.370500][ T1175] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  262.571726][ T1175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.582331][ T1175] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  262.595970][ T1175] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  262.606624][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.627919][ T1175] usb 2-1: config 0 descriptor??
[  262.641974][ T1175] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  262.891082][ T4359] [drm] Initialized gud 1.0.0 20200422 for 4-1:1.0 on minor 2
[  263.033102][ T4261] usb 1-1: USB disconnect, device number 32
[  263.214644][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.956'.
[  263.227903][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.956'.
[  263.335410][ T4359] gud 4-1:1.0: [drm] fb1: guddrmfb frame buffer device
[  263.376118][ T4359] usb 4-1: USB disconnect, device number 38
[  264.789433][   T26] audit: type=1326 audit(1792048762.898:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.2.964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d06b9e559 code=0x0
[  265.101289][    T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  265.177253][ T4359] usb 2-1: USB disconnect, device number 42
[  265.302083][    T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  265.343850][    T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  265.370708][    T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  265.388003][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.409184][ T7240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  265.700419][ T4359] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  265.831732][    T7] usb 1-1: USB disconnect, device number 33
[  265.910363][ T4359] usb 2-1: Using ep0 maxpacket: 8
[  265.921009][ T4359] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  265.946963][ T4359] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  265.959362][ T4359] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  265.976371][ T4359] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  265.988450][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.017450][ T4359] usbtmc 2-1:16.0: bulk endpoints not found
[  266.870367][ T4261] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  267.080316][ T4261] usb 1-1: Using ep0 maxpacket: 16
[  267.090586][ T4261] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  267.125351][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.147205][ T4261] usb 1-1: Product: syz
[  267.156071][ T4261] usb 1-1: Manufacturer: syz
[  267.166490][ T4261] usb 1-1: SerialNumber: syz
[  267.399379][ T4261] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  267.435382][ T4261] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  267.459339][ T4261] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  267.470334][ T4261] usb 1-1: media controller created
[  267.478250][ T7277] fuse: Invalid rootmode
[  267.499355][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  267.542288][ T4261] zl10353_read_register: readreg error (reg=127, ret==-71)
[  267.605673][ T4261] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5
[  267.650533][ T4261] usb 1-1: USB disconnect, device number 34
[  267.678878][ T7281] binder: 7280:7281 ioctl 4018620d 0 returned -22
[  267.801068][    T7] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  268.002571][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.025372][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.062301][    T7] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  268.077979][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.102574][    T7] usb 3-1: config 0 descriptor??
[  268.377063][  T127] usb 2-1: USB disconnect, device number 43
[  268.520696][    T7] usbhid 3-1:0.0: can't add hid device: -71
[  268.536982][    T7] usbhid: probe of 3-1:0.0 failed with error -71
[  268.571448][    T7] usb 3-1: USB disconnect, device number 51
[  268.740240][ T4261] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  268.942544][ T4261] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  268.960271][  T127] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  268.968057][ T4261] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  268.983302][ T4261] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  268.997120][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.019590][ T7293] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  269.171820][  T127] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  269.188508][  T127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.204424][  T127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  269.208201][ T7301] futex_wake_op: syz.2.986 tries to shift op by -1; fix this program
[  269.218015][  T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.243107][  T127] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  269.302399][  T127] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  269.326141][  T127] usb 2-1: Product: syz
[  269.341058][  T127] usb 2-1: Manufacturer: syz
[  269.364064][  T127] cdc_wdm 2-1:1.0: skipping garbage
[  269.379006][  T127] cdc_wdm 2-1:1.0: skipping garbage
[  269.398873][  T127] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  269.414000][  T127] cdc_wdm 2-1:1.0: Unknown control protocol
[  269.498055][  T127] usb 5-1: USB disconnect, device number 47
[  269.530351][    T7] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  269.572956][ T1175] usb 2-1: USB disconnect, device number 44
[  269.762049][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.778424][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.798339][    T7] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  269.812645][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.834589][    T7] usb 3-1: config 0 descriptor??
[  270.224682][ T7310] fuse: Invalid rootmode
[  270.275958][ T7312] binder: 7311:7312 ioctl 4018620d 0 returned -22
[  270.450595][    T7] usb 3-1: language id specifier not provided by device, defaulting to English
[  270.787595][ T1175] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  270.862558][    T7] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0011/input/input34
[  270.874904][  T130] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  270.924776][    T7] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0011/input/input35
[  270.949675][    T7] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0011/input/input36
[  270.974528][    T7] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0011/input/input37
[  270.999161][    T7] uclogic 0003:256C:006D.0011: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  271.018530][ T1175] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.049379][ T1175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  271.070299][  T130] usb 1-1: Using ep0 maxpacket: 8
[  271.109020][  T130] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  271.145620][ T1175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  271.163749][  T130] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  271.229290][ T1175] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  271.254958][  T130] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  271.296140][ T1175] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  271.314625][  T130] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  271.338611][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.349373][  T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.421958][  T130] usbtmc 1-1:16.0: bulk endpoints not found
[  271.443482][  T130] usb 3-1: USB disconnect, device number 52
[  271.730054][ T7330] device syzkaller0 entered promiscuous mode
[  272.395151][ T1175] [drm] Initialized gud 1.0.0 20200422 for 2-1:1.0 on minor 2
[  272.614103][ T1175] gud 2-1:1.0: [drm] fb1: guddrmfb frame buffer device
[  272.623945][ T1175] usb 2-1: USB disconnect, device number 45
[  273.021080][ T7350] fuse: Bad value for 'rootmode'
[  273.260245][ T1175] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  273.442174][ T1175] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  273.462857][ T1175] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  273.477394][ T1175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.486132][ T1175] usb 5-1: Product: syz
[  273.497102][ T1175] usb 5-1: Manufacturer: syz
[  273.502140][ T1175] usb 5-1: SerialNumber: syz
[  273.520438][ T1175] kaweth 5-1:1.0: couldn't find required endpoints
[  273.604186][ T1175] usb 1-1: USB disconnect, device number 35
[  273.844047][ T7367] device syzkaller0 entered promiscuous mode
[  274.223926][ T7382] fuse: Bad value for 'rootmode'
[  275.240338][  T127] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  275.330428][ T4261] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  275.441706][  T127] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  275.453064][  T127] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  275.463544][  T127] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  275.472919][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.491732][ T7395] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  275.512039][ T4261] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  275.522909][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.587433][ T4261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  275.605560][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.633546][ T4261] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  275.645876][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  275.654585][ T4261] usb 2-1: Product: syz
[  275.658796][ T4261] usb 2-1: Manufacturer: syz
[  275.679403][ T4261] cdc_wdm 2-1:1.0: skipping garbage
[  275.684970][ T4261] cdc_wdm 2-1:1.0: skipping garbage
[  275.700825][ T4261] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  275.706805][ T4261] cdc_wdm 2-1:1.0: Unknown control protocol
[  275.867966][ T4261] usb 4-1: USB disconnect, device number 39
[  275.896237][ T4348] usb 2-1: USB disconnect, device number 46
[  276.008275][ T7408] device syzkaller0 entered promiscuous mode
[  276.049628][ T1175] usb 5-1: USB disconnect, device number 48
[  277.460664][ T7448] device syzkaller0 entered promiscuous mode
[  277.670454][ T1175] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  277.861922][ T1175] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  277.880646][ T1175] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  277.921787][ T1175] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  277.971855][ T1175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.980917][ T1175] usb 1-1: Product: syz
[  277.987145][ T1175] usb 1-1: Manufacturer: syz
[  277.993504][ T1175] usb 1-1: SerialNumber: syz
[  278.090271][ T4261] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  278.242587][ T1175] kaweth 1-1:1.0: Firmware present in device.
[  278.287351][ T4261] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  278.319726][ T4261] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  278.335205][ T4261] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  278.356836][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.399694][ T7456] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  278.431122][ T1175] kaweth 1-1:1.0: Error reading configuration (-32), no net device created
[  278.460359][ T1175] kaweth: probe of 1-1:1.0 failed with error -5
[  278.774348][ T4261] usb 4-1: USB disconnect, device number 40
[  279.084015][ T7467] fuse: Unknown parameter 'use00000000000000000000'
[  279.379252][ T7476] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  279.832415][ T7485] device syzkaller0 entered promiscuous mode
[  280.427175][   T26] audit: type=1326 audit(1792048778.538:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.2.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d06b9e559 code=0x0
[  280.497229][ T4363] usb 1-1: USB disconnect, device number 36
[  280.955948][ T7502] fuse: Unknown parameter 'use00000000000000000000'
[  281.390299][ T7514] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  281.554355][ T7516] device syzkaller0 entered promiscuous mode
[  283.167532][ T7547] fuse: Unknown parameter 'use00000000000000000000'
[  283.547193][ T7553] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  283.635768][ T1175] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  283.674750][ T7557] device syzkaller0 entered promiscuous mode
[  283.846288][ T1175] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  283.886044][ T1175] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  283.906516][ T1175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.944474][ T1175] usb 1-1: config 0 descriptor??
[  283.983055][ T1175] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  284.800287][ T4261] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  284.865491][ T7583] fuse: Unknown parameter 'user_i00000000000000000000'
[  284.981722][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.993019][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.003189][ T4261] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  285.012803][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.035432][ T4261] usb 5-1: config 0 descriptor??
[  285.448415][ T4261] usbhid 5-1:0.0: can't add hid device: -71
[  285.458202][ T4261] usbhid: probe of 5-1:0.0 failed with error -71
[  285.484761][ T4261] usb 5-1: USB disconnect, device number 49
[  285.677082][ T7597] device syzkaller0 entered promiscuous mode
[  286.044510][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'.
[  286.061617][   T26] audit: type=1326 audit(1792048784.178:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.1.1087" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739879e559 code=0x0
[  286.365746][ T4261] usb 1-1: USB disconnect, device number 37
[  286.429434][ T7616] fuse: Unknown parameter 'user_i00000000000000000000'
[  287.070272][ T4356] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  287.101255][ T1175] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  287.117361][ T7631] device syzkaller0 entered promiscuous mode
[  287.235520][ T4356] usb 4-1: device descriptor read/64, error -71
[  287.300335][ T1175] usb 3-1: Using ep0 maxpacket: 8
[  287.307501][ T1175] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  287.322064][ T1175] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  287.336856][ T1175] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  287.349545][ T1175] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  287.364878][ T1175] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  287.382170][ T1175] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  287.397873][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.421582][ T1175] usbtmc 3-1:16.0: bulk endpoints not found
[  287.540474][ T4356] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  287.586815][   T26] audit: type=1326 audit(1792048785.698:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.0.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x0
[  287.700255][ T4356] usb 4-1: device descriptor read/64, error -71
[  287.820374][ T4356] usb usb4-port1: attempt power cycle
[  288.250218][ T4356] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  288.290871][ T4356] usb 4-1: device descriptor read/8, error -71
[  288.570362][ T4356] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  288.611182][ T4356] usb 4-1: device descriptor read/8, error -71
[  288.648118][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'.
[  288.740931][ T4356] usb usb4-port1: unable to enumerate USB device
[  289.486783][   T26] audit: type=1326 audit(1792048787.598:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96859e559 code=0x0
[  289.548781][ T7671] device syzkaller0 entered promiscuous mode
[  289.875723][ T4356] usb 3-1: USB disconnect, device number 53
[  290.067466][   T26] audit: type=1326 audit(1792048788.178:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.1112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d06b9e559 code=0x0
[  290.300230][ T1175] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  290.418609][   T26] audit: type=1326 audit(1792048788.528:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.4.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96859e559 code=0x0
[  290.492208][ T1175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.503126][ T1175] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  290.514202][ T1175] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  290.526644][ T1175] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  290.540949][ T1175] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  290.556403][ T1175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.051547][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'.
[  291.598729][ T1175] gud 4-1:1.0: USB-1: Failed to add properties (ret=-71)
[  291.607250][ T1175] gud 4-1:1.0: Failed to get connectors (error=-71)
[  291.614266][ T1175] gud: probe of 4-1:1.0 failed with error -71
[  291.649548][ T1175] usb 4-1: USB disconnect, device number 45
[  292.010557][ T7715] fuse: Unknown parameter 'user_id00000000000000000000'
[  292.137606][   T26] audit: type=1326 audit(1792048790.248:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.2.1124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d06b9e559 code=0x0
[  292.250425][ T4261] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  292.260766][  T127] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  292.373985][   T26] audit: type=1326 audit(1792048790.488:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.4.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96859e559 code=0x0
[  292.432577][  T127] usb 2-1: device descriptor read/64, error -71
[  292.465830][ T4261] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  292.480309][ T4261] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.500207][ T4261] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  292.519790][ T4261] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.545416][ T4261] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  292.561375][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  292.570644][ T4261] usb 1-1: Product: syz
[  292.574877][ T4261] usb 1-1: Manufacturer: syz
[  292.596178][ T4261] cdc_wdm 1-1:1.0: skipping garbage
[  292.601612][ T4261] cdc_wdm 1-1:1.0: skipping garbage
[  292.617198][ T4261] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  292.623500][ T4261] cdc_wdm 1-1:1.0: Unknown control protocol
[  292.635363][   T26] audit: type=1326 audit(1792048790.748:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.1129" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c0f9e559 code=0x0
[  292.700304][  T127] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  292.801961][ T1175] usb 1-1: USB disconnect, device number 38
[  292.850320][  T127] usb 2-1: device descriptor read/64, error -71
[  292.970443][  T127] usb usb2-port1: attempt power cycle
[  293.395758][  T127] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  293.460742][  T127] usb 2-1: device descriptor read/8, error -71
[  293.548439][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'.
[  293.563740][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'.
[  293.696772][ T7748] fuse: Unknown parameter 'user_id00000000000000000000'
[  293.730399][  T127] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  293.771026][  T127] usb 2-1: device descriptor read/8, error -71
[  293.889943][   T26] audit: type=1326 audit(1792048791.998:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.3.1137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c0f9e559 code=0x0
[  293.923757][  T127] usb usb2-port1: unable to enumerate USB device
[  294.395266][   T26] audit: type=1326 audit(1792048792.508:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.0.1140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x0
[  294.911657][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'.
[  294.925344][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'.
[  295.045807][ T7778] fuse: Bad value for 'fd'
[  295.280275][  T127] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  295.472155][  T127] usb 5-1: config 0 interface 0 has no altsetting 0
[  295.479267][  T127] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  295.491990][ T1175] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  295.499025][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.524067][  T127] usb 5-1: config 0 descriptor??
[  295.694260][ T1175] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  295.724465][ T1175] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  295.756082][ T1175] usb 1-1: Product: syz
[  295.762832][ T1175] usb 1-1: Manufacturer: syz
[  295.767632][ T1175] usb 1-1: SerialNumber: syz
[  295.813513][ T1175] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  295.837978][ T1175] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  295.862243][ T1175] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  295.869904][ T1175] usb 1-1: media controller created
[  295.904477][ T1175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  295.949979][ T1175] usb 1-1: selecting invalid altsetting 1
[  295.959355][ T1175] set interface failed
[  295.959384][ T1175] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  295.989563][ T1175] error writing reg: 0xff, val: 0x00
[  296.097566][ T1175] dvb_usb_mxl111sf: probe of 1-1:2.0 failed with error -22
[  296.289177][   T26] audit: type=1326 audit(1792048794.398:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.2.1153" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d06b9e559 code=0x0
[  296.588091][ T1175] usb 1-1: USB disconnect, device number 39
[  296.742160][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1155'.
[  296.752032][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1155'.
[  296.871061][ T7808] fuse: Bad value for 'fd'
[  297.298739][   T26] audit: type=1326 audit(1792048795.408:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.3.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c0f9e559 code=0x0
[  299.110696][  T127] usbhid 5-1:0.0: can't add hid device: -71
[  299.118469][  T127] usbhid: probe of 5-1:0.0 failed with error -71
[  299.170844][  T127] usb 5-1: USB disconnect, device number 50
[  299.238012][ T7841] fuse: Bad value for 'fd'
[  299.243060][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'.
[  299.298785][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'.
[  299.414172][ T7844] futex_wake_op: syz.3.1169 tries to shift op by -1; fix this program
[  299.481739][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'.
[  299.513647][ T7846] netlink: 'syz.4.1170': attribute type 1 has an invalid length.
[  299.533495][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'.
[  299.768266][ T1175] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  299.862994][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.871422][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.916121][   T26] audit: type=1326 audit(1792048798.028:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.4.1174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96859e559 code=0x0
[  299.991014][ T1175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.018453][ T7868] fuse: Bad value for 'fd'
[  300.024281][ T1175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.047544][ T1175] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  300.091850][ T1175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.131938][ T1175] usb 4-1: config 0 descriptor??
[  300.171514][ T7871] ip_tables: iptables: counters copy to user failed while replacing table
[  300.520279][ T4348] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  300.738279][ T4348] usb 2-1: config 0 interface 0 has no altsetting 0
[  300.747343][ T4348] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  300.758316][ T1175] usb 4-1: language id specifier not provided by device, defaulting to English
[  300.791615][ T7878] fuse: Unknown parameter '0x0000000000000004'
[  300.807591][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.836897][ T4348] usb 2-1: config 0 descriptor??
[  301.064770][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'.
[  301.109684][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'.
[  301.171602][ T1175] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71
[  301.186400][ T1175] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71
[  301.206208][ T1175] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71
[  301.227005][ T1175] uclogic 0003:256C:006D.0012: failed probing parameters: -71
[  301.245100][ T1175] uclogic: probe of 0003:256C:006D.0012 failed with error -71
[  301.283490][ T1175] usb 4-1: USB disconnect, device number 46
[  302.070237][ T1175] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  302.162260][ T7901] fuse: Bad value for 'fd'
[  302.264856][ T1175] usb 4-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  302.292469][ T1175] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  302.347162][ T1175] usb 4-1: Product: syz
[  302.365721][ T1175] usb 4-1: Manufacturer: syz
[  302.375497][ T1175] usb 4-1: SerialNumber: syz
[  302.419996][ T7905] fuse: Unknown parameter '0x0000000000000004'
[  302.433102][ T1175] usb 4-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  302.495336][ T1175] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  302.557270][ T1175] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  302.569282][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'.
[  302.585831][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'.
[  302.595293][ T1175] usb 4-1: media controller created
[  302.663974][   T26] audit: type=1326 audit(1792048800.778:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.2.1192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d06b9e559 code=0x0
[  302.675888][ T1175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  302.803911][ T1175] usb 4-1: selecting invalid altsetting 1
[  302.824198][ T1175] set interface failed
[  302.824264][ T1175] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  302.875123][ T1175] error writing reg: 0xff, val: 0x00
[  302.962263][ T1175] dvb_usb_mxl111sf: probe of 4-1:2.0 failed with error -22
[  303.180513][ T1175] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  303.201437][  T130] usb 4-1: USB disconnect, device number 47
[  303.372068][ T1175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.403175][ T1175] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  303.435346][ T1175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.494465][ T1175] usb 5-1: config 0 descriptor??
[  303.533687][ T1175] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  303.720270][  T130] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  303.880304][ T1175] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  303.910285][  T130] usb 4-1: Using ep0 maxpacket: 8
[  303.917725][  T130] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  303.936497][ T4348] usbhid 2-1:0.0: can't add hid device: -71
[  303.944942][ T4348] usbhid: probe of 2-1:0.0 failed with error -71
[  303.965357][ T4348] usb 2-1: USB disconnect, device number 51
[  303.976987][  T130] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  304.030779][  T130] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  304.042736][  T130] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  304.079318][  T130] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  304.102561][  T130] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  304.119539][  T130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.134278][ T1175] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  304.157526][ T1175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.202875][  T130] usbtmc 4-1:16.0: bulk endpoints not found
[  304.209246][ T1175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  304.232044][ T7923] capability: warning: `syz.1.1198' uses 32-bit capabilities (legacy support in use)
[  304.254912][ T1175] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.305854][ T1175] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  304.317078][ T1175] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  304.326409][ T1175] usb 3-1: Product: syz
[  304.347193][ T1175] usb 3-1: Manufacturer: syz
[  304.371289][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  304.376571][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  304.398261][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  304.418610][ T1175] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  304.574137][ T1175] usb 3-1: USB disconnect, device number 54
[  305.180317][ T1175] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  305.363320][ T4356] usb 5-1: USB disconnect, device number 51
[  305.372137][ T1175] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  305.412445][ T1175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  305.450464][ T1175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  305.479521][ T1175] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  305.496272][ T7936] fuse: Bad value for 'fd'
[  305.513307][ T1175] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  305.527096][ T1175] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  305.540049][ T1175] usb 3-1: Product: syz
[  305.549299][ T1175] usb 3-1: Manufacturer: syz
[  305.586089][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  305.602202][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  305.616988][ T1175] cdc_wdm 3-1:1.0: skipping garbage
[  305.629426][ T1175] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  306.376104][ T4348] usb 4-1: USB disconnect, device number 48
[  306.454682][ T7948] fuse: Unknown parameter '0x0000000000000004'
[  306.806095][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'.
[  306.845447][ T7952] netlink: 'syz.4.1205': attribute type 1 has an invalid length.
[  306.866691][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'.
[  306.960985][ T4348] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  307.184235][ T4348] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  307.215315][ T4348] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.246843][ T7958] binder: 7956:7958 unknown command 1074553619
[  307.268418][ T4348] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  307.288463][ T7958] binder: 7956:7958 ioctl c0306201 200000000740 returned -22
[  307.306780][ T4348] usb 4-1: config 0 interface 0 has no altsetting 0
[  307.317723][ T4348] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  307.330379][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.350766][ T4363] usb 3-1: USB disconnect, device number 55
[  307.366244][ T4348] usb 4-1: config 0 descriptor??
[  307.740255][ T4363] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  307.805462][ T4348] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.0013/input/input40
[  307.898013][ T4348] lenovo 0003:17EF:6047.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[  307.945128][ T4363] usb 3-1: config 0 interface 0 has no altsetting 0
[  307.957810][ T4363] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  308.019559][ T4363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.057070][ T4363] usb 3-1: config 0 descriptor??
[  308.149259][  T127] usb 4-1: USB disconnect, device number 49
[  308.262589][ T7979] fido_id[7979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  308.350340][ T4348] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  308.394487][ T7985] rxe_eth0 speed is unknown, defaulting to 1000
[  308.560210][ T4348] usb 2-1: Using ep0 maxpacket: 8
[  308.567705][ T4348] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  308.586262][ T4348] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  308.613463][ T4348] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  308.637914][ T4348] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  308.663654][ T4348] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  308.686703][ T4348] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  308.737871][ T4348] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  308.770303][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.826357][ T4348] usbtmc: probe of 2-1:16.0 failed with error -22
[  310.280311][ T4261] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  310.482179][ T4261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.510402][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  310.555810][ T4261] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  310.608139][ T4261] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.649437][ T4261] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  310.673814][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.046780][ T1175] usb 2-1: USB disconnect, device number 52
[  311.335479][ T4261] gud 5-1:1.0: Failed to get properties (error=-5)
[  311.351015][ T4261] gud: probe of 5-1:1.0 failed with error -5
[  311.389487][   T26] audit: type=1326 audit(1792048809.498:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.3.1220" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c0f9e559 code=0x0
[  311.666593][ T4363] usbhid 3-1:0.0: can't add hid device: -71
[  311.678992][ T4363] usbhid: probe of 3-1:0.0 failed with error -71
[  311.708320][ T4363] usb 3-1: USB disconnect, device number 56
[  311.771180][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'.
[  312.680426][   T36] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  312.892130][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.905740][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.921875][   T36] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  312.932800][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.962195][   T36] usb 1-1: config 0 descriptor??
[  313.041666][ T4356] usb 5-1: USB disconnect, device number 52
[  313.388600][   T36] usbhid 1-1:0.0: can't add hid device: -71
[  313.402486][   T36] usbhid: probe of 1-1:0.0 failed with error -71
[  313.434107][   T36] usb 1-1: USB disconnect, device number 40
[  313.530427][ T4356] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  313.541750][ T8050] binder: 8049:8050 ioctl 4018620d 0 returned -22
[  313.730498][ T4356] usb 5-1: Using ep0 maxpacket: 8
[  313.737693][ T4356] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  313.761274][ T4356] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  313.795575][ T4356] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  313.827040][ T8057] futex_wake_op: syz.3.1234 tries to shift op by -1; fix this program
[  313.842703][ T4356] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  313.857834][ T4356] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  313.901234][ T4356] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  313.976022][ T4356] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  314.022842][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.080828][ T4356] usbtmc: probe of 5-1:16.0 failed with error -22
[  314.147091][ T4363] nvmet: connect request for invalid subsystem testsubsys!
[  314.156259][ T8061] fuse: Bad value for 'user_id'
[  314.164973][ T8054] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  314.316855][ T8066] tipc: Started in network mode
[  314.324989][ T8066] tipc: Node identity d265bd0cce76, cluster identity 4711
[  314.332675][ T8066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.341229][ T8066] device syzkaller0 entered promiscuous mode
[  314.350439][ T1175] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  314.383706][ T8066] tipc: Resetting bearer <eth:syzkaller0>
[  314.398294][ T8065] tipc: Resetting bearer <eth:syzkaller0>
[  314.425769][ T8065] tipc: Disabling bearer <eth:syzkaller0>
[  314.542136][ T1175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.560142][ T1175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.580223][ T1175] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  314.589329][ T1175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.628671][ T1175] usb 4-1: config 0 descriptor??
[  314.690456][ T8074] fuse: Unknown parameter 'fd0x0000000000000004'
[  315.100250][   T36] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  315.240908][ T1175] usb 4-1: language id specifier not provided by device, defaulting to English
[  315.300333][   T36] usb 1-1: Using ep0 maxpacket: 16
[  315.307965][   T36] usb 1-1: config 0 interface 0 has no altsetting 0
[  315.320278][   T36] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  315.331010][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.354751][   T36] usb 1-1: config 0 descriptor??
[  315.449232][ T1175] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71
[  315.450964][ T8081] binder: 8080:8081 ioctl 4018620d 0 returned -22
[  315.469726][ T1175] uclogic 0003:256C:006D.0014: failed probing parameters: -71
[  315.477722][ T1175] uclogic: probe of 0003:256C:006D.0014 failed with error -71
[  315.508225][ T1175] usb 4-1: USB disconnect, device number 50
[  315.560356][ T4356] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  315.710330][ T4356] usb 2-1: device descriptor read/64, error -71
[  315.840277][  T127] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  315.981248][ T4356] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  315.990468][  T127] usb 3-1: device descriptor read/64, error -71
[  316.125573][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'.
[  316.136889][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'.
[  316.150234][ T4356] usb 2-1: device descriptor read/64, error -71
[  316.189863][ T1175] usb 5-1: USB disconnect, device number 53
[  316.270354][  T127] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  316.271559][ T4356] usb usb2-port1: attempt power cycle
[  316.386204][   T36] usbhid 1-1:0.0: can't add hid device: -71
[  316.394699][   T36] usbhid: probe of 1-1:0.0 failed with error -71
[  316.414093][   T36] usb 1-1: USB disconnect, device number 41
[  316.430201][  T127] usb 3-1: device descriptor read/64, error -71
[  316.554522][  T127] usb usb3-port1: attempt power cycle
[  316.580612][ T8098] fuse: Unknown parameter 'fd0x0000000000000004'
[  316.624200][ T8100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.631873][ T8100] device syzkaller0 entered promiscuous mode
[  316.650181][  T130] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  316.658677][ T8100] tipc: Resetting bearer <eth:syzkaller0>
[  316.668674][ T8099] tipc: Resetting bearer <eth:syzkaller0>
[  316.704601][ T8099] tipc: Disabling bearer <eth:syzkaller0>
[  316.715742][   T26] audit: type=1326 audit(1792048814.828:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  316.730255][ T4356] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  316.745166][   T26] audit: type=1326 audit(1792048814.858:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  316.778673][   T26] audit: type=1326 audit(1792048814.888:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  316.841790][  T130] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  316.854179][  T130] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.865549][ T4356] usb 2-1: device descriptor read/8, error -71
[  316.874541][   T26] audit: type=1326 audit(1792048814.888:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  316.905463][   T26] audit: type=1326 audit(1792048814.888:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  316.929386][    C1] vkms_vblank_simulate: vblank timer overrun
[  316.929739][  T130] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  316.953333][   T26] audit: type=1326 audit(1792048814.888:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  316.977289][    C1] vkms_vblank_simulate: vblank timer overrun
[  316.989273][  T127] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  317.000308][   T26] audit: type=1326 audit(1792048814.888:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  317.030377][   T26] audit: type=1326 audit(1792048814.888:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  317.042686][  T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.056453][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.077460][  T127] usb 3-1: device descriptor read/8, error -71
[  317.085083][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  317.094680][   T26] audit: type=1326 audit(1792048814.888:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  317.119115][   T26] audit: type=1326 audit(1792048814.888:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x7ffc0000
[  317.122270][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'.
[  317.143161][    C1] vkms_vblank_simulate: vblank timer overrun
[  317.161166][  T130] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  317.170436][ T4356] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  317.187810][  T130] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  317.196109][  T130] usb 4-1: Product: syz
[  317.200461][  T130] usb 4-1: Manufacturer: syz
[  317.210903][ T4356] usb 2-1: device descriptor read/8, error -71
[  317.236139][  T130] cdc_wdm 4-1:1.0: skipping garbage
[  317.245814][  T130] cdc_wdm 4-1:1.0: skipping garbage
[  317.264780][  T130] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  317.276508][  T130] cdc_wdm 4-1:1.0: Unknown control protocol
[  317.333456][ T4356] usb usb2-port1: unable to enumerate USB device
[  317.360304][  T127] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  317.400706][  T127] usb 3-1: device descriptor read/8, error -71
[  317.520526][  T127] usb usb3-port1: unable to enumerate USB device
[  317.840250][  T130] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  318.000260][  T130] usb 2-1: device descriptor read/64, error -71
[  318.180217][ T4356] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  318.290452][  T130] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  318.372165][ T4356] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  318.387400][ T4356] usb 5-1: config 0 has no interface number 0
[  318.403308][ T4356] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  318.428334][ T4356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.448207][ T4356] usb 5-1: Product: syz
[  318.454329][  T130] usb 2-1: device descriptor read/64, error -71
[  318.461830][ T4356] usb 5-1: Manufacturer: syz
[  318.469796][ T4356] usb 5-1: SerialNumber: syz
[  318.483237][ T4356] usb 5-1: config 0 descriptor??
[  318.595162][  T130] usb usb2-port1: attempt power cycle
[  318.694832][ T4356] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  318.724376][ T4356] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  318.749939][ T4356] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  318.763538][ T4356] usb 5-1: media controller created
[  318.811078][ T4356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  319.020301][  T130] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  319.071150][  T130] usb 2-1: device descriptor read/8, error -71
[  319.278663][ T8129] fuse: Unknown parameter 'fd0x0000000000000004'
[  319.342945][ T1175] usb 4-1: USB disconnect, device number 51
[  319.370440][  T130] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  319.411679][  T130] usb 2-1: device descriptor read/8, error -71
[  319.531174][  T130] usb usb2-port1: unable to enumerate USB device
[  319.971756][ T4356] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  320.053379][ T4356] usb 5-1: USB disconnect, device number 54
[  321.370330][ T4356] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  321.572157][ T4356] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  321.590168][ T4356] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  321.616146][ T4356] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  321.644530][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.887632][   T36] usb 5-1: USB disconnect, device number 55
[  322.070215][  T127] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  322.250277][ T4261] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  322.261989][  T127] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  322.274305][  T127] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  322.283192][  T127] usb 1-1: Product: syz
[  322.287389][  T127] usb 1-1: Manufacturer: syz
[  322.298300][  T127] usb 1-1: SerialNumber: syz
[  322.314532][  T127] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  322.343161][  T127] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  322.360572][  T127] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  322.376729][  T127] usb 1-1: media controller created
[  322.433732][ T4261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.469790][ T4261] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  322.487319][  T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  322.501032][ T4261] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  322.529350][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.546599][  T127] usb 1-1: selecting invalid altsetting 1
[  322.554388][  T127] set interface failed
[  322.554416][  T127] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  322.582457][ T4261] usb 4-1: config 0 descriptor??
[  322.597438][  T127] error writing reg: 0xff, val: 0x00
[  322.667855][  T127] dvb_usb_mxl111sf: probe of 1-1:2.0 failed with error -22
[  322.778402][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  322.778417][   T26] audit: type=1326 audit(1792048820.888:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.1.1281" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739879e559 code=0x0
[  323.003607][   T36] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  323.101700][ T4356] usb 1-1: USB disconnect, device number 42
[  323.237249][   T36] usb 5-1: config 0 has no interfaces?
[  323.243270][   T36] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  323.272468][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.306380][   T36] usb 5-1: config 0 descriptor??
[  323.490669][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.530274][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.550736][   T36] usb 5-1: USB disconnect, device number 56
[  323.564377][ T1175] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  323.606592][ T8207] fuse: Bad value for 'fd'
[  323.718529][ T4261] Bluetooth: Can't get state to change to load ram patch err
[  323.733693][ T4261] Bluetooth: Loading patch file failed
[  323.744782][ T4261] ath3k: probe of 4-1:0.0 failed with error -71
[  323.755884][ T4261] usb 4-1: USB disconnect, device number 52
[  323.770364][ T1175] usb 3-1: Using ep0 maxpacket: 16
[  323.785843][ T1175] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.816803][ T1175] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.835194][ T1175] usb 3-1: config 0 interface 0 has no altsetting 0
[  323.846971][ T1175] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  323.858090][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.877213][ T1175] usb 3-1: config 0 descriptor??
[  324.317965][ T1175] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  324.340186][ T1175] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  324.360730][ T1175] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  324.369715][ T1175] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  324.376917][ T1175] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  324.385551][ T1175] mcp2221 0003:04D8:00DD.0015: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  324.599562][ T1175] usb 3-1: USB disconnect, device number 61
[  324.700318][ T4261] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  324.908223][ T4261] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  324.930630][ T4261] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  324.957444][ T4261] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  324.987509][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.266462][ T1175] usb 5-1: USB disconnect, device number 57
[  325.410328][ T4261] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  325.460685][ T8237] fuse: Bad value for 'fd'
[  325.612704][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.627953][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  325.652319][ T4261] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  325.662396][ T4261] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  325.675543][ T4261] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  325.686405][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.769430][ T8244] kvm: emulating exchange as write
[  326.010270][  T127] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  326.028558][ T8251] fuse: Bad value for 'fd'
[  326.118351][ T4261] gud 2-1:1.0: No supported pixel formats found
[  326.135198][ T4261] gud: probe of 2-1:1.0 failed with error -22
[  326.215144][  T127] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  326.233247][  T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.250921][  T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  326.260921][  T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.282598][  T127] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  326.294017][  T127] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  326.303088][  T127] usb 1-1: Product: syz
[  326.307305][  T127] usb 1-1: Manufacturer: syz
[  326.346637][  T127] cdc_wdm 1-1:1.0: skipping garbage
[  326.353759][  T127] cdc_wdm 1-1:1.0: skipping garbage
[  326.369806][  T127] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  326.386508][  T127] cdc_wdm 1-1:1.0: Unknown control protocol
[  327.721772][ T8270] fuse: Bad value for 'fd'
[  328.160191][ T1175] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  328.216118][    T7] usb 2-1: USB disconnect, device number 61
[  328.365979][ T1175] usb 5-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  328.384662][ T1175] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  328.397749][ T1175] usb 5-1: Product: syz
[  328.405597][ T1175] usb 5-1: Manufacturer: syz
[  328.419793][ T1175] usb 5-1: SerialNumber: syz
[  328.439660][ T1175] usb 5-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  328.466647][ T1175] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  328.470813][ T4261] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  328.489508][ T1175] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  328.501437][ T1175] usb 5-1: media controller created
[  328.538413][ T1175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  328.578778][ T1175] usb 5-1: selecting invalid altsetting 1
[  328.591133][ T1175] set interface failed
[  328.591163][ T1175] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  328.613129][ T1175] error writing reg: 0xff, val: 0x00
[  328.677959][ T1175] dvb_usb_mxl111sf: probe of 5-1:2.0 failed with error -22
[  328.702543][ T4261] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  328.758169][ T4261] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  328.786069][ T4261] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  328.807812][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.809589][ T1175] usb 1-1: USB disconnect, device number 43
[  329.090258][  T127] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  329.121060][ T4261] usb 3-1: USB disconnect, device number 62
[  329.152157][ T1175] usb 5-1: USB disconnect, device number 58
[  329.290341][    T7] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  329.302160][  T127] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  329.313577][  T127] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.324013][  T127] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  329.337885][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  329.345373][  T127] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  329.358876][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.378022][  T127] usb 4-1: config 0 descriptor??
[  329.509066][    T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  329.517795][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  329.528483][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  329.537749][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.549031][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.561143][    T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  329.570759][    T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  329.581051][    T7] usb 2-1: Product: syz
[  329.585269][    T7] usb 2-1: Manufacturer: syz
[  329.596498][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  329.601921][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  329.611808][    T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  329.638801][    T7] cdc_wdm 2-1:1.0: Unknown control protocol
[  329.810978][    T7] usb 2-1: USB disconnect, device number 62
[  329.819719][  T127] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.0016/input/input42
[  329.905137][  T127] lenovo 0003:17EF:6047.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[  330.365479][    T7] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  330.563159][    T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  330.579096][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.620416][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  330.654303][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.691481][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.731030][    T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  330.760168][    T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  330.768258][    T7] usb 2-1: Product: syz
[  330.793771][    T7] usb 2-1: Manufacturer: syz
[  330.821233][  T127] usb 3-1: new low-speed USB device number 63 using dummy_hcd
[  330.836354][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  330.855277][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  330.883066][    T7] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device
[  330.904464][    T7] cdc_wdm 2-1:1.0: Unknown control protocol
[  331.015162][  T127] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  331.035190][  T127] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  331.067249][  T127] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  331.112337][  T127] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  331.127899][  T127] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  331.139224][  T127] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  331.151933][  T127] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  331.159372][  T127] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  331.180285][  T127] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  331.194506][  T127] usb 3-1: string descriptor 0 read error: -22
[  331.204928][  T127] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  331.219259][  T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.258014][  T127] adutux 3-1:168.0: interrupt endpoints not found
[  331.624090][    T7] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  331.641862][ T8330] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1329'.
[  331.764206][ T4348] usb 4-1: USB disconnect, device number 53
[  331.826164][    T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  331.844568][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.861182][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  331.876061][    T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.893500][    T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  331.905937][    T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  331.914802][    T7] usb 5-1: Product: syz
[  331.919014][    T7] usb 5-1: Manufacturer: syz
[  331.929645][    T7] cdc_wdm 5-1:1.0: skipping garbage
[  331.937505][    T7] cdc_wdm 5-1:1.0: skipping garbage
[  331.949645][    T7] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  331.957751][    T7] cdc_wdm 5-1:1.0: Unknown control protocol
[  332.250264][ T4348] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  332.448831][ T4348] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  332.490212][ T4348] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  332.516903][ T4348] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  332.580371][ T4348] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  332.609813][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.639931][ T4261] usb 2-1: USB disconnect, device number 63
[  332.704367][ T4348] snd-usb-audio: probe of 4-1:27.0 failed with error -2
[  332.735441][ T4472] udevd[4472]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  332.875449][ T4261] usb 4-1: USB disconnect, device number 54
[  333.490398][ T4348] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  333.562036][  T127] usb 3-1: USB disconnect, device number 63
[  333.690222][ T4348] usb 1-1: Using ep0 maxpacket: 32
[  333.701855][ T4348] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  333.732656][ T4348] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  333.772327][ T4348] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  333.795794][ T4348] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  333.823621][ T4348] usb 1-1: config 0 interface 0 has no altsetting 0
[  333.851326][ T4348] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  333.874046][ T4348] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  333.896319][ T4348] usb 1-1: Product: syz
[  333.905255][ T4348] usb 1-1: Manufacturer: syz
[  333.915154][ T4348] usb 1-1: SerialNumber: syz
[  333.933393][ T4348] usb 1-1: config 0 descriptor??
[  333.976436][ T4348] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  334.008606][ T4348] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  334.242706][ T8364] futex_wake_op: syz.1.1340 tries to shift op by -1; fix this program
[  334.484250][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  334.485014][    T7] usb 5-1: USB disconnect, device number 59
[  334.490891][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  334.490911][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  334.602959][ T4359] usb 1-1: USB disconnect, device number 44
[  334.616088][ T4359] ldusb 1-1:0.0: LD USB Device #1 now disconnected
[  334.700193][ T4348] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  334.903739][ T4348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.921597][ T4348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.934749][ T4348] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  334.940773][  T130] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  334.980228][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.019872][ T4348] usb 2-1: config 0 descriptor??
[  335.152308][  T130] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  335.165980][  T130] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  335.199893][  T130] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  335.247535][  T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.309950][  T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.348280][  T130] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  335.375025][  T130] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  335.386880][  T130] usb 4-1: Product: syz
[  335.393721][  T130] usb 4-1: Manufacturer: syz
[  335.431329][  T130] cdc_wdm 4-1:1.0: skipping garbage
[  335.436599][  T130] cdc_wdm 4-1:1.0: skipping garbage
[  335.454585][  T130] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  335.466186][  T130] cdc_wdm 4-1:1.0: Unknown control protocol
[  335.631783][  T127] usb 4-1: USB disconnect, device number 55
[  335.638846][ T4348] usb 2-1: language id specifier not provided by device, defaulting to English
[  335.870193][ T4261] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  336.042376][ T4348] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71
[  336.061048][ T4348] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71
[  336.072142][ T4261] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  336.089819][ T4261] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  336.099967][ T4348] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71
[  336.143936][ T4261] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  336.153774][ T4348] uclogic 0003:256C:006D.0017: failed probing parameters: -71
[  336.180297][ T4348] uclogic: probe of 0003:256C:006D.0017 failed with error -71
[  336.187985][ T4261] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  336.202037][  T127] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  336.221849][ T4348] usb 2-1: USB disconnect, device number 64
[  336.228069][ T4261] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  336.245813][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.412271][  T127] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  336.421163][ T4363] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  336.456337][  T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  336.526147][  T127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  336.587139][  T127] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.645047][ T4363] usb 3-1: unable to get BOS descriptor or descriptor too short
[  336.663462][ T4363] usb 3-1: not running at top speed; connect to a high speed hub
[  336.672100][  T127] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.682692][ T4261] gud 1-1:1.0: No supported pixel formats found
[  336.689153][ T4261] gud: probe of 1-1:1.0 failed with error -22
[  336.697325][ T4363] usb 3-1: config 133 has an invalid interface number: 109 but max is 0
[  336.707146][  T127] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  336.754483][ T4363] usb 3-1: config 133 has no interface number 0
[  336.790830][  T127] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  336.800807][ T4363] usb 3-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  336.841915][  T127] usb 4-1: Product: syz
[  336.857522][  T127] usb 4-1: Manufacturer: syz
[  336.867824][ T4363] usb 3-1: config 133 interface 109 has no altsetting 0
[  336.911552][  T127] cdc_wdm 4-1:1.0: skipping garbage
[  336.916954][  T127] cdc_wdm 4-1:1.0: skipping garbage
[  336.927175][ T4363] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice=e0.47
[  336.941342][  T127] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  336.947919][ T4363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.956235][  T127] cdc_wdm 4-1:1.0: Unknown control protocol
[  336.962481][ T4363] usb 3-1: Product: syz
[  336.980009][ T4363] usb 3-1: Manufacturer: syz
[  337.007157][ T4363] usb 3-1: SerialNumber: syz
[  337.390213][  T127] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  337.467375][ T8401] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  337.580284][  T127] usb 2-1: Using ep0 maxpacket: 8
[  337.601271][  T127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  337.637297][  T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.660466][  T127] usb 2-1: Product: syz
[  337.676203][  T127] usb 2-1: Manufacturer: syz
[  337.686827][  T127] usb 2-1: SerialNumber: syz
[  337.700634][  T127] usb 2-1: config 0 descriptor??
[  337.900234][  T130] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  337.912782][  T127] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  338.125091][  T130] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  338.142419][  T130] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.182676][  T130] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  338.192292][  T130] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.209731][  T130] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  338.219378][  T130] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  338.237530][  T130] usb 5-1: Product: syz
[  338.246609][  T130] usb 5-1: Manufacturer: syz
[  338.271873][  T130] cdc_wdm 5-1:1.0: skipping garbage
[  338.287569][  T130] cdc_wdm 5-1:1.0: skipping garbage
[  338.299243][  T130] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device
[  338.305767][  T130] cdc_wdm 5-1:1.0: Unknown control protocol
[  338.473888][ T8404] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  338.492045][ T4261] usb 5-1: USB disconnect, device number 60
[  338.597742][  T130] usb 4-1: USB disconnect, device number 56
[  338.671547][   T36] usb 1-1: USB disconnect, device number 45
[  338.809640][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1355'.
[  338.850028][ T4363] kaweth 3-1:133.109: couldn't find required endpoints
[  338.902392][ T4363] usb 3-1: USB disconnect, device number 64
[  339.213847][ T8418] xt_hashlimit: size too large, truncated to 1048576
[  339.274917][ T8419] xt_hashlimit: size too large, truncated to 1048576
[  339.341008][  T127] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  339.373137][  T127] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  339.396104][  T127] usb 2-1: media controller created
[  339.462651][  T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  339.789328][  T127] i2c i2c-1: Added multiplexed i2c bus 2
[  339.808059][  T127] rtl2832 1-0010: Realtek RTL2832 successfully attached
[  339.836597][  T127] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))...
[  339.867986][  T127] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
[  340.176169][  T127] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  340.236202][  T127] usb 2-1: USB disconnect, device number 65
[  342.350228][   T14] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  342.550279][   T14] usb 2-1: Using ep0 maxpacket: 16
[  342.569948][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  342.629490][   T14] usb 2-1: config 0 has no interfaces?
[  342.663130][   T14] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  342.692976][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.720178][   T14] usb 2-1: Product: syz
[  342.730205][   T14] usb 2-1: Manufacturer: syz
[  342.745062][   T14] usb 2-1: SerialNumber: syz
[  342.760032][   T14] usb 2-1: config 0 descriptor??
[  343.396536][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1371'.
[  343.422450][ T8462] rxe_eth0 speed is unknown, defaulting to 1000
[  343.597000][ T8469] device syzkaller1 entered promiscuous mode
[  343.680172][ T8464] rxe_eth0 speed is unknown, defaulting to 1000
[  344.629594][ T4356] usb 2-1: USB disconnect, device number 66
[  345.224695][ T8506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.249749][ T8506] tipc: Resetting bearer <eth:syzkaller0>
[  345.309140][ T8504] tipc: Disabling bearer <eth:syzkaller0>
[  345.545176][ T8515] futex_wake_op: syz.1.1387 tries to shift op by -1; fix this program
[  345.600809][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1389'.
[  345.930268][ T4363] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  346.124886][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.159846][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.195623][ T4363] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  346.208505][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.245239][ T4363] usb 2-1: config 0 descriptor??
[  346.685907][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'.
[  346.722829][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'.
[  346.762533][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'.
[  346.865132][ T4363] usb 2-1: language id specifier not provided by device, defaulting to English
[  347.129686][ T8543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1397'.
[  347.158265][   T26] audit: type=1326 audit(1792048845.268:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c0f9e559 code=0x0
[  347.269573][ T4363] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71
[  347.288726][ T4363] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71
[  347.307911][ T4363] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71
[  347.326365][ T4363] uclogic 0003:256C:006D.0018: failed probing parameters: -71
[  347.334310][ T4363] uclogic: probe of 0003:256C:006D.0018 failed with error -71
[  347.373164][ T4363] usb 2-1: USB disconnect, device number 67
[  347.739427][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1402'.
[  347.830222][ T4363] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  348.025980][ T4363] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  348.055682][ T4363] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  348.086602][ T4363] usb 1-1: Product: syz
[  348.096750][ T4363] usb 1-1: Manufacturer: syz
[  348.117074][ T4363] usb 1-1: SerialNumber: syz
[  348.152631][ T4363] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  348.186781][ T4363] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  348.218110][ T4363] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  348.228466][ T4363] usb 1-1: media controller created
[  348.300358][ T4363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  348.328117][ T4363] usb 1-1: selecting invalid altsetting 1
[  348.359313][ T4363] set interface failed
[  348.359425][ T4363] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  348.388776][ T4363] error writing reg: 0xff, val: 0x00
[  348.486838][ T4363] dvb_usb_mxl111sf: probe of 1-1:2.0 failed with error -22
[  348.560683][ T4363] usb 1-1: USB disconnect, device number 46
[  348.646345][ T8579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1409'.
[  348.720168][  T127] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  348.957181][  T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  348.997412][  T127] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  349.043899][  T127] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  349.057460][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.076468][  T127] usb 5-1: Product: syz
[  349.086175][  T127] usb 5-1: Manufacturer: syz
[  349.096332][  T127] usb 5-1: SerialNumber: syz
[  349.250432][ T4363] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  349.329090][  T127] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  349.455958][ T4363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.478881][ T4363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.516609][ T4363] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  349.554609][ T4363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.597465][ T4363] usb 3-1: config 0 descriptor??
[  349.795280][ T8596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1414'.
[  349.820402][   T14] usb 5-1: USB disconnect, device number 61
[  349.830463][   T14] usblp0: removed
[  350.142150][   T26] audit: type=1326 audit(1792048848.258:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e0cd9e559 code=0x0
[  350.233756][ T4363] usbhid 3-1:0.0: can't add hid device: -71
[  350.247551][ T4363] usbhid: probe of 3-1:0.0 failed with error -71
[  350.295749][ T4363] usb 3-1: USB disconnect, device number 65
[  350.452300][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'.
[  350.466965][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1420'.
[  350.526289][ T8613] device syzkaller0 entered promiscuous mode
[  351.817860][ T8641] device syzkaller0 entered promiscuous mode
[  352.040406][  T127] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  352.242332][  T127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.267013][  T127] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  352.290626][   T26] audit: type=1326 audit(1792048850.408:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.4.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96859e559 code=0x0
[  352.310364][  T127] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  352.342979][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.382480][  T127] usb 2-1: config 0 descriptor??
[  352.750208][ T4356] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  352.843165][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.857921][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  352.867348][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  352.877552][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  352.887054][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  352.896868][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  353.008058][ T8651] rxe_eth0 speed is unknown, defaulting to 1000
[  353.283902][ T8659] __nla_validate_parse: 1 callbacks suppressed
[  353.283920][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1438'.
[  353.794818][ T8651] chnl_net:caif_netlink_parms(): no params data found
[  353.935463][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.943329][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.959842][ T8651] device bridge_slave_0 entered promiscuous mode
[  353.973862][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.981329][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.990931][ T8651] device bridge_slave_1 entered promiscuous mode
[  354.031481][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.049242][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.173136][ T8651] team0: Port device team_slave_0 added
[  354.237123][ T8651] team0: Port device team_slave_1 added
[  354.317700][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.334184][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.377514][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.423744][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.449335][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.630219][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.783941][ T8651] device hsr_slave_0 entered promiscuous mode
[  354.817637][ T8651] device hsr_slave_1 entered promiscuous mode
[  354.846382][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  354.881462][ T4356] usb 2-1: USB disconnect, device number 68
[  354.905288][ T8651] Cannot create hsr debugfs directory
[  354.930264][ T4289] Bluetooth: hci3: command 0x0409 tx timeout
[  355.146783][   T26] audit: type=1326 audit(1792048853.258:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739879e559 code=0x0
[  355.353215][ T8651] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  355.378801][ T8651] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  355.402014][ T8651] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  355.427828][ T8651] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  355.617309][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.671016][ T8651] 8021q: adding VLAN 0 to HW filter on device team0
[  355.690356][ T8708] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  355.708351][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  355.733415][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  355.760936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  355.790841][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  355.827964][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.835168][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.851304][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  355.879005][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  355.889700][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  355.914624][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.921848][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.937289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  355.947471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  355.964403][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'.
[  355.994640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  356.023152][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  356.036655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  356.050712][ T4363] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  356.060337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  356.072177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  356.081123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  356.089634][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  356.101813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  356.111189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  356.123874][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  356.243185][ T4363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.265047][ T4363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.278157][ T4363] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  356.290973][ T4363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.327540][ T4363] usb 3-1: config 0 descriptor??
[  356.899621][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  356.920481][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  356.951853][ T4363] usbhid 3-1:0.0: can't add hid device: -71
[  356.962830][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.970718][ T4363] usbhid: probe of 3-1:0.0 failed with error -71
[  357.011611][ T4289] Bluetooth: hci3: command 0x041b tx timeout
[  357.040418][ T4363] usb 3-1: USB disconnect, device number 66
[  357.150448][ T4356] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  357.368907][ T4356] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.393815][ T4356] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  357.502244][ T4356] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  357.548127][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.587851][ T4356] usb 5-1: config 0 descriptor??
[  357.644523][ T4356] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  357.888538][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  357.974369][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  358.009302][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  358.032283][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.077103][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  358.096005][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  358.127027][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  358.149907][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  358.170917][ T8651] device veth0_vlan entered promiscuous mode
[  358.196246][ T8651] device veth1_vlan entered promiscuous mode
[  358.315643][ T8651] device veth0_macvtap entered promiscuous mode
[  358.343015][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  358.369838][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  358.386120][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  358.415669][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  358.437903][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  358.485435][ T8651] device veth1_macvtap entered promiscuous mode
[  358.532057][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.542736][ T4359] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  358.550595][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.563436][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.574398][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.586765][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.599798][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.628244][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.654241][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.690281][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.720828][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.732595][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.739940][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  358.750475][ T4359] usb 2-1: Using ep0 maxpacket: 8
[  358.763566][ T4359] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  358.783489][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.800664][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  358.839438][ T4359] usb 2-1: Product: syz
[  358.850362][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  358.859110][ T4359] usb 2-1: Manufacturer: syz
[  358.869476][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.887972][ T4359] usb 2-1: SerialNumber: syz
[  358.903406][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.931249][ T4359] usb 2-1: config 0 descriptor??
[  358.945707][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.966545][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.987711][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.010002][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.027292][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.067439][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.078340][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.090278][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.100490][ T4289] Bluetooth: hci3: command 0x040f tx timeout
[  359.115821][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.126270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  359.138196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  359.152401][ T4359] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  359.176160][ T8651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.190528][ T8651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.209541][ T8651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.265769][ T8651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.497173][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.529681][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.553295][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  359.592236][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.600835][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.609367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  359.956212][   T14] usb 5-1: USB disconnect, device number 62
[  360.031809][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'.
[  360.162532][ T8781] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1465'.
[  360.311255][ T8783] device syzkaller0 entered promiscuous mode
[  360.590000][ T4359] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  360.611887][ T4359] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  360.625286][ T4359] usb 2-1: media controller created
[  360.649382][ T4359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  360.951367][ T4359] i2c i2c-1: Added multiplexed i2c bus 2
[  360.979595][ T4359] rtl2832 1-0010: Realtek RTL2832 successfully attached
[  361.021377][ T4359] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))...
[  361.041389][ T4359] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
[  361.071146][ T8794] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  361.170910][ T4289] Bluetooth: hci3: command 0x0419 tx timeout
[  361.473566][ T4359] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  361.599809][ T4359] usb 2-1: USB disconnect, device number 69
[  362.672154][   T26] audit: type=1326 audit(1792048860.788:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.1476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96859e559 code=0x0
[  363.042900][ T8819] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1477'.
[  363.593732][    T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  363.800262][    T7] usb 6-1: Using ep0 maxpacket: 16
[  363.814095][    T7] usb 6-1: config 0 interface 0 has no altsetting 0
[  363.835000][    T7] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  363.849319][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.852950][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'.
[  363.869516][    T7] usb 6-1: config 0 descriptor??
[  364.470300][ T8834] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  364.990659][    T7] usbhid 6-1:0.0: can't add hid device: -71
[  364.996720][    T7] usbhid: probe of 6-1:0.0 failed with error -71
[  365.054919][    T7] usb 6-1: USB disconnect, device number 2
[  365.100295][   T36] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  365.240446][ T4348] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  365.304206][   T36] usb 2-1: config 0 interface 0 has no altsetting 0
[  365.318645][   T36] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  365.362921][   T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.414338][   T36] usb 2-1: config 0 descriptor??
[  365.433647][ T4348] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  365.456126][ T4348] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  365.483707][ T4348] usb 1-1: Product: syz
[  365.495174][ T4348] usb 1-1: Manufacturer: syz
[  365.509910][ T4348] usb 1-1: SerialNumber: syz
[  365.558455][ T4348] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  365.617570][ T4348] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  365.639285][ T4348] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  365.659544][ T4348] usb 1-1: media controller created
[  365.708541][ T4348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  365.764705][ T4348] usb 1-1: selecting invalid altsetting 1
[  365.777274][ T4348] set interface failed
[  365.777430][ T4348] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  365.797688][ T4348] error writing reg: 0xff, val: 0x00
[  365.856277][ T4348] dvb_usb_mxl111sf: probe of 1-1:2.0 failed with error -22
[  365.874560][ T8843] binder: BINDER_SET_CONTEXT_MGR already set
[  365.890422][ T8843] binder: 8840:8843 ioctl 4018620d 200000000a00 returned -16
[  365.951266][   T36] usbhid 2-1:0.0: can't add hid device: -71
[  365.957293][   T36] usbhid: probe of 2-1:0.0 failed with error -71
[  366.001720][   T36] usb 2-1: USB disconnect, device number 70
[  366.117364][ T8854] rxe_eth0 speed is unknown, defaulting to 1000
[  366.282568][   T36] usb 1-1: USB disconnect, device number 48
[  366.729944][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'.
[  367.590466][    T7] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  367.790683][    T7] usb 5-1: Using ep0 maxpacket: 16
[  367.812280][    T7] usb 5-1: config 0 interface 0 has no altsetting 0
[  367.849330][    T7] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  367.875519][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.896725][    T7] usb 5-1: config 0 descriptor??
[  368.164079][ T8890] ------------[ cut here ]------------
[  368.169624][ T8890] WARNING: CPU: 0 PID: 8890 at arch/x86/kvm/x86.c:11275 kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.180882][ T8890] Modules linked in:
[  368.184843][ T8890] CPU: 0 PID: 8890 Comm: syz.0.1502 Not tainted syzkaller #0
[  368.192622][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  368.202784][ T8890] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.209236][ T8890] Code: e8 71 98 c3 00 e9 bb ef ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 36 e6 ff ff 4c 89 f7 e8 36 98 c3 00 e9 29 e6 ff ff e8 6c 3c 72 00 <0f> 0b e9 81 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 20 ec
[  368.228937][ T8890] RSP: 0018:ffffc90004ab7c98 EFLAGS: 00010283
[  368.235100][ T8890] RAX: ffffffff81100a14 RBX: ffff88807a78cf80 RCX: 0000000000080000
[  368.243138][ T8890] RDX: ffffc90005071000 RSI: 00000000000003d4 RDI: 00000000000003d5
[  368.251172][ T8890] RBP: ffff888062fd1000 R08: dffffc0000000000 R09: 1ffffffff232686a
[  368.259155][ T8890] R10: dffffc0000000000 R11: fffffbfff232686b R12: ffffc90004c0b7f0
[  368.267177][ T8890] R13: ffff88807a78cfb0 R14: ffff88807a78d14a R15: dffffc0000000000
[  368.275186][ T8890] FS:  00007f4e0dc596c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  368.284176][ T8890] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  368.290819][ T8890] CR2: 00002000000006a0 CR3: 000000002454b000 CR4: 00000000003526f0
[  368.298808][ T8890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  368.306839][ T8890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  368.314888][ T8890] Call Trace:
[  368.318196][ T8890]  <TASK>
[  368.321180][ T8890]  ? get_task_pid+0x1e/0x300
[  368.325858][ T8890]  ? get_task_pid+0x1e/0x300
[  368.330509][ T8890]  ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0
[  368.336266][ T8890]  kvm_vcpu_ioctl+0x986/0xd00
[  368.341084][ T8890]  ? xa_release+0x50/0x50
[  368.345443][ T8890]  ? __fget_files+0x28/0x460
[  368.350135][ T8890]  ? bpf_lsm_file_ioctl+0x5/0x10
[  368.355202][ T8890]  ? security_file_ioctl+0x7c/0xa0
[  368.360381][ T8890]  ? xa_release+0x50/0x50
[  368.364720][ T8890]  __se_sys_ioctl+0xfa/0x170
[  368.369354][ T8890]  do_syscall_64+0x4c/0xa0
[  368.373872][ T8890]  ? clear_bhb_loop+0x60/0xb0
[  368.378707][ T8890]  ? clear_bhb_loop+0x60/0xb0
[  368.383427][ T8890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  368.389336][ T8890] RIP: 0033:0x7f4e0cd9e559
[  368.393798][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.413446][ T8890] RSP: 002b:00007f4e0dc59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  368.421894][ T8890] RAX: ffffffffffffffda RBX: 00007f4e0d025fa0 RCX: 00007f4e0cd9e559
[  368.429887][ T8890] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  368.437905][ T8890] RBP: 00007f4e0ce358b0 R08: 0000000000000000 R09: 0000000000000000
[  368.445938][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.453943][ T8890] R13: 00007f4e0d026038 R14: 00007f4e0d025fa0 R15: 00007fffdfccc7f8
[  368.461974][ T8890]  </TASK>
[  368.465014][ T8890] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  368.472293][ T8890] CPU: 0 PID: 8890 Comm: syz.0.1502 Not tainted syzkaller #0
[  368.479685][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  368.489784][ T8890] Call Trace:
[  368.493086][ T8890]  <TASK>
[  368.496043][ T8890]  dump_stack_lvl+0x188/0x24e
[  368.500731][ T8890]  ? memcpy+0x3c/0x60
[  368.504787][ T8890]  ? show_regs_print_info+0x12/0x12
[  368.509994][ T8890]  ? load_image+0x410/0x410
[  368.514554][ T8890]  panic+0x2d3/0x710
[  368.518482][ T8890]  ? bpf_jit_dump+0xd0/0xd0
[  368.523014][ T8890]  __warn+0x2f8/0x4f0
[  368.527017][ T8890]  ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.532832][ T8890]  ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.538647][ T8890]  report_bug+0x2ba/0x4f0
[  368.543032][ T8890]  ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.548850][ T8890]  handle_bug+0x3a/0x70
[  368.553015][ T8890]  exc_invalid_op+0x16/0x40
[  368.557528][ T8890]  asm_exc_invalid_op+0x16/0x20
[  368.562389][ T8890] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.568816][ T8890] Code: e8 71 98 c3 00 e9 bb ef ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 36 e6 ff ff 4c 89 f7 e8 36 98 c3 00 e9 29 e6 ff ff e8 6c 3c 72 00 <0f> 0b e9 81 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 20 ec
[  368.588429][ T8890] RSP: 0018:ffffc90004ab7c98 EFLAGS: 00010283
[  368.594509][ T8890] RAX: ffffffff81100a14 RBX: ffff88807a78cf80 RCX: 0000000000080000
[  368.602500][ T8890] RDX: ffffc90005071000 RSI: 00000000000003d4 RDI: 00000000000003d5
[  368.610496][ T8890] RBP: ffff888062fd1000 R08: dffffc0000000000 R09: 1ffffffff232686a
[  368.618493][ T8890] R10: dffffc0000000000 R11: fffffbfff232686b R12: ffffc90004c0b7f0
[  368.626473][ T8890] R13: ffff88807a78cfb0 R14: ffff88807a78d14a R15: dffffc0000000000
[  368.634450][ T8890]  ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.640273][ T8890]  ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0
[  368.646090][ T8890]  ? get_task_pid+0x1e/0x300
[  368.650686][ T8890]  ? get_task_pid+0x1e/0x300
[  368.655289][ T8890]  ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0
[  368.661030][ T8890]  kvm_vcpu_ioctl+0x986/0xd00
[  368.665715][ T8890]  ? xa_release+0x50/0x50
[  368.670058][ T8890]  ? __fget_files+0x28/0x460
[  368.674717][ T8890]  ? bpf_lsm_file_ioctl+0x5/0x10
[  368.679663][ T8890]  ? security_file_ioctl+0x7c/0xa0
[  368.684788][ T8890]  ? xa_release+0x50/0x50
[  368.689119][ T8890]  __se_sys_ioctl+0xfa/0x170
[  368.693737][ T8890]  do_syscall_64+0x4c/0xa0
[  368.698200][ T8890]  ? clear_bhb_loop+0x60/0xb0
[  368.702943][ T8890]  ? clear_bhb_loop+0x60/0xb0
[  368.707649][ T8890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  368.713548][ T8890] RIP: 0033:0x7f4e0cd9e559
[  368.717966][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.737586][ T8890] RSP: 002b:00007f4e0dc59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  368.746004][ T8890] RAX: ffffffffffffffda RBX: 00007f4e0d025fa0 RCX: 00007f4e0cd9e559
[  368.753990][ T8890] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  368.761964][ T8890] RBP: 00007f4e0ce358b0 R08: 0000000000000000 R09: 0000000000000000
[  368.770020][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.777991][ T8890] R13: 00007f4e0d026038 R14: 00007f4e0d025fa0 R15: 00007fffdfccc7f8
[  368.785979][ T8890]  </TASK>
[  368.789631][ T8890] Kernel Offset: disabled
[  368.794028][ T8890] Rebooting in 86400 seconds..